News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 10 Mar· 55 articles
-
Microsoft .NET 10.03 articles this day · SANS ISC first
Microsoft Patch Tuesday security updates for March 2026 fixed 84 bugs · Microsoft Patches 83 Vulnerabilities
-
Microsoft Patch Tuesday security updates for March 2026 fixed 84 bugs
Microsoft Patch Tuesday security updates for March 2026 fixed 84 bugs across Windows, Office, Edge, Azure, SQL Server, Hyper-V and ReFS, with the total including third‑party and Chromium updates reaching 94 vulnerabilities. Eight flaws are rated Critical and…
-
Microsoft Patches 83 Vulnerabilities
Microsoft has released patches for 83 vulnerabilities across its products, with none of the flaws flagged as exploited in the wild, and two publicly disclosed CVEs highlighted: CVE-2026-26127, a DoS in .NET, and CVE-2026-21262, an elevation of privilege in…
-
Microsoft Patch Tuesday March 2026, (Tue, Mar 10th)
Microsoft today released patches for 93 vulnerabilities, including 9 in Chromium that affect Microsoft Edge, with 8 rated critical. The update notes that 2 vulnerabilities were disclosed prior to today but have not yet been exploited, and that no exploited…
-
-
'Overly Permissive' Salesforce Cloud Configs in the Crosshairs
Threat actors are exploiting customers’ overly permissive Salesforce Experience Cloud guest user configurations to steal sensitive data, according to Salesforce. The company stresses the issue is not a vulnerability inherent to the platform and that…
Dark Reading -
Patch Tuesday - March 2026
According to Microsoft, Patch Tuesday 2026 for March sees 77 vulnerabilities published, with Microsoft noting public disclosure of two issues but no evidence of exploitation in the wild for any of today’s flaws and therefore no Microsoft additions to CISA…
-
Attackers exploit FortiGate devices to access sensitive network information
Attackers are exploiting FortiGate devices to breach networks and steal configuration data containing service account credentials and internal network details, according to Security Affairs. SentinelOne researchers warn that threats capitalise on…
-
Russian Threat Actor Sednit Resurfaces With Sophisticated Toolkit
Russian threat actor Sednit has resurfaced, returning to a bespoke toolkit after years of using simpler implants, and is now pursuing two new sophisticated malware tools in campaigns targeting Ukrainian cyber assets. At the centre of the toolkit are two…
Dark Reading -
Adobe Patches 80 Vulnerabilities Across Eight Products
Adobe has rolled out patches for 80 vulnerabilities across eight products, including Commerce, Illustrator, Acrobat Reader, and Premiere Pro. The update fixes 19 flaws in Adobe Commerce and Magento Open Source, with users urged to apply the patches within 30…
-
The March 2026 Security Update Review
The March 2026 update review notes that Adobe released eight bulletins addressing 80 unique CVEs across several products, with two bugs submitted through TrendAI ZDI. Microsoft released 84 new CVEs this month, covering Windows, Office, Edge, Azure, SQL…
-
Jazz Emerges From Stealth With $61M in Funding for AI-Powered DLP
Jazz has emerged from stealth with a total of $61 million in combined seed and Series A funding for its AI-powered data loss prevention platform. The rounds were led by Glilot Capital Partners and Team8, with additional backing from Encoded Ventures,…
SecurityWeek -
How to see your Google Search history (and delete it)
The Malwarebytes guide explains how to access and manage your Google Search history from Google’s data hub at myactivity.google[.]com. It notes that, if Web & App Activity is on, Google saves what you search, when you searched it, and which websites you…
Malwarebytes -
OpenAI's Promptfoo Deal Plugs Agentic AI Testing Gap
OpenAI is stepping up its push to bolster security around its enterprise AI ecosystem, announcing the acquisition of agentic security testing firm Promptfoo. The purchase followed an interview conducted on 9 March with Jamieson O’Reilly, OpenClaw’s security…
Infosecurity -
Iranian MOIS Actors & the Cyber Crime Connection
Iranian MOIS actors are increasingly engaging with the cyber crime ecosystem, using criminal tools, services, and affiliate-style models to pursue state objectives, a shift from simply masking activity to actively leveraging the criminal ecosystem. According…
Check Point -
FortiGate Devices Exploited to Breach Networks and Steal Service Account Credentials
Cybersecurity researchers have highlighted a campaign in which threat actors are abusing FortiGate NGFW appliances as entry points to breach networks, severing into environments by exploiting recently disclosed flaws or weak credentials to harvest…
The Hacker News -
KadNap Malware Infects 14,000+ Edge Devices to Power Stealth Proxy Botnet
KadNap is a newly identified malware that has infected more than 14,000 edge devices, with the majority of victims located in the United States, according to Black Lotus Labs at Lumen. Although it primarily targets Asus routers, researchers say the operators…
The Hacker News -
Only 24% Of organizations Test Identity Recovery Every Six Months
Only 24% of organisations test their identity disaster recovery plans every six months, according to new research which examined how businesses prepare for identity-focused cyber-attacks. The data comes from Quest Software’s latest report, a global survey of…
Infosecurity -
Cloud Attackers Now Prefer Vulnerability Exploits Over Credentials, Google Cloud Finds
Google Cloud has warned that threat actors targeting cloud environments now favour campaigns which gain initial access by exploiting software vulnerabilities over credential-based attacks, in a shift observed in H1 2026 based on the second half of 2025 data.…
-
APT28 conducts long-term espionage on Ukrainian forces using custom malware
According to ESET, the Russia-linked group APT28 has used BEARDSHELL and COVENANT malware to conduct long-term surveillance of Ukrainian military personnel, with the campaign beginning in April 2024. The researchers describe a dual-implant approach that…
Security Affairs -
Kai Emerges From Stealth With $125M in Funding for AI Platform Bridging IT and OT Security
Kai emerged from stealth with $125 million in funding for an AI-powered platform that aims to bridge IT and OT cybersecurity. The San Jose, CA-based company, founded by Galina Antova and Damiano Bolzoni, says the platform uses AI to autonomously and…
SecurityWeek -
Webinar Today: Securing Fragile OT in an Exposed World
SecurityWeek reports on a webinar titled Webinar Today: Securing Fragile OT in an Exposed World, which examines the current OT threat landscape and moves beyond doom and gloom to discuss the mechanics of modern OT exposure. The event, runZero and…
SecurityWeek -
Ericsson Breach Exposes Data of 15k Employees and Customers
A data breach affecting 15,661 Ericsson Inc. employees and customers has been disclosed after attackers compromised a third‑party service provider used by the company, according to breach notifications filed with US state authorities. The incident involved…
Infosecurity -
SAP Patches Critical FS-QUO, NetWeaver Vulnerabilities
According to SecurityWeek, SAP has released 15 new security notes as part of its March 2026 Security Patch Day, addressing several critical and high‑severity flaws. The most significant fixes cover a code injection vulnerability in FS-QUO, tracked as…
-
Thousands Affected by Ericsson Data Breach
The US subsidiary of Ericsson disclosed a data breach affecting the personal information of thousands of individuals, with the incident blamed on a third-party service provider. The service provider detected unauthorized access to data on its systems in…
SecurityWeek -
'BlackSanta' EDR Killer Targets HR Workflows
BlackSanta is described as an EDR killer campaign targeting HR workflows, with Russian-speaking threat actors delivering a malware payload hidden in steganographic image files to avoid detection. The operation, operating for about a year, delivers…
Dark Reading -
Fake OpenClaw npm Package Delivers GhostLoader via Postinstall
GhostLoader Malware Spreads Through Fake OpenClaw npm Package describes a malicious npm package that masquerades as a command-line installer for an OpenClaw integration tool but actually deploys GhostLoader, an information‑stealing malware framework. The…
SOCRadar -
OpenAI unveils Codex Security AI scanner flagging critical flaws
OpenAI has rolled out Codex Security, a new AI-powered software vulnerability scanner that the company says can identify complex issues that other agentic tools may miss. Named Codex Security (formerly Aardvark), the tool is currently in research preview but…
SecurityWeek -
Armadin closes $189.9M seed and Series A round for AI red teaming
Armadin, the cybersecurity startup founded by Kevin Mandia, has announced a funding round of $189.9M covering Seed and Series A as part of its public launch, with the formal launch piece published on 10 March 2026. The round was led by Accel, with…
SecurityWeek -
Nine LeakyLooker flaws expose cross tenant data in Looker Studio
Cybersecurity researchers have disclosed nine cross-tenant vulnerabilities in Google Looker Studio that could have allowed attackers to run arbitrary SQL queries on victims’ databases and exfiltrate sensitive data within organisations’ Google Cloud…
The Hacker News -
Telegram Hacktivist Activity Timeline of Iran – Israel & US War
From the first day of March 2026, hacktivist collectives formed an expanded coalition as the Iran–Israel–US conflict entered a broader cyber phase, culminating in Operation Epic Fury and a daily stream of claims across multiple sectors, including OT and…
SOCRadar -
Building a security overview dashboard for actionable insights
Cloudflare has launched a revamped Security Overview dashboard designed to turn data into action for security teams. The interface aggregates detection and investigation tools, introducing Security Action Items that rank issues by criticality and unify…
Cloudflare -
Investigating multi-vector attacks in Log Explorer
Investigating multi-vector attacks in Log Explorer explains how security teams can gain 360-degree visibility by using Cloudflare Log Explorer to fuse telemetry from application-layer HTTP requests, network-layer DDoS and Firewall logs, and Zero Trust Access…
Cloudflare -
ShinyHunters Hit Salesforce Aura Inspector Data Theft
Salesforce has warned customers about ongoing attacks linked to the ShinyHunters cybercrime group, which has announced a new data theft and extortion campaign targeting Salesforce instances. Since mid-2025, ShinyHunters has been targeting customer…
SecurityWeek -
Salesforce Experience Cloud exposed by misconfigured guest access
Threat actors are mass-scanning publicly accessible Salesforce Experience Cloud sites using a modified AuraInspector tool to exploit misconfigurations and access sensitive data. The modified AuraInspector, originally released by Google/Mandiant to audit…
Security Affairs -
Threat actors abuse NetSupport Manager tool as RAT to steal data
NetSupport RAT is the malicious abuse of the legitimate NetSupport Manager remote administration tool, originally designed for IT support but now used by threat actors to gain unauthorized system access, exfiltrate data, and deploy malware or info‑stealers.…
darktrace.com -
Escape raises $18M Series A to fuel AI powered offensive security
Escape today announced a Series A of $18 million, taking its total funding to over $23 million, in a round led by Balderton with Uncorrelated Ventures and previous investors IRIS and Y Combinator also backing the raise, according to Ionut Arghire. Founded in…
SecurityWeek -
CISA adds Ivanti CVE-2026-1603 auth bypass to KEV, patch now
According to SecurityWeek, the US Cybersecurity and Infrastructure Security Agency (CISA) has added Ivanti Endpoint Manager’s high-severity authentication bypass vulnerability, CVE-2026-1603 (CVSS 8.6), to its Known Exploited Vulnerabilities (KEV) catalog…
-
AI agents risk backdoors and data leaks; webinar explains
The Hacker News reports on a forthcoming webinar titled Beyond the Model: The Expanded Attack Surface of AI Agents, which examines how AI agents can unintentionally create back doors for attackers as they automate tasks and access sensitive data. The…
The Hacker News -
Russian state hackers hijack Signal and WhatsApp via phishing
According to AIVD and MIVD, Russian state‑backed hackers are running a large‑scale phishing campaign aimed at Signal and WhatsApp accounts of high‑value targets, including senior officials, military personnel, civil servants, and journalists. The attackers…
Malwarebytes -
SIM swap attacks fuel account takeovers as phone numbers recycled
SIM swap attacks exploit misplaced trust in phone numbers as identity anchors, allowing criminals to persuade a carrier to transfer a victim’s number to a SIM under their control and take over digital identities across email, banking, cloud services and…
SecurityWeek -
SharePoint CVE-2025-53770 highlights value of shrinking exposure
According to Intruder's Head of Security, you cannot control when the next critical vulnerability drops, but you can manage how much of your environment is exposed when it does. The piece notes that for serious vulnerabilities, disclosure to exploitation can…
