News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 10 Mar· 55 articles
-
APT28 Deploys BEARDSHELL and COVENANT to spy on Ukrainian military
The Russian state‑sponsored hacking group tracked as APT28 has been observed using two implants, BEARDSHELL and COVENANT, to facilitate long‑term surveillance of Ukrainian military personnel. The tools, reportedly in use since April 2024, also include…
The Hacker News -
Russian spies target Signal and WhatsApp with bot impersonation
According to AIVD and MIVD, a global campaign by Russian nation state operatives to access targets’ encrypted messaging apps has been uncovered, with Dutch intelligence noting some government employees have already been victimised. Published on 9 March 2026,…
Infosecurity -
FBI Wiretap Breach via Supply Chain Route Linked to China Hackers
Hackers may have breached the FBI’s wiretap network via a supply chain, according to Malwarebytes’ reporting. On 17 February the FBI flagged irregular network activity that led to its Digital Collection System Network, which stores sensitive data related to…
Malwarebytes -
BeatBanker targets Brazil via phishing store, brings BTMOB RAT
BeatBanker is a dual‑mode Android Trojan that targeted Brazil, spreading primarily through phishing via a counterfeit website that impersonates the Google Play Store. According to Securelist, the campaign distributes malicious APKs that carry a…
securelist.com -
New fuzzing study shows AI safety gates can be bypassed stealthily
Auditing the Gatekeepers: Fuzzing “AI Judges” to Bypass Security Controls reports on the automated safety gatekeepers used by large language models and how they can be manipulated into authorising policy violations through stealthy input sequences. The…
unit42.paloaltonetworks.com -
ShinyHunters Exploit Salesforce Experience Cloud via Guest Access
ShinyHunters Targets Hundreds of Websites in New Salesforce Campaign reports that Salesforce has urged Experience Cloud customers to audit their website configurations after claims that a notorious threat group has already stolen data from hundreds of…
Infosecurity -
Omnissa Workspace One UEM2 articles this day · The Hacker News first
CISA Adds KEV Flaws CVE-2021-22054 CVE-2025-26399 CVE-2026-1603 · CISA flags KEV amid active exploits CVE-2025-26399 CVE-2026-1603
-
CISA Adds KEV Flaws CVE-2021-22054 CVE-2025-26399 CVE-2026-1603
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three flaws to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2021-22054, a Server-Side Request Forgery in VMware Workspace ONE UEM, CVSS score 7.5, which could let attackers…
-
CISA flags KEV amid active exploits CVE-2025-26399 CVE-2026-1603
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three security flaws to its Known Exploited Vulnerabilities catalog based on evidence of active exploitation, according to The U.S. Cybersecurity and Infrastructure Security Agency…
-
-
Ericsson US data breach linked to third party provider access
Ericsson US has disclosed a data breach arising from a third-party service provider compromise. The company notes that on 28 April 2025 the service provider became aware of a suspicious event that potentially allowed unauthorized access to certain data,…
Security Affairs -
Authorities cripple Tycoon 2FA phishing service used by 500k orgs
Authorities disrupted the Tycoon 2FA phishing-as-a-service platform, a operation used to send millions of phishing emails to more than 500,000 organisations worldwide. The joint effort, led by Microsoft, Europol, and industry partners, aimed to target the…
Security Affairs -
US Unveils Cyber Strategy to Disrupt Threats Early and Modernise
On 10 March 2026, the Trump administration released its cyber strategy, emphasising stronger offensive cyber capabilities alongside protection of critical infrastructure and U.S. leadership in technology. The plan aims to counter cyber threats from…
SOCRadar -
Misconfigured Experience Cloud guest access exposes data
Salesforce has warned of increased threat actor activity aimed at misconfigurations in publicly accessible Experience Cloud sites, using a customised version of an open-source tool called AuraInspector to mass-scan public-facing sites. The activity exploits…
The Hacker News -
Cylake debuts AI native on premises platform for regulated firms
According to SecurityWeek, Cylake announced its launch last week and has raised $45 million in seed funding for a platform aimed at highly regulated organisations that cannot use public cloud services. The round was led by Greylock Partners and will fund the…
SecurityWeek -
ISC Stormcast: Green threat level March 10; SANS course Orlando
According to Internet Storm Center, ISC Stormcast for Tuesday, 10 March 2026, is published with a Threat Level of green. The diary entry references Johanes Ullrich as Handler on Duty and repeats the event title and date. It notes the next class as…
SANS ISC -
OpenClaw local AI agent gains persistence and root level access
According to Trend Micro, OpenClaw, formerly Clawdbot/Moltbot, marks a shift from chatbots to a “sovereign agent” that runs on local hardware with root-like access and persistent memory. The piece notes that OpenClaw reads local files and can execute code,…
trendmicro.com
