News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 11 Mar· 53 articles
-
INC Ransomware Group Holds Healthcare Hostage in Oceania
Cybersecurity authorities in Oceania warn that the INC ransomware group has intensified its focus on healthcare, affecting Australia, New Zealand, and Tonga. The Australian Cyber Security Centre, CERT Tonga and New Zealand’s National Cyber Security Centre…
Dark Reading -
14,000 routers are infected by malware that's highly resistant to takedowns
Researchers have uncovered a takedown-resistant botnet of 14,000 routers and other network devices, primarily made by Asus, conscripting them into a proxy network used for cybercrime. The malware, dubbed KadNap, takes hold by exploiting unpatched…
Ars Technica -
DomainTools Investigations | SecuritySnack - CloudFlare Anti-Security For Phishing
Cloudflare’s anti-bot and anti‑verification features are described as a double‑edged sword in a SecuritySnack report dated 11 March 2026, highlighting how legitimate defence tools can also shield malicious sites from proactive detection. The Microsoft 365…
dti.domaintools.com -
Contagious Interview: Malware delivered through fake developer job interviews
Microsoft Defender Experts has observed the Contagious Interview campaign, a sophisticated social engineering operation active since at least December 2022, with ongoing detections in recent customer environments. The threat targets software developers at…
Microsoft -
Xygeni GitHub Action Compromised Via Tag Poison
Unidentified threat actors breached Xygeni’s GitHub Actions repository this month by poisoning a tag and deploying a hidden command-and-control implant for up to seven days. Xygeni says the attacker used pull requests to inject malicious code into…
Dark Reading -
Pro-Palestinian hacktivist group Handala targets Stryker in global disruption
Pro-Palestinian hacktivist group Handala claims responsibility for a disruptive cyberattack against medical technology firm Stryker, with the group stating that it wiped more than 200,000 servers, mobile devices and other systems and exfiltrated about 50TB…
Security Affairs -
Senate Confirms Joshua Rudd to Lead NSA and US Cyber Command
The U.S. Senate confirmed Army Lt. Gen. Joshua Rudd to lead the National Security Agency and U.S. Cyber Command in a 71–29 vote, filling a dual-hat role that oversees both organisations. The confirmation follows a long vacancy after the firing of the…
SecurityWeek -
BeatBanker malware targets Android users with banking Trojan and crypto miner
BeatBanker is an Android malware campaign that combines banking trojan capabilities with cryptocurrency mining. It spreads via fake Starlink apps on websites imitating the Google Play Store, where the malicious APKs hijack devices, steal credentials, and…
Security Affairs -
CISA Adds CVE-2025-68613 to Known Exploited Vulnerabilities Catalogue
CISA has added CVE‑2025-68613 to its Known Exploited Vulnerabilities catalogue, affecting the n8n workflow automation product from vendor n8n. The flaw, named the n8n Improper Control of Dynamically-Managed Code Resources Vulnerability, allows remote code…
-
Phishers hide scam links with IPv6 trick in “free toothbrush” emails
According to Malwarebytes, phishers impersonating United Healthcare are using a recurring lure of a free Oral-B toothbrush, but the focus is on the scam link itself. They have shifted from Microsoft Azure Blob Storage to links obfuscated by IPv6-mapped IPv4…
Malwarebytes -
France: National Cybersecurity Agency Reports Ransomware Attack Drop in 2025
The French Cybersecurity Agency (ANSSI) reports a decline in known ransomware attacks in 2025, with 128 attacks recorded in France, down from 141 in 2024, according to ANSSI. The agency notes that ransomware remains a significant threat and accounts for a…
Infosecurity -
Researchers Trick Perplexity's Comet AI Browser Into Phishing Scam in Under Four Minutes
Researchers have demonstrated a phishing scam against Perplexity’s Comet AI browser by exploiting its agentic, reasoning-capable design, showing that the AI can be manipulated to visit a bogus page and enter credentials in under four minutes. According to…
The Hacker News -
Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker
A hacktivist group with links to Iran’s intelligence agencies is claiming responsibility for a data-wiping attack against Stryker, a global medtech company based in Michigan, in a March 11, 2026 report by Krebs on Security. The group, Handala (also known as…
Krebs on Security -
Infosecurity Europe Announces 2026 Keynote Line Up
Infosecurity Europe has unveiled its 2026 keynote line-up, bringing together leading voices from military, global cybersecurity, elite sport and intelligence communities, with the event running from 2–4 June at ExCeL London. Tuesday’s programme features…
Infosecurity -
MedTech Giant Stryker Crippled by Iran-Linked Hacker Attack
Stryker, a MedTech giant, says it has been targeted by a highly disruptive cyberattack claimed by an Iran-linked hacker group named Handala. Handala claims to have wiped more than 200,000 servers, mobile devices and other systems, forcing Stryker to shut…
SecurityWeek -
Researchers Uncover ‘LeakyLooker’ Vulnerabilities in Google Looker Studio
Researchers uncovered nine cross-tenant vulnerabilities in Google Looker Studio, collectively named LeakyLooker by Tenable Research, which could have allowed attackers to extract or manipulate sensitive cloud data. The flaws affect the cloud-based BI…
Infosecurity -
Sextortion “I recorded you” emails reuse passwords found in disposable inboxes
According to Malwarebytes, a new wave of sextortion emails bearing the subject “You pervert, I recorded you!” has emerged, promising that the recipient’s device has been hijacked by a “drive-by exploit” and that a real password is in their possession. The…
Malwarebytes -
Critical n8n Flaws Allow Remote Code Execution and Exposure of Stored Credentials
Cybersecurity researchers disclosed two patched flaws in the n8n workflow automation platform that could allow remote code execution and exposure of stored credentials. CVE-2026-27577 is a sandbox-escape in the expression compiler that, due to a missing case…
-
Chinese Nexus Actors Shift Focus to Qatar Amid Iranian Conflict
Two attacks on Qatari entities signal a shift in focus for China-backed actors, as Chinese Nexus groups pivot in response to geopolitical events, according to Check Point Research. The threat actor Camaro Dragon aimed to deploy a variant of PlugX malware…
Dark Reading -
Compromised WordPress Sites Deliver ClickFix Attacks in Global Infostealer Campaign
A recent cyber-criminal campaign has compromised more than 250 legitimate WordPress websites, allowing the spread of infostealer malware designed to steal sensitive information from visitors. Active since December 2025, attackers target websites in at least…
Infosecurity -
BlackSanta EDR-Killer Targets HR Teams in CV-Themed Campaign
A new malware campaign targeting human resources and recruiting staff has seen attackers distribute malicious files disguised as job applications, according to Aryaka Threat Research Lab. The operation uses a specialized tool known as BlackSanta to disable…
Infosecurity -
Wiz Joins Google Cloud as Landmark Acquisition Closes
Google has completed its $32 billion all-cash acquisition of Wiz, with the cloud security firm set to keep its brand as it joins Google Cloud on 11 March 2026. Wiz will continue to provide cybersecurity solutions for AWS, Azure and Oracle Cloud, and its…
SecurityWeek -
CISO Conversations: Aimee Cardwell
Aimee Cardwell’s career spans Netscape, a VP of engineering role at American Express, and CISO positions at UnitedHealth Group before becoming CISO in Residence at Transcend, as profiled in SecurityWeek on 11 March 2026. She argues that modern CISOs must be…
SecurityWeek -
Researchers Discover Major Security Gaps in LLM Guardrails
Security and safety guardrails in generative AI tools can themselves be hacked through a type of prompt injection, researchers warn in a March 11, 2026 Infosecurity Magazine report. Unit 42, Palo Alto Networks’ research lab, found that LLMs used to enforce…
Infosecurity -
238,000 Impacted by Bell Ambulance Data Breach
Bell Ambulance, a Milwaukee-based health care organisation, says nearly 238,000 individuals were affected by a February 2025 data breach that compromised personal, financial, medical and health insurance information. The network intrusion was detected on 13…
SecurityWeek -
Watch out for tax-season robocalls pushing fake “relief programs”
Malwarebytes warns that tax-season robocalls are increasingly impersonating tax relief and resolution services in a bid to harvest personal information or push customers toward fake debt relief schemes. The firm’s telemetry notes a spike in calls claiming to…
Malwarebytes -
Scanner Raises $22 Million for AI-Powered Threat Hunting
Scanner has announced a $22 million Series A funding round led by Sequoia Capital, with additional support from CRV, Mantis VC and angel investors. Founded in 2022 in San Francisco, the company says its platform builds a cloud-native security data lake that…
SecurityWeek -
Meta Disables 150K Accounts Linked to Southeast Asia Scam Centers in Global Crackdown
Meta on Wednesday said it disabled over 150,000 accounts associated with scam centers in Southeast Asia as part of a coordinated crackdown in partnership with authorities from Thailand, the U.S., the U.K., Canada, Korea, Japan, Singapore, the Philippines,…
The Hacker News -
Windows and macOS Malware Spreads via Fake “Claude Code” Google Ads
Bitdefender's research reveals a malicious Google Ads campaign exploiting interest in Claude, a large language model from Anthropic. Attackers created fake ads leading users to a counterfeit documentation site. This impersonation led to malware downloads for…
bitdefender.com -
Slashing agent token costs by 98% with RFC 9457-compliant error responses
Cloudflare has introduced RFC 9457-compliant error responses to AI agents, replacing heavyweight HTML pages with machine-readable Markdown and JSON payloads for all 1xxx-class errors. When an agent sends an Accept header such as text/markdown,…
Cloudflare -
Dozens of Vendors Patch Security Flaws Across Enterprise Software and Network Devices
SAP has released security updates to address two critical flaws that could allow arbitrary code execution on affected systems, namely CVE-2019-17571 and CVE-2026-27685. The first vulnerability involves a code injection in the SAP Quotation Management…
-
OpenAI to Acquire AI Security Startup Promptfoo
OpenAI announced this week that it is in the process of acquiring AI security company Promptfoo, a move that follows Promptfoo’s funding of more than $23 million and a reported $86 million valuation based on PitchBook data after an $18.4 million Series A…
SecurityWeek -
Fortinet, Ivanti, Intel Patch High-Severity Vulnerabilities
According to Fortinet, Ivanti, and Intel, dozens of high‑severity vulnerabilities were patched this week, with the fixes covering multiple products and risk vectors. Fortinet says patches address 22 security defects across its products, including…
SecurityWeek -
How to 10x Your Vulnerability Management Program in the Agentic Era
The article frames vulnerability management as entering an agentic era, defined by continuous telemetry, contextual prioritization and agentic remediation, not just static scans. It notes a November 2025 disclosure by Anthropic that a Chinese threat actor…
SecurityWeek -
What Boards Must Demand in the Age of AI-Automated Exploitation
AI has collapsed the cost of exploitation, with threat actors using agentic AI to speed up reconnaissance, vulnerability discovery, exploit development and operations. The piece notes that automation turns a vulnerability backlog into a weapon, and that…
The Hacker News -
Hewlett Packard Enterprise fixes critical authentication bypass in Aruba AOS-CX
Hewlett Packard Enterprise has patched multiple flaws in Aruba AOS-CX, the operating system used by Aruba CX switches, with the most severe issue tracked as CVE-2026-23813 (CVSS 9.8) allowing unprivileged attackers to bypass authentication and reset…
-
Michelin Confirms Data Breach Linked to Oracle EBS Attack
According to SecurityWeek, Michelin has confirmed a data breach linked to the Oracle E-Business Suite (EBS) campaign, with the Cl0p ransomware and extortion group claiming credit for the attack. The incident involved exploitation of a zero-day in Oracle EBS,…
SecurityWeek -
March 2026 Patch Tuesday: 83 Vulnerabilities, Two Publicly Disclosed Zero-Days
Microsoft’s March 2026 Patch Tuesday addressed 83 vulnerabilities across Windows and multiple Microsoft products and components, with two publicly disclosed zero-days included in the fixes, though neither has been confirmed as actively exploited at release.…
-
Quantro Security Emerges From Stealth With $2.5 Million in Funding
Quantro Security has emerged from stealth with $2.5 million in seed funding, provided by Google’s early-stage AI fund Gradient, according to Gradient. The New York-based startup, founded in 2025 by veterans of CrowdStrike, Tenable and Qualys, has built…
SecurityWeek -
March 2026 Patch Tuesday fixes two zero-day vulnerabilities
March 2026 Patch Tuesday fixes two zero-day vulnerabilities, with Malwarebytes noting that Microsoft released updates covering 79 CVEs, including the two zero-days. The vulnerability tracked as CVE-2026-21262, a flaw in Microsoft SQL Server rated CVSS 8.8,…
