News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Thu 12 Mar· 51 articles
-
Meta rolls out anti-scam tools across WhatsApp, Facebook, and Messenger
Meta has rolled out additional anti-scam protections across WhatsApp, Facebook and Messenger, aiming to thwart impersonation, spoofed brands and other sophisticated fraud tactics. The update uses AI-powered protections to spot attempts at celebrity…
Malwarebytes -
Critical N8n Vulnerabilities Allowed Server Takeover
Two critical-severity vulnerabilities in the n8n workflow automation platform could have enabled unauthenticated remote code execution and sandbox escape, potentially exposing all credentials stored in the n8n database, according to Pillar Security. Tracked…
-
Polyfill Supply Chain Attack Impacting 100k Sites Linked to North Korea
The Polyfill supply chain attack, which hit more than 100,000 websites in 2024 by injecting malicious JavaScript into scripts served from cdn.polyfill[.]io, has now been linked to North Korean threat actors after earlier ties to China. In February 2024,…
SecurityWeek -
Iran Claim Massive Cyber-Attack on MedTech Firm Stryker
Pro-Iranian hackers have claimed a major scalp after causing global disruption at Fortune 500 medical technology vendor Stryker, with the Handala group stating it wiped over 200,000 systems, servers and mobile devices and exfiltrated 50TB of the firm’s data.…
Infosecurity -
ENISA Technical Advisory on Secure Package Managers: Essential DevSecOps Guidance
ENISA’s first Technical Advisory on Secure Package Managers highlights how developers can safely consume third‑party packages, outlining risks and secure practices across the software development life cycle. The document, dated March 2026 (v1.1), follows…
Security Affairs -
n8n2 articles this day · The Hacker News first
U.S. CISA adds a flaw in n8n to its Known Exploited Vulnerabilities catalog · CISA Flags Actively Exploited n8n RCE Bug as 24,700 Instances Remain Exposed
-
U.S. CISA adds a flaw in n8n to its Known Exploited Vulnerabilities catalog
According to the U.S. Cybersecurity and Infrastructure Security Agency (CISA), a flaw in n8n has been added to its Known Exploited Vulnerabilities (KEV) catalog, tracked as CVE-2025-68613 with a CVSS score of 10.0. n8n is a workflow automation platform that…
-
CISA Flags Actively Exploited n8n RCE Bug as 24,700 Instances Remain Exposed
The Hacker News reports that the U.S. Cybersecurity and Infrastructure Security Agency has added a critical n8n flaw to its Known Exploited Vulnerabilities catalog based on evidence of active exploitation, according to CISA. The vulnerability, tracked as…
-
-
Six Android Malware Families Target Pix Payments, Banking Apps, and Crypto Wallets
Cybersecurity researchers have uncovered six Android malware families designed to steal data and carry out financial fraud, including PixRevolution, TaxiSpy RAT, BeatBanker, Mirax, Oblivion RAT, and SURXRAT. PixRevolution, according to Zimperium, targets…
The Hacker News -
Bell Ambulance data breach impacted over 238,000 people
Bell Ambulance confirmed a February 2025 breach that impacted 237,830 individuals, exposing personal, financial, and health information. On 13 February 2025, it detected unauthorised access and engaged third‑party forensic specialists to determine the scope,…
Security Affairs -
ISC Stormcast For Thursday, March 12th, 2026 https://isc.sans.edu/podcastdetail/9846, (Thu, Mar 12th)
ISC Stormcast For Thursday, March 12th, 2026 presents the usual briefing from Internet Storm Center, listing threat level as green and noting the handler on duty as Guy Bruneau. According to Internet Storm Center, the diary entry also promotes the upcoming…
SANS ISC -
When your IoT Device Logs in as Admin, It?s too Late! [Guest Diary], (Wed, Mar 11th)
Default credentials remain the most exploited vector for IoT devices, and the diary shows how easily devices with usernames like root and passwords such as password or admin can be accessed. Across an eight-day window in January 2026, there were 44,269…
SANS ISC
