News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 17 Mar· 48 articles
-
EU sanctions Chinese and Iranian actors over cyberattacks on critical infrastructure
The European Union has imposed sanctions on three China-based companies and two individuals over cyberattacks targeting EU countries and partners, affecting more than 65,000 devices across six EU member states between 2022 and 2023. The three entities are…
Security Affairs -
More Attackers Are Logging In, Not Breaking In
More Attackers Are Logging In, Not Breaking In reports that credential theft surged in the second half of 2025, driven by infostealer malware, malware-as-a-service ecosystems and AI-enabled social engineering. According to Recorded Future, the firm indexed…
Dark Reading -
Less Lucrative Ransomware Market Makes Attackers Alter Methods
Ransomware actors are ditching Cobalt Strike in favour of native Windows tools as payment rates hit record lows and data theft surges. According to Google Threat Intelligence Group (GTIG), data theft features in about 77% of attacks, up from 57% last year,…
Dark Reading -
World ID wants you to put a cryptographically unique human identity behind your AI agents
World ID is being positioned as a way to attach a cryptographically secure, unique human identity to AI agents, with iris-scan backed tokens aiming to curb Sybil attack-style floods of requests. Ars Technica reports that World now claims nearly 18 million…
Ars Technica -
Hackers Target Cybersecurity Firm Outpost24 in 7-Stage Phish
Hackers targeted Outpost24, a cybersecurity firm, with a seven-stage phishing campaign aimed at a C-suite executive and designed to bypass multiple layers of enterprise email security without triggering alerts. Researchers from Outpost24’s threat…
Dark Reading -
Researchers disclose vulnerabilities in IP KVMs from 4 manufacturers
Researchers disclosed nine vulnerabilities in IP KVMs from four manufacturers, exposing BIOS/UEFI-level access to potentially unauthorised users. The low-cost devices, typically selling for $30 to $100, are used to remotely access machines and, when…
-
AI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and RCE
Cybersecurity researchers have disclosed that Amazon Bedrock’s AgentCore Code Interpreter sandbox can perform outbound DNS queries, a flaw that could enable interactive shells, data exfiltration, and command execution when IAM permissions allow access to…
-
bittensor-wallet 4.0.2 Compromised on PyPI - Backdoor Exfiltrates Private Keys
On 17 March 2026, bittensor-wallet 4.0.2 was identified as a compromised PyPI package, having been live for about 48 hours before it was yanked. The malicious release was uploaded on 15 March 2026 and exposed for roughly 48 hours, with yanking occurring…
StepSecurity -
Android OS-Level Attack Bypasses Mobile Payment Security
A new Android attack technique identified by CloudSEK researchers manipulates the runtime environment rather than modifying apps, using the LSPosed framework to interfere with system‑level processes and hijack legitimate payment apps without changing their…
Infosecurity -
Fake Pudgy World site steals your crypto passwords
Malwarebytes reports a phishing campaign that impersonates Pudgy World, the newly launched Pudgy Penguins browser game, to steal crypto passwords. The fraudulent site, pudgypengu-gamegifts[.]live, appeared around the game’s launch window, with Pudgy World…
Malwarebytes -
Tech Giants Invest $12.5 Million in Open Source Security
Tech giants have pledged a total of $12.5 million in grant funding to the Linux Foundation to bolster open source security, with contributions from Anthropic, Amazon Web Services (AWS), GitHub, Google, Google DeepMind, Microsoft, and OpenAI. According to the…
SecurityWeek -
UK Companies House Exposed Details of Millions of Firms
According to Tax Policy Associates, a critical vulnerability was found in a web application of Companies House, the government agency responsible for maintaining the public register of UK companies. The security hole was discovered by John Hewitt of Ghost…
SecurityWeek -
Warlock Ransomware Group Augments Post-Exploitation Activities
The Warlock ransomware group is expanding its post-exploitation activity to be more stealthy and resilient, using a new BYOVD technique and other strategic tools after gaining access by exploiting unpatched SharePoint servers, according to Trend Micro threat…
-
RondoDox botnet expands arsenal targeting 174 flaws, and hits 15,000 daily exploit attempts
RondoDox is ramping up its campaign, targeting 174 vulnerabilities with up to 15,000 daily exploit attempts in a more focused operation, according to Bitsight. The analysis notes that 148 CVEs were mapped among these flaws, with 15 possessing a public PoC…
-
'CursorJack’ Attack Path Exposes Code Execution Risk in AI Development Environment
CursorJack, described by Infosecurity Magazine as a method that could enable code execution through manipulated installation links in an AI development environment, has been identified by security researchers. According to Proofpoint Threat Research, the…
Infosecurity -
LeakNet Ransomware Uses ClickFix via Hacked Sites, Deploys Deno In-Memory Loader
LeakNet, the ransomware operation, has adopted the ClickFix social engineering tactic delivered through compromised websites as its initial access method, rather than relying on stolen credentials from initial access brokers. The campaign uses a staged…
The Hacker News -
Surf AI Raises $57 Million for Agentic Security Operations Platform
Surf AI has announced its launch, accompanied by $57 million in funding to help enterprises operationalise their security programmes. The funding round was led by Accel and includes investors Cyberstarts and Boldstart Ventures, with the investment earmarked…
SecurityWeek -
Stryker Cyberattack: What You Need to Know
According to the SEC Form 8-K filing, on 11 March 2026 Stryker disclosed a cybersecurity incident that caused a global disruption to its Microsoft environment, with the company later confirming that the disruption affected order processing, manufacturing,…
SOCRadar -
Robotic Surgery Giant Intuitive Discloses Cyberattack
Intuitive, the American robotic surgery giant, disclosed that it was the target of a cyberattack described as a targeted cybersecurity phishing incident, which led to unauthorized access to certain internal business applications. The company said, according…
SecurityWeek -
174 Vulnerabilities Targeted by RondoDox Botnet
SecurityWeek reports that the RondoDox botnet has expanded its exploit list to 174 vulnerabilities and is adopting a more targeted approach, with activity peaking at about 15,000 exploitation attempts per day. The botnet has been active since at least March…
SecurityWeek -
90% of people don’t trust AI with their data
Malwarebytes reports that in its privacy pulse survey, 90% of respondents said they’re worried about AI using their data without consent, a figure drawn from 1,200 responses gathered from readers of the Malwarebytes newsletter earlier this year. The article…
Malwarebytes -
Google, Meta, Microsoft Among Signatories of Pact to Combat Scams
Major technology and retail firms have signed an industry accord to combat online scams and fraud, with Google, Meta and Microsoft among the signatories. The pledge also includes Adobe, Amazon, OpenAI, LinkedIn, Pinterest, Match Group, Levi Strauss and…
SecurityWeek -
CL-STA-1087 targets military capabilities since 2020
A China-nexus espionage cluster tracked as CL-STA-1087 has targeted Southeast Asian military organisations since at least 2020, using AppleChris and MemFun malware. According to the researchers, the activity focused on highly targeted intelligence collection…
Security Affairs -
Darktrace Identifies Encryption in a World Leaks Ransomware Attack
Darktrace reports that World Leaks, the rebrand of Hunters International, carried out an attack that involved both data exfiltration and encryption, contradicting prior claims that the group had abandoned encryption. In January 2026, Darktrace identified…
darktrace.com -
Surge in Nation State Attacks on UK Firms Amid Cyber Warfare Fears
Over half (54%) of UK companies were hit by nation state attacks last year, according to Armis’ 2026 Armis Cyberwarfare Report, based on interviews with 1,900 global IT decision-makers (ITDMs), including 500 from the UK, alongside proprietary data from Armis…
Infosecurity -
Schneider Electric SCADAPack and RemoteConnect
According to Schneider Electric CPCERT, Schneider Electric is aware of a vulnerability in its SCADAPack x70 RTU products, with the SCADAPack 47xi, SCADAPack 47x and SCADAPack 57x RTUs that provide remote monitoring and control potentially enabling denial of…
-
CODESYS in Festo Automation Suite
According to CISA's ICS Advisory "CODESYS in Festo Automation Suite," released on 17 March 2026, multiple vulnerabilities affecting CODESYS in FESTO Software Festo Automation Suite are disclosed, with CVSS base scores shown up to 9.8. The advisory lists…
-
Siemens SICAM SIAPP SDK
The ICS advisory notes multiple vulnerabilities in the Siemens SICAM SIAPP SDK that could disrupt the customer-developed SIAPP or its simulation environment, potentially causing denial of service, data corruption, or code execution if the API is misused or…
-
Tracebit Raises $20M for Cloud-Native Deception Technology
Tracebit has announced a $20 million Series A funding round, bringing its total raised to $25 million. The investment round was led by FirstMark, with additional support from Accel, MMC Ventures, Tapestry VC, and CCL. Founded in 2023 and based in London, UK,…
SecurityWeek -
Pro-Iran hackers claim Microsoft outage, vow to ramp up attacks on U.S. companies
Pro-Iran hackers claim Microsoft outage and vow to ramp up attacks on U.S. companies, according to ThreatBeat. The report notes that hackers supporting Iran claimed responsibility for today’s outage issues, while a collective allied with a group urging a…
DataBreaches -
Booz Allen warns AI‑driven cyberattacks outpace human-driven defenses across critical infrastructure
Booz Allen warns AI‑driven cyberattacks outpace human‑driven defenses across critical infrastructure, in a new report published on 17 March 2026. The report, titled ‘When Cyberattacks Happen at AI Speed’, says cybersecurity is entering a machine‑speed era…
DataBreaches -
Sears Exposed AI Chatbot Phone Calls and Text Chats to Anyone on the Web
Sears department stores have largely disappeared across the United States, but the brand and its appliance repair service remain in business, including an AI chatbot and phone assistant named Samantha. Security researcher Jeremiah Fowler reportedly found…
DataBreaches -
Nvidia’s version of OpenClaw could solve its biggest problem: security
Nvidia’s version of OpenClaw could solve its biggest problem: security. Nvidia CEO Jensen Huang thinks every company should have an OpenClaw strategy, and Nvidia is here to provide it. Nvidia has developed NemoClaw, an enterprise-grade AI agent platform,…
DataBreaches -
IPv4 Mapped IPv6 Addresses, (Tue, Mar 17th)
According to SANS[.]edu, IPv4-mapped IPv6 addresses are defined as a transition mechanism used to retain backward compatibility as IPv6 is deployed, and they are not used on the network but are translated to IPv4 before a packet is sent. To map an IPv4…
SANS ISC -
How searching for a VPN could mean handing over your work login details
In a Malwarebytes piece dated 17 March 2026, Pieter Arntz explains how seeking a VPN can wind up delivering credential-stealing malware, with victims trusting search results, logos and signatures that look legitimate. The fake VPN page often redirects to a…
Malwarebytes -
AI is Everywhere, But CISOs are Still Securing It with Yesterday's Skills and Tools, Study Finds
According to the AI and Adversarial Testing Benchmark Report 2026 from Pentera, a majority of security leaders are struggling to defend AI systems with tools and skills that are not fit for the challenge. The survey of 300 US CISOs and senior security…
The Hacker News -
CISA Flags Year-Old Wing FTP Vulnerability as Exploited
According to CISA, a year-old Wing FTP vulnerability has been exploited in the wild, tracked as CVE-2025-47813, which could disclose the full local installation path of the application when a long value is used in the UID cookie of a logged-in session. The…
-
AI, APIs and DDoS Collide in New Era of Coordinated Cyberattacks
Akamai warns that layer 7 DDoS, API abuse and AI-powered attacks are now merging into coordinated, multi-vector campaigns that are harder to detect and defend against, marking a shift from an emerging trend to a new operating model. New research from…
SecurityWeek -
Average Number of Daily API Attacks Up 113% Annually
APIs are now described as the dominant attack surface for global organisations, with 87% registering a related security incident last year, according to Akamai. Now in its 12th year, the State of the Internet (SOTI) report analysed Akamai’s own data and…
Infosecurity -
UK Cyber Monitoring Centre Sets Its Sights on US Expansion One Year After Launch
One year after its creation, the UK’s Cyber Monitoring Centre (CMC) is looking to expand to the US. The UK-based nonprofit was established by a team of experts in February 2025 to assess the economic and financial impact of major cyber incidents in the UK.…
Infosecurity
