News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 18 Mar· 54 articles
-
ISC Stormcast For Wednesday, March 18th, 2026 https://isc.sans.edu/podcastdetail/9854, (Wed, Mar 18th)
ISC Stormcast for Wednesday, 18 March 2026 details the usual update and points readers to the podcast at https://isc.sans[.]edu/podcastdetail/9854. The diary notes the next class titled Application Security: Securing Web Apps, APIs, and Microservices, which…
SANS ISC -
The SOC Files: Time to “Sapecar”. Unpacking a new Horabot campaign in Mexico
The Securelist article analyzes a campaign involving the Horabot threat, characterized by its use of a banking Trojan, email spreader, and a complex attack chain. It outlines the stages of the attack, starting with a fake CAPTCHA lure that prompts victims to…
securelist.com -
Researcher Discovers 4th WhatsApp View Once Bypass; Meta Won’t Patch
A researcher has uncovered a new method to bypass WhatsApp’s View Once feature, marking the fourth such bypass disclosed by Tal Be’ery, who is a co-founder and CTO of Zengo. Be’ery says previous bypasses were patched by WhatsApp, and he received a bug bounty…
SecurityWeek -
Product Walkthrough: How Mesh CSMA Reveals and Breaks Attack Paths to Crown Jewels
Security researchers are hearing how Mesh CSMA operationalises Gartner’s Cybersecurity Mesh Architecture with Mesh CSMA described as the world’s first purpose-built CSMA platform. The piece explains that CSMA is a composable security layer that unifies…
The Hacker News -
Introducing Custom Regions for precision data control
Cloudflare has announced Custom Regions as the next evolution of its Regional Services, launched on 18 March 2026. The update expands pre-defined regions and adds the ability for customers to define their own geographical boundaries for traffic processing,…
Cloudflare -
AI Issues Will Drive Half of Incident Response Efforts by 2028, Says Gartner
According to Gartner, custom-built AI applications are set to cause major headaches for security teams unless they are involved in projects early, with the analyst predicting that by 2028 at least half of enterprise incident response efforts will be devoted…
Infosecurity -
Robotic surgery firm Intuitive reports data breach after targeted phishing attack
Intuitive, a United States-based robotic surgery company known for the da Vinci Surgical System and Ion endoluminal system, disclosed a data breach resulting from a targeted phishing attack. According to Security Affairs, threat actors used a compromised…
Security Affairs -
Inside a network of 20,000+ fake shops
Malwarebytes maps a sprawling fake shop operation comprising over 20,000 domains that share infrastructure and use identical storefronts with different names. The network runs on WordPress and is powered by Sellvia, a US-based e-commerce platform, with six…
Malwarebytes -
Tracking the Iran War: A Month of Escalation and Regional Impact
According to Resecurity, the Iran war is likely to be prolonged, heightening cyber threats, energy disruption and regional instability, with Middle Eastern companies facing increased risk. The analysis notes that the conflict’s scale has shifted global…
Security Affairs -
Ubuntu CVE-2026-3888 Bug Lets Attackers Gain Root via systemd Cleanup Timing Exploit
According to Qualys Threat Research Unit (TRU), a high-severity security flaw tracked as CVE-2026-3888 affects default installations of Ubuntu Desktop versions 24.04 and later, potentially allowing an unprivileged local attacker to escalate to root. The…
-
Apple Fixes WebKit Vulnerability Enabling Same-Origin Policy Bypass on iOS and macOS
Apple on Tuesday released its first round of Background Security Improvements to address a WebKit vulnerability that could bypass the same-origin policy when processing malicious web content, affecting iOS, iPadOS, and macOS. The flaw is tracked as…
-
Critical Unpatched Telnetd Flaw (CVE-2026-32746) Enables Unauthenticated Root RCE via Port 23
The Hacker News reports a critical flaw in the GNU InetUtils telnetd, tracked as CVE-2026-32746, which allows unauthenticated remote code execution via port 23 with a CVSS score of 9.8. Dream, an Israeli cybersecurity company, discovered and reported the…
-
From Misconfigured Spring Boot Actuator to SharePoint Exfiltration: How Stolen Credentials Bypass MFA
From Misconfigured Spring Boot Actuator to SharePoint Exfiltration: How Stolen Credentials Bypass MFA details how attackers first found an exposed Spring Boot Actuator endpoint, learned sensitive data from the /env and /configprops outputs, and used that…
trendmicro.com -
Why East-West Visibility Matters for Grid Security
Electric power infrastructure is increasingly connected, making east-west traffic visibility inside the Electronic Security Perimeter essential for detecting lateral movement within BES, OT, ICS, and enterprise IT environments. The article notes that…
trendmicro.com
