News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Thu 19 Mar· 54 articles
-
FCA Updates Cyber Incident and Third-Party Reporting Rules
The UK Financial Conduct Authority has issued new rules designed to give firms more certainty about what cyber-related incidents to report and when, in order to bolster their cyber and business resilience, according to FCA. The update follows industry…
Infosecurity -
Analyzing the Current State of AI Use in Malware
Unit 42 researchers analyse two malware samples that incorporate AI to support remote decision making, rather than local execution. The first is a .NET information stealer that integrates GPT-3.5-Turbo via HTTP API and stores collected data such as system…
unit42.paloaltonetworks.com -
Cisco Secure Firewall Management Center (FMC)3 articles this day · SecurityWeek first
AWS Warns Hackers Have Abused Cisco Firewall Zero-Day Since January · Interlock group exploiting the CISCO FMC flaw CVE-2026-20131 36 days before disclosure
-
AWS Warns Hackers Have Abused Cisco Firewall Zero-Day Since January
According to a new analysis from AWS, a prolific ransomware group has been exploiting a zero-day vulnerability in a Cisco firewall product since January. AWS CISO CJ Moses warned that the Interlock operation had been using CVE-2026-20131 in attacks since…
-
Interlock group exploiting the CISCO FMC flaw CVE-2026-20131 36 days before disclosure
The Interlock ransomware group has been exploiting a Cisco Secure FMC zero-day RCE vulnerability, tracked as CVE-2026-20131 (CVSS score of 10.0), in Cisco Secure Firewall Management Center since late January. Amazon researchers observed the attackers…
-
Cisco Firewall Vulnerability Exploited as Zero-Day in Interlock Ransomware Attacks
According to Amazon threat intelligence, a vulnerability patched earlier this month by Cisco in its firewalls has been exploited as a zero-day since at least late January, tracked as CVE-2026-20131 affecting the Secure Firewall Management Center (FMC)…
-
-
Microsoft SharePoint2 articles this day · CISA first
CISA Warns of Attacks Exploiting Recent SharePoint Vulnerability · CISA Adds CVE-2026-20963 to Known Exploited Vulnerabilities Catalogue
-
CISA Warns of Attacks Exploiting Recent SharePoint Vulnerability
According to CISA, a recently patched Microsoft SharePoint remote code execution vulnerability, CVE-2026-20963, has been exploited in the wild. Microsoft outlined the flaw as a critical RCE (CVSS 9.8) enabled by deserialisation of untrusted data and noted…
-
CISA Adds CVE-2026-20963 to Known Exploited Vulnerabilities Catalogue
CISA has added CVE‑2026‑20963 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Microsoft SharePoint and is titled “Microsoft SharePoint Deserialization of Untrusted Data Vulnerability”. It enables an unauthorised attacker to execute…
-
-
DarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero-Days for Full Device Takeover
DarkSword is a full iOS exploit chain, reportedly used by multiple threat actors since at least November 2025, with six vulnerabilities employed to deliver three payloads, two of which were zero-days at the time. According to GTIG, three zero-days were…
-
UK: Regulation Drives Cyber Spending for Critical Infrastructure Orgs
Security leaders at the UK’s top critical national infrastructure firms are increasingly driven by regulatory compliance to improve cyber maturity and investments, Bridewell has found, according to Bridewell. In its Cybersecurity in CNI Report 2026, 35% of…
Infosecurity -
Russia establishes Vienna as key western spy hub targeting NATO
According to the Financial Times, Russia has transformed Vienna into its largest Western spy hub, steadily expanding surveillance over the past two years and monitoring NATO, the Middle East, and Africa via diplomatic compounds and rooftop satellite…
Security Affairs -
EU Sanctions Companies in China, Iran for Cyberattacks
The European Council has imposed sanctions on three ostensibly private firms—two in China and one in Iran—for aiding and carrying out cyberattacks in European countries, with the measures now prohibiting entry or doing business in the EU and freezing any…
Dark Reading -
CISA Warns of Zimbra, SharePoint Flaw Exploits; Cisco Zero-Day Hit in Ransomware Attacks
CISA has urged government agencies to patch two actively publicized flaws in the Zimbra Collaboration Suite and Microsoft Office SharePoint, noting they have been exploited in the wild. The vulnerabilities are CVE-2025-66376, a stored cross-site scripting…
-
ISC Stormcast For Thursday, March 19th, 2026 https://isc.sans.edu/podcastdetail/9856, (Thu, Mar 19th)
According to ISC Stormcast For Thursday, March 19th, 2026, the threat level is green and the entry provides information and links to the ISC content for that day. The diary notes a forthcoming class titled Application Security: Securing Web Apps, APIs, and…
SANS ISC -
Interesting Message Stored in Cowrie Logs, (Wed, Mar 18th)
This diary entry describes activity found and reported by a BACS student, Adam Thorman, as part of an assignment; it focuses on an echo command captured in Cowrie logs on 19 February 2026. The activity appeared to have occurred on that date with at least two…
SANS ISC
