News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Fri 20 Mar· 52 articles
-
Who’s Really Shopping? Retail Fraud in the Age of Agentic AI
Unit 42’s piece examines how agentic AI could reshape retail fraud, noting that agentic AI is forecast to handle nearly 15–25% of all e-commerce by 2030 and that agentic commerce could generate between $3 and $5 trillion in global retail revenue by 2030. It…
unit42.paloaltonetworks.com -
7,500+ Magento sites defaced in global hacking campaign
Around 7,500 Magento sites have been defaced in a global hacking campaign, with attackers uploading plaintext defacement files on more than 15,000 hostnames and compromising affected infrastructure across Open Source, Enterprise, and B2B editions. Netcraft’s…
Security Affairs -
Weill Cornell Medicine discloses an insider data breach
On 23 February 2026, HHS received a breach submission from Weill Cornell Medicine reporting that 516 patients were affected by an incident involving Unauthorized Access/Disclosure of data in Electronic Medical Records. According to Weill Cornell Medicine, an…
DataBreaches -
Widely used Trivy scanner compromised in ongoing supply-chain attack
Attackers have compromised virtually all versions of Aqua Security’s widely used Trivy vulnerability scanner in an ongoing supply-chain attack, with the incident beginning in the early hours of Thursday and continuing through Friday, according to Itay…
Ars Technica -
Patch Now: Oracle's Fusion Middleware Has Critical RCE Flaw
Oracle has disclosed a critical RCE flaw in Fusion Middleware, labeled CVE-2026-21992, which affects the Oracle Identity Manager (OIM) and Oracle Web Services Manager (OWSM). The security alert notes that the vulnerability enables remote code execution and…
-
Navia data breach impacts nearly 2.7 Million people
Navia Benefit Solutions has disclosed a data breach affecting 2,697,540 individuals, with attackers accessing its systems from 22 December 2025 to 15 January 2026. The company detected suspicious activity on 23 January 2026 and launched a rapid…
Security Affairs -
Darktrace Recognized as the Only Visionary in the 2026 Gartner® Magic Quadrant™ for CPS Protection Platforms
Darktrace has been recognised as the only Visionary in the 2026 Gartner® Magic Quadrant™ for CPS Protection Platforms, with the accolade marking the second consecutive year in which Darktrace / OT has held this position. The recognition, published on 20…
darktrace.com -
Cyber OpSec Fail: Beast Gang Exposes Ransomware Server
An open server hosted on a German cloud provider’s systems has been discovered, containing the entire toolset of a member of the Beast ransomware group, exposing both the actor’s TTPs and the fact that Beast shares many of those tactics with other ransomware…
DataBreaches -
Strengthening Cybersecurity in Canada’s Municipal Sector: A Verified Analysis
DataBreaches[.]Net analyses the Canadian municipal cybersecurity landscape, highlighting how a ransomware attack on City of Hamilton on 25 February 2024 crippled roughly 80% of its network and spurred an $18.3 million CAD spend on response, recovery and…
DataBreaches -
Trivy Security Scanner GitHub Actions Breached, 75 Tags Hijacked to Steal CI/CD Secrets
Trivy, a popular open-source vulnerability scanner, was compromised a second time within a month to deliver malware via GitHub Actions, affecting the aquasecurity/trivy-action and aquasecurity/setup-trivy repositories. According to The Hacker News, an…
The Hacker News -
Jaguar Land Rover’s cyber bailout sets worrying precedent, watchdog warns
According to The Register, the UK’s cyber watchdog has warned that the government’s £1.5 billion bailout of Jaguar Land Rover risks setting a troubling precedent for how Britain handles major cyber crises. Speaking at an event marking the Cyber Monitoring…
DataBreaches -
Cyber OpSec Fail: Beast Gang Exposes Ransomware Server
An open server hosted on a German cloud provider’s systems has been discovered, containing the entire toolset of a member of the Beast ransomware group. The find, described by Dark Reading, exposes the threat actor’s tactics, techniques, and procedures and…
Dark Reading -
CTI-REALM: A new benchmark for end-to-end detection rule generation with AI agents
CTI-REALM is Microsoft’s open-source benchmark for evaluating AI agents on end-to-end detection engineering, turning threat intelligence into validated detections and building on prior work such as ExCyTIn-Bench. The benchmark places agents in a realistic,…
Microsoft -
Secure agentic AI end-to-end
According to Microsoft Security Blog, RSAC 2026 will celebrate its 35-year anniversary as a forum for the security community to address new challenges and opportunities in the field of agentic AI. The piece notes that agentic AI is reshaping industries, with…
Microsoft -
In Other News: New Android Safeguards, Operation Alice, UK Toughens Cyber Reporting
SecurityWeek reports a trio of notable developments this week. Google has detailed a new advanced flow for Android sideloading that lets users install apps from unverified developers while adding friction to deter social engineering scams, with the rollout…
SecurityWeek -
Apple Multiple Products2 articles this day · CISA first
CISA Adds CVE-2025-31277 to Known Exploited Vulnerabilities Catalogue · CISA Adds Five Known Exploited Vulnerabilities to Catalog
-
CISA Adds CVE-2025-31277 to Known Exploited Vulnerabilities Catalogue
CISA has added CVE‑2025‑31277 to its Known Exploited Vulnerabilities (KEV) catalogue. The entry concerns an Apple “Multiple Products Buffer Overflow Vulnerability” that affects Safari and the web stack in iOS, iPadOS, macOS, watchOS, visionOS and tvOS. The…
-
CISA Adds Five Known Exploited Vulnerabilities to Catalog
Release Date March 20, 2026. According to CISA, five new vulnerabilities have been added to the Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. The CVEs are CVE-2025-31277 Apple Multiple Products Buffer Overflow…
-
-
CISA Adds CVE-2025-43520 to Known Exploited Vulnerabilities Catalogue
CISA has added CVE‑2025‑43520 to its Known Exploited Vulnerabilities (KEV) catalogue. The entry concerns an Apple classic buffer‑overflow flaw affecting Apple watchOS, iOS, iPadOS, macOS, visionOS, tvOS and iPadOS, described as the “Apple Multiple Products…
-
CISA Adds CVE-2025-43510 to Known Exploited Vulnerabilities Catalogue
CISA has added CVE‑2025‑43510 to its Known Exploited Vulnerabilities (KEV) catalogue. The entry concerns Apple’s watchOS, iOS, iPadOS, macOS, visionOS and tvOS and is described as an “Apple Multiple Products Improper Locking Vulnerability”. The flaw could…
-
CISA Adds CVE-2025-54068 to Known Exploited Vulnerabilities Catalogue
CISA has added CVE‑2025‑54068 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Laravel’s Livewire component and is listed as the “Laravel Livewire Code Injection Vulnerability”. It permits unauthenticated attackers to achieve remote…
-
CISA Adds CVE-2025-32432 to Known Exploited Vulnerabilities Catalogue
CISA has added CVE‑2025‑32432 to its Known Exploited Vulnerabilities (KEV) catalogue. The entry affects Craft CMS, the open‑source content‑management system marketed by Craft. The vulnerability, titled “Craft CMS Code Injection Vulnerability”, allows a…
-
Negotiating with the Board: Translating Active Risk into Financial Exposure
Security leaders must translate data into business relevance, and the article argues that the board cares about financial exposure rather than vulnerability counts. It notes that CVSS measures theoretical severity but not likelihood or impact for a given…
Rapid7 -
Langflow2 articles this day · Infosecurity first
Critical Langflow Flaw CVE-2026-33017 Triggers Attacks within 20 Hours of Disclosure · Hackers Exploit Critical Langflow Bug in Just 20 Hours
-
Critical Langflow Flaw CVE-2026-33017 Triggers Attacks within 20 Hours of Disclosure
A critical security flaw in Langflow, tracked as CVE-2026-33017 with a CVSS score of 9.3, allows unauthenticated remote code execution through the POST /api/v1/build_public_tmp/{flow_id}/flow endpoint when attacker‑controlled data is supplied. According to…
-
Hackers Exploit Critical Langflow Bug in Just 20 Hours
Threat actors demonstrated how quickly they operate by exploiting a critical open-source vulnerability in Langflow, CVE-2026-33017, within 20 hours of the advisory description. The unauthenticated remote code execution (RCE) flaw affects Langflow, an…
-
-
3 Men Charged With Conspiring to Smuggle US Artificial Intelligence to China
Three men have been charged with conspiring to smuggle billions of dollars’ worth of US-built servers containing Nvidia chips to China, according to the indictment in Manhattan federal court. The charges, reported by SecurityWeek from an Associated Press…
SecurityWeek -
Could your face change what you pay? NYC wants limits on biometric tracking
New York City lawmakers are pushing to ban private businesses from using biometric tools such as voice and facial recognition to track the public, with the New York City Council holding a hearing over two bills aimed at banning city landlords and businesses…
Malwarebytes -
Eclypsium Raises $25 Million for Device Supply Chain Security
Eclypsium has raised $25 million in a strategic funding round, bringing the total raised by the company to $110 million, according to SecurityWeek. The round was led by PEAK6 Strategic Capital, with additional support from a top US bank, and will fund…
SecurityWeek -
Interlock Ransomware Targets Cisco Enterprise Firewalls
Interlock ransomware is targeting Cisco enterprise firewalls, with Amazon Web Services summarising an advisory that the campaign exploits CVE-2026-20131, a critical zero-day in the Web-based management interface of Cisco’s Secure Firewall Management Center…
-
Global cybercrime crackdown: over 373,000 dark web sites shut down
According to Europol, on 9 March 2026 a global operation led by German authorities and supported by Europol was launched against one of the largest networks of fraudulent platforms in the dark web. The investigation began in mid-2021 against the platform…
DataBreaches -
University College of Dublin staff member due in court over accessing student data
According to RTÉ, a University College Dublin staff member in his 50s is due in Dublin District Court after being charged in connection with unlawfully accessing student data at the college. The man was arrested this morning following an investigation by the…
DataBreaches -
US Confirms Handala Link to Iran Government Amid Takedown of Hackers’ Sites
The United States government has for the first time officially linked the Handala hacker group to the Iranian government, according to the Justice Department, and the announcement came amid the takedown of several Handala websites used for psychological…
SecurityWeek -
That “job brief” on Google Forms could infect your device
The Malwarebytes article explains a campaign that uses business-themed lures such as job interviews and project briefs distributed via Google Forms to deliver the PureHVNC Remote Access Trojan (RAT). According to Malwarebytes, the infection chain begins when…
Malwarebytes -
Cape Raises $100 Million for Protection Against Cellular Security Threats
Cape has announced a $100 million Series C funding round, bringing its total investment to $191 million, according to SecurityWeek. The round was co-led by Bain Capital Ventures and IVP, with participation from 01 Advisors, 137 Ventures, Definition, and…
SecurityWeek -
Apple urges iPhone users to update as Coruna and DarkSword exploit kits emerge
Apple has warned that iPhones running outdated iOS versions are vulnerable to Coruna and DarkSword exploit kits and urges users to update iOS. The advisory notes these attacks use malicious web content to trigger infections that can steal data, with Lockdown…
Security Affairs -
Navia Data Breach Impacts 2.7 Million
Navia Benefit Solutions, a third‑party benefits administrator based in Renton, Washington, says that between 22 December 2025 and 15 January 2026 hackers accessed its systems, with the incident discovered on 23 January 2026. The breach exposed personal…
SecurityWeek -
Google Adds 24-Hour Wait for Unverified App Sideloading to Reduce Malware and Scams
Google has announced an advanced flow for Android sideloading that introduces a mandatory 24-hour wait before installing apps from unverified developers, in a bid to balance openness with safety. The change forms part of a broader developer verification…
The Hacker News -
Thousands of Magento Sites Hit in Ongoing Defacement Campaign
Thousands of Magento sites have been hit in a mass defacement campaign that began on 27 February 2026, targeting e‑commerce platforms, global brands and government services, according to SecurityWeek. Netcraft reports that over 7,500 Magento sites were…
SecurityWeek -
Global law enforcement operation targets AISURU, Kimwolf, JackSkid botnet operators
According to DoJ press release, the U.S. Department of Justice disrupted command-and-control infrastructure used by several IoT botnets, including AISURU, Kimwolf, JackSkid, and Mossad Internet of Things botnets. The operation involved authorities from…
Security Affairs -
The Importance of Behavioral Analytics in AI-Enabled Cyber Attacks
AI-enabled cyber attacks are increasingly using personalised phishing, deepfakes and malware that can evade traditional detection by impersonating normal user activity, according to The Hacker News. The piece argues that behavioural analytics must evolve…
The Hacker News -
NCA Boss Warns That Teens Are Being “Radicalized” Into Cybercrime Online
The head of the UK’s National Crime Agency (NCA) has warned that the country’s teens are being “radicalized” into becoming cybercriminals by online platforms, a claim highlighted in a speech launching the NCA’s National Strategic Assessment on 20 March 2026.…
Infosecurity
