News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Fri 20 Mar· 52 articles
-
Magento PolyShell Flaw Enables Unauthenticated Uploads, RCE and Account Takeover
Sansec warns of a critical Magento vulnerability, codenamed PolyShell, that affects all Magento Open Source and Adobe Commerce versions up to 2.4.9-alpha2 and could allow unauthenticated attackers to upload arbitrary executables, enabling remote code…
The Hacker News -
Allure Security Raises $17 Million for Online Brand Protection
According to SecurityWeek, Allure Security has raised $17 million in a Series B funding round, bringing its total funding to $43 million. The round was led by Riverside Acceleration Capital, with support from previous investors Curql, Glasswing Ventures, and…
SecurityWeek -
GSocket Backdoor Delivered Through Bash Script, (Fri, Mar 20th)
GSocket backdoor was discovered in a malicious Bash script that installs the GSocket tool on the victim’s machine, enabling a C2 channel via a global relay network. The script downloads a GSocket client, starts it, and stores the shared secret in a fake SSH…
SANS ISC -
Critical Langflow Vulnerability Exploited Hours After Public Disclosure
Threat actors began exploiting a critical Langflow vulnerability roughly 20 hours after public disclosure, according to Sysdig, with CVE-2026-33017 carrying a CVSS score of 9.3 and enabling unauthenticated remote code execution via a flawed POST endpoint.…
-
Aisuru and Kimwolf DDoS Botnets Disrupted in International Operation
The US Department of Justice announced an international operation that disrupted several IoT botnets used to launch distributed denial-of-service attacks, including Aisuru, Kimwolf, JackSkid and Mossad. Authorities said the botnets had compromised more than…
SecurityWeek -
DoJ Disrupts 3 Million-Device IoT Botnets Behind Record 31.4 Tbps Global DDoS Attacks
On 20 March 2026, the U.S. Department of Justice (DoJ) announced the disruption of command-and-control infrastructure used by several IoT botnets, including AISURU, Kimwolf, JackSkid and Mossad, in a court-authorised operation with Canada and Germany taking…
The Hacker News -
Apple Warns Older iPhones Vulnerable to Coruna, DarkSword Exploit Kit Attacks
Apple is urging users still on an outdated iOS version to update their iPhones to defend against web-based attacks carried out by Coruna and DarkSword exploit kits. The advisory explains that malicious web content can target out-of-date iOS versions,…
The Hacker News -
North Carolina tech worker found guilty of insider attack netting $2.5M ransom
A North Carolina tech worker was found guilty of six counts of extortion for an insider scheme that netted his employer about $2.5 million, according to court records reported by DataBreaches[.]Net. Cameron Nicholas Curry, also known as “Loot,” worked as a…
DataBreaches -
ISC Stormcast For Friday, March 20th, 2026 https://isc.sans.edu/podcastdetail/9858, (Fri, Mar 20th)
According to Internet Storm Center, ISC Stormcast for Friday, 20 March 2026 lays out the day’s briefing from the handler on duty, Xavier Mertens, and confirms the Threat Level as green. The diary entry reiterates the presenter’s next class topic as…
SANS ISC -
Trivy Compromised a Second Time - Malicious v0.69.4 Release
On March 19, 2026, trivy, a widely used open source vulnerability scanner maintained by Aqua Security, experienced a second security incident, three weeks after the hackerbot-claw takeover on February 28. A new compromised release, v0.69.4, was published to…
StepSecurity -
Feds Disrupt IoT Botnets Behind Huge DDoS Attacks
The U.S. Justice Department, with help from Canada and Germany, dismantled the infrastructure behind four IoT botnets that compromised more than three million devices such as routers and web cameras, in a bid to curb a wave of record-smashing DDoS attacks.…
Krebs on Security -
French aircraft carrier Charles de Gaulle tracked via Strava activity in OPSEC failure
According to Le Monde, France’s aircraft carrier Charles de Gaulle was tracked in real time through a sailor’s activity on the Strava app, after a public Strava profile revealed running data from the ship. The data showed the carrier near Cyprus and Turkey…
Security Affairs
