News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Mon 23 Mar· 59 articles
-
⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More
The page titled "Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More" provides a summary of important cybersecurity news and developments from the week. Key highlights include a CI/CD backdoor vulnerability, the FBI's…
The Hacker News -
Crunchyroll Alleged Data Breach: What Do Users Need to Know?
Public reporting surrounding a possible Crunchyroll data breach remains unconfirmed by the company, with the story framed as alleged or possible rather than fully verified. The data said to be involved includes email addresses and IP addresses, with some…
SOCRadar -
Launching Cloudflare’s Gen 13 servers: trading cache for cores for 2x edge compute performance
Cloudflare has launched Gen 13 servers based on AMD EPYC 5th Gen Turin processors, running the FL2 Rust-based rewrite to unlock edge compute performance while maintaining latency SLAs. The new platform doubles core counts to up to 192 cores (384 threads with…
Cloudflare -
Inside Gen 13: how we built our most powerful server yet
Cloudflare’s Gen 13 servers are built around a 192-core AMD EPYC Turin 9965 processor, 768 GB of DDR5-6400 memory, and 24 TB of PCIe 5.0 NVMe storage, with dual 100 GbE network interfaces to keep pace with rising compute. The design delivers up to 2x the…
Cloudflare -
Advanced Flow will make Android sideloading safer
Google has announced Advanced Flow to let Android users install apps from unverified developers more safely, addressing a long-standing security weakness in sideloading. The feature introduces an extra set of steps, including enabling developer mode, a quick…
Malwarebytes -
We Found Eight Attack Vectors Inside AWS Bedrock. Here's What Attackers Can Do with Them
The Hacker News reports that XM Cyber threat research team identified eight validated attack vectors inside AWS Bedrock, illustrating how attackers can exploit connectivity between foundation models and enterprise data. According to XM Cyber threat research…
The Hacker News -
QNAP Patches Four Vulnerabilities Exploited at Pwn2Own
QNAP has patched four vulnerabilities across its products that were demonstrated at Pwn2Own Ireland 2025, tracked as CVE-2025-62843 to CVE-2025-62846 and affecting the company’s SD-WAN routers, addressed in QuRouter version 2.6.3.009. According to QNAP’s…
-
Microsoft Warns IRS Phishing Hits 29,000 Users, Deploys RMM Malware
Microsoft has issued a warning about a phishing campaign that has impacted approximately 29,000 users, specifically targeting IRS-related communications. The phishing attacks have led to the deployment of RMM (Remote Monitoring and Management) malware. This…
The Hacker News -
CISA Orders US Government to Patch Maximum Severity Cisco Flaw
The US Cybersecurity and Infrastructure Security Agency (CISA) has told all federal civilian agencies to patch a critical remote code execution vulnerability, CVE-2026-20131, in Cisco Secure Firewall Management Center (FMC). With a maximum CVSS score of 10,…
-
Tycoon 2FA Fully Operational Despite Law Enforcement Takedown
The phishing-as-a-service (PhaaS) platform Tycoon 2FA continues its operations despite international law enforcement efforts to disrupt it. Active since 2023, it facilitates phishing attacks and bypasses multi-factor authentication, accounting for 62% of…
SecurityWeek -
Alleged Rogers, StockX, and U.S. Tax Office Data Sales Plus Crypto, Bank, and Magento Listings
SOCRadar’s Dark Web Team identified multiple new underground posts this week, including an alleged Rogers Communications and Fido dataset, a U.S.-focused tax office dataset, and a StockX user database alongside a Magento vulnerability listing described as a…
SOCRadar -
Iran-linked actors use Telegram as C2 in malware attacks on dissidents
According to FBI, Iran’s Ministry of Intelligence and Security (MOIS) runs cyber campaigns that use Telegram as a command-and-control infrastructure to deliver malware, targeting Iranian dissidents, journalists and opposition groups worldwide. The operation…
Security Affairs -
Operation Alice Takes Down 370,000+ Dark Web Sites
A Europol-backed operation has led to the dismantling of over 373,000 dark web sites advertising CSAM and cybercrime as a service. The German-led Operation Alice ran from 9 March to 19 March 2026 and initially targeted “Alice with Violence CP” — a fraudulent…
Infosecurity -
Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes Wiper
Cybersecurity researchers have traced malicious Docker Hub artefacts tied to the Trivy supply chain attack, with new image tags 0.69.5 and 0.69.6 pushed on March 22 without GitHub releases or tags and containing indicators of compromise linked to the…
The Hacker News -
International police Operation Alice take down 373,000 dark web sites exploiting children
Operation Alice, an international law enforcement operation, shut down what authorities described as one of the largest dark web scams, uncovering over 373,000 fake sites luring users seeking child sexual abuse material. The operation, first investigated in…
Security Affairs -
A week in security (March 16 – March 22)
A week in security covers March 16 to March 22, with Malwarebytes Labs compiling a round-up published on March 23, 2026. According to Malwarebytes Labs, the week included reports such as NYC lawmakers seeking limits on biometric tracking, a warning that a…
Malwarebytes -
Hackers Exploit CVE-2025-32975 (CVSS 10.0) to Hijack Unpatched Quest KACE SMA Systems
Threat actors are suspected of exploiting the maximum-severity vulnerability CVE-2025-32975 (CVSS 10.0) to hijack unpatched Quest KACE Systems Management Appliance (SMA) systems, according to Arctic Wolf. The cybersecurity firm said it observed malicious…
-
Oracle Releases Emergency Patch for Critical Identity Manager Vulnerability
Oracle has released out-of-band patches for a critical vulnerability, CVE-2026-21992, affecting its Identity Manager and Web Services Manager products, part of the Fusion Middleware suite. The flaw can be exploited by an unauthenticated attacker to achieve…
-
ISC Stormcast For Monday, March 23rd, 2026 https://isc.sans.edu/podcastdetail/9860, (Mon, Mar 23rd)
According to SANS™ Internet Storm Center, ISC Stormcast for Monday, 23 March 2026 notes a threat level of green. The diary entry repeatedly promotes a forthcoming class titled Application Security: Securing Web Apps, APIs, and Microservices, to be held in…
SANS ISC
