News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 24 Mar· 62 articles
-
Threat Brief: Recruiting Scheme Impersonating Palo Alto Networks Talent Acquisition Team
Threat Brief: Recruiting Scheme Impersonating Palo Alto Networks Talent Acquisition Team, published by Unit 42, notes that since August 2025 attackers have impersonated Palo Alto Networks recruitment staff to target senior‑level professionals. The campaigns…
unit42.paloaltonetworks.com -
Checkmarx KICS Code Scanner Targeted in Widening Supply Chain Hit
Checkmarx disclosed that attackers had compromised a version of KICS, the open source static code analysis project it develops, after broad supply-chain intrusions targeted several of its tools. The attackers infiltrated the KICS GitHub Action used in CI/CD…
Dark Reading -
How AI Coding Tools Crushed the Endpoint Security Fortress
Security researchers warn that AI coding assistants are eroding the long-standing endpoint fortress built over two decades of OS hardening, EDR and browser isolation, by demanding access to local files and configurations on developers’ machines. Oded Vanunu,…
-
RSA Conference: UK NCSC Head Urges Industry to Develop Vibe Coding Safeguards
According to the UK's National Cyber Security Centre, the head of the agency, Richard Horne, urged security professionals at RSA Conference to “seize the disruptive vibe coding opportunity” to make software more secure, while stressing the need for rapid…
Infosecurity -
Florida Medicare members’ data exposed as Mirra Health improperly outsourced records overseas
Florida Medicare members’ data was exposed as Mirra Health improperly outsourced records overseas, with state investigators asserting the breach jeopardised the safety of thousands of Floridians. According to the Florida Office of Insurance Regulation, Mirra…
DataBreaches -
DoE Publishes 5-Year Energy Security Plan
The DoE’s Office of Cybersecurity, Energy Security, and Emergency Response (CESER) has published a five-year plan for 2026 to 2030, centred on three main goals: developing “world-class” security technologies, hardening the US energy infrastructure, and…
SecurityWeek -
Data breach at Dutch Ministry of Finance impacts staff following cyberattack
The Dutch Ministry of Finance disclosed a cyberattack that was detected on 19 March 2026, after a third‑party alert, with attackers breaching some internal systems and impacting a portion of its employees. According to Dutch Ministry of Finance, unauthorized…
Security Affairs -
50 Israeli companies ‘digitally erased’
On 9 March 2026 the Jerusalem Post reported that the Israel National Cyber Directorate had received a growing number of reports of cyberattacks aimed at destroying information and systems to disrupt the functioning of the home front economy, and that…
DataBreaches -
Why Agentic AI Systems Need Better Governance – Lessons from OpenClaw
Agentic AI systems are moving from passive recommendations to autonomous actions that touch real systems, and Governance frameworks are being urged to keep pace with visibility, access control and behavioural monitoring to manage the expanded attack surface.…
SecurityWeek -
TeamPCP Backdoors LiteLLM Versions 1.82.7–1.82.8 Likely via Trivy CI/CD Compromise
TeamPCP, the threat actor behind the Trivy and KICS compromises, has now infected a popular Python package named litellm, pushing two malicious versions that carry a credential harvester, a Kubernetes lateral movement toolkit, and a persistent backdoor.…
The Hacker News -
Family of UMMC patient speaks out after cyberattack during lifesaving surgery
According to WBAL, a Mississippi family is speaking out for the first time after a cyberattack disrupted operations at a major hospital system in the middle of a lifesaving surgery. At the University of Mississippi Medical Center, patient Wade Watts was…
DataBreaches -
243,000 French Public School Employees Victims of Hack
According to La Revue Technique, a cyberattack on a French Education Ministry HR system exposed personal information tied to roughly 243,000 public education employees, most of them teachers. The breach hit a platform called Compas, used to manage…
DataBreaches -
Poland Faced a Surge in Cyberattacks in 2025, Including a Major Assault on the Energy Sector
According to the Associated Press, Poland experienced 2½ times more cyberattacks in 2025 than the previous year, with the total reaching 270,000 attacks. The December attack included a destructive infiltration of the energy system, hitting a combined heat…
SecurityWeek -
Tax Search Ads Deliver ScreenConnect Malware Using Huawei Driver to Disable EDR
A large-scale malvertising campaign active since January 2026 has been observed targeting U.S.-based individuals searching for tax-related documents to deliver rogue installers for ConnectWise ScreenConnect that drop a tool named HwAudKiller to blind…
The Hacker News -
Governing AI agent behavior: Aligning user, developer, role, and organizational intent
Governing AI Agent Behavior explores how AI agents can follow user instructions while remaining within the boundaries of developer, role-based, and organizational intent. The piece outlines four layers of intent—user, developer, role-based, and…
techcommunity.microsoft.com -
Hackers Use Fake Resumes to Steal Enterprise Credentials and Deploy Crypto Miner
A French-speaking phishing campaign is targeting corporate environments with fake resumes that lead to the deployment of cryptocurrency miners and information stealers, according to Securonix researchers Shikha Sangwan, Akshay Gaikwad, and Aaron Beardslee in…
The Hacker News -
Silver Fox Cyber Campaigns Show Shift Toward Dual Espionage
The Infosecurity piece, dated 24 March 2026, notes that campaigns linked to the Silver Fox intrusion group show a shift toward dual espionage and financially motivated activity between 2025 and 2026. The campaigns were observed by cybersecurity firm Sekoia,…
Infosecurity -
RSAC 2026 Conference Announcements Summary (Day 1)
RSAC 2026 Conference Announcements Summary (Day 1) captures a flood of product and strategy updates as vendors unveil their latest security innovations in San Francisco. Highlights include Acalvio releasing 360 Deception, a framework aimed at disrupting…
SecurityWeek -
Citrix NetScaler3 articles this day · Security Affairs first
Citrix Urges Immediate Patching for Critical NetScaler Vulnerabilities · CVE-2026-3055: NetScaler Memory Disclosure Puts SAML-Enabled Edge Devices at Risk
-
Citrix Urges Immediate Patching for Critical NetScaler Vulnerabilities
According to Infosecurity Magazine, Citrix has released a new critical security bulletin addressing two vulnerabilities in NetScaler ADC and NetScaler Gateway. The first, CVE-2026-3055, is a critical out-of-bounds read (CVSS v4.0 9.3) caused by insufficient…
-
CVE-2026-3055: NetScaler Memory Disclosure Puts SAML-Enabled Edge Devices at Risk
Citrix has released fixes for two NetScaler vulnerabilities that security teams should review promptly: CVE-2026-3055, described as a critical memory overread, and CVE-2026-4368, a race condition that can cause user session mix-ups, with both affecting…
-
Citrix NetScaler critical flaw could leak data, update now
Citrix has issued security updates for two NetScaler vulnerabilities, including a critical memory overread tracked as CVE-2026-3055, which can allow unauthenticated attackers to leak sensitive data from the appliance memory when NetScaler is configured as a…
-
-
QualDerm Partners December 2025 data breach impacts over 3 Million people
Over 3.1 million people were affected by a December 2025 data breach at QualDerm Partners, with personal, medical and health insurance information exposed. The company said it detected unauthorized activity on 24 December 2025, after uncovering access to a…
Security Affairs -
GitHub 'OpenClaw Deployer' Repo Delivers Trojan Instead
An AI-assisted campaign is distributing more than 300 poisoned GitHub packages masquerading as an OpenClaw deployment tool, designed to lure developers and gamers into installing a Trojanised LuaJIT payload. Identified by Netskope Threat Labs, the…
Dark Reading -
Navigating the Secure Networks Act: What Restricted Equipment Means for Your Organization
According to the Federal Communications Commission, the Secure Networks Act directs the FCC to publish a Covered List of equipment and services deemed to pose an unacceptable national security risk. In March 2026, the FCC expanded its Covered List to include…
SOCRadar -
New Npm 'Ghost Campaign' Uses Fake Install Logs to Hide Malware
A new malicious npm campaign, dubbed the “Ghost campaign,” has been identified by security researchers as using fake installation logs to hide malware activity. The attacks, discovered by ReversingLabs, involve malicious packages that mimic legitimate…
Infosecurity -
litellm: Credential Stealer Hidden in PyPI Wheel
On 24 March 2026, a critical supply chain compromise was identified in litellm==1.82.8: the PyPI package contains a malicious litellm_init.pth file that auto-executes a multi-stage credential stealer every time the Python interpreter starts. The malicious…
StepSecurity -
Former Ukrainian Foreign Minister Dmytro Kuleba to Address the New Cyber Frontline at Infosecurity Europe
Infosecurity Europe has announced former Ukrainian Minister of Foreign Affairs Dr. Dmytro Kuleba as the headline keynote for its 2026 conference programme, which runs from 2–4 June at ExCeL London, according to Infosecurity Magazine News Team. Kuleba will…
Infosecurity -
Detecting IP KVMs, (Tue, Mar 24th)
Rogue IP KVMs are highlighted as another risk factor in the realm of IP-based remote access, with the author noting criminals already exploit these devices. For example, North Koreans were described as using KVMs to remotely connect to laptops located in the…
SANS ISC -
Extortion Group Claims It Hacked AstraZeneca
The SecurityWeek report on 24 March 2026 states that the extortion group Lapsus$ has boasted on an underground forum about hacking AstraZeneca and stealing roughly 3GB of data. The hackers say they exfiltrated credentials and tokens, internal code…
SecurityWeek -
FBI, CISA warn of Russian hackers hijacking Signal and WhatsApp accounts
According to Public Service Announcement (PSA) the FBI and the Cybersecurity and Infrastructure Security Agency (CISA) warn of ongoing Russian-linked phishing campaigns aimed at hijacking Signal and WhatsApp accounts. The campaigns target senior officials,…
Malwarebytes -
Chrome 146 Update Patches High-Severity Vulnerabilities
According to Google, Chrome 146 update patches eight high-severity memory safety vulnerabilities across seven components, with fixes rolled into Chrome versions 146.0.7680.164/165 for Windows and macOS, and 146.0.7680.164 for Linux. The advisory highlights…
-
How a Large Bank Uses AI Digital Twins for Threat Hunting
Salt Typhoon, also known as Earth Estries, has been spying on high-value government and telecommunications targets for years and recently unveiled a fresh backdoor named GhostSpider. The group is described as among the PRC’s most cutting-edge APTs, with…
Dark Reading -
How a Large Bank Uses AI Digital Twins for Threat Hunting
JPMorgan Chase is deploying an AI-powered system of digital fingerprints and digital twins to aid threat hunting, with the aim of spotting online attackers and anomalous behaviour while cutting noisy alerts. The bank currently uses digital fingerprints and…
Dark Reading -
Enterprise Cybersecurity Software Fails 20% of the Time, Warns Absolute Security
End point cybersecurity software fails to protect one in five enterprise devices, according to Absolute Security, leaving organisations exposed to cyber threats. The 2026 Resilience Risk Index, published on 23 March, analysed device‑level telemetry across…
Infosecurity -
Sandboxing AI agents, 100x faster
Cloudflare’s Dynamic Workers introduce a lean sandbox called the Dynamic Worker Loader, which lets a Cloudflare Worker instantiate a new, isolated Worker with runtime-provided code, all on the fly. The feature is in open beta and available to all paid…
Cloudflare -
Self-propagating malware poisons open source software and wipes Iran-based machines
A new hacking group, known as TeamPCP, has been conducting a persistent campaign that spreads a self-propagating backdoor and a data wiper targeting Iranian machines. The worm, which is able to spread via compromised npm packages, infected 28 packages in…
Ars Technica -
Foster City goes offline after cybersecurity breach
According to The Daily Journal, Foster City’s network has been moved offline days after a cybersecurity breach that was “widely impacting city services,” disrupting phone and email systems outside of emergency response. City staff cannot make or receive…
DataBreaches -
Microsoft Proposes Better Identity, Guardrails for AI Agents
Microsoft has unveiled a bundle of measures to secure agentic AI and curb autonomous activity, including guardrails for AI models and new identity controls. At RSAC, it announced a preview feature in Microsoft Foundry to create guardrails and revealed…
Dark Reading -
Webinar Today: Putting CIS Controls and Benchmarks into Practice
Webinar Today: Putting CIS Controls and Benchmarks into Practice explains how the CIS Critical Security Controls and the CIS Benchmarks can be used together to support secure configuration at scale. SecurityWeek notes that the event covers how teams can…
SecurityWeek -
3.1 Million Impacted by QualDerm Data Breach
Healthcare management services provider QualDerm Partners is notifying more than 3.1 million people that their personal, medical, and health insurance information was stolen in a December 2025 data breach. The incident was discovered on December 24 and…
SecurityWeek
