News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 24 Mar· 62 articles
-
U.S. State and Local Government Under Ransomware: 2025–2026 Trend Analysis
U.S. state and local government organisations faced persistent ransomware pressure throughout 2025 and into 2026, with attacks disrupting payments, emergency responses, and access to records across city, county, school, court, and public safety sectors.…
SOCRadar -
Scam compounds hiring “AI models” to seal the deal in deepfake video calls
Scam compounds in Southeast Asia have added another type of worker to the mix: so-called AI models, used to seal deals on deepfake video calls, Malwarebytes reports. The practice involves recruitment ads promising roles handling around a hundred live video…
Malwarebytes -
Iran Built a Vast Camera Network to Control Dissent. Israel Turned It Into a Targeting Tool
Iran has installed tens of thousands of cameras across Tehran to monitor protests and control dissent, a network that has repeatedly been hacked in recent years. The piece notes that Tehran’s cameras were compromised starting in 2021, with a senior Iranian…
SecurityWeek -
Ghost Campaign Uses 7 npm Packages to Steal Crypto Wallets and Credentials
The Ghost campaign, tracked by ReversingLabs, uses a set of seven malicious npm packages published by a user named mikilanjillo to steal cryptocurrency wallets and other credentials. The packages are react-performance-suite, react-state-optimizer-core,…
The Hacker News -
5 Learnings from the First-Ever Gartner Market Guide for Guardian Agents
On February 25, 2026, Gartner published its inaugural Market Guide for Guardian Agents, marking an important milestone for this emerging category. Guardian agents supervise AI agents, helping ensure agent actions align with goals and boundaries, according to…
The Hacker News -
81-month sentence for Russian hacker behind major ransomware campaigns
A U.S. court has sentenced Aleksei Olegovich Volkov, a Russian national, to 81 months in prison for aiding major ransomware campaigns and causing more than $9 million in damages. Arrested in Italy in 2024 and later extradited to the United States, he pleaded…
Security Affairs -
Citrix NetScaler2 articles this day · The Hacker News first
Critical Citrix NetScaler Vulnerability Poised for Exploitation, Security Firms Warn · Citrix Urges Patching Critical NetScaler Flaw Allowing Unauthenticated Data Leaks
-
Critical Citrix NetScaler Vulnerability Poised for Exploitation, Security Firms Warn
Citrix has released patches for a critical vulnerability in NetScaler ADC and NetScaler Gateway, tracked as CVE-2026-3055 (CVSS 9.3), which is an out-of-bounds read flaw that can be exploited remotely to read sensitive information from memory in deployments…
-
Citrix Urges Patching Critical NetScaler Flaw Allowing Unauthenticated Data Leaks
Citrix has released security updates to address two vulnerabilities in NetScaler ADC and NetScaler Gateway, including a critical flaw that could be exploited to leak sensitive data from the appliance. The flaws are CVE-2026-3055, with a CVSS of 9.3,…
-
-
Darktrace Launches Unified Security Awareness Training and Messaging Security
Darktrace has unveiled an integrated approach that unites human behaviour and threat detection across email, Slack, Teams, and Zoom, positioning what it calls the adaptive era of workplace security. The new offering combines a behaviour-driven training…
darktrace.com -
How the ActiveAI Security Portal Helps MSSPs and SOC Teams Transform Alert Investigation
Darktrace’s new Alerts Dashboard within the ActiveAI Security Portal is designed to streamline AI‑driven triage for MSSPs and SOC teams, bringing alerts from multiple deployments into a single, unified workspace without altering underlying architectures.…
darktrace.com -
Darktrace / OT Product Updates | 2026
Darktrace / OT’s latest release, 7.1, aims to close the operational gap for industrial organisations by enhancing architecture visibility, asset representation, and governance reporting within the OT platform. Written by Pallavi Singh, the update introduces…
darktrace.com -
Mazda Says Employee, Partner Information Stolen in Cyberattack
The Mazda data breach involved unauthorized access to a management system used for warehouse operations and occurred after security defects in the system were exploited, with the incident discovered in mid-December. According to SecurityWeek, 692 records…
SecurityWeek -
U.S. Institutions and the Dark Web: What’s Being Sold and Who’s Buying?
U.S. institutions are described as the most frequent targets in the modern Dark Web economy, which the article says operates as a highly professionalised, industrialised market for data and access. It lists what is being sold from U.S. organisations,…
SOCRadar -
Russian Initial Access Broker Handed 81-Month Sentence
A prolific initial access broker who played a key role in dozens of ransomware attacks costing victims over $9m has been sentenced to 81 months behind bars in the US, according to the Department of Justice (DoJ). Russian national Aleksei Volkov, 26, of St.…
Infosecurity -
Citing HIPAA, Groups Oppose Renewed Federal Plan to Amass Millions of Workers’ Health Data
Groups oppose renewed federal plans to amass millions of workers’ health data, arguing the proposal would enable a wholesale collection of vast amounts of granular data from health plans covering more than 8 million federal workers, including USPS employees…
DataBreaches -
The Hidden Cost of Cybersecurity Specialization: Losing Foundational Skills
Cybersecurity has changed rapidly, but the article argues that specialization without context is eroding foundational understanding. It notes that roles are more siloed and tools more advanced, yet many teams still struggle with unclear risk priorities,…
The Hacker News -
Stryker Says Malicious File Found During Probe Into Iran-Linked Attack
Stryker says a malicious file used by attackers has been identified during its probe into the Iran-linked attack, a development disclosed in a SecurityWeek update on 24 March 2026. Handala, widely believed to be a hacktivist persona linked to Iran’s Ministry…
SecurityWeek -
Handala Group Tied to Iranian Hack‑and‑Leak Operations, FBI Reveals
An Iranian government hacking collective known as the Handala group has been targeting dissidents, journalists and opposition groups in a campaign dating back to autumn 2023, according to the FBI. The group, which claimed responsibility for a recent wiper…
InfosecurityHandala -
TeamPCP Hacks Checkmarx GitHub Actions Using Stolen CI Credentials
Two more GitHub Actions workflows operated by Checkmarx were compromised by a threat actor known as TeamPCP, who used stolen CI credentials to harvest secrets from CI runners. The affected workflows are checkmarx/ast-github-action and…
-
North Korea-linked threat actors abuse VS Code auto-run to spread StoatWaffle malware
North Korea-linked threat actors, specifically Team 8, are behind the Contagious Interview campaign that spreads StoatWaffle malware by abusing Visual Studio Code projects with an auto-run tasks[.]json. Since late 2025, the group has used the editor’s…
Security AffairsTeam 8 -
U.S. Sentences Russian Hacker to 6.75 Years for Role in $9M Ransomware Damage
A 26-year-old Russian citizen, Aleksei Olegovich Volkov, was sentenced in the United States to 6.75 years (81 months) in prison for assisting major cybercrime groups, including the Yanluowang ransomware crew, in numerous attacks against U.S. companies and…
The Hacker News -
ISC Stormcast For Tuesday, March 24th, 2026 https://isc.sans.edu/podcastdetail/9862, (Tue, Mar 24th)
According to SANS™ Internet Storm Center, ISC Stormcast for Tuesday, March 24th, 2026 features a threat level of green and is presented by Handler on Duty Jim Clausing. The diary entry points readers to the podcast detail at the provided link, offering…
SANS ISC
