News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 25 Mar· 57 articles
-
At RSAC, the EU Leads While US Officials Are Sidelined
At RSAC 2026 in San Francisco, EU officials led the conversations on today’s top cybersecurity challenges as US government representatives, including the FBI, CISA, and the NSA, were notably absent. The event highlighted a stark shift from previous years,…
Dark Reading -
Florida senator sues Booz Allen over his leaked tax returns
According to DataBreaches[.]Net, Florida Senator Rick Scott is suing Booz Allen Hamilton and a former employee of the contractor who was convicted of leaking the tax returns of Trump and other wealthy individuals to The New York Times and ProPublica. The…
DataBreaches -
Apple Patches (almost) everything again. March 2026 edition., (Wed, Mar 25th)
Apple’s March 2026 patch round fixes 85 vulnerabilities across its operating systems, with none currently being exploited, according to the bulletin. The update covers the last three macOS generations and the last two iOS/iPadOS releases, while tvOS,…
-
Russian botnet operator jailed two years over $14m ransomware spree
A Russian national, Ilya Angelov, aged 40, was sentenced to 24 months in prison, fined 100,000 dollars, and faced a 1.6 million dollar money judgment for running a botnet used to carry out ransomware attacks on dozens of U.S. firms, according to the DoJ…
Security Affairs -
Illuminating VoidLink: Technical analysis of the VoidLink rootkit framework
Elastic Security Labs examine VoidLink, a Linux rootkit framework that blends a Loadable Kernel Module with an eBPF companion to achieve persistence and stealth. The analysis describes a four-generation, hybrid architecture where an LKM named vl_stealth (or…
elastic.co -
LeakBase Admin Arrested in Russia Over Massive Stolen Credential Marketplace
The alleged administrator of the LeakBase cybercrime forum has been arrested by Russian law enforcement authorities, according to TASS and MVD Media. The suspect, a resident of Taganrog, is said to have been detained for creating and managing a criminal site…
The Hacker News -
Hackers claim to have accessed data tied to millions of crime tipsters
Millions of crime tips may have been exposed after a hacker group claims to have compromised systems used by Crime Stoppers programs and other organisations worldwide. The incident centres on P3 Global Intel, a Texas-based provider of cloud-based tip and…
Malwarebytes -
Cloud Phones Linked to Rising Financial Fraud Threat
According to Group-IB, cloud phone technology has evolved from social media automation into infrastructure that supports financial crime, with the new report published on 25 March 2026 highlighting how remote Android devices hosted in data centres are used…
Infosecurity -
Blame Game: Why Public Cyber Attribution Carries Risks
Public attribution of cyberattacks is presented as a probabilistic endeavour rather than a certainty, with the article noting that it is usually “more likely than not” a particular entity was responsible and that definitive attribution is “extremely risky”…
Dark Reading -
Identity security is the new pressure point for modern cyberattacks
Identity attacks now hinge on what an identity can access, not just who is compromised, as organisations juggle human, non-human, and agentic identities across an expanding access fabric. The blog highlights fragmentation as a key problem, with 32% of…
Microsoft -
Onit Security Raises $11 Million for Exposure Management Platform
According to SecurityWeek, Israeli cybersecurity startup Onit Security has announced raising $11 million in a seed funding round led by Hetz Ventures and Brightmind Partners, with additional support from angel investors. Founded in 2025 by Elad Ben-Meir,…
SecurityWeek -
Google bumps up Q Day estimate to 2029, far sooner than previously thought
Google has narrowed its Q Day deadline, saying it will be ready by 2029, a move the company argues should spur the entire industry to accelerate migration to post-quantum cryptography. In a post, Google states it is giving itself until 2029 to prepare for…
Ars Technica -
Hackers Exploit Compromised Enterprise Identities at Industrial Scale, Warns SentinelOne
According to SentinelOne’s Annual Threat Report for 2026, cyber attackers have become so prolific at abusing legitimate enterprise accounts and identity systems that it has become a “mass-marketed impersonation crisis.” The report warns that an adversary…
Infosecurity -
Phishers Pose as Palo Alto Networks' Recruiters for Months in Job Scam
Phishers have been posing as Palo Alto Networks' recruiters in a months‑long job scam, targeting senior professionals with highly personalised phishing messages. Palo Alto Networks' Unit 42 researchers have been tracking the campaigns for the past seven…
Dark Reading -
Patch now: TP-Link Archer NX routers vulnerable to firmware takeover
According to CISA, TP-Link has patched a high-severity flaw (CVE-2025-15517) in its Archer NX router series, addressing an authentication bypass that could allow attackers to upload malicious firmware. The fix also covers multiple models, including NX200,…
-
SANS: Top 5 Most Dangerous New Attack Techniques to Watch
According to SANS Institute, the five top attack techniques for 2026 are all powered by artificial intelligence, marking a clear shift in the threat landscape. The list begins with AI-Generated Zero Days, illustrating how AI has lowered barriers for…
Dark Reading -
New FCC router ban could leave home networks less secure
The article reports that on 25 March 2026 the FCC updated its list of insecure equipment, outlining why it would stop consumer-grade routers made outside the US from being imported unless manufacturers obtain an exemption. Effectively, the ban would apply to…
Malwarebytes -
Russian Cybercriminal Gets 2-Year Prison Sentence in US
Russian cybercriminal Ilya Angelov, known online as ‘Milan’ and ‘Okart’, has been sentenced to two years in federal prison for his role in administering a botnet used to facilitate ransomware attacks, according to the DOJ. Court documents state he was part…
SecurityWeek -
GlassWorm Malware Uses Solana Dead Drops to Deliver RAT and Steal Browser, Crypto Data
Cybersecurity researchers have flagged a new evolution of the GlassWorm campaign, showing a multi-stage framework that can steal data and install a remote access trojan (RAT), including an information‑stealing Google Chrome extension masquerading as an…
The Hacker News -
AI Speeds Attacks, But Identity Remains Cybersecurity’s Weakest Link
AI is speeding attacks, but identity remains cybersecurity’s weakest link, according to PwC’s Cyber threats in motion. The SecurityWeek piece notes that Infostealers and resulting stealer logs feed initial access brokers, who sell identities to criminals,…
SecurityWeek -
Why a 'Near Miss' Database Is Key to Improving Information Sharing
Why a near-miss database could boost information sharing is the core argument of Arielle Waldman’s Dark Reading feature from RSAC 2026, where Wendy Nather and Bob Lord urged greater transparency around close calls alongside breaches. They described a near…
Dark Reading -
iOS, macOS 26.4 Roll Out With Fresh Security Patches
Apple’s latest security rollouts cover iOS, iPadOS, macOS and ancillary platforms, with iOS 18.7.7 and iPadOS 18.7.7 issued for older devices alongside macOS Sequoia 15.7.5 and macOS Sonoma 14.8.5. The headline updates, iOS 26.4 and iPadOS 26.4, landed for…
SecurityWeek -
TeamPCP’s Checkmarx GitHub Actions Attack: What You Need to Know
TeamPCP’s Checkmarx GitHub Actions Attack underscores how a supply chain compromise can cascade across ecosystems, moving from Trivy to poisoned GitHub Actions, malicious Docker images and compromised packages. The team targeted two Checkmarx GitHub Actions,…
SOCRadar -
FCC Bans New Foreign-Made Consumer Routers Over National Security Risks
The FCC has added all foreign-made consumer-grade routers to its Covered List, prohibiting their use in the US. The move follows a White House-convened interagency determination that routers produced abroad pose a threat to national security, with the…
SecurityWeek -
Recent Navia data breach impacts HackerOne employee data
Recent Navia data breach impacts HackerOne employee data, with HackerOne stating that 287 employees may have been affected, according to a filing with the Maine Attorney General Office. The breach arose from a Navia Benefit Solutions incident, which exposed…
Security Affairs -
US: FCC Bans Foreign-Made Routers Over National Security Concerns
The US Federal Communications Commission (FCC) has banned the import and sale of all “consumer-grade” internet routers produced in a foreign country, citing “an unacceptable risk” to the national security of the US. The ban, announced in an FCC public notice…
Infosecurity -
Delaware Supreme Court Reverses, Holds Cyber Insurers Sufficiently Pled Collective Subrogation Claim Resulting from Blackbaud Data Breach
Delaware Supreme Court Reverses, Holds Cyber Insurers Sufficiently Pled Collective Subrogation Claim Resulting from Blackbaud Data Breach confirms that a group of cyber liability insurers can plead a subrogation claim in the aggregate after the Blackbaud…
DataBreaches -
AI-Native Security Is a Must to Counter AI-Based Attacks
AI-native security is portrayed as essential to counter AI-based attacks, with defenders urged to use the same tools as their noised adversaries. According to Google Cloud's chief operating officer and president of security products, Francis deSouza, you’re…
Dark Reading -
TeamPCP Hits Trivy, Checkmarx, and LiteLLM in Credential Theft Campaign
According to HackRead, TeamPCP began their credential-theft campaign on 19 March 2026 by injecting a credential stealer into Trivy, a popular code-scanning tool, via poisoned updates on GitHub and OpenVSX, allowing them to steal passwords and cloud access…
DataBreaches -
Companies face difficult choices in blaming hackers for an attack
Businesses need to think carefully about when they publicly blame a threat actor for a cyberattack, as experts warned at a panel at RSAC 2026 on 25 March 2026. According to Cybersecurity Dive, the rush to attribute is a risky move because it can invite…
DataBreaches -
Utimaco Survey Finds 78% of US Companies Name Legacy Data Breaches the Top Gen AI Risk
According to a Utimaco press release, 78% of the 250 large U.S. companies surveyed say data breaches are the greatest risk associated with generative AI that must be addressed in the next 12 months, while 57% have not yet implemented countermeasures. The…
DataBreaches -
Malware on Luxembourg public sector devices was active for almost a month
Alex Stevensson reports that thousands of devices owned by the Luxembourg public sector were found to be infected with malware at the end of February, with those devices subsequently updated and secured. The security breach was confirmed on 27 February,…
DataBreaches -
Anime streaming giant Crunchyroll says hacker stole data related to customer service tickets
Crunchyroll has said a hacker stole data related to customer service tickets, with the scope reportedly limited to ticket data after an incident with a third‑party vendor. According to Recorded Future News, the company confirmed on Monday evening that the…
DataBreaches -
Handala Hackers Alleges Massive Data Breach of Tamir Pardo, Former Mossad Chief
Handala Hackers Alleges Massive Data Breach of Tamir Pardo, Former Mossad Chief was posted on 25 March 2026 by DataBreaches[.]Net, reporting that Handala released 14 gigabytes of Tamir Pardo’s personal and highly confidential documents as a proof of concept.…
DataBreaches -
Infinite Campus Security Incident Awareness: No Impact to Student Data According to Infinite Campus
The DataBreaches piece reports that the ShinyHunters’ claim of a breach affecting Infinite Campus is being treated as less concerning, as it concerned only Salesforce data and not student or employee databases. The incident involved an unauthorized access to…
DataBreaches -
RSAC 2026 Conference Announcements Summary (Day 2)
According to PR Newswire, RSAC 2026 Day 2 featured a raft of vendor announcements spanning autonomous red teaming, AI-enabled security, and cloud and data protection. Assail unveiled Ares, an autonomous red-teaming platform designed to discover, chain, and…
SecurityWeek -
TeamPCP Expands Supply Chain Campaign With LiteLLM PyPI Compromise
TeamPCP has expanded its supply-chain campaign with a new PyPI compromise tied to the LiteLLM package, a widely used Python library with more than 95 million monthly downloads. The attacked LiteLLM versions were 1.82.7 and 1.82.8, uploaded on 24 March 2026,…
Infosecurity -
The Kill Chain Is Obsolete When Your AI Agent Is the Threat
The Hacker News argues that the Kill Chain is obsolete when an AI agent itself becomes the threat, describing how an attacker who has compromised an AI agent already inside a organisation can bypass traditional detection steps. In September 2025, Anthropic…
The Hacker News -
Ex-NSA Directors Discuss 'Red Line' for Offensive Cyberattacks
Four former NSA chiefs—Tim Haugh, Paul Nakasone, Mike Rogers and Keith Alexander—gathered at RSAC 2026 to discuss the role and limits of offensive cyber in government strategy. The panel, reported by Alexander Culafi for Dark Reading, noted that the Obama…
Dark Reading -
From Trivy to Broad OSS Compromise: TeamPCP Hits Docker Hub, VS Code, PyPI
SecurityWeek reports that TeamPCP has expanded its open-source software campaign from the Trivy supply-chain attack to NPM, Docker Hub, VS Code, and PyPI, with a likely monetisation collaboration with the Lapsus$ group. The Trivy incident began with an…
SecurityWeek
