News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 25 Mar· 57 articles
-
Russian Hacker Sentenced to 2 Years for TA551 Botnet-Driven Ransomware Attacks
According to The U.S. Department of Justice, a Russian national has been sentenced to two years in prison for managing a botnet used to launch ransomware attacks against U.S. companies. Ilya Angelov, 40, of Tolyatti, Russia, who went by the online aliases…
The Hacker NewsGOLD CABIN -
Device Code Phishing Hits 340+ Microsoft 365 Orgs Across Five Countries via OAuth Abuse
Cybersecurity researchers have flagged an active device code phishing campaign targeting Microsoft 365 identities across more than 340 organisations in the United States, Canada, Australia, New Zealand, and Germany. The activity was first spotted on 19…
The Hacker News -
FCC targets foreign router imports amid rising cybersecurity concerns
According to the Federal Communications Commission, the U.S. will ban importing new foreign-made consumer routers unless they receive special approval from the Department of Homeland Security or defence authorities, with routers added to the Covered List and…
Security Affairs -
Anatomy of a Cyber World Global Report 2026
The Anatomy of a Cyber World Global Report 2026 from Kaspersky Security Services outlines a global view of MDR and IR activity, with the CIS accounting for 34.7 percent of customers, the Middle East for 20.1 percent, and Europe for 18.6 percent. In 2025, the…
securelist.com -
Experts Sound Alarm Over “Prompt Poaching” Browser Extensions
Security experts warn of malicious Chrome extensions that secretly monitor and exfiltrate users’ AI conversations, according to Expel. Expel explained in a blog post published on 24 March that it had observed “several dozen” incidents in the past month of…
Infosecurity -
Romania Under DDoS Attacks: Weekly DDoS Threat Intelligence Analysis
Between March 17 and 23, 2026, NoName057(16) conducted its most intensive weekly DDoS campaign in the current cycle, generating 13,716 attack instances across 148 unique targets and 134 unique IP addresses. Romania emerged as the primary target with 64.5% of…
SOCRadar -
Cybercrime group Lapsus$ claims the hack of pharma giant AstraZeneca
Cybercrime group Lapsus$ claims it hacked AstraZeneca, stating it stole about 3GB of data, including credentials, tokens, internal code repositories (Java, Angular, Python), and employee information. The company has not yet confirmed the breach or publicly…
Security AffairsLAPSUS -
Meet Khaled Mohamed: the bug hunter who found a Microsoft flaw
Khaled Mohamed, a 23-year-old security engineer and founder of SecBound, is the bug bounty hunter who identified a flaw in Microsoft Authenticator for iOS and Android, tracked as CVE-2026-26123. He reports that the vulnerability could allow a malicious app…
-
Operation Henhouse Nets Over 500 Arrests in UK Fraud Crackdown
Operation Henhouse nets over 500 arrests in UK fraud crackdown, with the latest iteration led by the National Crime Agency (NCA) and City of London Police, according to the NCA. Police arrested over 500 suspects and moved to seize and freeze millions…
Infosecurity -
US Prisons Russian Access Broker for Aiding Ransomware Attacks
Aleksei Volkov, a Russian national, has been sentenced to 81 months in prison for his role in Yanluowang ransomware attacks, according to The US Justice Department. He served as an initial access broker, gaining entry to target organisations’ networks and…
SecurityWeek -
Malicious LiteLLM versions linked to TeamPCP supply chain attack
Malicious LiteLLM versions 1.82.7 and 1.82.8 were backdoored, most likely through a Trivy CI/CD breach, and subsequently removed from PyPI, according to Endor Labs’ report. Endor Labs attributes the compromise to TeamPCP with high confidence, noting a…
Security AffairsTeamPCP -
HackerOne Employee Data Exposed in Massive Navia Breach
SecurityWeek reports that HackerOne is notifying nearly 300 employees that their personal information was exposed in a data breach affecting Navia Benefit Solutions. Navia revealed that it found unauthorised access to its systems on 23 January, with the…
SecurityWeek -
FCC Bans New Foreign-Made Routers Over Supply Chain and Cyber Risk Concerns
According to BBC News, the US Federal Communications Commission has banned the import of new foreign-made consumer routers, citing supply chain and cyber risk concerns and describing these as unacceptable threats to national security. The move means that new…
The Hacker News -
Iran Hacktivists Make Noise but Have Little Impact on War
Iran-aligned hacktivist groups have generated noise but little demonstrable impact in the Gulf conflict, with researchers noting a gap between bold claims and verifiable outcomes. Since 28 February 2026, when the ayatollah was assassinated, Bitdefender data…
Dark Reading -
ISC Stormcast For Wednesday, March 25th, 2026 https://isc.sans.edu/podcastdetail/9864, (Wed, Mar 25th)
According to ISC Stormcast For Wednesday, March 25th, 2026, the threat level at the Internet Storm Center remains green. The diary notes that the Handler on Duty is Brad Duncan. It also references a forthcoming training opportunity titled Application…
SANS ISC -
SmartApeSG campaign pushes Remcos RAT, NetSupport RAT, StealC, and Sectop RAT (ArechClient2), (Wed, Mar 25th)
The diary entry by Brad Duncan discusses the SmartApeSG campaign's use of multiple Remote Access Trojans (RATs), specifically Remcos RAT, NetSupport RAT, StealC, and Sectop RAT (ArechClient2). The timeline of the campaign indicates that post-infection…
SANS ISC -
Guidance for detecting, investigating, and defending against the Trivy supply chain compromise
On 19 March 2026, Trivy, Aqua Security’s widely used open-source vulnerability scanner, was reported to have been compromised in a sophisticated CI/CD-focused supply chain attack. The campaign, a claim attributed to the threat actor identifying as TeamPCP,…
Microsoft
