News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Thu 26 Mar· 49 articles
-
Converging Interests: Analysis of Threat Clusters Targeting a Southeast Asian Government
Unit 42 researchers uncovered a three-cluster cyberespionage campaign targeting a Southeast Asian government entity, beginning with Stately Taurus activity on 1 June 2025 and continuing through 15 August 2025, with USBFect propagating the PUBLOAD backdoor.…
unit42.paloaltonetworks.com -
Langflow2 articles this day · Dark Reading first
U.S. CISA adds a Langflow flaw to its Known Exploited Vulnerabilities catalog · Critical Flaw in Langflow AI Platform Under Attack
-
U.S. CISA adds a Langflow flaw to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical flaw in the Langflow tool, tracked as CVE-2026-33017, to its Known Exploited Vulnerabilities catalog. This vulnerability, scoring 9.3 on the CVSS scale, allows attackers to…
-
Critical Flaw in Langflow AI Platform Under Attack
A critical vulnerability in Langflow, an open source framework for AI agent development, has been exploited in the wild shortly after its disclosure. The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-33017, a critical code injection…
-
-
Internet Yiff Machine: We hacked 93GB of "anonymous" crime tips
Hackers calling themselves the Internet Yiff Machine released 93GB of data they claim was stolen from P3 Global Intel’s tip-taking system, used by Crime Stoppers programmes and law enforcement. The archive, which Straight Arrow News notes contains extensive…
Ars Technica -
Is the FCC's Router Ban the Wrong Fix?
According to the FCC, a March 23 decision to add foreign-made routers to its national security risk list could ironically leave US consumers and small businesses more exposed in the long term. The move effectively bans the import of new consumer-grade…
Dark Reading -
Automotive Cybersecurity Threats Grow in Era of Connected, Autonomous Vehicles
Automotive cybersecurity threats have grown alongside increasingly connected and autonomous vehicles, a theme underscored at RSAC Conference in San Francisco where experts recalled the 2015 Jeep Cherokee hack that allowed researchers to remotely take control…
Dark Reading -
DomainTools Investigations | SecuritySnack - OpenAI Anti-Ads Malware
According to SecuritySnack, researchers found a malicious Chrome extension named “ChatGPT Ad Blocker” on the Google Chrome Web Store that is linked to the GitHub ID krittinkalra and masquerades as an ad blocker while primarily harvesting ChatGPT…
dti.domaintools.com -
Coruna exploit reveals evolution of Triangulation iOS exploitation framework
Kaspersky researchers have found that the Coruna iOS exploit kit uses an updated version of the same kernel exploit seen in the 2023 Operation Triangulation campaign, suggesting a possible link between the two despite shared vulnerabilities not proving the…
Security Affairs -
Tracking & Detecting GhostSocks Malware
Phantom Footprints: Tracking GhostSocks Malware describes GhostSocks as an emerging threat that turns compromised devices into residential proxy nodes to help attackers evade detection, with its growing use seen alongside Lumma Stealer. According to…
darktrace.com -
China-Linked Red Menshen Uses Stealthy BPFDoor Implants to Spy via Telecom Networks
A China-nexus threat actor group, Red Menshen, is linked to an ongoing campaign that has embedded itself in telecom networks to spy on government targets, according to The Hacker News. Rapid7 described the covert access mechanisms as “some of the stealthiest…
The Hacker News -
Infiniti Stealer: a new macOS infostealer using ClickFix and Python/Nuitka
The article discusses a new macOS infostealer called "Infiniti Stealer", initially tracked as "NukeChain". This malware utilizes a ClickFix method, tricking users into executing commands through social engineering rather than exploiting software…
Malwarebytes -
Aquasecurity Trivy2 articles this day · SANS ISC first
CISA Adds CVE-2026-33634 to Known Exploited Vulnerabilities Catalogue · TeamPCP Supply Chain Campaign: Update 001 ? Checkmarx Scope Wider Than Reported, CISA KEV Entry, and Detection Tools Available, (Thu, Mar 26th)
-
CISA Adds CVE-2026-33634 to Known Exploited Vulnerabilities Catalogue
CISA has added CVE-2026-33634 to its Known Exploited Vulnerabilities catalogue. The entry covers Aquasecurity Trivy, a widely deployed open-source vulnerability scanner used in containerised and cloud-native CI/CD pipelines. The Aquasecurity Trivy Embedded…
-
TeamPCP Supply Chain Campaign: Update 001 ? Checkmarx Scope Wider Than Reported, CISA KEV Entry, and Detection Tools Available, (Thu, Mar 26th)
The update to the TeamPCP supply chain campaign reveals that the Checkmarx ast-github-action compromise was far broader than publicly reported, with all 91 published tags overwritten from v0.1-alpha through v2.3.32, not just a single version. According to…
-
-
Security Researchers Sound the Alarm on Vulnerabilities in AI-Generated Code
Researchers have warned that AI-generated code is introducing a growing wave of vulnerabilities, with Claude Code featuring prominently in new CVEs. In March 2026, at least 35 new CVEs were disclosed directly as a result of AI-generated code, up from six in…
Infosecurity -
Attackers Rapidly Weaponize Critical Oracle WebLogic RCE, Honeypot Study Finds
A critical Oracle WebLogic vulnerability, CVE-2026-21962, was weaponised almost immediately after public exploit code became available, according to a new honeypot-based analysis covering attack activity between 22 January and 3 February 2026. The CloudSEK…
-
State of AI Cybersecurity 2026: 92% of Security Pros Concerned About AI Agents
The State of AI Cybersecurity 2026 report (published on 26 March 2026) reveals that 92% of security leaders are concerned about the use of AI agents across the workforce and their impact on security, highlighting how AI is now embedded in day-to-day…
darktrace.com -
How Organizations Can Use Blunders to Level Up Their Security Programs
RSAC 2026 in San Francisco highlighted that organisations keep repeating common cybersecurity mistakes, including ports exposed to the Internet, weak or reused passwords, patching gaps, and insufficient logging and monitoring. According to Megan Benoit, lead…
Dark Reading -
EtherRAT Techniques Bypass Security Via Ethereum Smart Contracts
A new EtherRAT malware campaign has been identified that uses Ethereum smart contracts to hide its command-and-control infrastructure. According to a new advisory published by eSentire, the activity was observed during a March 2026 incident response…
Infosecurity -
AI-Powered Dependency Decisions Introduce, Ignore Security Bugs
New research from Sonatype shows that frontier AI models often produce faulty or fabricated recommendations for software dependencies, a problem for organisations relying on AI for upgrades and patches. The study analysed 36,870 unique dependency upgrade…
Dark Reading -
Hightower Holding Data Breach Impacts 130,000
Hightower Holding, the parent company of Hightower Advisors, is notifying over 130,000 individuals of a data breach after attackers exfiltrated files from its environment on 8–9 January 2026, with the incident disclosed in late March 2026. SecurityWeek…
SecurityWeek -
BIND Updates Patch High-Severity Vulnerabilities
Internet Systems Consortium (ISC) on Wednesday rolled out a fresh round of BIND 9 updates to resolve four vulnerabilities, including two high-severity bugs. Tracked as CVE-2026-3104 and CVE-2026-1519, the first can cause memory leaks in BIND resolvers when…
-
AI Becomes the Top Cybersecurity Priority for Defenders as Criminals Exploit It, PwC Warns
According to PwC's Annual Threat Dynamics 2026 report, cyber criminals have embraced AI as a core component of campaigns, with AI enabling even low-level hackers to conduct more sophisticated and prolific attacks. The report, published on 25 March 2026,…
Infosecurity -
Claude Extension Flaw Enabled Zero-Click XSS Prompt Injection via Any Website
Cybersecurity researchers disclosed a vulnerability in Anthropic's Claude Google Chrome Extension that could allow zero-click prompt injection simply by visiting any webpage. The flaw stems from two issues: an overly permissive origin allowlist that would…
The Hacker News -
GlassWorm attack installs fake browser extension for surveillance
GlassWorm hides inside developer tools and, once in, steals data, installs remote access malware, and even a fake browser extension to monitor activity. It starts with developers by compromising packages from code repositories such as npm, GitHub and PyPI,…
Malwarebytes -
Chinese Hackers Caught Deep Within Telecom Backbone Infrastructure
According to Rapid7, a China-linked state-sponsored threat actor has deployed kernel implants and passive backdoors deep within telecom backbone infrastructure worldwide for long-term persistence. The operation combines stealthy components, including…
SecurityWeek -
A one-line Kubernetes fix that saved 600 hours a year
According to The Cloudflare Blog, a one-line change to Kubernetes fsGroupChangePolicy dramatically cut restart times for Atlantis, the tool Cloudflare uses to plan and apply Terraform changes. The underlying problem was that the Kubernetes default would…
Cloudflare -
How to Detect Brand Impersonation Attacks Early: A Step by Step Monitoring Guide
Brand impersonation usually starts inconspicuously, with lookalike domains, copied login pages, fake social profiles or rogue mobile apps that appear credible before security teams spot them. The guide emphasises that early detection relies on continuous…
SOCRadar -
Cisco Patches Multiple Vulnerabilities in IOS Software
Cisco has released patches for a dozen high- and medium-severity vulnerabilities in IOS and IOS XE, with the flaws potentially causing denial-of-service, secure boot bypass, information disclosure, and privilege escalation. The publicly disclosed issues,…
-
OpenAI Expands Bug Bounty to Cover AI Abuse and 'Safety' Concerns
OpenAI has launched a new bug bounty programme to engage researchers in addressing AI abuse and safety risks across its products, with the Safety Bug Bounty announced on 26 March 2026 and hosted on Bugcrowd. It sits alongside the existing Security Bug…
Infosecurity -
Intermediaries Driving Global Spyware Market Expansion
Intermediaries driving the global spyware market expansion are enabling government and private entities to circumvent transparency rules, according to a March 18 Atlantic Council report cited by Dark Reading. The piece notes that third‑party resellers,…
Dark Reading -
OpenCode Systems OC Messaging and USSD Gateway
According to CISA, the ICS Advisory ICSA-26-085-02 covers OpenCode Systems OC Messaging and USSD Gateway, released on 26 March 2026. The advisory states that successful exploitation by an authenticated low-privileged user could allow access to SMS messages…
-
WAGO GmbH & Co. KG Industrial Managed Switches
According to CISA, the ICS Advisory ICSA-26-085-01 warns that an unauthenticated remote attacker can exploit a hidden function in the CLI prompt to escape the restricted interface, resulting in full compromise of WAGO GmbH & Co. KG Industrial Managed…
-
PTC Windchill Product Lifecycle Management
According to CISA, the ICS Advisory ICSA-26-085-03 concerns PTC Windchill Product Lifecycle Management and was released on 26 March 2026. The advisory notes that successful exploitation could allow an attacker to achieve remote code execution through…
-
Masters of Imitation: How Hackers and Art Forgers Perfect the Art of Deception
The article draws a parallel between the art forgeries of Elmyr de Hory and modern cyber deception, arguing that the same pressures of imitation and provenance apply to defenders as they do to connoisseurs. It notes that during the 1960s de Hory passed…
The Hacker News -
ThreatsDay Bulletin: PQC Push, AI Vuln Hunting, Pirated Traps, Phishing Kits & 20 More Stories
The article from The Hacker News discusses various topics in the cybersecurity landscape, including the implementation of Post-Quantum Cryptography (PQC), advancements in AI vulnerability hunting, and the risks associated with pirated software and phishing…
The Hacker News -
Researchers uncover WebRTC skimmer bypassing traditional defenses
Researchers have unveiled a new WebRTC-based skimmer that avoids traditional security controls by using WebRTC DataChannels to load its malicious payload and exfiltrate payment data, bypassing standard protections more effectively than conventional skimmers,…
Security Affairs -
Coruna iOS Kit Reuses 2023 Triangulation Exploit Code in New Mass Attacks
Coruna iOS Kit reuses 2023 Triangulation exploit code in new mass attacks, according to new findings from Kaspersky. The kernel exploit at the core of Coruna is an updated version of the same exploits used in Operation Triangulation, with five full iOS…
-
Stop Guessing and Prove Your Defences Work
According to The Hacker News, a webinar titled Exposure-Driven Resilience: Automate Testing to Validate & Improve Your Security Posture offers a practical session on stopping guesswork and proving your defence by validating it against real attacker…
The Hacker News -
An AI gateway designed to steal your data
A Securelist report details a supply‑chain incident in March 2026 where attackers trojanised the Python library LiteLLM by injecting malicious code into two PyPI releases, litellm==1.82.7 and litellm==1.82.8, uploaded on 24 March 2026. The malware targeted…
securelist.com -
Iran-Linked Pay2Key Ransomware Group Re-Emerges
Security experts have warned that an Iranian ransomware group has returned with enhanced evasion, execution and anti-forensics capabilities. A new report from Halcyon and Beazley Security warned that recent US-Iran tensions appear to have accelerated…
Infosecurity
