News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 31 Mar· 55 articles
-
Dutch Ministry of Finance takes treasury systems offline amid cyber incident investigation
On 31 March 2026, the Dutch Ministry of Finance took several systems offline after detecting a cyberattack that began around 19 March. According to Dutch Ministry of Finance, access to the treasury banking portal was blocked and this affected approximately…
Security Affairs -
The AI Arms Race – Why Unified Exposure Management Is Becoming a Boardroom Priority
The Hacker News explains that the AI arms race is accelerating not just in volume of threats but in speed, with threat actors using AI to automate the entire kill chain and chain attack paths more quickly than ever before. In response, unified exposure…
The Hacker News -
StrongSwan Flaw Allows Unauthenticated Attackers to Crash VPNs
A high-severity vulnerability in StrongSwan’s EAP-TTLS AVP parser could be exploited remotely, without authentication, to take VPN services offline, SecurityWeek reports. The issue is an integer underflow that occurs when parsing AVP length values, leading…
SecurityWeek -
Lloyds Data Security Incident Impacts 450,000 Individuals
Lloyds Banking Group has disclosed a data security incident affecting close to 450,000 of its mobile banking users. The issue occurred on 12 March and was caused by a faulty software update that exposed transaction details from some users’ current accounts…
SecurityWeek -
Employee Data Breaches Surge to Seven-Year High
Authorities reported that breaches of employee data to the Information Commissioner’s Office (ICO) reached a seven-year high, with 3872 incidents in 2025, a 5% rise on the previous year. According to Nockolds, who described the shift in the threat landscape,…
Infosecurity -
Double Agents: Exposing Security Blind Spots in GCP Vertex AI
A Unit 42 investigation into Google Cloud Platform’s Vertex AI reveals how misconfigured agents can become “double agents” that exfiltrate data and widen access across an organisation. The researchers deployed an AI agent using Google Cloud ADK and found…
unit42.paloaltonetworks.com -
Axios npm Hijack 2026: Everything You Need to Know – IOCs, Impact & Remediation
On 31 March 2026, a threat actor hijacked the npm account of Axios lead maintainer jasonsaayman and published two malicious Axios versions, which contained a hidden dependency that silently installed a cross-platform Remote Access Trojan (RAT) the moment npm…
SOCRadar -
U.S. CISA adds a flaw in Citrix NetScaler to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Citrix NetScaler flaw, tracked as CVE-2026-3055, to its Known Exploited Vulnerabilities (KEV) catalogue, with a CVSS score of 9.3. The vulnerability is an out-of-bounds read caused…
-
NCSC Urges Immediate Patching of F5 BIG-IP Bug
According to The National Cyber Security Centre (NCSC), UK organisations have been urged to immediately patch a critical vulnerability in F5’s BIG-IP Access Policy Manager (APM) that is currently under active exploitation. The NCSC said it is still working…
-
Application Control Bypass for Data Exfiltration, (Tue, Mar 31st)
According to Xavier Mertens, the diary describes a simple exfiltration proof-of-concept that bypasses App-ID based traffic classification on next‑generation firewalls by sending data in many small TCP chunks rather than a single large transfer. The scenario…
SANS ISC -
Qilin Ransomware allegedly breached chemical manufacturer giant Dow Inc
Qilin Ransomware group allegedly breached Dow Inc, listing the chemical manufacturer on its Tor data leak site, though no proof of the hack has been released yet, according to Pierluigi Paganini. Dow Inc is described as a global chemical manufacturing giant…
Security AffairsQilin -
Critical Vulnerability in OpenAI Codex Allowed GitHub Token Compromise
Researchers uncovered a critical vulnerability in OpenAI Codex that could have allowed GitHub tokens to be compromised, with tokens tied to repositories, workflows and private code. The weakness arose from improper input sanitisation in how Codex processed…
SecurityWeek -
Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account
Axios, a widely used HTTP client, was affected by a supply-chain attack after two newly published npm versions introduced a malicious dependency, plain-crypto-js version 4.2.1, as a fake dependency in Axios versions 1.14.1 and 0.30.4. According to…
The Hacker News -
ISC Stormcast For Tuesday, March 31st, 2026 https://isc.sans.edu/podcastdetail/9872, (Tue, Mar 31st)
ISC Stormcast for Tuesday, March 31st, 2026 is presented with a threat level of green and lists Handler on Duty as Xavier Mertens. The page includes links to the podcast detail at Sans Secure, as well as an invitation to click through to learn more about…
SANS ISC -
axios Compromised on npm - Malicious Versions Drop Remote Access Trojan
According to StepSecurity, on 31 March 2026 two malicious npm releases of axios, axios@1.14.1 and axios@0.30.4, were published using the compromised credentials of a lead axios maintainer, with the maintainer’s account email changed to a ProtonMail address.…
StepSecurity
