News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Fri 3 Apr· 49 articles
-
Job Seekers Targeted by Coca Cola and Ferrari Phishing Scams
Phishing campaigns impersonating Coca-Cola and Ferrari are being used to trap job seekers’ credentials, with Malwarebytes describing two polished campaigns that go beyond a simple fake login page. The Coca‑Cola scam starts on a Calendly scheduling page, then…
Malwarebytes -
Cherry Creek Confirms Naviance Settlement Email Real, No Breach
The Cherry Creek School District told families that some students had received a notice about a class action settlement tied to a 2024 data breach involving the web-based education platform Naviance, and that the district’s message confirmed the email was…
DataBreaches -
Healthcare Faces $98M Ransomware Demand as Payments Rise
BakerHostetler’s 2026 Data Security Incident Response Report, posted on 3 April 2026, covers the firm’s experiences representing 1,250 clients in 2025. According to BakerHostetler: The Risk Remains (Mostly) The Same, 2026. p. 10, healthcare accounted for 27%…
DataBreaches -
TeamPCP2 articles this day · Dark Reading first
Attackers breach EU Commission site via Trivy supply chain attack · TeamPCP supply chain breach hits Mercor and EU Commission clouds
2 outlets-
Attackers breach EU Commission site via Trivy supply chain attack
The European Commission is investigating a cyber attack on its websites after early findings suggested that some data were taken, with the incident affecting the cloud infrastructure that hosts the Europa[.]eu platform. On 24 March, the Commission discovered…
DataBreaches -
TeamPCP supply chain breach hits Mercor and EU Commission clouds
The piece traces how TeamPCP’s high-profile supply chain attacks are rippling across multiple fronts, with two victim organisations disclosing breaches this week. On Tuesday, AI startup Mercor said on X that it was “one of thousands of companies impacted by…
Dark Reading
-
-
Nacogdoches Memorial Hospital breach leaks data of 257000 patients
Nacogdoches Memorial Hospital has disclosed a data breach that exposed the personal information of more than 257,000 patients to hackers. The incident occurred on 31 January, or at least that is when staff became aware of the ongoing cyberattack, with a…
DataBreaches -
Apex Town Recovers 22k Residents' Data After Ransomware Order
A town in North Carolina, Apex, had data from about 22,000 residents stolen in an attempted ransomware attack in July 2024, with the data reportedly not appearing on the dark web initially. The data was uploaded to Bublup, Inc., and a temporary restraining…
DataBreaches -
Italian DPA Fines Intesa Sanpaolo €31.8M Over Insider Data Breach
According to the Italian Data Protection Authority, Intesa Sanpaolo was fined €31.8 million for a serious insider data breach that affected 3,573 customers and involved more than 6,600 unauthorized inquiries between 21 February 2022 and 24 April 2024. The…
DataBreaches -
Hasbro confirms cyberattack, warns resolution may take weeks
Hasbro, the American toy-making giant behind Transformers, Peppa Pig and Dungeons & Dragons, has confirmed a cyberattack and says it may take several weeks before the incident is resolved. The company detected an intrusion on March 28, prompting the takedown…
DataBreaches -
North Attleboro Schools Probes Network After Suspicious Activity
North Attleboro Public Schools in Massachusetts said on 3 April 2026 that it is responding to unauthorized activity on its network after what the superintendent described as a cybersecurity incident over the past several days. According to The Sun Chronicle,…
DataBreaches -
Mac users hit by Infiniti Stealer malware via ClickFix trick
Mac users face a new malware threat called Infiniti Stealer, a Mac-focused information stealer that, according to Malwarebytes, uses social engineering and is very difficult to detect once the payload is delivered. The campaign starts with a tactic known as…
DataBreaches -
North Korea linked hackers blamed for $285m Solana Drift exploit
According to Elliptic, the $285 million exploit of Solana-based Drift Protocol shows multiple indicators associated with North Korea’s state-sponsored hacking groups, based on onchain behaviour, laundering patterns and network-level signals that align with…
DataBreaches -
Wisconsin court limits employee data breach suits despite notice
On 3 April 2026, DataBreaches[.]Net reported that Wisconsin employees may find it harder to sue their employers over data breaches, due to standing rules that require victims to suffer identity theft or concrete, imminent harm rather than mere risk of future…
DataBreaches -
FBI investigates major breach of wiretap surveillance network
The FBI has described the breach of the networks it uses for wiretaps and other surveillance work as a “major incident,” signalling the severity of an intrusion that prompted the agency to launch a criminal probe and move to strengthen cybersecurity. An…
DataBreaches -
Check City notifies 322k customers after March 2025 data breach
According to PYMNTS, payday loan provider Check City has notified 322,687 people about a March 2025 data breach, with Comparitech reporting the detail on 2 April 2025. The breach purportedly exposed names, Social Security numbers, government-issued ID…
DataBreachesClop -
TMobile Says Vendor Employee Stole One Customer’s Data
According to SecurityWeek, a notice submitted to the Maine Attorney General’s Office says T-Mobile recently detected unauthorized access to limited information from their account. Exposed information included full name, email address, physical address,…
DataBreaches -
Former Engineer Admits to Hacking NJ Firm, Demanding $750k Ransom
Daniel Rhyne, 59, of Kansas City, Missouri, pleaded guilty in Trenton federal court to extortion related to hacking a New Jersey-based industrial company’s computer network and threatening to damage its systems unless a ransom was paid. According to…
DataBreaches -
Attackers Can Hijack Misconfigured Amazon Bedrock Agents
The Unit 42 executive summary of Amazon Bedrock Agents’ multi-agent collaboration outlines how an attacker could methodically progress through an attack chain by first determining the operating mode, then discovering collaborator agents, delivering…
unit42.paloaltonetworks.com -
Elastic Security Integrations Roundup: Q1 2026
Elastic Security Labs has announced nine new integrations for Elastic Security, expanding coverage across cloud security, endpoint visibility, email threat detection, identity and SIEM. The rollout includes macOS Security Events, which complements Elastic…
elastic.co -
App store privacy labels still fail to give clear user guidance
Inconsistent data privacy labels aren’t yet delivering real clarity for users, despite being a helpful idea for app stores. Data privacy labels are intended to show what personal data apps collect, how it’s used, and who it might be shared with, but the…
Dark Reading -
OpenClaw CVE-2026-33579 flaw lets attackers hijack admin rights
OpenClaw has again highlighted why security teams should treat the tool with caution, as a recently fixed vulnerability demonstrated how an attacker with pairing privileges can escalate to full administrative control without user interaction beyond the…
-
North Korea’s ops revealed as modular, burn and replace model
Published on 1 April 2026, DomainTools’ DPRK Malware Modularity study describes North Korea’s cyber programme as a deliberately fragmented ecosystem built for mission-specific resilience and attribution resistance. It argues that what looks like a fracture…
dti.domaintools.com -
China linked TA416 revives EU govt espionage using cloud PlugX
A China-aligned threat actor has renewed focus on European government and diplomatic organisations since mid-2025, after a period of reduced targeting in the region. The campaign has been attributed to TA416, a cluster of activity that overlaps with several…
The Hacker NewsMUSTANG PANDA -
Apple patches DarkSword iOS 18 flaw after GitHub leak
Apple has patched the DarkSword vulnerabilities for iOS 18 across all affected customers, even those not updated to iOS 26, following a period when some users would otherwise have been left exposed. The patch was backported and extended to stubborn or…
Dark Reading -
Attackers use HTTP cookies to hide PHP web shells on Linux
According to Microsoft Defender Security Research Team, threat actors are increasingly using HTTP cookies as a control channel for PHP-based web shells on Linux servers to achieve remote code execution. The researchers note that instead of exposing commands…
The Hacker News -
Banning kids from social media may do more harm than good
Blocking children from social media is a badly executed good idea, argues Pieter Arntz, because while the aim is to protect young people, the methods proposed tend to create more problems than they solve. The piece notes that across the world lawmakers are…
Malwarebytes -
North Korea Linked to $285M Drift Protocol Crypto Heist
Drift Protocol suffered a $285 million cryptocurrency heist in what researchers describe as a highly sophisticated attack, with Solana-based Drift noting the incident took place on 1 April 2026. The operation allegedly involved durable nonce accounts used to…
Security Affairs -
VitalID authenticates XR headsets via skull vibration biometrics
A Rutgers University-led research team has unveiled VitalID, a biometric authentication system designed for XR headsets—covering virtual, augmented, and mixed reality hardware—by using skull vibration harmonics generated by breathing and heartbeat. The…
Dark Reading -
CrystalX RAT MaaS offers spyware, stealer and prankware features
CrystalX RAT is described as a new MaaS malware that combines spyware, data theft and remote access, promoted in a March 2026 Telegram campaign with three subscription tiers. First seen in January 2026 as Webcrystal RAT, it has since been rebranded and…
Security Affairs -
TeamPCP Supply Chain Campaign: Update 006 - CERT-EU Confirms European Commission Cloud Breach, Sportradar Details Emerge, and Mandiant Quantifies Campaign at 1,000+ SaaS Environments, (Fri, Apr 3rd)
According to CERT-EU, the European Commission’s Europa web hosting platform on AWS was breached via the Trivy supply chain compromise (CVE-2026-33634), with initial access on 19 March, detection on 24 March, and notification to CERT-EU on 25 March. The…
-
Source Code Leaks Highlight Lack of Supply Chain Oversight
Sophisticated cyberattacks over a 10-day period targeted a range of open source projects, including the Trivy security-scanner, Axios, and Anthropic’s Claude Code, underscoring the risk to software supply chains. Attackers exploited a misconfigured GitHub…
Dark Reading -
Chainguard rolls out Factory 2.0 to curb CI/CD secret leaks
Chainguard has unveiled Factory 2.0, the second generation of its platform for maintaining hardened open-source images, components and artifacts, presented at the Assemble conference in New York. The update replaces the original platform’s complex,…
Dark Reading -
Chinese Actors Exploit TrueConf Zero Day Flaw in Govt Attacks
According to Check Point, a Chinese threat actor exploited a zero-day vulnerability in the TrueConf video conferencing software to attack government entities in Asia, using the flaw CVE-2026-3502 (CVSS 7.8) to enable code execution after tampering with the…
-
Mirax banking trojan and NoVoice rootkit emerge in new threats
SecurityWeek reports that researchers at Check Point found a hidden outbound channel in ChatGPT’s code execution runtime that could exfiltrate user data via DNS queries, a flaw OpenAI patched in February. In Android malware news, McAfee describes Operation…
-
Progress ShareFile Storage Zones Controller2 articles this day · SOCRadar first
Critical ShareFile Flaws Lead to Unauthenticated RCE · Preauth RCE chain targets Progress ShareFile Storage Zones 5.x
-
Critical ShareFile Flaws Lead to Unauthenticated RCE
Two critical vulnerabilities in the ShareFile content collaboration and file‑sharing platform could be chained to achieve unauthenticated remote code execution, according to WatchTowr. One bug, tracked as CVE-2026-2699 (CVSS 9.8), allows unauthenticated…
-
Preauth RCE chain targets Progress ShareFile Storage Zones 5.x
A newly disclosed pre-authentication RCE chain affects Progress ShareFile Storage Zones Controller 5.x, with the flaw chain combining CVE-2026-2699 and CVE-2026-2701 to compromise exposed customer-managed deployments. According to public advisories,…
-
-
CrowdStrike Adds Microsoft Defender Telemetry to Falcon SIEM
CrowdStrike’s Falcon Next-Gen SIEM can now ingest Microsoft Defender telemetry, with Defender for Endpoint becoming the first EDR to integrate into the SIEM and enabling Defender data to support third-party EDRs. The integration, announced alongside…
Dark Reading -
North Korean hackers trick npm maintainer to hijack Axios package
On 3 April 2026, The Axios npm package maintainer Jason Saayman confirmed that the supply chain compromise came from a highly targeted social engineering campaign attributed to North Korean threat actors tracked as UNC1069. Saayman said the attackers…
The Hacker NewsUNC1069 -
Outdated OS, risky WiFi and phishing drive mobile threats in 2025
According to Jamf, the mobile device attack surface is wide, fragmented and not adequately controlled, with a dual focus on device state and adversarial activity. The report retrospects 2025 across more than 1.7 million devices in Jamf’s footprint and looks…
SecurityWeek -
Third Party Vendors Now Pose Biggest Breach Threat, Report Warns
The Hacker News reports that the next major breach affecting clients is likely to come through a vendor or subcontractor rather than inside a company’s own walls, highlighting how third‑party risk now sits at the core of security postures. It cites the 2025…
The Hacker News
