News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Fri 3 Apr· 49 articles
-
Attackers Exploit Next.js Bug, Loot Credentials From 766 Hosts
According to Talos, a threat actor tracked as UAT-10608 exploited vulnerable Next[.]js applications to compromise systems and exfiltrate credentials at scale, leveraging automated scanning to target Next[.]js deployments affected by CVE-2025-55182 (CVSS 10)…
-
T Mobile says insider breach exposed one customer’s SSN and data
T-Mobile has provided clarification on a recent data breach filing, describing it as an insider incident with a very limited impact. According to the Maine Attorney General’s Office, the breach involved unauthorized access to limited information from a…
SecurityWeek -
North Korean Hackers Drain $285 Million From Drift in 10 Seconds
A North Korean threat actor is likely to be blamed for a $285 million heist from the Drift DeFi platform, carried out as a carefully planned operation. The incident, described by Drift as highly sophisticated, involved durable nonce accounts to pre-sign…
SecurityWeek -
CVE-2026-20093: Critical Cisco IMC Flaw Allows Unauthenticated Admin Access to UCS Servers
CVE-2026-20093 is described as a critical authentication bypass flaw in Cisco IMC that could allow an unauthenticated remote attacker to bypass authentication and gain full administrative access to UCS servers. The vulnerability carries a CVSS score of 9.8…
-
New SparkCat Variant in iOS, Android Apps Steals Crypto Wallet Recovery Phrase Images
Cybersecurity researchers have uncovered a new SparkCat variant on the Apple App Store and Google Play Store, more than a year after the Trojan was first identified. The malware hides inside seemingly legitimate apps such as enterprise messengers and…
The Hacker News -
Drift Loses $285 Million in Durable Nonce Social Engineering Attack Linked to DPRK
Drift, a Solana-based decentralised exchange, confirms that attackers drained about $285 million from the platform during a security incident that took place on 1 April 2026. The company described a novel attack involving durable nonces that allowed a…
The Hacker News -
Venom phishing‑as‑a‑service used to steal exec creds globally
Researchers at Abnormal uncovered a credential theft campaign that targeted C-suite executives and senior personnel at global organisations from November 2025 to March 2026, using a previously undocumented phishing-as-a-service platform called Venom as the…
Infosecurity -
Pro-Iran Handala group breached Israeli defence contractor PSK Wind Technologies
The Pro-Iran Handala group announced on 2 April 2026 that it had breached PSK Wind Technologies, an Israeli engineering and IT firm specialising in integrated defence and critical communications, including command and control systems. According to…
Security AffairsHandala -
ISC Stormcast For Friday, April 3rd, 2026 https://isc.sans.edu/podcastdetail/9878, (Fri, Apr 3rd)
According to ISC Stormcast For Friday, April 3rd, 2026, the page identifies the Threat Level as green and notes that the Handler on Duty is Johannes Ullrich. The article page is published by the SANS Internet Storm Center and promotes a podcast detailing…
SANS ISC
