News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Fri 10 Apr· 31 articles
-
Hims breach exposes customer support tickets with personal info
Hims & Hers Health, operating as Hims, suffered a data breach through its third‑party customer support platform, exposing potentially highly sensitive information. Cybercriminals gained access to customer support tickets that could contain names and…
Dark ReadingShinyHunters -
Stolen Credentials Fuel Most Cyber Breaches, AI Speeds Attacks
Your Next Breach Will Look Like Business as Usual argues that the modern breach often starts with legitimate access rather than a break‑in, with nearly one in three cyber intrusions now involving valid employee credentials. It notes that attackers are…
Dark Reading -
Cloudflare hits 500 Tbps capacity, marking 16 year global growth
Cloudflare’s network recently crossed 500 terabits per second (Tbps) of external capacity, a milestone described as 500 Tbps of capacity: 16 years of scaling our global network. According to The Cloudflare Blog, this figure represents total provisioned…
Cloudflare -
Fake Claude Site Spreads PlugX RAT via Trojanised Installer
Malwarebytes reports a fake Claude site impersonating Anthropic’s Claude that serves a trojanized installer, which when downloaded installs Claude but quietly deploys a PlugX malware chain giving attackers remote access to the victim’s system. The package…
Malwarebytes -
FINRA launches intelligence hub to boost firms' cyber defence
FINRA has launched the Financial Intelligence Fusion Center (FIFC), a secure portal for FINRA and its member firms to share timely intelligence about cybersecurity and fraud threats and coordinate responses, according to Dark Reading. The FIFC will collect,…
Dark Reading -
Orange Business rolls out AI trust suite for enterprise voice
Orange Business is reimagining enterprise voice communications with a focus on trust and AI, outlining a major transformation of how organisations interact with customers and employees. The press release notes that branded calling will roll out in France and…
Dark Reading -
ClickFix Uses AppleScript Trick to Drop Atomic Stealer on Macs
ClickFix has unveiled a new way to infect Macs by bypassing Terminal and using the applescript:// URL scheme to auto-open Script Editor with a pre-filled maintenance script that downloads a second-stage script and ultimately runs Atomic Stealer, also known…
Malwarebytes -
Stryker cyberattack disrupts output, hits Q1 financial outlook
SecurityWeek reports that Stryker confirmed a March 2026 cybersecurity incident that disrupted operations and will materially affect its first-quarter financial results, though the company has restored global manufacturing and distribution. The same roundup…
SecurityWeek -
Law firm Orrick hit by SRG hack, data leaked after ransom talks
According to DataBreaches[.]Net, SRG gained access to Orrick, Herrington & Sutcliffe LLP in January 2026 and remained in its network for about a week, with the attack not involving malware. Orrick, which has over 25 offices worldwide, reported gross revenue…
DataBreachesLuna Moth -
ChipSoft ransomware attack knocks out Dutch, Belgian hospital IT
A ransomware attack on Dutch healthcare IT firm ChipSoft disrupted its EHR services across hospitals in the Netherlands and Belgium, with the HiX platform taken offline and key services such as Zorgportaal, HiX Mobile and Zorgplatform disabled as a…
Security Affairs -
Juniper fixes critical default password bug and multiple flaws
Juniper Networks this week released patches for nearly three dozen vulnerabilities across Junos OS and Junos OS Evolved, potentially enabling privilege escalation, denial-of-service, and remote command execution. The most severe flaw, CVE-2026-33784, carries…
-
US Warns Iran Linked Hackers Target Modbus OT Devices
Industrial Controllers Still Vulnerable As Conflicts Move to Cyber argues that the US government warns energy companies, water utilities and industrial firms that state‑sponsored adversaries are targeting Internet‑connected OT, while researchers have found a…
Dark Reading -
Fake WakaTime extension hijacks IDEs, steals data via Solana
Cybersecurity researchers have flagged the GlassWorm campaign’s latest evolution, which uses a Zig dropper designed to stealthily infect all integrated development environments on a developer’s machine. The technique hinges on an Open VSX extension named…
The Hacker News -
Iran linked Hackers Hit US Infrastructure via Rockwell PLCs
The SecurityWeek piece, dated 10 April 2026, reports that the US government warned Iran-linked hackers are targeting critical infrastructure by manipulating PLCs and OT, with advisories from CISA, the FBI and others noting attacks on Rockwell Automation PLCs…
SecurityWeek -
Infosecurity Magazine article missing; readers told to search
Infosecurity Magazine currently reports a Page Not Found for the requested article, with the message that the content isn’t available at this location. The page may have moved, been updated, or no longer exists, and readers are advised to try returning to…
Infosecurity -
Nine Orthanc DICOM bugs risk
SecurityWeek reports nine vulnerabilities in the open source Orthanc DICOM server, tracked CVE-2026-5437 to CVE-2026-5445, that could allow crashes, data leakage, and remote code execution. According to CERT Coordination Center (CERT/CC), the flaws arise…
-
LucidRook Lua malware strikes Taiwan NGOs via spear phishing
LucidRook is described as Lua-based malware used in targeted phishing attacks against NGOs and universities in Taiwan, with Cisco Talos linking it to a group tracked as UAT-10362. In October 2025, attackers spread the malware via password-protected email…
Security AffairsUAT-10362 -
Infosecurity Magazine Page Gone: Users Ask Where It Went
The Infosecurity Magazine page you were looking for isn’t available at this location, displaying a Page Not Found message. The content may have moved, been updated, or no longer exists. It suggests returning to the homepage or using the site search to find…
Infosecurity -
AI Browser Extensions Raise Security Risks, LayerX Warns
According to LayerX, AI browser extensions represent a wide-open, under‑guarded attack surface inside organisations, sitting inside the browser with direct access to page content, inputs and session data without triggering traditional controls. The report…
The Hacker News -
Chrome 147 patches critical WebML flaws, fixes 60 bugs
Chrome 147 patches 60 vulnerabilities in the latest update, with two of the flaws rated as critical and affecting the WebML component used for running machine learning models in the browser. The two critical issues are described as a heap buffer overflow…
-
MITRE Launches Free Fight Fraud Framework to Combat Cyber Scams
MITRE Corporation released a new framework to help organisations fight fraudsters, introducing MITRE Fight Fraud Framework (F3), a curated knowledge base that provides a behaviour-based model of the tactics, techniques, and procedures fraudsters use. The…
SecurityWeek -
Phishing kits bypass MFA, target US firms with AiTM at scale
Phishing kits targeting U.S. giants now operate at scale, with modern AiTM architectures capturing usernames, passwords and even MFA session cookies, enabling attackers to access accounts even after MFA challenges. By mid-2025, Tycoon 2FA alone accounted for…
SOCRadarVoid Blizzard -
Marimo2 articles this day · The Hacker News first
Attackers exploit Marimo CVE-2026-39987 flaw hours after advisory · Marimo flaw lets attackers gain shell within hours of disclosure
-
Attackers exploit Marimo CVE-2026-39987 flaw hours after advisory
A critical vulnerability in Marimo, CVE-2026-39987 (CVSS 9.3), was disclosed by the project maintainers, who described an unauthenticated remote code execution flaw in the terminal WebSocket endpoint. Within nine hours, a threat actor built an exploit from…
-
Marimo flaw lets attackers gain shell within hours of disclosure
Marimo has a critical vulnerability, CVE-2026-39987, described as a pre-authenticated remote code execution flaw affecting all versions up to and including 0.20.4, with a fix released in 0.23.0, and it carries a CVSS score of 9.3. The Hacker News report…
-
-
EngageLab SDK flaw exposed 50M Android users, 30M crypto wallets
A flaw in EngageLab SDK exposed up to 50M Android users, including over 30M crypto wallet installs, by allowing apps to bypass Android sandbox protections and access private data. Microsoft researchers found the issue in EngageSDK and coordinated disclosure;…
Security Affairs -
Google releases Device Bound Session Credentials for Windows Chrome
Google has made Device Bound Session Credentials (DBSC) generally available to all Windows users of its Chrome browser, months after testing began in open beta, with expansion to macOS planned in a future Chrome release. The public rollout currently covers…
The Hacker News -
Chrome rolls out Device Bound Credentials to stop cookie theft
Google has announced the rollout of new session cookie protections in Chrome to prevent account compromise via stolen authentication cookies. The feature, called Device Bound Session Credentials (DBSC), is available in Chrome 146 for Windows, with macOS…
SecurityWeek -
Microsoft warns of Android EngageSDK flaw exposing crypto data
Microsoft security researchers found a severe vulnerability in EngageLab’s EngageSDK, a third‑party Android SDK widely used in cryptocurrency wallet applications that has more than 30 million installations. According to Microsoft, unpatched versions are…
SecurityWeek -
Bitcoin Depot reports $3.66m crypto theft after hacker breach
Hackers breached the largest US Bitcoin ATM operator, Bitcoin Depot, on March 23, accessing credentials tied to its digital asset settlement accounts and draining wallets by transferring approximately 50.903 Bitcoin, valued at about $3.665 million as of the…
Security Affairs -
Phishing RAR Spreads Obfuscated JS to Install Formbook
A phishing email delivered a Windows-flavoured JavaScript file in a RAR archive, named cbmjlzan[.]JS (SHA256:a8ba9ba93b4509a86e3d7dd40fd0652c2743e32277760c5f7942b788b74c5285), which is only detected as malicious by 15 AVs on VirusTotal. The 10 MB file is…
SANS ISC -
Smart Slider 3 Pro update hijacked, backdoor admin accounts added
Unknown threat actors hijacked the update system for the Smart Slider 3 Pro plugin for WordPress and Joomla, distributing a poisoned update for version 3.5.1[.]35 that carried a backdoor, according to Patchstack. The incident affected Smart Slider 3 Pro…
The Hacker News
