News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 14 Apr· 49 articles
-
Traefik Helm Chart Supply Chain Attack: Malicious Chart Planted in Deprecated Kubernetes Repository
According to StepSecurity, a malicious Traefik Helm chart (version 39.0.7) was planted in the deprecated Kubernetes stable repository hosted at storage.googleapis[.]com/kubernetes-charts, a bucket archived in 2020 but still trusted by millions of pipelines.…
StepSecurity -
Microsoft SharePoint Server6 articles this day · thezdi.com first
Microsoft patches 167 flaws, including exploited SharePoint bug · Microsoft fixes 167 flaws, patches SharePoint zero day exploit
-
Microsoft patches 167 flaws, including exploited SharePoint bug
Patch Tuesday in April 2026 sees Microsoft publish 167 vulnerabilities, with exploitation in the wild for one and public disclosure for another, while 19 of the published flaws are considered more likely to see future exploitation. So far this month, patches…
-
Microsoft fixes 167 flaws, patches SharePoint zero day exploit
Patch Tuesday in April 2026 saw Microsoft push updates to fix 167 security vulnerabilities across Windows and related software, including a SharePoint Server zero‑day and a Windows Defender flaw dubbed “BlueHammer.” According to BleepingComputer, BlueHammer…
-
CISA Warns of Active Exploit in SharePoint Flaw CVE‑2026-32201
CISA has added CVE‑2026-32201 to its Known Exploited Vulnerabilities catalogue, affecting Microsoft SharePoint Server. The vulnerability is an improper input validation flaw that enables an unauthenticated attacker to spoof responses over a network. The…
-
Privilege Elevation Dominates Massive Microsoft Patch Update
Privilege Elevation Dominates Microsoft’s patch Tuesday, with elevation-of-privilege bugs accounting for more than half of the 165 CVEs patched. Microsoft noted that one zero-day is actively being exploited, CVE-2026-32201, a spoofing vulnerability in…
-
Microsoft patches SharePoint zero day CVE-2026-32201 in the wild
SecurityWeek reports that Microsoft’s April 2026 Patch Tuesday fixes 165 vulnerabilities, including a SharePoint Server zero-day tracked as CVE-2026-32201 that has been exploited in the wild and is described as a spoofing issue with a CVSS score of 6.5.…
-
Adobe and Microsoft Patch Tuesday sees record fixes amid exploits
The April 2026 Security Update Review, dated 14 April 2026, by Dustin Childs, notes a record Patch Tuesday with patches from Adobe and Microsoft and exploits in the wild adding urgency. Adobe released 12 bulletins addressing 61 CVEs across Acrobat Reader,…
-
-
CISA Adds CVE-2009-0238 Excel Flaw to KEV Catalog, Urges Patching
On 14 April 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2009‑0238 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Microsoft Office, specifically Excel, and is known as the Microsoft Office Remote Code…
-
EDR Killers Surge as Ransomware’s New Kernel Level Weapon
Part 2 in a series on BYOVD threats shows EDR killers moving from rarity to a central driver of ransomware campaigns, with security teams grappling to respond. Over the past year, researchers have documented an expansion of the ecosystem around BYOVD tools…
Dark Reading -
Mythos Preview AI cracks 22 step data theft test, outpaces rivals
According to the AI Security Institute, Mythos Preview can complete more Apprentice-level Capture the Flag tasks than many previous frontier models, achieving north of 85 percent on those tasks. The institute also found that Mythos stands out by effectively…
Ars Technica -
Basic-Fit breach leaks bank and personal data of 1M members
Basic-Fit, Europe’s largest gym chain, disclosed a data breach affecting around 1 million members, with exposed information including names, addresses, emails, phone numbers, dates of birth and bank details. External experts found that some data stored in…
Security Affairs -
Microsoft Patch Tuesday April 2026., (Tue, Apr 14th)
Microsoft Patch Tuesday April 2026 patches a total of 243 vulnerabilities, with 78 of those being Chromium issues affecting Microsoft Edge that were released earlier, leaving 165 non-Edge flaws. Of the non-Edge items, eight are rated critical and 154 are…
-
California’s new cyber audit rule sparks class action concerns
The California Privacy Protection Agency’s cybersecurity audit rule is now in effect, requiring certain businesses to conduct an annual audit. The rule went into effect on 1 Jan. 2026 and covers eighteen different technical and organisational components of…
DataBreaches -
Adobe Patches 55 Vulnerabilities Across 11 Products
Adobe’s latest Patch Tuesday fixes 55 vulnerabilities across 11 products, with nearly all advisories carrying a priority of 3, meaning they are not expected to be exploited in attacks. However, five critical ColdFusion vulnerabilities have a priority of 1,…
-
UNSW AI Bot Exercise Shows How Fake Content Can Shift Elections
Wargame demonstrations are being used to explore how social media manipulation operates, with an educational exercise called Capture the Narrative run by the University of New South Wales in Sydney. More than 270 participants from 18 universities spent four…
Dark Reading -
Composer Flaws Let Attackers Run Arbitrary Code via JSON
Two high-severity security vulnerabilities have been disclosed in Composer, the PHP package manager, that could allow arbitrary command execution through a Perforce VCS driver configuration. The flaws are CVE-2026-40176 (CVSS 7.8) and CVE-2026-40261 (CVSS…
-
Pushpaganda scheme uses AI to hijack Google Discover feed
Cybersecurity researchers have uncovered a new ad fraud scheme, named Pushpaganda by HUMAN's Satori Threat Intelligence and Research Team, that uses AI-generated content and search engine poisoning to push deceptive news into Google's Discover feed and coax…
The Hacker News -
Google integrates Rust DNS parser into Pixel 10 modem firmware
Google has announced the integration of a Rust-based Domain Name System parser into Pixel 10 modem firmware to strengthen security by pushing memory-safe code down to the baseband level. The company says the Rust parser significantly reduces security risk by…
-
Operation Atlantic halts $45M theft, stops approval phishing
US, UK and Canada ran Operation Atlantic, uncovering more than $45 million in stolen crypto assets and freezing around $12 million to be returned to victims. The authorities say the operation targeted large-scale cryptocurrency theft schemes and helped…
Security Affairs -
Cloudflare rolls out Managed OAuth for Access in open beta
According to Cloudflare, Managed OAuth for Access is now available in open beta to all customers, enabling one-click enablement for any internal app behind Cloudflare Access. Cloudflare explains that the new flow lets agents speaking OAuth 2.0 discover how…
Cloudflare -
Cloudflare rolls out new token formats to spot leaked secrets
Cloudflare’s blog post on Securing non-human identities highlights how modern development relies on agents, scripts, and third‑party tools, not just people, and stresses the need to manage their entire lifecycle—from credential handling to OAuth visibility…
Cloudflare -
Cloudflare’s MCP Reference Architecture Cuts Token Use by 94%
We scaling MCP adoption at Cloudflare with a reference architecture aimed at simpler, safer and cheaper enterprise deployments, as of 14 April 2026. According to Cloudflare, the approach combines remote MCP servers, Cloudflare Access for authentication, MCP…
Cloudflare -
Cloudflare rolls out Mesh to secure agent and app traffic
Cloudflare has introduced Mesh, a developer-friendly private networking solution that connects users, nodes, and agents across Cloudflare One and external clouds, enabling secure access to private resources without exposing them publicly. The Mesh platform…
Cloudflare -
CISOs Urged to Innovate Retention as Half Eye Job Moves
CISOs must be “aggressive” and “innovative” in how they retain talent in a volatile jobs market, a new report from IANS and Artico Search has revealed. The 2026 Cybersecurity Talent Report draws on interviews with over 500 US cybersecurity professionals and…
Infosecurity -
Mythos AI Could Speed Up Cyber Attacks, CISOs Warn
CISOs are warned that Mythos, Anthropic’s cybersecurity-focused AI model, could collapse the time between vulnerability discovery and exploitation, accelerating high-velocity attacks. According to the Cloud Security Alliance, the AI Vulnerability Storm…
SecurityWeek -
MSSPs Get Free Threat Intel Suite with SOCRadar Labs
Threat intelligence for MSSPs is showcased through a curated list of 10 free tools, designed to support threat data collection, enrichment, and incident response without a large budget, as published on 14 April 2026. The piece highlights MISP, OpenCTI,…
SOCRadar -
Basic Fit gym chain hit by breach exposing one million members data
Basic-Fit, Europe's largest gym and fitness chain, reported a data breach impacting about 1 million members, with personal information including names, email addresses, physical addresses, phone numbers, dates of birth, and bank account details compromised.…
SecurityWeek -
Triad Nexus expands fraud via cloud laundering despite sanctions
Triad Nexus Expands Global Fraud Operations Despite US Sanctions reports that a cybercrime network responsible for more than $200m in reported losses has broadened its reach and refined its tactics following US Treasury sanctions in 2025. According to Silent…
Infosecurity -
Omnistealer exploits blockchains to harvest 300k credentials
Omnistealer is described as a new infostealer that uses public blockchains as a permanent malware hosting platform, storing its staging code inside transactions on TRON, Aptos and Binance Smart Chain. According to Malwarebytes, these blockchains are…
Malwarebytes -
108 Malicious Chrome Extensions Steal Data From 20k Users
A large-scale campaign involving 108 malicious Chrome extensions has been uncovered, affecting roughly 20,000 users, with the extensions spread across categories such as gaming, social media tools and translation utilities. The extensions appear legitimate…
Infosecurity -
SAP fixes critical SQLi in BW/BPC after April 2026 patch day
SAP released 20 new and updated security notes as part of its April 2026 patch day, addressing flaws across more than a dozen enterprise products. The most severe fix is for CVE-2026-27681, a critical SQL injection in Business Planning and Consolidation and…
-
ShinyHunters leak Rockstar data via third party cloud breach
ShinyHunters claim the hack of Rockstar Games breach and started leaking data, with an 8.1GB data leak reportedly linked to Rockstar Games. The dataset, obtained via Anodot, includes anti-cheat source code, player analytics, game data, Zendesk ticket feeds…
Security AffairsShinyHunters -
Triad Nexus Evades Sanctions Using Front Firms and Cloud
Triad Nexus, an illicit network described as the backbone of scams, money laundering, and illicit gambling, evades sanctions by using front companies and infrastructure laundering to distance itself from the Funnull CDN and other sanctioned infrastructure,…
SecurityWeekTriad Nexus -
Deep vs Dark Web Explained: Risks, Myths and Business Monitoring
The Deep Web consists of private parts of the internet that are not indexed by search engines and typically require standard browser access with credentials. The Dark Web is a much smaller, hidden section that requires tools like the Tor browser and is more…
SOCRadar -
Google rolls out Rust DNS parser in Pixel 10 modem firmware
Google has announced the integration of a Rust-based Domain Name System (DNS) parser into the Pixel phones’ modem firmware as part of its ongoing security enhancements. The move follows previous work to push memory-safe Rust code into low-level firmware to…
SecurityWeek -
Mirax Android RAT spreads through Meta ads, targets Spanish users
A nascent Android remote access trojan called Mirax has been observed targeting Spanish-speaking countries, with campaigns reaching more than 220,000 accounts on Facebook, Instagram, Messenger and Threads through Meta ads. Mirax integrates advanced RAT…
The Hacker NewsMirai Bot -
Critical security risks surge 400% as AI drives alert overload
OX Security recently analysed 216 million security findings across 250 organisations over a 90-day period. The primary takeaway is that while raw alert volume grew by 52% year over year, prioritised critical risk grew by nearly 400%. The analysis notes a…
The Hacker News -
Florida AG issues subpoenas over ChatGPT’s role in FSU shooting
ChatGPT is being examined after Florida opened a probe into a deadly Florida State University shooting, with Florida Attorney General James Uthmeier announcing subpoenas are coming as OpenAI faces scrutiny over its role. The campus attack occurred a year…
Malwarebytes -
RCI Hospitality reports IDOR breach exposing contractor data
According to the SEC filing, adult nightclub operator RCI Hospitality Holdings disclosed that an insecure direct object reference (IDOR) vulnerability in its RCI Internet Services subsidiary allowed access to personal information. The company said the…
SecurityWeek -
AI Security Institute says AI can autonomously exploit networks
The AI Security Institute (AISI) has urged organisations to double down on cybersecurity basics and consider harnessing AI to protect systems after testing Anthropic’s Mythos Preview model, according to the AISI. In its evaluation, Mythos Preview could…
Infosecurity
