News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 15 Apr· 53 articles
-
0xJacky nginx-ui5 articles this day · The Hacker News first
nginx UI flaw lets attackers hijack NGINX via CVE-2026-33032 · CVE-2026-33032: severe nginx-ui bug grants unauthenticated server access
-
nginx UI flaw lets attackers hijack NGINX via CVE-2026-33032
Attackers are actively exploiting a critical flaw in the nginx-ui interface for managing NGINX, tracked as CVE-2026-33032 with a CVSS of 9.8, which stems from an insecure MCP implementation and allows unauthenticated changes to NGINX server configurations in…
-
CVE-2026-33032: severe nginx-ui bug grants unauthenticated server access
CVE-2026-33032 describes a severe vulnerability in nginx-ui that enables unauthenticated access to Nginx servers. The flaw stems from the /mcp_message endpoint, which relies only on IP whitelisting, and with the default whitelist effectively allowing all,…
-
Nginx UI flaw CVE-2026-33032 exploited, allows server takeover
SecurityWeek reports that a critical Nginx UI vulnerability, CVE-2026-33032, has been exploited in the wild, allowing unauthenticated attackers to take full control of Nginx servers. The flaw, tied to Nginx UI’s MCP AI integration, was patched recently in…
-
nginx-ui auth bypass CVE-2026-33032 lets attackers control servers
A critical authentication bypass in nginx-ui, a widely used open-source web interface for managing nginx servers, has been actively exploited in the wild. The vulnerability, tracked as CVE-2026-33032 with a CVSS score of 9.8, was discovered by Pluto Security…
-
nginx UI flaw CVE-2026-33032 exploited, allowing server takeover
The Hacker News reports that nginx-ui, an open‑source web-based Nginx management tool, has an authentication bypass flaw, CVE-2026-33032, now actively exploited in the wild and rated CVSS 9.8. According to Pluto Security, the MCP (Model Context Protocol)…
-
-
Recall Reloaded tool exploits DLL injection to steal Windows data
Security researcher Alexander Hagenah, the author of the original TotalRecall, also developed an updated “TotalRecall Reloaded” tool that can inject a DLL into AIXHost[.]exe and wait for Recall users to authenticate with Windows Hello before scooping up…
Ars Technica -
Black Hat Asia 2026 Flags AI Driven Supply Chain Threats in Asia
Asia’s digital supply chain faces distinctive challenges from regulatory divergence to a dense web of third‑party tools, AI models, cloud platforms, data vendors and automation, a topic set to be explored at Black Hat Asia 2026. According to Black Hat Asia…
Dark Reading -
AI driven clickbait hijacks notifications via fake news feeds
AI clickbait is described as Pushpaganda, an AI-assisted ad fraud, social engineering, and scareware operation targeting mobile users. For many people it starts looking like normal content in a Google Discover feed or on a new Chrome tab, with AI-generated…
Malwarebytes -
n8n Webhooks Abused Since October 2025 to Deliver Malware via Phishing Emails
Threat actors have been observed weaponising n8n, a popular AI workflow automation platform, to run sophisticated phishing campaigns that deliver malware or fingerprint devices through automated emails. According to Cisco Talos, attackers are exploiting…
The Hacker News -
Sweden links pro Russian group to failed heat plant cyberattack
According to Associated Press, Sweden has for the first time publicly attributed a cyberattack on a heating plant in western Sweden last year to a pro-Russian group with links to Russia’s security and intelligence services. Sweden’s minister for civil…
SecurityWeek -
AI incident response holds to basics while trust faces new tests
Incident response for AI: Same fire, different fuel argues that while AI disrupts the traditional IR playbook, the fundamentals still hold: containment, transparent communication, and learning from each incident remain essential, but the root cause is now a…
Microsoft -
OpenAI launches GPT 5.4 Cyber to aid secure software development
OpenAI has launched a new large language model variant, GPT‑5.4‑Cyber, focused on cybersecurity use cases and an expanded Trusted Access for Cyber (TAC) programme, according to OpenAI. The model, trained to be cyber‑permissive and fine‑tuned for…
Infosecurity -
ENISA pushes for top level CVE role targeting 2026 accreditation
ENISA, the EU’s Cybersecurity Agency, is pushing to become a top-level root CVE Numbering Authority (TL-Root CNA) as part of its aim to strengthen its role in the CVE program, according to Infosecurity Magazine. The agency is currently being onboarded by the…
Infosecurity -
Prepping for 'Q-Day': Why Quantum Risk Management Should Start Now
Preparing for the post-quantum cryptography (PQC) era will require more than a simple migration plan, cryptography expert Jean-Philippe Aumasson argues, with migration likely taking years and a continuous process of discovery, impact assessment and…
Dark Reading -
StepSecurity introduces cooldown & grouping for Dependabot
StepSecurity has introduced cooldown and group attributes to Dependabot configuration management, enabling organisations to control how often update PRs arrive and how related updates are batched across npm, pip, Docker, GitHub Actions, and other…
StepSecurity -
Signed Update from Dragon Boss Disables AV on 23k Devices
A signed software operation linked to a company called Dragon Boss Solutions LLC has reportedly been silently disabling antivirus products on more than 23,000 endpoints worldwide. According to Huntress, the campaign used a legitimate code-signing certificate…
Infosecurity -
Google, Meta, Microsoft Often Ignore California Opt Out Requests
Auditors found that Google, Meta, and Microsoft around half the time do not honour opt-out requests under California’s privacy law, despite the state’s mandate. According to WebXray, the audit analysed 7,634 popular California websites and found that 194…
Dark Reading -
CISA adds old Excel RCE and SharePoint flaw to KEV list
The U.S. Cybersecurity and Infrastructure Security Agency has added two flaws to its Known Exploited Vulnerabilities catalog: CVE-2009-0238, a Microsoft Office Remote Code Execution vulnerability affecting multiple versions of Excel, and CVE-2026-32201, a…
-
Capsule Security raises $7M seed to secure agentic AI
Capsule Security, an Israeli startup, has emerged from stealth with $7 million in seed funding, according to SecurityWeek. The company aims to add a security layer to agentic AI by continuously monitoring AI agents’ behaviour and intervening at runtime to…
SecurityWeek -
Anthropic MCP flaw exposes AI tools to full system takeover
SecurityWeek reports that a flaw in Anthropic’s Model Context Protocol (MCP) could allow unsanitized commands to execute silently via MCP’s STDIO interface, potentially enabling a complete adversarial takeover of users’ computer systems across widely used AI…
SecurityWeek -
Over 20,000 Users Exposed by Backdoor Chrome Extensions
SecurityWeek reports that more than 20,000 users installed malicious Chrome extensions designed to provide a backdoor, steal information, or inject ads, in a coordinated campaign published under five accounts: GameGen, InterAlt, SideGames, Rodeo Games, and…
SecurityWeek -
Fake YouTube copyright notices can steal your Google login
A fake copyright notice scam targeting YouTube creators is circulating as a convincing phishing campaign that can steal Google login credentials and potentially take over a creator’s entire Google account. According to Malwarebytes, the attack uses a…
Malwarebytes -
Sophos CISO on Chinese hackers, burnout and trust issues
According to SecurityWeek, Ross McKerchar began his Sophos career as the firm’s first internal security engineer 18 years ago and is now its Chief Information Security Officer, leading a much larger team. He says the skills gap in cybersecurity is real but…
SecurityWeek -
Introducing Agent Lee - a new interface to the Cloudflare stack
Agent Lee is an in-dashboard AI assistant that understands your Cloudflare account and helps with troubleshooting, not just giving general FAQs. Instead of hopping between tabs and logs, you can describe what you want to achieve in plain language, and Agent…
Cloudflare -
Cloudflare releases beta API for automated domain registration
Cloudflare has launched the Registrar API in beta, enabling developers to search for domains, check availability, and register them programmatically within familiar workflows. Built to work inside editors, deployment pipelines, backend services, and…
Cloudflare -
Project Think: building the next generation of AI agents on Cloudflare
Project Think introduces a next generation of AI agents built on Cloudflare, expanding the Agents SDK with new primitives for durable, long‑running agents and a base class that wires them together. It adds durable execution with fibers, sub‑agents with…
Cloudflare -
Browser Run: give your agents a browser
Cloudflare has renamed Browser Rendering to Browser Run and unveiled a suite of features designed for AI agents to operate browsers at scale from Cloudflare’s global network. The update adds Live View for real-time visibility, a Human in the Loop workflow…
Cloudflare -
Cloudflare upgrades Workflows, raising concurrent limit to 50k
Cloudflare’s Workflows control plane has been rearchitected to support agent-triggered, machine-speed workflows, expanding beyond the original human-triggered model. The update introduces two new components, SousChef and Gatekeeper, to distribute metadata…
Cloudflare -
Cloudflare rolls out experimental voice SDK for AI agents
Cloudflare has released an experimental voice pipeline for the Agents SDK, enabling real-time voice as another talking channel within the same Durable Object-based architecture. The new package, named @cloudflare/voice, provides components such as withVoice,…
Cloudflare -
Exploiters target SAP SQLi and Adobe zero day flaws in April
April’s Patch Tuesday fixes a string of critical flaws across SAP, Adobe, Microsoft, Fortinet and more, led by an SQL injection flaw in SAP Business Planning and Consolidation and SAP Business Warehouse (CVE-2026-27681, CVSS 9.9) that could allow arbitrary…
-
XWorm Phishing Drives Rise in ICS Malware Blocks Worldwide
According to Kaspersky ICS CERT, the share of ICS computers blocked for malicious objects in Q4 2025 was 19.7%, with regional rates ranging from 8.5% in Northern Europe to 27.3% in Africa. The report notes a notable activity in worms in email, driven by…
securelist.com -
New Mirax Android RAT turns phones into proxy via Facebook ads
A new, sophisticated remote access trojan has been targeting Android users across Europe, marketed as malware-as-a-service to a small number of affiliates, mainly Russian-speaking actors. The Mirax RAT can turn infected devices into residential proxy nodes…
SecurityWeek -
Salesforce and Microsoft fix prompt inject bugs exposing CRM data
Two recently fixed prompt injections in Salesforce Agentforce and Microsoft Copilot could have allowed an external attacker to exfiltrate sensitive data, according to Capsule Security. In Salesforce, the flaw dubbed “PipeLeak” could be triggered via a…
-
Mirax Android RAT hijacks 220k devices via fake IPTV ads on Meta
Mirax is described as a newly identified Android Remote Access Trojan (RAT) that spread through Meta ads and has infected about 220,000 users, turning devices into SOCKS5 proxies and enabling full remote control in real time. According to the report…
Security Affairs -
Ivanti fixes two medium severity flaws in Neurons for ITSM
SecurityWeek reports that Ivanti Neurons for ITSM has patched two medium-severity vulnerabilities affecting both on‑premises and cloud deployments. The flaws are CVE-2026-4913 (CVSS 5.7) described as improper protection of an alternate path, which according…
-
Hybrid AI makes exposure validation both repeatable and adaptive
Deterministic + Agentic AI: The Architecture Exposure Validation Requires argues that AI is sweeping from experimentation into boardroom mandate, with boards and CISOs already pushing for AI across security functions. The article notes that a growing number…
The Hacker News -
How a $10 domain hijacked 25,000 PCs via trusted adware
According to Huntress, researchers uncovered a sophisticated threat hidden inside adware, revealing that a single unregistered domain available for as little as $10 could have granted malicious actors silent control over more than 25,000 compromised…
SecurityWeek -
Fake VPN and Gaming Mods Used to Spread NWHStealer Infostealer
Malwarebytes reports that a Windows infostealer, tracked as NWHStealer, is being spread through a variety of campaigns using fake VPN downloads, hardware utilities and gaming mods. According to Malwarebytes, the threats can exfiltrate browser data, saved…
Malwarebytes -
CISA urges AI firms to boost CVE role amid rising flaws
According to the US Cybersecurity and Infrastructure Security Agency (CISA), AI companies such as OpenAI and Anthropic should play a bigger role in software vulnerability disclosures and be better represented in the Common Vulnerabilities and Exposures (CVE)…
Infosecurity -
Congress debates renewal of warrantless overseas spy program
Congress is set to take up the reauthorization of a divisive program that lets U.S. spy agencies pore over foreigners’ calls, texts and emails, with supporters like President Donald Trump saying it has saved lives while critics point to concerns about…
SecurityWeek
