News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 22 Apr· 48 articles
-
Hacktivist IYM Confirms P3 BlueLeaks 2.0 Database Won't Be Sold
DataBreaches[.]net reports that the hacktivist known as “Internet Yiff Machine” (IYM) said the P3 database from the BlueLeaks 2.0 incident has not been sold and will not be sold, having been taken off the market. The dataset comprises 8.3 million tips that…
DataBreachesInternet Yiff Machine -
CISA adds Microsoft Defender flaw CVE-2026-33825 to KEV list
On 22 April 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2026‑33825 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Microsoft Defender and is officially named Microsoft Defender Insufficient…
-
Scammers Pose as Iran, Demand Crypto Toll, Ships Come Under Fire
Crypto scammers are targeting thousands of ships stranded near the Strait of Hormuz, with at least one vessel coming under gunfire after it reportedly paid for safe passage. The first warning of the scam was raised by the Greek maritime risk management…
Ars Technica -
Malicious Xinference PyPI Packages Steal SSH Keys, Credentials
According to StepSecurity Threat Intelligence, xinference versions 2.6.0, 2.6.1 and 2.6.2 on PyPI carried a two-stage credential-stealing payload injected directly into xinference/__init__.py, harvesting SSH keys, cloud credentials and environment variables…
StepSecurityTeamPCP -
The Gentlemen ransomware gang hits hundreds of global firms
The Gentlemen has rapidly risen to ransomware prominence as a ransomware-as-a-service outfit that first surfaced in mid-2025, proving itself with a high pace of operations and notable sophistication. According to Check Point Research, the gang has claimed…
Dark ReadingThe Gentlemen -
Microsoft ASP.NET Core 10.03 articles this day · The Hacker News first
Emergency ASP.NET Core patch fixes CVE-2026-40372 Linux/macOS flaw · Microsoft issues emergency fix for ASP.NET Core SYSTEM flaw
-
Emergency ASP.NET Core patch fixes CVE-2026-40372 Linux/macOS flaw
According to Microsoft, an emergency patch was released for ASP[.]NET Core to fix a high-severity vulnerability that could allow unauthenticated attackers to gain SYSTEM privileges on Linux or macOS hosts running the framework. The flaw, tracked as…
-
Microsoft issues emergency fix for ASP.NET Core SYSTEM flaw
Microsoft released out-of-band updates to address a serious ASP[.]NET Core vulnerability tracked as CVE-2026-40372 (CVSS 9.1), with a fix in ASP[.]NET Core version 10.0.7. An attacker could exploit the flaw to gain SYSTEM-level privileges, access sensitive…
-
Microsoft fixes ASP.NET Core privilege escape CVE-2026-40372
Microsoft has released out-of-band updates for ASP[.]NET Core to fix a privilege-escalation vulnerability tracked as CVE-2026-40372, which Microsoft says could allow an attacker to gain SYSTEM privileges over a network. The flaw has a CVSS score of 9.1 out…
-
-
313 Team2 articles this day · SecurityWeek first
Mastodon hit by DDoS attack just days after Bluesky outage · Attackers hit Mastodon social with DDoS after Bluesky outage
2 outlets-
Mastodon hit by DDoS attack just days after Bluesky outage
Mastodon was hit by a major DDoS attack just days after a similar disruption affected Bluesky, with the outage on Mastodon described as significant but resolved within a few hours. The incident timeline shows the issues beginning on 20 April 2026, when the…
Security Affairs -
Attackers hit Mastodon social with DDoS after Bluesky outage
Following a disruption to Bluesky, Mastodon was targeted in a major DDoS attack on its flagship Mastodon[.]social server, causing a “major outage” before mitigations were rolled out and the site came back online. According to the Mastodon status page, the…
SecurityWeek
-
-
Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain
Cybersecurity researchers warn of malicious images pushed to the official checkmarx/kics Docker Hub repository after an alert by Socket. According to Socket, unknown threat actors overwritten existing tags such as v2.1.20 and alpine and introduced a new…
The Hacker News -
Self-Propagating Supply Chain Worm Hijacks npm Packages to Steal Developer Tokens
Cybersecurity researchers have flagged a new self-propagating supply chain worm that compromises npm packages to harvest developer tokens and credentials, spreading via a postinstall hook that activates during installation. The campaign, tracked by Socket…
The Hacker News -
D-Link DIR-823X2 articles this day · SecurityWeek first
Mirai Botnet Hijacks Old DLink Routers Via CVE-2025-29635 · Mirai botnet exploits old D Link routers via CVE-2025-29635 flaw
-
Mirai Botnet Hijacks Old DLink Routers Via CVE-2025-29635
A Mirai botnet is actively exploiting a command injection flaw, tracked as CVE-2025-29635, in discontinued D-Link DIR-823X series routers, according to Akamai. The vulnerability allows attackers to inject commands because an attacker-controlled value is…
-
Mirai botnet exploits old D Link routers via CVE-2025-29635 flaw
A Mirai botnet is targeting discontinued D-Link routers impacted by a command injection vulnerability disclosed a year ago, according to Akamai. Tracked as CVE-2025-29635, the security defect exists because an attacker-controllable function value is copied…
-
-
Wellness apps could face FTC breach rules despite FDA gap
Outside FDA, Inside the Crosshairs: Cybersecurity Risks for General Wellness and Fitness Products notes that low‑risk general wellness devices fall outside active FDA device regulation, but still face regulatory scrutiny. The piece emphasises that the…
DataBreaches -
Microsoft launches AI powered defence to catch flaws early
AI-powered defence is being framed as a response to an AI-accelerated threat landscape, with Microsoft outlining three core actions to strengthen resilience: integrating advanced AI models into vulnerability discovery and mitigations, enhancing AI-ready…
Microsoft -
Attackers Exploit macOS Native Features to Evade Detection
A new study from Cisco Talos, published on 21 April, reveals that a growing range of native macOS features are being repurposed by attackers to execute code, move laterally and evade detection on Apple systems. The research highlights how built‑in tools such…
Infosecurity -
Harvester Deploys Linux GoGra Backdoor Using Outlook for C2
The Harvester threat actor has been attributed a new Linux version of its GoGra backdoor deployed in attacks likely targeting entities in South Asia. According to The Symantec and Carbon Black Threat Hunter Team, the malware uses the legitimate Microsoft…
The Hacker NewsHarvester -
UK NCSC unveils SilentGlass to stop malicious HDMI attacks
The UK National Cyber Security Centre (NCSC) has unveiled SilentGlass, a plug‑and‑play device designed to actively block anything unexpected or malicious between HDMI or display port connections and monitor screens, approved for use in high‑threat…
Infosecurity -
North Korean Fake Job Scam Triggers Contagious Interview Malware
DPRK Fake Job Scams Self-Propagate in 'Contagious Interview' describes a worm-like infection vector that uses compromised developer projects to spread remote access Trojans and other malware through the software supply chain, with a compromised developer’s…
Dark Reading -
School tip service hit by social engineering IDOR breach
BlueLeaks 2.0 has reportedly exposed more than 93 GB of data comprising millions of anonymous crime tips, with DataBreaches[.]Net noting that the dataset includes tips from students and about people, including full names in some cases.
DataBreaches -
UK allocates £90m to boost cyber resilience and Essentials uptake
The UK government has announced a £90m injection into cybersecurity to strengthen the nation’s cyber resilience. According to the National Cyber Security Centre, CYBERUK conference on 22 April 2026 revealed the funding will help provide support to small and…
Infosecurity -
Flaws in Lantronix, Silex serial-IP converters expose 20k devices
Researchers from Forescout Research Vedere Labs found 22 BRIDGE:BREAK flaws in Lantronix and Silex Technology serial-to-IP converters, exposing around 20,000 devices to hijacking and data tampering. Serial-to-IP converters connect legacy serial equipment to…
Security Affairs -
Silent Subject Phishing Hits Executives as Q1 2026 Attacks Rise
A surge in silent subject phishing campaigns targeting high-value users has been identified, with emails arriving without subject lines to lure recipients. According to Cyberproof’s findings on 21 April, the activity—also known as silent subject or null…
Infosecurity -
Cloudflare enables panic unwinding for safer Rust Workers
Cloudflare explains that Rust Workers run Rust compiled to WebAssembly on the Workers platform, but WebAssembly has sharp edges and panics or unexpected aborts could leave a runtime in an undefined state. The team describes how panic unwinding is now…
Cloudflare -
UK NCSC warns hostile states drive most serious cyber attacks
According to Associated Press, the head of the U.K.’s National Cyber Security Centre, Richard Horne, said the most serious cyberattacks in the U.K. are now carried out by hostile nations including Russia, Iran and China. He warned that the U.K. could be…
SecurityWeek -
Fake AI trading site spreads Needle Stealer malware
Malicious trading website drops malware that hands your browser to attackers, published on 22 April 2026, details how Needle Stealer is being distributed through a fake TradingClaw site advertised as an AI trading tool. The campaign uses DLL hijacking, with…
Malwarebytes -
AI vishing bot PlugValley automates credential theft for users
Published on 22 April 2026, How AI Changed Vishing: Case of PlugValley explains how AI-enabled vishing platforms have lowered the skill barrier by combining voice synthesis, caller ID spoofing, scripted call modes, voicemail detection, and real‑time…
SOCRadar -
Kaspersky finds Lotus Wiper malware hits Venezuelan energy firm
A threat actor has used a new wiper malware in recent attacks against the energy and utilities sector, according to Kaspersky. The attack targeted an organisation in Venezuela and relied on two batch scripts to weaken defenses and disrupt operations before…
SecurityWeek -
UK NCSC launches SilentGlass to stop HDMI and DisplayPort attack
The NCSC has launched SilentGlass, a plug-and-play device designed to prevent malicious HDMI and Display Port connections, enhancing cybersecurity for video links on monitors. It is aimed at protecting sensitive data and is already deployed within government…
ncsc.gov.uk -
Researcher claims Claude Desktop installs “spyware” on macOS
Security researcher Alexander Hanff claims Claude Desktop on macOS drops a Native Messaging host manifest into multiple Chromium profiles, effectively allowing a browser extension to interact with a local executable outside the browser sandbox, which he…
Malwarebytes -
SBOMs fall short as supply chain attacks rise despite fresh data
SBOMs were meant to strengthen software supply chain security, but the data have not translated into fewer attacks, with the article noting that five years after their introduction supply chain compromises are more frequent than ever. In March 2026 alone,…
SecurityWeek -
Claude Mythos Finds 271 Firefox Vulnerabilities
Mozilla says Anthropic’s new cybersecurity-focused Claude Mythos AI model has discovered 271 vulnerabilities in Firefox, all of which were patched with the release of version 150. According to Mozilla, more than 40 CVEs have been addressed in Firefox 150,…
-
Ex ransomware negotiator pleads guilty to aiding BlackCat attacks
A former ransomware negotiator has pleaded guilty to secretly working with the BlackCat ransomware group and conspiring to launch attacks against multiple victims across the US. Angelo Martino, 41, of Land O’Lakes, Florida, admitted one count of conspiracy…
InfosecurityBlackCat -
Lotus Wiper strikes Venezuela energy via batch script
Cybersecurity researchers have identified Lotus Wiper, a previously undocumented data wiper used in destructive attacks against Venezuela’s energy and utilities sector at the end of last year and into 2026, according to Kaspersky. The campaign relies on two…
The Hacker News -
North Korean hackers use AppleScript, ClickFix on macOS finance
North Korean hackers have been using AppleScript and the ClickFix technique in fresh macOS attacks against financial organisations, including cryptocurrency, venture capital, and blockchain entities, according to SecurityWeek on 22 April 2026. A campaign…
SecurityWeekSTARDUST CHOLLIMA -
Moltbook AI Agent Social Network Exposes Tokens and Credentials
On 31 January 2026, researchers disclosed that Moltbook, a social network for AI agents, left its database exposed, revealing 35,000 email addresses and 1.5 million agent API tokens across 770,000 active agents. The private messages also contained plaintext…
The Hacker News -
AirSnitch technique lets attackers sniff Wi‑Fi traffic across APs
AirSnitch is a new set of attack techniques disclosed by Unit 42 that can breach Wi‑Fi protections by targeting the wireless infrastructure itself, not just individual devices. The researchers say WPA2 and WPA3‑Enterprise remain widely deployed and that…
unit42.paloaltonetworks.com -
ProxySmart powers worldwide SIM farms, Infrawatch report shows
Cybersecurity researchers have uncovered a Belarus-based software platform called ProxySmart that is powering SIM farms on an “industrial scale,” according to Infrawatch. In a report published on 21 April 2026, Infrawatch identified 87 ProxySmart control…
Infosecurity -
Google Antigravity bug exploited via fake installer to steal data
Google Antigravity has moved from a developer tool to a target for abuse as researchers uncovered a remote code execution vulnerability that could escape the sandbox and run arbitrary code, with Google patching the flaw in late February. Researchers at…
SecurityWeek
