CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 9–13 on weekend days.

Show as table
Articles published per day
DayArticles published
Sun 11 Oct9
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Today, Sun 25 Oct12 so far
Developing
Exploited only
55 articles

Thu 23 Apr· 55 articles

  1. China-Linked Actors Deploy Covert Botnets Using Routers and IoT

    China-backed actors are increasingly using covert networks of compromised routers, IoT and smart devices to carry out attacks with a “low-cost, low-risk, deniable way,” according to this week’s advisory from coordinating cybersecurity bodies. Evidence cited…

    Dark ReadingVolt Typhoon

  2. Frontier AI and the Future of Defense: Your Top Questions Answered

    Frontier AI refers to the most advanced, large‑scale foundational models, such as the recently disclosed Anthropic Mythos model, which can autonomously identify software vulnerabilities, chain exploit paths and adapt to defensive controls in near‑real‑time.…

    unit42.paloaltonetworks.com

  3. Ransomware Kyber boasts postquantum crypto as marketing ploy

    A new ransomware family, called Kyber, is leveraging post-quantum cryptography in its operations to hype the strength of its encryption, claims the Ars Technica report published on 23 April 2026. According to Rapid7, the Windows variant uses ML-KEM1024, the…

    Ars Technica

  4. CISA Flags Marimo RCE Flaw in KEV, Urges Immediate Patching Action

    On 23 April 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-39987, the Marimo Remote Code Execution Vulnerability, to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Marimo’s Marimo product and permits…

    CISACVE-2026-39987CVE-2026-39987Exploited

  5. Fake Chrome Authenticator extension steals 2FA from 260k users

    According to SecuritySnacks, a Chrome extension impersonating Google's Authenticator has been identified as part of an ongoing malicious campaign active since at least early 2026, with the AiFrame infrastructure linked to multiple extensions under the…

    dti.domaintools.com

  6. UNC66922 articles this day · Google Cloud first

    UNC6692 Leverages Teams Impersonation to Deploy Custom Malware · UNC6692 Uses Fake Teams Invite to Deploy Snowmalware Suite

    2 outlets

  7. Rituals Data Leak Exposes Member Names, Emails and Addresses

    Rituals, the luxury cosmetics brand, disclosed a data breach in which attackers gained unauthorised access to its systems and downloaded part of the My Rituals member database. The incident is said to have occurred earlier this month, with Rituals confirming…

    Security Affairs

  8. South Korea fines Duo $830k over 427k member data leak

    Duo Info, South Korea’s leading matchmaking service, was fined $830,000 by the Personal Information Protection Commission (PIPC) after authorities said the personal data of 430,000 members was leaked. According to the PIPC, a work PC belonging to an employee…

    DataBreaches

  9. Tempus AI Faces Class Actions Over Unauthorised Genetic Data Use

    Tempus AI, a publicly traded healthcare artificial intelligence company, is facing multiple class action lawsuits over the alleged unauthorized collection and disclosure of genetic testing results derived from genetic testing by Ambry Genetics Corporation.…

    DataBreaches

  10. Trigona affiliates roll out custom data exfiltration tool

    DataBreaches[.]Net reports that Trigona affiliates have deployed a custom exfiltration tool to streamline data theft, marking a shift from using off‑the‑shelf utilities to a tool that offers granular control over the theft process. The attacks occurred in…

    DataBreachesRhantus

  11. Google Cloud chooses Gemini 3.1 Pro over a separate cyber AI

    Google Cloud’s operations chief has signalled that Google does not plan to release a separate cyber‑focused frontier model, instead favouring high‑quality generalist AI like Gemini3.1 Pro for security needs, the article reports. According to Infosecurity…

    Infosecurity

  12. Microsoft patches IKEv2 flaw allowing SYSTEM code execution

    CVE-2026-33824 describes a remote code execution flaw in the Windows Internet Key Exchange (IKE) service (IKEv2) that centres on a double free vulnerability during IKEv2 fragment reassembly. An unauthenticated, remote attacker could exploit the issue by…

    thezdi.comCVE-2026-33824CVE-2026-33824Exploited

  13. UK Faces Four Major Cyberattacks Weekly, Putting Public at Risk

    Cyberattacks on companies ripple far beyond the breached organisation, with the fallout often landing on ordinary people. The article notes that stolen customer data can lead to identity theft, tax fraud, and credit card fraud, while the ensuing cleanup can…

    Malwarebytes

  14. Bitwarden CLI npm package hijacked to steal developer secrets

    According to StepSecurity, @bitwarden/cli@2026.4.0, the official Bitwarden CLI, was found compromised on npm, with a malicious preinstall hook that silently bootstraps the Bun runtime and launches a 9.7 MB obfuscated credential stealer targeting developer…

    StepSecurity

  15. Cloudsmith raises $72M Series C to tackle AI driven supply risks

    Cloudsmith raised $72 million in a Series C funding round, bringing the company’s total funding to $124 million, announced on 23 April 2026. The round was led by TCV, with additional support from Insight Partners and other previous investors. Founded in 2016…

    SecurityWeek

  16. Chinese APT Abuses Multiple Cloud Tools to Spy on Mongolia

    A newly discovered Chinese APT, dubbed GopherWhisper, has been observed targeting the government of Mongolia, with activity dating back to November 2023 according to researchers. ESET notes that it backdoored 12 systems inside one Mongolian government…

    Dark ReadingSilent Chollima

  17. Claude Code memory files vulnerable to poisoning, Cisco warns

    Bad Memories Still Haunt AI Agents, as researchers warn that mishandled memory files remain a persistent weakness in AI security. In March, Cisco researchers discovered they could compromise the memory files of Anthropic's Claude Code and maintain…

    Dark Reading

  18. Apple iOS and iPadOS4 articles this day · SANS ISC first

    iOS Flaw Let Deleted Notifications Linger, Apple Issues Fix · Apple patches CVE-2026-28950 bug that kept deleted messages

    4 outletsCVE-2026-28950CVE-2026-28950

  19. Bitwarden CLI supply chain attack spreads via malicious bw1.js

    Bitwarden’s CLI has been compromised as part of the ongoing Checkmarx supply chain campaign, with the affected package identified as @bitwarden/cli@2026.4.0 and the malicious code published in bw1[.]js, a file included in the package contents. According to…

    The Hacker NewsTeamPCP

  20. Half a million Britons’ medical data were offered for sale on Alibaba in major UK Biobank breach

    A breach affecting UK Biobank exposed medical data from 500,000 volunteers, with the information offered for sale on Alibaba, according to DataBreaches[.]Net.

    DataBreaches

  21. North Korean hackers steal $290m via LayerZero KelpDAO breach

    ThreatsDay Bulletin highlights a week of cybercrime and threat activity, opening with a $290 million DeFi hack on KelpDAO that LayerZero described as an attack on its RPC infrastructure. According to LayerZero, North Korean threat actors tracked as…

    The Hacker NewsTraderTraitor

  22. Leaked RAMP data reveals Russia ransomware marketplace operations

    A DataBreaches[.]Net post delves into RAMP, describing how Russia’s ransomware marketplace operated as a structured, commercial platform rather than a collection of isolated hackers. The leak covers activity from November 2021 to January 2024 and includes…

    DataBreaches

  23. Mile Bluff Medical Centre hit by cyberattack, phones down

    According to DysruptionHub, Mile Bluff Medical Center in Mauston, Wisconsin, said a security incident involving data encryption disrupted some phone and computer functions, prompting clinical teams to switch to downtime procedures while patient care…

    DataBreaches

  24. Chinese firm claims AI finds nearly half of Tianfu Cup flaws

    A Chinese cybersecurity firm has claimed AI-driven vulnerability discovery capabilities that approach the scale of those attributed to Anthropic’s Claude Mythos, according to Eugenio Benincasa, an ETH Zurich cybersecurity researcher focusing on China. 360…

    SecurityWeekCVE-2026-32190CVE-2026-32190

  25. AI Speed Exploits Shrink Patch Window: Webinar Offers Blueprint

    The Hacker News promotes a webinar titled Mythos Reality Check: Beating Automated Exploitation at AI Speed, published on 23 April 2026. The piece argues that AI-enabled attackers are launching automated, large‑scale exploits at unprecedented speed, shrinking…

    The Hacker News

  26. Google launches secure AI agent IDs with threat detection tools

    Google has launched unique AI agent identities as part of its Gemini Enterprise Agent Platform, a hub to manage agentic AI workflows for both Google-made and external agents. Each agent can be assigned a unique cryptographic ID that is mapped back to defined…

    Infosecurity

  27. UK NCSC warns of China linked botnet using 200k compromised devices

    Defending Against China-Nexus Covert Networks of Compromised Devices explains the growing use by China-nexus actors of large-scale networks of compromised devices, or botnets, to route cyber activity. These covert networks are primarily built from…

    CISAFlax Typhoon

  28. NCSC Warns China linked Hackers Use Router Botnets for Covert Ops

    The advisory from the National Cyber Security Centre (NCSC-UK) and international partners highlights a significant shift in the tactics of China-nexus cyber actors, who are increasingly using large-scale networks of compromised devices (covert networks) for…

    ncsc.gov.uk

  29. UK NCSC releases advisory on China linked covert cyber networks

    International cyber agencies, including the UK's National Cyber Security Centre (NCSC), in cooperation with 15 global partners, have released a new advisory to help organizations defend against cyber threats from covert networks linked to China. These…

    ncsc.gov.uk

  30. China linked router botnet threat rises for UK firms

    The executive summary discusses the growing threat posed by China-nexus cyber actors, who are utilizing sophisticated covert networks made up of compromised devices such as routers. These botnets facilitate a range of malicious activities including…

    ncsc.gov.uk

  31. AI security startup Rilian raises $17.5M to expand platform

    Rilian today announced that it has raised 17.5 million in combined seed and seed extension funding, in a round led by 8VC, First In, and Tamarack Global, with additional support from 8090 Industries, Liquid 2 Ventures, Perot Jain, and Protego Ventures,…

    SecurityWeek

  32. Anthropic AI discovers 27-year-old OpenBSD flaw, alerts big tech

    The Hacker News reports that Anthropic announced Project Glasswing, an AI model so effective at discovering software vulnerabilities that its public release was postponed and access was given to Apple, Microsoft, Google, Amazon, and others to find and patch…

    The Hacker News

  33. Attackers exploit trusted workflows, phishing remains top threat

    The SecurityWeek piece, published on 23 April 2026, reports that new analysis from Abnormal AI shows attackers have shifted away from technical exploits toward weaponising trusted relationships and routine workflows. Phishing remains the primary method,…

    SecurityWeek

  34. Rituals Reports Data Breach Affecting My Rituals Members

    Rituals has disclosed a data breach affecting its My Rituals members, with the incident disclosed on 23 April 2026 and the company saying it occurred earlier this month. The breach involved unauthorized access to and download of some members’ data, and the…

    SecurityWeek

  35. Universities See 63% Rise in Cyber Attacks Globally

    Schools and universities worldwide saw a sharp rise in cyber incidents last year, driven by geopolitical tensions, ransomware and hacktivism, according to Quorum Cyber. The company’s 2026 Global Cyber Risk Outlook for Higher Education, compiled from…

    Infosecurity

  36. RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace

    RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace explains that a leaked database from RAMP covers activity from November 2021 to January 2024 and includes user records, forum threads, private messages, IP logs, and admin activity. The data reveal…

    Security Affairs

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device