News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Thu 23 Apr· 55 articles
-
AI pen test agent Zealot hacks GCP, steals data autonomously
Palo Alto Networks has developed Zealot, a multi-agent penetration testing proof-of-concept designed to test whether an AI system can autonomously hack a cloud environment. Zealot was tested against an isolated Google Cloud Platform environment with…
SecurityWeek -
AI agents autonomously breach Google Cloud in Zealot PoC test
According to Unit 42, researchers built a multi-agent penetration testing PoC to test autonomous AI offensive capabilities in cloud environments, naming the agent Zealot and coordinating three specialist agents: Infrastructure, Application Security and Cloud…
unit42.paloaltonetworks.com -
AI agents exploit cloud misconfigurations in rapid Zealot PoC test
The Zealot PoC from Palo Alto Networks’ Unit 42 demonstrates AI agents carrying out end-to-end cloud attacks with minimal human direction, exploiting common misconfigurations in a deliberately set up Google Cloud Platform environment. The researchers built…
Dark Reading -
Indirect prompt injection attacks hijack AI agents for fraud
Security researchers have unveiled 10 new indirect prompt injection (IPI) payloads targeting AI agents, designed to enable financial fraud, data destruction, API key theft and more, according to Infosecurity Magazine. The attack chain involves poisoning web…
Infosecurity -
Microsoft Defender2 articles this day · SecurityWeek first
CISA urges patch Microsoft Defender flaw CVE-2026-33825 by May 6 · Recent Microsoft Defender Vulnerability Exploited as Zero-Day
-
CISA urges patch Microsoft Defender flaw CVE-2026-33825 by May 6
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a flaw in Microsoft Defender to its Known Exploited Vulnerabilities (KEV) catalog, tracked as CVE-2026-33825 with a CVSS score of 7.8. The flaw can be exploited to achieve privilege…
-
Recent Microsoft Defender Vulnerability Exploited as Zero-Day
SecurityWeek reports that a recently disclosed privilege escalation vulnerability in Microsoft Defender has been exploited in the wild as a zero-day using publicly available PoC code, tracked as CVE-2026-33825 with a CVSS of 7.8. Patched on 14 April, the…
-
-
APT GopherWhisper hits Mongolian govt with Go based backdoors
The Hacker News reports that a China-aligned advanced persistent threat group tracked as GopherWhisper has infected 12 Mongolian government systems with Go-based backdoors, according to ESET. The attackers are said to wield a wide array of Golang tools,…
The Hacker NewsSilent Chollima -
Apple iOS and iPadOS2 articles this day · The Hacker News first
Apple patches iOS bug letting deleted Signal messages resurface · Apple Patches iOS Flaw That Stored Deleted Signal Notifications in FBI Forensic Case
-
Apple patches iOS bug letting deleted Signal messages resurface
Apple has rolled out iOS and iPadOS updates to patch a vulnerability that could allow deleted messages to be recovered, tracked as CVE-2026-28950. The fixes, in iOS 26.4.2, iPadOS 26.4.2, iOS 18.7.8 and iPadOS 18.7.8, address a logging issue that kept…
-
Apple Patches iOS Flaw That Stored Deleted Signal Notifications in FBI Forensic Case
Apple has released a patch for iOS and iPadOS to fix a Notification Services flaw that could cause notifications marked for deletion to be retained on the device, tracked as CVE-2026-28950. The advisory describes it as a logging issue corrected by improved…
-
-
NCSC backs passkeys as first choice login, urges password shift
The UK’s National Cyber Security Centre (NCSC) has fully backed passkeys, stating that it should now be consumers’ first choice of login. According to NCSC, this follows a year‑long shift as the agency observed progress across the passkey ecosystem and saw…
Infosecurity -
Vercel Finds More Compromised Accounts After Context[.]ai Breach
Vercel revealed on 23 April 2026 that it has identified an additional set of customer accounts compromised as part of its security incident, expanding its investigation to include extra compromise indicators and reviews of network requests and environment…
The Hacker News -
Roblox to require age verification for all users starting May
According to Alabama Attorney General Steve Marshall, Roblox must now run age checks on everyone via facial age estimation or a government ID starting May 1, with the requirement applying to both new and existing accounts and a new duty to monitor account…
Malwarebytes -
Harvester Group Uses GoGra Backdoor via Outlook Graph API
A new GoGra Linux backdoor uses Microsoft Graph API and an Outlook inbox to deliver payloads, making it stealthy and hard to detect, according to Broadcom Symantec. The GoGra Linux variant is linked to the Harvester cyberespionage group, which is believed to…
Security AffairsHarvester -
ISC Stormcast Shows Green Threat Level, Points to SANS Teaching
According to Internet Storm Center, ISC Stormcast for Thursday, April 23rd, 2026 is available, with a Handler on Duty listed as Jesse La Grew. The diary page confirms the Threat Level as green for that date. It also invites readers to click to learn more…
SANS ISC -
NCSC urges UK public to use passkeys for improved security
The National Cyber Security Centre (NCSC) in the UK advocates for the use of passkeys over traditional passwords for online authentication. Passkeys offer a more secure and user-friendly method for logging into online accounts, significantly enhancing…
ncsc.gov.uk
