News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Fri 1 May· 43 articles
-
Threat actors exfiltrate data 4x faster via endpoint gaps
The article notes that the 2026 Unit 42 Global Incident Response Report shows threat actors are now moving four times faster to exfiltration than in 2025, with attackers deliberately exploiting blind spots created by relying on endpoint data. It highlights…
unit42.paloaltonetworks.com -
Linux Kernel2 articles this day · Infosecurity first
CISA Flags Linux Kernel Flaw CVE-2026-31431 in KEV Catalog · AI tool finds 2017 Linux kernel zero day CVE-2026-31431
-
CISA Flags Linux Kernel Flaw CVE-2026-31431 in KEV Catalog
CISA has added CVE‑2026‑31431 to its Known Exploited Vulnerabilities catalogue, affecting the Linux kernel produced by the Linux vendor. The vulnerability, named Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability, allows an attacker to…
-
AI tool finds 2017 Linux kernel zero day CVE-2026-31431
A new high-security zero-day vulnerability that has lurked in the Linux kernel since 2017 has just been found with the help of AI, in a discovery by Taeyang Lee, a vulnerability researcher at offensive security firm Theori. Lee used Xint Code, a source code…
-
-
Cloudflare wraps up Code Orange Fail Small, strengthens network
Code Orange: Fail Small is complete, and Cloudflare says the result is a stronger network. Over the past two and a bit quarters, the project delivered safer configuration changes, reduced the impact of failures, and revamped incident management and…
Cloudflare -
North Korea Holds 76% of Stolen Crypto in 2026 After Big Hacks
The article reports that 76% of all crypto stolen in 2026 is now in Pyongyang, North Korea, based on data analysed by TRM Labs. It notes that almost all of North Korea’s crypto winnings from January to April this year came from two incidents: an attack…
Dark ReadingTraderTraitor -
Canonical hit by cross border DDoS, Ubuntu services down
Ubuntu infrastructure operated by Canonical has been offline since Thursday morning, with attempts to connect to most Ubuntu and Canonical webpages and download OS updates failing over the past 24 hours. Updates from mirror sites have continued to work…
Ars Technica -
Malvertising pushes MacSync Stealer via fake Homebrew site
Malicious ads targeting macOS are on the rise, with a page impersonating Homebrew used to push MacSync Stealer to potential victims. The diary notes the example appeared on Thursday, 30 April 2026, and that the fake Homebrew page at…
SANS ISC -
Thomson Reuters sued over SSN display under Michigan privacy law
A class of Michiganders has filed a federal lawsuit in the U.S. District Court for the Eastern District of Michigan alleging that Thomson Reuters search engines publicly displayed their Social Security numbers. The case, filed on a Thursday, argues the…
DataBreaches -
Phishing via Google AppSheet compromises 30000 Facebook accounts
The article discusses a significant cybersecurity breach where approximately 30,000 Facebook accounts were hacked through a phishing campaign utilizing Google AppSheet. The article highlights methods employed by attackers, the significance of such…
The Hacker News -
Lazarus Exploits Fake Interviews to Steal Developer Credentials
According to LAZARUS, the DPRK Contagious Interview campaign represents a mature evolution of intrusion tradecraft that weaponises legitimate hiring workflows to induce execution of malicious code within trusted developer environments. The campaign targets…
dti.domaintools.comLazarus Group -
Delta Dental penalised $2.25M for MOVEit breach response lapses
According to the New York State Department of Financial Services, Delta Dental Insurance Company (DDIC) and Delta Dental of New York, Inc. (DDNY) will pay a $2.25 million penalty for violations of 23 NYCRR Part 500, following a 2023 MOVEit Transfer breach…
DataBreaches -
GPT5.5 matches Mythos Preview in UK AI Security Institute tests
Last month, the UK’s AI Security Institute (AISI) (which has run 95 Capture the Flag challenges since 2023) found that OpenAI’s GPT-5.5 reached a similar level of performance on their cyber evaluations as Mythos Preview, despite Mythos’ hype. On expert…
Ars Technica -
FBI warns of cyber enabled cargo theft costing $725 million
The FBI has issued a Public Service Announcement warning of a surge in cyber-enabled cargo theft, as hackers increasingly target brokers and carriers and impersonate legitimate businesses to hijack freight. Since 2024, attackers have used phishing emails,…
Security Affairs -
In Other News: Scattered Spider Hacker Arrested, SOC Effectiveness Metrics, NSA Tool Vulnerability
In Other News highlights a busy week, led by OFAC designation of two cryptocurrency wallets tied to Iran’s Central Bank, with Tether freezing about $344 million in USDT across the addresses and roughly $370 million having accumulated through nearly 1,000…
SecurityWeekScattered Spider -
Microsoft Agent 365 GA release adds shadow AI detection
Microsoft Agent 365 is now generally available for commercial customers, with general availability announced alongside new capabilities and integrations to help organisations observe, govern and secure agent activity across local, cloud and SaaS…
Microsoft -
AI coding agent wipes production database after rushed deployment
The article argues that AI misbehaviour in production isn’t a fault of AI itself but of organisations rushing AI agent integrations into live environments without adequate security testing. It describes a case where an AI coding agent, Cursor running…
Dark Reading -
Google Hikes Android Bounty to $1.5M, Trims Chrome Rewards
Google has overhauled its Vulnerability Reward Programs for Chrome and Android in response to a surge in AI-enabled vulnerability discovery, with Android rewards rising even as Chrome payouts fall. The maximum Android VRP payouts have increased, with…
SecurityWeek -
Vishing Trick Fuels Swift SaaS Breach by Cordial & Snarky Spiders
Two cybercrime groups, Cordial Spider (aka BlackFile, CL-CRI-1116, O-UNC-045, and UNC6671) and Snarky Spider (aka O-UNC-025 and UNC6661), have been linked to rapid, high‑impact extortion campaigns that operate largely inside trusted SaaS environments.…
The Hacker NewsCordial Spider -
China-Linked Hackers Target Asian Governments, NATO State, Journalists, and Activists
According to Trend Micro, researchers have disclosed a China-aligned espionage campaign dubbed SHADOW-EARTH-053 that targets government and defence sectors across South, East and Southeast Asia, plus one NATO country. The group is described as active since…
-
Jerry’s Store leaks 345,000 stolen cards after Cursor AI code flaw
According to CyberNews, Jerry’s Store, a card-checking service used by cybercriminals, exposed 345,000 stolen payment cards after leaving its server open. The leak occurred because Cursor AI generated flawed code without authentication, leaving an…
Security Affairs -
Introducing Dynamic Workflows: durable execution that follows the tenant
Dynamic Workflows combines durably executing workflows with dynamic tenant-specific deployment, enabling a single Worker to dispatch runs to each tenant’s own code while preserving state across hours, days or deploys. The feature sits on top of Cloudflare…
Cloudflare -
Remembering Ayrton Senna: F1 Legend Lost in Imola Crash 1994
Never forgotten. In memoriam, Ayrton Senna, the greatest Formula One driver of all times, lost to this world on 1 May 1994 in a terrible crash at Imola. In the years following his death, some have matched or exceeded his record, but none of them could hold a…
DataBreaches -
Dark Reading turns 20, launches cartoon caption contest for fans
Dark Reading turned 20 on May 1, and it is celebrating by reviving the Name That Toon contest. According to Dark Reading, the cartoon by John Klossner invites readers to caption the 2006–2026 contrast scene, with a May 26 deadline for submissions. A panel of…
Dark Reading -
Dark Reading Marks 20 Years with Multimedia Anniversary Series
According to Dark Reading, the publication marks 20 years of cyber coverage with a month-long programme of anniversary content. On this day in 2006, Dark Reading went live, and editor-in-chief Kelly Jackson Higgins explains that the aim has always been to…
Dark Reading -
Anthropic launches Claude Security beta to scan enterprise code
Anthropic has launched Claude Security in public beta for its Claude Enterprise customers, expanding from its previous Claude Code Security tool. Built on Claude Opus 4.7, it scans codebases to find and patch software vulnerabilities, offering scheduled and…
Infosecurity -
CISA releases agentic AI security guide for safer adoption
The guidance on careful adoption of agentic AI services was published on 1 May 2026 by CISA, in collaboration with the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) and other international and U.S. partners. According to…
CISA -
BlackCat3 articles this day · The Hacker News first
US cyber experts jailed in BlackCat ransomware plot · US cybersecurity duo jailed for aiding BlackCat ransomware gang
3 outlets-
US cyber experts jailed in BlackCat ransomware plot
Two US cybersecurity professionals have been given four-year prison sentences after pleading guilty to conspiracy to obstruct or affect interstate commerce by extortion, according to SecurityWeek. Ryan Goldberg of Georgia and Kevin Martin of Texas were both…
SecurityWeek -
US cybersecurity duo jailed for aiding BlackCat ransomware gang
Two American cybersecurity workers have been jailed for helping the BlackCat ransomware gang conduct attacks against multiple organisations in the US. Ryan Goldberg, 40, of Georgia, and Kevin Martin, 36, of Texas, were each sentenced to four years in prison…
Infosecurity -
Cybersecurity Experts Jailed Over BlackCat Ransomware Scheme
According to the DoJ, two cybersecurity professionals—Ryan Goldberg, 40, of Georgia, and Kevin Martin, 36, of Texas—were sentenced to four years in prison for their roles in facilitating BlackCat ransomware attacks in 2023, having pleaded guilty in December…
The Hacker News
-
-
Bain Capital May Be Liable for PowerSchool Pre Acquisition Breach
According to JDSupra, a California federal judge allowed claims against Bain Capital to proceed based on a data breach at its subsidiary PowerSchool, a case that suggests private equity firms may be held liable for cybersecurity failures at portfolio…
DataBreaches -
Stealthy Python backdoor Deep#Door spies on Windows PCs
A newly identified stealthy Python-based backdoor framework provides attackers with persistent remote command execution and surveillance capabilities on Windows computers, according to Securonix. The malware’s infection chain starts with a batch script that…
SecurityWeek -
Critical cPanel WHM bypass lets attackers hijack admin access
Security researchers have identified a critical authentication-bypass vulnerability (CVE-2026-41940) in cPanel and WebHost Manager (WHM) affecting millions of websites. Attackers can exploit this flaw to gain administrative access without credentials, posing…
-
Student sparks WiFi outage across Michigan schools
Kentwood Public Schools said districtwide Wi‑Fi was disrupted after a student used malicious software designed to interfere with the school system’s network. Outside experts helped isolate the issue, which affected Wi‑Fi connectivity across its 16 schools in…
DataBreaches -
MSPs Struggle to Sell Cybersecurity Amid Low Client Urgency
The Hacker News outlines five core go-to-market challenges that MSPs face when selling cybersecurity, with Cynomi’s GTM Academy framing the fixes. Data shows that 77% of MSPs identify a lack of client urgency as a major obstacle, highlighting how technical…
The Hacker News -
Cisco launches open source tool to trace AI model origins
Cisco has released an open source tool called Model Provenance Kit to help organisations manage risks around third‑party AI models, including poisoned or vulnerable models and regulatory and supply chain issues. The Python‑based toolkit and command‑line…
SecurityWeek -
Prompt Injection Via Email Surges, Darktrace Warns
Prompt injection via email is a newly emerging risk where malicious or manipulative instructions are hidden in content AI systems will process, such as emails, documents and chat histories. Darktrace notes a 90% increase in signals of potential prompt…
darktrace.com -
Supply chain attack hits RubyGems, Go modules to steal credentials
A new software supply chain campaign has been observed using sleeper packages in RubyGems and Go modules to push malicious payloads that enable credential theft, GitHub Actions tampering and SSH persistence. The activity has been attributed to the GitHub…
The Hacker News -
Anthropic Launches Claude Security to Fight AI Cyber Threats
Anthropic has launched Claude Security to help defenders keep pace with a surge in AI-powered cyberattacks, saying that rapid tooling like Mythos can drastically shorten the window from discovery to exploitation. Claude Security is currently in public beta…
Security Affairs -
SonicWall patches three SonicOS flaws in Gen 6, 7 and 8 firewalls. Patch them now
SonicWall has released urgent firmware updates to fix three SonicOS vulnerabilities in Gen 6, Gen 7, and Gen 8 firewalls, with attackers potentially bypassing security controls, accessing restricted services, or crashing devices. The most severe flaw is…
-
AI Model Repos on Hugging Face and ClawHub Host Trojans
Threat actors are using trojanized shared files to distribute malware via AI distribution platforms such as Hugging Face and ClawHub, according to Acronis. The campaign involves social engineering to trick users into downloading files that execute commands,…
SecurityWeek
