News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Mon 4 May· 40 articles
-
Latvian jailed 102 months for ransomware gang's 54 company spree
According to the DOJ’s press release, a Latvian national was sentenced to 102 months in prison for his role in a major Russian ransomware organisation that stole from and extorted over 54 companies. Deniss Zolotarjovs (Денисс Золотарёвс), 35, of Moscow,…
DataBreachesKarakurt -
Progress Software MOVEit Automation2 articles this day · The Hacker News first
Progress fixes MOVEit Automation flaws opening door to file hacks · Progress patches critical MOVEit auth bypass, CVE-2026-4670
-
Progress fixes MOVEit Automation flaws opening door to file hacks
Progress Software has fixed two vulnerabilities in MOVEit Automation, a critical authentication bypass flaw tracked as CVE-2026-4670 and a privilege escalation issue tracked as CVE-2026-5174, which, if exploited, could allow attackers to gain unauthorized…
-
Progress patches critical MOVEit auth bypass, CVE-2026-4670
Progress Software has released updates to address two security flaws in MOVEit Automation, including a critical vulnerability that could enable authentication bypass. According to Progress Software, the flaws are CVE-2026-4670 (CVSS 9.8) and CVE-2026-5174…
-
-
Phishing campaign abuses remote tools to stay hidden, experts warn
A stealthy phishing campaign targeting organisations across multiple industries has grown by weaponising legitimate IT management tools to bypass security controls, according to researchers. Security researchers at Securonix say the campaign, tracked as…
Dark Reading -
Trump admin error exposed health workers’ SSNs in Medicare portal
According to The Washington Post, the Trump administration inadvertently exposed the Social Security numbers of health care providers in a database powering a new Medicare portal. The Centers for Medicare and Medicaid Services last year created a directory…
DataBreaches -
WebPros cPanel & WHM and WP2 (WordPress Squared)5 articles this day · SecurityWeek first
Attackers Exploit cPanel Flaw, Endangering Millions of Websites · cPanel auth bypass exploited in Asian gov, MSP attacks
-
Attackers Exploit cPanel Flaw, Endangering Millions of Websites
A critical authentication bypass flaw in cPanel software products has been heavily exploited across multiple threat actors shortly after public disclosure, risking millions of websites via tens of thousands of compromised instances. On 28 April the vendor…
-
cPanel auth bypass exploited in Asian gov, MSP attacks
Attackers are exploiting a critical cPanel authentication bypass flaw, CVE-2026-41940, to target government and military organisations in Southeast Asia, along with MSPs and hosting providers in the Philippines, Laos, Canada, South Africa, and the United…
-
Hacker News Weekly: Exploits Outpace Patches, Systems at Risk.
The Hacker News’ weekly recap, published by Ravie Lakshmanan on 4 May 2026, tracks a week in which attackers moved faster than patches, turning shift patterns from breach to occupation and weaponising trusted pipelines. The piece highlights active…
-
Critical cPanel Vulnerability Weaponized to Target Government and MSP Networks
According to Ctrl-Alt-Intel, a previously unknown threat actor has been observed targeting government and military entities in Southeast Asia, along with MSPs and hosting providers in the Philippines, Laos, Canada, South Africa and the U.S., exploiting the…
-
Attackers hit over 40k cPanel servers via CVE-2026-41940 flaw
Over 40,000 servers have likely been compromised as attackers intensified exploitation of a recently patched cPanel zero-day, CVE-2026-41940. According to The Shadowserver Foundation, threat actors are exploiting this critical authentication-bypass…
-
-
Cisco Moves to Acquire Astrix Security to Tackle Non-Human Identity Risks
Cisco on Monday announced its intent to acquire Astrix Security, a startup focused on securing non-human identities such as API keys, service accounts, and OAuth tokens increasingly used by applications and AI agents, according to SecurityWeek. The deal aims…
SecurityWeek -
PSEA data breach settlement offers up to $5,000 compensation
According to RG/2 Claims Administration LLC, as Settlement Administrator, a proposed Settlement has been reached in a class action known as Melanie Hudson, et al. v. Pennsylvania State Education Association, Case No. 2025-CV-02411, filed in the Court of…
DataBreaches -
Attackers Abuse SSA Phish to Plant Dual RMM Backdoors
An active phishing campaign codenamed VENOMOUS#HELPER has been observed targeting multiple vectors since at least April 2025, using legitimate Remote Monitoring and Management (RMM) software to gain persistent remote access to compromised hosts, according to…
The Hacker News -
TeamPCP2 articles this day · SANS ISC first
Hackers breach Trellix source code repo, law enforcement notified · Supply chain worm compromises SAP, PyTorch, Intercom packages
2 outlets-
Hackers breach Trellix source code repo, law enforcement notified
According to Trellix, a part of its source code repository was recently breached, and the company is working with forensic experts as law enforcement has been notified. The cybersecurity firm says, based on its investigation to date, there is no evidence…
SecurityWeek -
Supply chain worm compromises SAP, PyTorch, Intercom packages
The most significant development of the week was the April 29 to 30 Mini Shai-Hulud worm, a self-propagating supply chain campaign that compromised four official SAP npm packages, two PyTorch Lightning PyPI versions, two intercom-client npm versions, and the…
SANS ISC
-
-
Fake code of conduct phishing steals tokens via Microsoft AiTM
According to Microsoft Defender Security Research Team and Microsoft Threat Intelligence, phishing campaigns themed around a code of conduct used a multi-stage AiTM flow to harvest credentials, affecting tens of thousands of users across 13,000 organisations…
Microsoft -
Small businesses hit by cyber tax raise prices to survive
This week on the Lock and Code podcast, Malwarebytes discusses what it calls the “cyber tax” as a consequence of a rising wave of attacks on small businesses. According to the Identity Theft Resource Center, 81% of small- and medium-sized businesses suffered…
Malwarebytes -
DShield Honeypot Updated for Ubuntu 26.04 and New Raspberry Pi OS
According to Johannes Ullrich, the DShield honeypot will receive a couple of major updates this week, with automatic updates proceeding if that option is enabled. The changes include improved compatibility with Ubuntu 26.04 and newer Raspberry Pi OS…
SANS ISC -
Airbus leads cyber M&A surge with Quarkslab AI defence deal
Thirty-three cybersecurity-related merger and acquisition deals were announced in April 2026, including Airbus to acquire Quarkslab, Cyera acquiring Ryft, Everfield acquiring Rhebo, Fortra acquiring Zero-Point Security, Palo Alto Networks to acquire Portkey,…
SecurityWeek -
DigiCert Revokes 60 Certificates After Support Portal Breach
DigiCert revoked certificates after its internal support portal was compromised in a cyberattack, with malware delivered via a customer chat channel that infected an analyst’s system. The attack occurred on 2 April 2026, and the malware was first identified…
SecurityWeek -
US defence contractors warned of nation state edge device attacks
According to Team Cymru, the US defence industrial base has become a prime target for nation-state hacking groups, yet small defence contractors critically lack network telemetry to detect these threats. In an article published on 29 April, Stephen Campbell,…
InfosecurityVolt Typhoon -
AI Boosted Cybercrime Surges as Malicious npm Packages Top 450k
The Hacker News argues that 2025 into 2026 marks a turning point for AI-assisted cyber attacks, with LLM-backed tools moving from helpful aids to end‑to‑end capabilities that accelerate wrongdoing. The piece notes that measures of cybercrime frequency and…
The Hacker News -
Void Arachne2 articles this day · Dark Reading first
Silver Fox Tax Phishing Hits Russia, India with ABCDoor · Silver Fox Uses Tax Scams to Deploy ABCDoor and ValleyRAT
2 outlets-
Silver Fox Tax Phishing Hits Russia, India with ABCDoor
The China-based cybercrime group known as Silver Fox has been linked to a new campaign targeting organisations in Russia and India with a malware called ABCDoor, delivered through tax-themed phishing. According to Kaspersky, the phishing emails mimic notices…
The Hacker News -
Silver Fox Uses Tax Scams to Deploy ABCDoor and ValleyRAT
Chinese threat actor Silver Fox is behind a wave of malicious emails aimed at organisations in Russia and India, targeting tax-themed lures to deliver a previously undocumented ABCDoor backdoor and the ValleyRAT remote access trojan. According to Kaspersky…
Dark Reading
-
-
AI Powered Scams Rise as Deepfake Calls Cost Firms Millions
According to SOCRadar, AI is reshaping threat activity, enabling hyper-fast, scalable attacks such as personalised phishing, deepfake video calls, voice cloning, and self-mutating malware that can run intrusion chains with minimal human involvement. The…
-
Phishing gang steals 30k Facebook ads via Google AppSheet
Researchers have uncovered a long-running phishing operation that abuses trusted Google services to hijack tens of thousands of Facebook accounts. The compromised accounts are mainly business and advertiser profiles, which criminals can monetise after…
Malwarebytes -
Dark Reading's 2006 launch hit 300k views on first person story
According to TechTarget and Informa Tech’s Digital Business Combine, sometime in late February 2006 my phone rang with news from my boss, Steve Saunders, who had bought the URL darkreading[.]com and was considering a security site. He projected an early May…
Dark Reading -
Fake FIFA World Cup 2026 sites flood web with crypto travel scams
The FIFA World Cup 2026 is scheduled to begin 11 June across the US, Canada, and Mexico, and Malwarebytes reports a surge of scam sites using World Cup branding across four main categories: crypto, travel, merchandise, and predictions. One crypto site…
Malwarebytes -
Linux Kernel2 articles this day · Security Affairs first
CISA Warns of Active Exploitation of Linux Kernel Copy Fail Flaw · CISA flags Linux kernel CVE-2026-31431, urgent patch by May 15
-
CISA Warns of Active Exploitation of Linux Kernel Copy Fail Flaw
SecurityWeek reports that exploitation of the Linux kernel flaw known as Copy Fail (CVE-2026-31431) has begun, with CISA adding the bug to its Known Exploited Vulnerabilities list and Microsoft noting limited in-the-wild activity largely tied to PoC testing.…
-
CISA flags Linux kernel CVE-2026-31431, urgent patch by May 15
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a flaw in the Linux Kernel, tracked as CVE-2026-31431, to its Known Exploited Vulnerabilities (KEV) catalog, with a CVSS score of 7.8. The vulnerability, nicknamed Copy Fail, enables…
-
-
Attackers abuse Amazon SES for convincing phishing and BEC emails
Phishing campaigns and BEC attacks are increasingly delivered via Amazon SES, a cloud-based email platform that attackers misuse to bypass typical email security. According to Securelist, the technique relies on legitimate infrastructure, with emails passing…
securelist.com -
OpenAI rolls out Advanced Account Security with security keys
OpenAI has introduced Advanced Account Security for ChatGPT users, targeting those at increased risk of targeted hacking attacks and others seeking extra protection. The opt‑in feature strengthens sign‑in by disabling password‑based login and requiring…
SecurityWeek -
AI driven vulnerability hunt forces urgent patch wave, NCSC warns
The UK’s National Cyber Security Centre (NCSC) warns that artificial intelligence is accelerating the discovery of software vulnerabilities, likely triggering a rapid “patch wave” of urgent updates. According to the NCSC, skilled attackers using AI can…
Security Affairs -
Dark web lists WhatsApp data, Indian bank VPN for sale
On 4 May 2026, SOCRadar reported a batch of underground posts detailing a range of data and tool sales, including a claim of 20.65 million Indonesian WhatsApp numbers being shared. According to SOCRadar Dark Web Team, there was a separate listing advertising…
-
ShinyHunters2 articles this day · DataBreaches first
Instructure breach exposes 275M as ShinyHunters leaks data · ShinyHunters strike Instructure again, exposing 275m records
2 outlets-
Instructure breach exposes 275M as ShinyHunters leaks data
SecurityWeek reports that education technology company Instructure disclosed on 30 April 2026 that a cyberattack also resulted in a data breach, with access to names, email addresses, and student ID numbers, as well as user messages. The incident was…
SecurityWeek -
ShinyHunters strike Instructure again, exposing 275m records
Instructure has disclosed a second data breach in less than a year, reportedly carried out by threat actors known as ShinyHunters. The breach follows an April 2026 incident in which some customers experienced limited disruptions to tools relying on API keys,…
DataBreaches
-
-
Malwarebytes flags cPanel flaw putting millions of sites at risk
Malwarebytes Labs published a week-in-security roundup for April 27–May 3, 2026, on May 4, 2026. The piece points readers to several posts from that period, including an actively exploited cPanel bug that exposes millions of websites to takeover (May 1,…
Malwarebytes -
Bluekit phishing kit adds AI tools and 40+ website templates
Bluekit is a newly discovered phishing kit still in development that combines AI features with automated domain setup and a centralised dashboard for campaign management. According to Varonis Threat Labs, it offers over 40 website templates and tools for…
Security Affairs -
Operation Level Up nets 276 arrests in global crypto scam bust
A coordinated international operation led by Dubai Police under the UAE Ministry of Interior, in partnership with the FBI and the Chinese Ministry of Public Security, has arrested at least 276 suspects and shut down nine crypto scam centres used to defraud…
The Hacker News -
ISC Stormcast Episode Out, Threat Level Green for May 4, 2026
ISC Stormcast for Monday, 4 May 2026 notes a posted episode and directs readers to the podcast detail at 9916 for more information. According to Didier Stevens, the handler on duty, the publication carries a threat level described as green. The page invites…
SANS ISC
