News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Thu 7 May· 54 articles
-
Gemini CLI flaw let attackers hijack AI agent via GitHub issue
A critical vulnerability in Gemini CLI could have enabled a supply-chain attack by allowing attackers to inject malicious prompts into a GitHub issue and take over the AI agent used to triage those issues, according to Pillar Security. The flaw, assigned a…
SecurityWeek -
Online Safety Act Fails as Kids Easily Bypass Age Checks
The Malwarebytes piece examines whether the Online Safety Act is delivering the promised protections for children, noting the Act came into effect in July 2025 and a survey based on research by the UK’s Internet Matters sheds light on changes since then,…
Malwarebytes -
Mirai Derivative Botnet xlabs_v1 Hijacks ADB IoT Devices for DDoS
A new Mirai‑derivative botnet named xlabs_v1 has emerged, hijacking internet‑exposed devices running Android Debug Bridge (ADB) to power large‑scale DDoS attacks, with 21 flood techniques across TCP, UDP and raw protocols. Hunt[.]io discovered the bot on an…
Security Affairs -
Office and Windows flaws boost exploit kits in Q1 2026
During Q1 2026, exploit kits targeting user systems expanded again, adding new exploits for the Microsoft Office platform as well as Windows and Linux operating systems. Notable new entries include CVE-2026-21509 and CVE-2026-21514, which are security…
-
CVE-2026-26956: vm2 Sandbox Escape Enables Host RCE in Node.js 25
CVE-2026-26956 is a critical sandbox escape in the vm2 library used to run untrusted JavaScript in Node[.]js, with vm2 version 3.10.4 affected and a fix in 3.10.5. The vulnerability is Node[.]js 25 specific and has been demonstrated on Node[.]js v25.6.1 (x64…
-
Daemon Tools Lite releases clean version after malware scare
The developer of a popular utility software has been forced to release a new version after confirming reports that threat actors managed to hide malware in a previous iteration. Disc Soft said it released the malware-free Version 12.6 of its Daemon Tools…
Infosecurity -
PyPI packages deliver ZiChatBot malware to Windows, Linux
Three PyPI wheel packages—uuid32-utils (1,479 downloads), colorinal (614 downloads) and termncolor (387 downloads)—were uploaded in a narrow window between 16 July and 22 July 2025, and are used to stealthily deliver a malware family called ZiChatBot on…
The Hacker NewsAPT32 -
Security experts warn of rising phishing campaigns on Vercel
Low-skilled threat actors are increasingly abusing legitimate Gen AI platforms to mount convincing phishing campaigns, according to Cofense. The firm says it has observed campaigns based around v0[.]dev, a powerful GenAI tool provided by web application…
Infosecurity -
Claude AI assisted hackers in failed Mexican water utility attack.
Dragos has published a threat intelligence report describing an intrusion into a municipal water and drainage utility in Monterrey, Mexico, in which an unidentified threat actor used Claude AI to assist operations. The attack occurred in January 2026 and was…
SecurityWeek -
Palo Alto Networks PAN-OS2 articles this day · unit42.paloaltonetworks.com first
CISA adds Palo Alto PAN OS flaw CVE-2026-0300 to KEV catalog · Threat Brief: Exploitation of PAN-OS Captive Portal Zero-Day for Unauthenticated Remote Code Execution
-
CISA adds Palo Alto PAN OS flaw CVE-2026-0300 to KEV catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Palo Alto Networks PAN-OS flaw to its Known Exploited Vulnerabilities catalog, tracked as CVE-2026-0300 with a CVSS score of 9.3. The issue is a buffer overflow that allows…
-
Threat Brief: Exploitation of PAN-OS Captive Portal Zero-Day for Unauthenticated Remote Code Execution
The threat brief reports a buffer overflow in the User-ID Authentication Portal (Captive Portal) of PAN-OS, CVE-2026-0300, which allows an unauthenticated attacker to execute arbitrary code with root privileges on PA-Series and VM-Series firewalls by sending…
-
-
Critical vm2 Node.js flaws expose systems to sandbox escapes
A dozen critical vulnerabilities have been disclosed in the vm2 Node[.]js library that could allow sandbox escapes and arbitrary code execution on affected systems. The flaws, listed as CVE-2026-24118, CVE-2026-24120, CVE-2026-24781, CVE-2026-26332,…
-
ISC Stormcast Diary Posted for May 7 2026 with Green Threat Level
ISC Stormcast For Thursday, 7 May 2026 is published, with the diary note and podcast link at https://isc.sans[.]edu/podcastdetail/9922. The page lists a Threat Level of green and identifies the Handler on Duty as Guy Bruneau. It also directs readers to learn…
SANS ISC -
AI Generated Dashboard Adapts to Daily Honeypot Attack Patterns
An Adaptive Cyber Analytics UI for Web Honeypot Logs is explored as a bespoke approach to processing web honeypot data, with the author noting the potential of large language models to tailor user interfaces to daily attack activity. The piece explains that…
SANS ISC
