News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Mon 11 May· 52 articles
-
Linux3 articles this day · Infosecurity first
Dirty Frag Linux kernel flaw lets users gain root, patches issued · Dirty Frag exploit released, putting Linux root at risk
-
Dirty Frag Linux kernel flaw lets users gain root, patches issued
Linux systems are again under pressure after a second severe kernel vulnerability in as many weeks, this time called Dirty Frag, which can let low-privilege users, including those in virtual machines, gain root access in vulnerable Linux distributions. The…
-
Dirty Frag exploit released, putting Linux root at risk
A public exploit for the nine-year-old Linux kernel vulnerability, dubbed “Dirty Frag,” has been published, with the PoC exploit circulating after Hyunwoo Kim disclosed the flaw on X. The vulnerability chain affects a wide range of Linux distributions,…
-
Linux Kernel Dirty Frag Flaws Trigger Urgent Patch Rollout
Major Linux distributions are rushing to fix two new vulnerabilities after the disclosure embargo was broken. The vulnerability, comprised of two chained issues in subsystems of the Linux kernel and known as ‘Dirty Frag,’ was detected in late April 2026 by…
-
-
Apple Patches Everything, (Mon, May 11th)
According to SANS™ Internet Storm Center, the latest issue of its Stormcast for 11 May 2026 covers topics including New Linux Priv Escalation, PAM Backdoors, CPanel Updates, and Let’s Encrypt. The page also notes that it is a daily podcast summarising…
SANS ISC -
AD CS Abuse via CVE-2022-26923 Drives Privilege Escalation Wave
Active Directory Certificate Services (AD CS) sits at the heart of Windows PKI but is frequently misconfigured, creating high-risk surfaces for privilege escalation and impersonation in modern networks. Unit 42 notes that attacks rely less on zero‑days or…
-
Gentlemen Ransomware Group leaks internal chats after breach
The article reports that The Gentlemen Ransomware Group, which surfaced as a ransomware-as-a-service operation in mid-2025, became the victim of a data breach, with internal correspondence spreading online. Hints of the breach first surfaced on 4 May in a…
DataBreachesThe Gentlemen -
FCC Softens Ban on Foreign-Made Routers
The Federal Communications Commission has eased some restrictions on foreign-made consumer routers and will permit vendors to continue issuing software and firmware updates for already-deployed devices in the US through at least January 2029. The decision…
Dark Reading -
Mini Shai-Hulud Is Back: A Self-Spreading Supply Chain Attack Hits the npm Ecosystem
The Mini Shai-Hulud worm is actively compromising legitimate npm packages by hijacking CI/CD pipelines and stealing developer secrets, and according to StepSecurity's OSS Package Security Feed the attack began with ten malicious versions of official…
StepSecurity -
Malicious npm worm hits TanStack Router, stealing secrets
According to StepSecurity's OSS Package Security Feed, the Shai-Hulud worm compromised 5 official @tanstack packages across 10 malicious versions, injecting credential-stealing malware into a popular React routing library. On May 11, 2026, at approximately…
StepSecurity -
Compromised @tanstack packages steal AWS, GitHub tokens
On 11 May 2026, StepSecurity’s OSS Package Security feed flagged the latest releases of several @tanstack/* packages on npm as malicious, describing a coordinated supply-chain attack that poisoned multiple TanStack Router packages with an install-time…
StepSecurity -
Human vigilance beats tech gaps as BEC soars, Microsoft warns
Tech can't be expected to stop every threat, the piece argues, because technical controls can only do so much and must be complemented by vigilant human behaviour. It highlights four attack trends where employees become the frontline defence, with BEC…
Dark Reading -
Elastic Security rolls out AI chat UI with security dashboards
According to David Elgut, 12 May 2026, Elastic Security is the first security vendor to ship an interactive UI in AI tools, allowing analysts to triage alerts, hunt threats, correlate attack chains, and open cases all from inside the AI conversation. The…
elastic.co -
TeamPCP3 articles this day · SecurityWeek first
TeamPCP Tweaks Checkmarx Jenkins Plugin After KICS Attack · InvisiRisk BAF Stops SolarWinds‑Style Supply‑Chain Attacks
2 outlets-
TeamPCP Tweaks Checkmarx Jenkins Plugin After KICS Attack
TeamPCP is behind a modified version of the Jenkins AST plugin for Checkmarx, published to the Jenkins Marketplace weeks after the KICS Docker image supply chain attack. Checkmarx warned users to ensure they are running version 2.0.13-829.vc72453fa_1c16…
The Hacker News -
InvisiRisk BAF Stops SolarWinds‑Style Supply‑Chain Attacks
SecurityWeek reports that build application firewalls (BAFs) inspect runtime behaviour inside the software build pipeline rather than merely scanning code, with InvisiRisk’s BAF designed to enforce policy during the build. It notes the SolarWinds supply…
SecurityWeek -
Malicious Checkmarx Jenkins Plugin Found in Supply Chain Attack
A malicious version of the Checkmarx Jenkins AST plugin was published to the Jenkins Marketplace as part of a supply chain attack, SecurityWeek reports. According to Checkmarx, users should ensure they are running version 2.0.13-829.vc72453fa_1c16 of the…
SecurityWeek
-
-
SailPoint Secures GitHub Breach, Says No Customer Data Leaked
SailPoint disclosed that unauthorized access to a subset of its GitHub repositories occurred on 20 April 2026, with the incident quickly contained after being detected by its incident response team, aided by a third‑party cybersecurity firm. The company…
Security Affairs -
Mr_Rot13 Exploits Critical cPanel Flaw, Deploys Filemanager
A threat actor named Mr_Rot13 has been attributed to exploiting a recently disclosed critical cPanel flaw to deploy a backdoor codenamed Filemanager on compromised environments. The attack targets CVE-2026-41940, a vulnerability in cPanel and WebHost Manager…
-
Frame Security raises $50M for AI driven phishing defence
Frame Security emerged from stealth mode on Monday with $50 million in funding for its AI-powered awareness and training platform. The investment came from Team8, Index Ventures, Picture Capital, Elad Gil, Cerca Partners, and Tesonet. US- and Israel-based…
SecurityWeek -
Exposed DICOM servers risk patient privacy and invite ransomware
The DataBreaches[.]net post, published on 11 May 2026, highlights thousands of internet-facing DICOM servers exposed by a lack of basic security measures. According to Trend Micro TrendAI analysis, the researchers identified thousands of servers belonging to…
DataBreaches -
AI crafted zero day bypasses 2FA in open source admin tool
According to Google Threat Intelligence Group (GTIG) in a report shared with The Hacker News, an unknown threat actor likely developed a zero‑day exploit with an artificial intelligence system to enable a mass vulnerability exploitation operation, marking…
The Hacker News -
TrickMo C Android trojan hijacks TON blockchain for stealthy C2
A new TrickMo Android banking trojan variant, dubbed TrickMo C, has shifted its primary command-and-control transport onto The Open Network (TON) Blockchain, routing communications via the network’s .adnl identities to hinder traditional domain takedowns.…
Infosecurity -
Cloudflare Turnstile stops 99.7% bot traffic, fixes login snag
Published: 11 May 2026. According to Cloudflare's Turnstile CAPTCHA, the author implemented the service on some pages to curb bot traffic, noting that about 300 requests yielded only 1 passing the test, i.e., 99.7% were from bots. The write‑up mentions a…
SANS ISC -
AI fuels surge in zero day exploits, Google warns now
Google says AI is accelerating cyberattacks and zero-day exploits, with attackers already using AI to improve vulnerability exploitation, generate exploit code, and automate attack chains across cloud environments. The report, according to Google Cloud…
Security Affairs -
Fake Claude Code pages spread info stealer via Chromium hijack
According to Ontinue's Cyber Defense Center, a previously undocumented information stealer has been distributed through fake Claude Code installation pages that hijack Chromium browsers to bypass App-Bound Encryption and exfiltrate cookies, passwords and…
Infosecurity -
Google warns of rising AI powered cyber threats in 2026 report
The report from the Google Threat Intelligence Group (GTIG) discusses the evolving use of AI in cyber threats as of May 2026. It highlights several key trends: 1. **Vulnerability Exploitation**: GTIG identified threat actors using AI to create zero-day…
Google Cloud -
Yarbo robot mowers leak WiFi passwords via remote backdoor
Yarbo yard robots were found to have a range of vulnerabilities that allowed an attacker to harvest Wi‑Fi passwords and remotely hijack thousands of devices, a demonstration that included the mower running its tester over. According to Malwarebytes, security…
Malwarebytes -
Google finds AI crafted zero day bypassing 2FA in admin tool
The article reports that Google has identified, for the first time, a zero‑day exploit believed to have been developed using artificial intelligence. According to Google, the exploit was designed to bypass two‑factor authentication on an open source…
SecurityWeek -
Google warns AI fuels hackers' exploit and phishing attempts
Threat actors are increasingly using AI tools to speed exploit development and drive attack orchestration, a trend underscored by new research from Google into AI-enabled cyber operations. According to Google, adversaries have leveraged large language models…
Dark ReadingUNC2814 -
AI enabled hackers weaponise zero day to defeat 2FA on admin tool
According to Google Threat Intelligence Group (GTIG), cybercriminals have used AI to identify and weaponise a zero-day vulnerability for the first time, in a campaign that aimed to bypass two-factor authentication on a popular open-source, web-based system…
Infosecurity -
Ivanti EPMM and PAN OS flaws hit as patches roll out mid May
In the week ending 11 May 2026, The Hacker News recapped a mix of familiar attack patterns, including poisoned downloads, cloud misconfigurations and long‑standing bugged access paths, alongside newer methods like WebSocket backdoors and skimmers. The Threat…
-
Korea’s child rights agency data mishandling exposes a lot of sensitive and personal info
Korea’s child rights agency data mishandling exposes a lot of sensitive and personal information, according to DataBreaches[.]Net. The breach at the National Center for the Rights of the Child (NCRC) occurred between 30 April and 2 May, and was flagged when…
DataBreaches -
HeartlessSoul targets aerospace with fake aviation installers
A cyber espionage operation dubbed HeartlessSoul has targeted aerospace firms and drone operators, using phishing and malvertising campaigns to deliver malware that masquerades as installers for legitimate aviation software and resources. The attackers…
Dark Reading -
Skoda Shop Breach Exposes Customer Data After Software Flaw
Skoda has disclosed a data breach affecting the personal information of users of its online shop. The incident, discovered as part of the company’s technical security monitoring, resulted from a vulnerability in the portal’s software. Immediately after…
SecurityWeek -
Autonomous Purple Teaming Emerges to Counter AI Powered Exploits
Purple teaming combines red team finding attacker paths with blue team validating detections and responses, iterating so red’s output becomes blue’s input and vice versa. The piece argues that traditional purple teaming has fallen short because of friction,…
The Hacker News -
German police seize revived Crimenetwork market, €3.6m taken
German police dismantled a resurrected Crimenetwork marketplace weeks after the original takedown, with the revived site attracting more than 22,000 users and over 100 sellers. According to German authorities, the marketplace was used to trade stolen…
Security Affairs -
Cloudflare cuts 1,100 jobs in AI driven shake up, shares fall 20%
Cloudflare announced last week that it is laying off more than 1,100 employees worldwide as part of an AI-driven restructuring plan, with the news published by SecurityWeek on 11 May 2026. The company topped revenue and earnings forecasts for the first…
SecurityWeek -
US: FCC Relaxes Foreign-Made Router Ban to Allow for Security Updates
The US Federal Communications Commission has extended the deadline for owners of banned internet routers to provide security updates to US-based users by two years. In March 2026, the Commission banned the import and sale of all consumer-grade internet…
Infosecurity -
SailPoint says third party app breach contained, no data exposed
Identity management and governance provider SailPoint has disclosed a cybersecurity incident involving its GitHub repositories, which occurred on April 20, 2026, and was immediately contained. According to SEC filing, the incident saw unauthorized access to…
SecurityWeek -
ShinyHunters ramps up Canvas breach extortion targeting schools
The education sector has found itself in the crosshairs of a ShinyHunters “pay or leak” extortion campaign following the compromise of Instructure, the company behind the Canvas Learning Management System. The original compromise of Instructure occurred on…
InfosecurityShinyHunters -
Qilin Tops Ransomware List as Gentlemen Surge in Q1 2026
According to Check Point Research, the Q1 2026 ransomware landscape shows a consolidation of activity, with the top 10 groups accounting for 71.1% of all data leak site victims, the highest concentration since Q1 2024. The period saw 2,122 victims listed on…
Check PointQilin
