News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Mon 11 May· 52 articles
-
CISA flags LiteLLM SQLi flaw exploited hours after disclosure
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a flaw in BerriAI LiteLLM, tracked as CVE-2026-42208, to its Known Exploited Vulnerabilities catalog, with a CVSS score of 9.3. At the end of April, attackers rapidly exploited the…
-
ShinyHunters3 articles this day · Malwarebytes first
Zara breach leaks 197k records after ShinyHunters attack · Canvas System Is Online After a Cyberattack Disrupted Thousands of Schools
3 outlets-
Zara breach leaks 197k records after ShinyHunters attack
A ShinyHunters campaign has resulted in the compromise of information belonging to over 197,000 customers of fashion outlet Zara, according to HaveIBeenPwned. The data breach notification service posted a brief note on its website explaining data stolen…
Infosecurity -
Canvas System Is Online After a Cyberattack Disrupted Thousands of Schools
Canvas System Is Online After a Cyberattack Disrupted Thousands of Schools reports that tens of thousands of students worldwide regained access to the online learning platform after an outage that had disrupted exams and coursework. According to Associated…
SecurityWeek -
Microsoft defends Edge password storage amid school login attacks
A week in security (May 4 – May 10) was published by Malwarebytes Labs on 11 May 2026. According to Malwarebytes Labs, the week’s highlights include a post noting that Microsoft says Edge’s plaintext password behavior is “by design” and coverage of…
Malwarebytes
-
-
Dirty Frag (CVE-2026-43284) lets Linux users gain root
SecurityWeek reports a newly disclosed local privilege escalation flaw in major Linux distributions, named Dirty Frag and Copy Fail 2, tracked as CVE-2026-43284 and CVE-2026-43500, which lets an unprivileged user escalate to root. The vulnerability affects…
-
German Spanish bust shuts down relaunched Crimenetwork market
Police in Germany and Spain have moved to shut down a relaunch of the Crimenetwork dark web marketplace, with a 35-year-old German national arrested at his Mallorca home last week after liaising with the Frankfurt am Main Public Prosecutor's Office – Central…
Infosecurity -
German police seize data after Crimenetwork marketplace shutdown
The second iteration of the Crimenetwork crime marketplace, which had over 22,000 users and more than 100 sellers, was shut down by the German police last week. Crimenetwork had been resurrected after its December 2024 takedown, and the original platform had…
SecurityWeek -
Fake OpenAI model on Hugging Face drops Rust infostealer
A malicious Hugging Face repository called Open-OSS/privacy-filter impersonated OpenAI’s Privacy Filter open-weight model and delivered a Rust-based information stealer to Windows users, with access to the model disabled by Hugging Face since discovery. The…
The Hacker News -
Instagram removes DM encryption, granting Meta chat access
Instagram has removed end-to-end encryption for its direct messages, with the change taking effect on 8 May 2026 and giving Meta access to chats that were previously readable only by the sender and recipient. Users affected are advised to download any media…
Security Affairs -
TeamPCP backdoors Checkmarx Jenkins plugin with Dune Shai Hulud
Published on 11 May 2026, the SOCRadar post reports that TeamPCP has backdoored the Checkmarx Jenkins plugin for AST scanning, following a prior breach of Checkmarx’s GitHub Actions and OpenVSX extensions. The attack involved two actions: defacing the…
SOCRadarTeamPCP -
4 year phishing operation nets 2,00
According to SOCRadar, more than four years into a phishing campaign, hundreds of victims across multiple sectors have been affected, with the campaign dubbed Operation HookedWing. The operation was first documented in 2022, and over four years more than…
SecurityWeek -
ISC Stormcast raises green alert as Didier Stevens leads briefing
The ISC Stormcast for 11 May 2026 highlights a green threat level and confirms the day’s handler on duty as Didier Stevens. The diary page is a standard ISC update, listing Monday’s briefing as part of the ongoing Stormcast series and providing the usual…
SANS ISC
