News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 12 May· 56 articles
-
Microsoft AI builds synthetic logs to improve threat detection
The article discusses the use of AI-assisted synthetic attack log generation to enhance detection engineering in cybersecurity. It highlights the challenges of obtaining high-quality attack logs due to the abundance of benign activity and the difficulty in…
Microsoft -
MDASH AI tool spots 16 Windows bugs, RCE in tcpip.sys
Microsoft’s security post reveals that its new multi-model agentic scanning harness, codename MDASH, helped researchers uncover 16 CVEs across the Windows networking and authentication stack, including remote code execution flaws in tcpip[.]sys and an…
Microsoft -
Patch Tuesday, May 2026 Edition
Artificial intelligence platforms are becoming adept at identifying security vulnerabilities in software, evident in recent updates from major companies like Microsoft, Apple, Mozilla, and Oracle. In the latest Patch Tuesday, Microsoft addressed 118…
-
Microsoft Patch May 2026 fixes 137 bugs, zero day free
It's Patch Tuesday for Microsoft and Not a Zero-Day In Sight, with Microsoft reporting no actively exploited zero-days, marking the first such lull in nearly two years. The May 2026 update fixes 137 CVEs, of which Microsoft considers 13 as likely candidates…
-
Hackers accessed BWH Hotels reservation system for months
BWH Hotels reported a data breach where hackers accessed guest reservation data from October 2025 to April 2026, compromising names and contact information of an unknown number of guests. The breach affected multiple brands under BWH, which operates over…
Security Affairs -
The May 2026 Security Update Review
The May 2026 Security Update Review highlights significant security patches recently released by Adobe and Microsoft. Adobe issued 10 bulletins addressing 52 unique CVEs across various products, with a focus on Adobe Commerce and Adobe Connect due to their…
thezdi.com -
Microsoft Confluence SAML SSO plugin2 articles this day · SecurityWeek first
Microsoft May 2026 Patch Tuesday, (Tue, May 12th) · Microsoft Patches 137 Vulnerabilities
-
Microsoft May 2026 Patch Tuesday, (Tue, May 12th)
On May 12, 2026, Microsoft released a patch addressing 137 vulnerabilities, including significant issues within the Microsoft SSO Plugin for Jira & Confluence and a preauthentication remote code execution vulnerability in the Netlogon service. No previously…
-
Microsoft Patches 137 Vulnerabilities
On Tuesday, Microsoft released patches for 137 vulnerabilities in its products, with none reported as actively exploited. Notably, CVE-2026-41103 in the Microsoft SSO Plugin and high-severity flaws in Windows Remote Desktop, among others, have been flagged…
-
-
Exaforce Raises $125 Million for Agentic SOC Platform
According to SecurityWeek News, Exaforce has raised a total of $200 million after unveiling a $125 million Series B round, with the new funds earmarked for product development and international expansion. The latest investment comes from HarbourVest, Peak…
SecurityWeek -
Adobe fixes 52 flaws, patches Connect code execution bugs
Adobe on Tuesday announced patches for 52 vulnerabilities across 10 products, with several flaws capable of arbitrary code execution and privilege escalation. According to Adobe, more than half of the weaknesses addressed could be exploited for arbitrary…
-
New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution
The article discusses a newly discovered vulnerability in Exim's BDAT functionality that affects GnuTLS builds, potentially allowing remote attackers to execute arbitrary code. This issue poses a significant risk to email security for users of affected Exim…
The Hacker News -
Defending consumer web properties against modern DDoS attacks
If you own online services and web portals, you’re likely noticing a dramatic upswing in DDoS attacks, with modern campaigns becoming multi-vector and increasingly tailored to stress specific applications and user flows. Microsoft notes that DDoS activity…
Microsoft -
Claude chat scam lures Mac users to steal credentials, crypto
Researchers have found that criminals are using sponsored search results and shared Claude chats to lure Mac users into a ClickFix attack, a social‑engineering technique that covertly installs malware on the device. The technique involves ads that appear to…
Malwarebytes -
French AI Security Startup White Circle Bags $11M Seed Funding
French cybersecurity startup White Circle today announced raising $11 million in seed funding from multiple angel investors. Founded in 2025, Paris-based White Circle has built a platform that functions as a control layer for AI, unifying safety, evaluation,…
SecurityWeek -
US bank admits customer data shared with unauthorised AI app
A US commercial bank has disclosed to the Securities and Exchange Commission that it revealed customer data to an unauthorized AI application, according to the report published on 12 May 2026. Community Bank, which operates in southwestern Pennsylvania, Ohio…
DataBreaches -
OpenAI's Daybreak embeds security into code from day one
OpenAI has unveiled Daybreak, an initiative built on its frontier LLMs and its Codex coding assistant to help developers build secure software from the ground up. Unveiled on 12 May 2026, Daybreak leverages the Trusted Access for Cyber program to reserve…
Infosecurity -
Undermining the trust boundary: Investigating a stealthy intrusion through third-party compromise
According to Microsoft Incident Response, a stealthy intrusion leveraged trusted operational relationships and authentication processes via a compromised third-party IT services provider to establish long-term access. The campaign unfolded through an…
Microsoft -
Anthropic’s Mythos Flags Five Curl Flaws, but Only One Holds Up
The article reports that Anthropic’s Mythos AI analysed curl and identified five vulnerabilities, but after further review by curl’s maintainers only one real vulnerability remained, rated as low severity. Three of the original findings were false positives,…
Security Affairs -
RubyGems pauses signups after massive malicious package attack
RubyGems has temporarily paused new signups after what The Hacker News describes as a major malicious attack, with Mend[.]io confirming hundreds of uploaded packages were involved. According to Maciej Mensfeld, senior product manager for software supply…
The Hacker NewsTeamPCP -
Attackers hijack TanStack npm packages to steal CI credentials.
A new wave of the Mini Shai-Hulud campaign compromised dozens of TanStack npm packages as part of a broader supply chain attack affecting developer ecosystems, including UiPath, Mistral AI, OpenSearch and PyPI. In April, Mini Shai‑Hulud initially targeted…
Infosecurity -
BWH Hotels Says Hackers Had Access to Reservation Data for 6 Months
Hospitality group BWH Hotels says hackers had access to a web application housing some guest reservation data for more than six months. Emails sent to customers show the intrusion was discovered on 22 April 2026, with investigators finding that threat actors…
SecurityWeek -
Tampered Tokenizer Files Pose AI Model Hijack Risk, Experts Warn
Hugging Face’s open source model repository is highlighting a vector where a tokenizer library file can be manipulated to hijack model outputs, with a single edit to the tokenizer[.]json potentially enabling a attacker to supervise what a model outputs and…
Dark Reading -
ShinyHunters2 articles this day · SecurityWeek first
Homeland Security wants to know about the Instructure breach; we still want to know about the Navigate360 breach · Instructure reaches deal with hackers to delete stolen Canvas data
2 outlets-
Homeland Security wants to know about the Instructure breach; we still want to know about the Navigate360 breach
Homeland Security wants to know about the Instructure breach, while DataBreaches[.]net continues to seek answers about the Navigate360 breach, which involved P3 Campus and related tip platforms for schools. The piece notes that Instructure announced a deal…
DataBreaches -
Instructure reaches deal with hackers to delete stolen Canvas data
According to Associated Press, a deal was reached with hackers to delete data they had stolen from the Canvas educational platform, after Instructure, the company behind Canvas, said it had struck an agreement with the unauthorized actor involved in the…
SecurityWeek
-
-
Free OnlyFans Lure Used to Spread Cross-Platform CRPx0 Malware
SecurityWeek reports that CRPx0 is a cross‑platform, multi‑stage malware campaign that currently targets Windows and macOS, with Linux capabilities reportedly in development, and was analysed by Aryaka Threat Research Labs. The campaign begins with a lure…
SecurityWeek -
Apple and Google Launch Cross Platform E2EE RCS Messaging Beta
End-to-end encrypted (E2EE) Rich Communication Services (RCS) messaging is being rolled out in beta between iPhone and Android handsets, closing one of the longest-running interoperability gaps in mainstream mobile messaging. Apple announced the beta rollout…
Infosecurity -
When "idle" isn't idle: how a Linux kernel optimization became a QUIC bug
The article discusses a bug related to the CUBIC congestion control algorithm used in Linux that affects QUIC connections. The problem arises when the congestion window (cwnd) is pinned at its minimum after a congestion collapse, preventing recovery. This…
Cloudflare -
West Pharma Takes Systems Offline After Global Ransomware Breach
West Pharmaceutical Services says it took systems offline globally after hackers exfiltrated data and deployed file-encrypting ransomware, with the incident occurring on 4 May and prompting proactive shutdowns of affected on-premise infrastructure. The…
SecurityWeek -
TrickMo uses TON network to hit EU banking, crypto users
Cybersecurity researchers have flagged a new TrickMo variant that uses The Open Network (TON) for its command-and-control communications, as observed by ThreatFabric between January and February 2026. The variant is actively targeting banking and…
The Hacker News -
Apple patches dozens of macOS, iOS flaws, including WebKit bugs
Apple on Monday published 11 new security advisories detailing dozens of patched vulnerabilities across macOS and iOS, with iOS and iPadOS 26.5 fixing more than 60 CVEs, including 20 WebKit issues that can cause crashes or expose sensitive data. According to…
SecurityWeek -
Apple patches 82 macOS flaws, highlights WiFi and kernel bugs
According to The Apple macOS Security Update Review, May 2026 saw Apple release 82 unique CVEs across three macOS versions: 79 for macOS Tahoe 26.5, 45 for macOS Sequoia 15.7.7, and 42 for macOS Sonoma 14.8.7. The analysis notes that Apple does not provide…
-
SAP Patches Critical S/4HANA, Commerce Vulnerabilities
SAP has issued 15 security notes as part of its May 2026 Security Patch Day, with the most severe fixes addressing critical code injection flaws in S/4HANA and Commerce. These two high‑severity vulnerabilities carry a CVSS score of 9.6; S/4HANA is tracked as…
-
ClickFix attackers use decade old Python proxy to stay hidden
Cybercriminals have combined ClickFix attacks with PySoxy, a 10-year-old open-source Python SOCKS5 proxy, to maintain persistence on victims’ machines without malware, even after attempts at removal. The campaign, detailed by ReliaQuest researchers, shows…
Infosecurity -
Dark Reading marks 20 years of CISO influence with 20 leaders
Dark Reading’s 20 Leaders Who Built the CISO Era marks two decades of cybersecurity history, profiling CISOs, researchers, policymakers and other pivotal figures who reshaped enterprise risk. The piece, part of Dark Reading’s 20th anniversary coverage,…
Dark Reading -
CISA and G7 release joint AI software bill of materials guidance
According to CISA and the Group of Seven (G7) international partners—Germany, Canada, France, Italy, Japan, the United Kingdom, and the European Union—joint guidance on Software Bill of Materials for AI – Minimum Elements has been released to help public and…
CISA -
Radiant Security Webinar Reveals AI Fix for Overlooked SOC Alerts
According to The Hacker News, a technical webinar titled “Alert Coverage No One Else Can Triage” will address why the riskiest SOC alerts often go uninvestigated and how Radiant Security proposes to fill the coverage gap. The session, hosted on May 21, 2026,…
The Hacker News -
Attackers exploit cPanel CVE-2026-41940 to deploy Filemanager Backdoor
Attackers are abusing cPanel CVE-2026-41940 to deploy a backdoor known as Filemanager on compromised servers. The flaw enables remote attackers to bypass authentication and gain access to the cPanel/WHM interface, with researchers noting a CVSS score of 9.3.…
-
Claude Mythos spots one curl bug, experts split on AI claim
A SecurityWeek feature reports that Claude Mythos found only one curl vulnerability, with experts divided on what this means for the AI model’s capabilities. Curl’s lead developer, Daniel Stenberg, says Mythos claims are marketing, but many in the industry…
SecurityWeek -
AI Powered Self Rewriting Malware Makes Traditional SOCs Obsolete
SecurityWeek argues that the traditional Security Operations Centre is obsolete because threats now move at machine speed, outpacing human-centric SOC workflows. The piece notes that attackers are deploying AI-powered techniques, with Google’s Threat…
SecurityWeek -
Agentic AI Runs Loose, Leaving Security Teams Out of the Loop
Agentic AI is already in production, with systems executing tasks and taking actions often without security teams being involved, according to The Hacker News. The piece argues that the real issue is whether security professionals understand what they are…
The Hacker News
