News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 12 May· 56 articles
-
TeamPCP’s Mini ShaiHulud supply chain attack hits 170+ packages
SecurityWeek reports that the Mini Shai-Hulud supply chain campaign, blamed on TeamPCP, compromised more than 170 packages across multiple high-profile projects, including 42 TanStack packages and 65 UiPath packages, as well as Mistral AI’s PyPI packages and…
SecurityWeekTeamPCP -
Dark Web Forum Monitoring Gives Early Warning of 2026 Breaches
The article surveys the Top 10 Deep Web and Dark Web Forums in 2026, naming XSS, Exploit[.]in, BHF, Dread, DarkForums, Altenen, CryptBB, Cracked, DamageLib, and the ShinyHunters DLS as the most actively monitored platforms based on threat intelligence, court…
SOCRadar -
WannaCry worm spreads globally after exploiting Windows SMB flaw
WannaCry emerged on 12 May 2017, exploiting a vulnerability in the SMBv1 protocol of Microsoft Windows (CVE-2017-0144, aka EternalBlue) and was later addressed by the MS17-010 patch in March 2017. The attack spread as a worm, able to propagate autonomously…
-
Hackers hijack Hugging Face repo to spread infostealer malware
Security researchers have uncovered covert infostealer malware hidden in a top-ranking Hugging Face repository, in another example of the dangers posed by the AI supply chain. According to HiddenLayer, the attack used the Open-OSS/privacy-filter, which was…
Infosecurity -
Cifas Finds One in Eight UK Employees Sold Login Credentials
UK anti-fraud non-profit Cifas published research showing that one in eight workers at large enterprises have either sold their company login credentials or know someone who did, based on interviews with 2,000 employees from organisations with at least 1,000…
Malwarebytes -
Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages
According to The Hacker News, TeamPCP, the threat actor behind the recent supply chain attack spree, has been linked to the compromise of npm and PyPI packages from TanStack, UiPath, Mistral AI, OpenSearch, and Guardrails AI as part of the Mini Shai-Hulud…
-
ShinyHunters2 articles this day · The Hacker News first
Canvas Data 'Returned' After ShinyHunters Deal, but Risk Remains · Instructure reaches deal with ShinyHunters after 9k org breach
2 outlets-
Canvas Data 'Returned' After ShinyHunters Deal, but Risk Remains
Stolen Canvas data was reportedly “returned” after a hacker agreement, Instructure says, in a status update that dated May 11, 2026. According to Instructure, the breach involved usernames, email addresses, course names, enrollment information and private…
Malwarebytes -
Instructure reaches deal with ShinyHunters after 9k org breach
According to The Hacker News, Instructure, the parent company of Canvas, said it reached an agreement with the ShinyHunters extortion group after a breach that led to the theft of 3.65TB of data and threatened publication of information from thousands of…
The Hacker News
-
-
Top 10 Anonymous Browsers for Safe Dark Web Access in 2025
The article outlines the 10 best dark and deep web browsers for anonymity, with Tor Browser described as the gold standard for Dark Web anonymity. It also covers I2P, Freenet, Tails OS, Whonix, Subgraph OS, Mozilla Firefox (when configured for Tor),…
SOCRadar -
UK Water Firm Fined Nearly £1m After Massive Customer Data Breach
A UK water company has been fined nearly £1m by the Information Commissioner’s Office (ICO) after a two-year incident resulted in the compromise of personal information on over 633,000 people. South Staffordshire Water and parent company South Staffordshire…
Infosecurity -
Discord and Gemini Database Claims, Cisco FMC RCE Leak, Xia Stealer Sale, and IMSS Donor Records Listing
SOCRadar’s Dark Web Team identified several new underground posts, including an alleged Discord database leak and an alleged Google Gemini database leak shared for free, along with an alleged Cisco Secure Firewall Management Center RCE tied to…
-
Ransomware groups shift to data leak extortion as payments drop
Kaspersky’s State of ransomware in 2026 notes that International Anti-Ransomware Day on May 12 frames a year in which ransomware remains persistent and adaptive, with new families adopting post-quantum cryptography ciphers and a growing shift towards…
securelist.com -
OpenAI launches Daybreak AI tool to spot and fix code flaws early
OpenAI has launched Daybreak, a cybersecurity initiative that combines frontier AI model capabilities with Codex Security to help organisations identify and patch vulnerabilities before attackers exploit them. According to OpenAI, Daybreak blends AI…
The Hacker News -
TrickMo Android Trojan Moves C2 to Telegram’s TON Network
ThreatFabric researchers have identified a new TrickMo Android banking Trojan variant that reengineers its underpinnings for stealth, resilience and operator reach, migrating its command-and-control traffic off the conventional internet and onto The Open…
Security Affairs -
Apple enables end to end encrypted RCS across iPhone and Android
iOS 26.5 is rolling out end-to-end encrypted RCS messaging between iPhone and Android, with the feature enabled by default for new and existing conversations on both platforms. The rollout is available to iPhone users on iOS 26.5 with supported carriers and…
The Hacker News -
ISC Stormcast May 12 2026: Green Threat Level, Ullrich Resources
ISC Stormcast For Tuesday, May 12th, 2026 is published by the Internet Storm Center, with the threat level listed as green. The diary notes a Handler on Duty: Johannes Ullrich, and it points readers to a page about Johannes’s SANS classes. It includes a call…
SANS ISC
