News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 13 May· 52 articles
-
Nitro2 articles this day · SecurityWeek first
Foxconn leak reveals 8TB data as manufacturing attacks surge · Foxconn Confirms North American Factories Hit by Cyberattack
2 outlets-
Foxconn leak reveals 8TB data as manufacturing attacks surge
An apparent Nitrogen ransomware attack on Foxconn’s North American facilities has highlighted manufacturing’s cyber crisis, with the incident described as one of 600 hits on manufacturers this year. Foxconn admitted that a cyberattack affected operations at…
Dark Reading -
Foxconn Confirms North American Factories Hit by Cyberattack
Foxconn has confirmed that some of its North American factories were hit by a cyberattack, with the company stating that the cybersecurity team activated its response and that affected sites are resuming normal production, according to SecurityWeek. The…
SecurityWeek
-
-
TrustCloud Backs Shift from Checklists to Continuous Assurance
Checkbox assessments are criticised for being unable to measure risk effectively in today’s rapidly evolving threat landscape, with industry voices calling for continuous, evidence-based models rather than annual questionnaires. According to Sravish Sridhar,…
Dark Reading -
Attackers Use RubyGems to Exfiltrate UK Council Data
A new threat campaign is using RubyGems as a dead drop to store exfiltrated data, with the attackers publishing more than 100 gems that appear to use the RubyGems registry as a data transport mechanism rather than a malware distribution channel. According to…
Dark Reading -
The Gentlemen ransomware gang breached, internal data up for sale
One of the world’s most prolific ransomware operations has itself been breached, offering unique insight into its inner workings. In the first five months of 2026, the Russian cybercriminal gang that calls itself The Gentlemen has published sensitive data…
Dark ReadingThe Gentlemen -
Microsoft Patch Tuesday for May 2026 fix 138 bugs, some of them are alarming
Microsoft’s May 2026 Patch Tuesday fixed 138 vulnerabilities across a broad swath of the Microsoft portfolio, including Windows and its components, Office, Edge, Azure, .NET, Visual Studio, SQL Server, the Copilot products, and even the Telnet client, which…
-
Dark Reading Marks 20 Years with Special Retrospective Content
According to Dark Reading, Informa TechTarget’s flagship cybersecurity brand marks 20 years of reporting and analysis, with a special content series launched to celebrate the milestone. The piece notes that Dark Reading began in May 2006 and is now part of a…
Dark Reading -
OpenLoop Health breach exposes data of 716,000 patients in 2026
OpenLoop Health confirmed a January 2026 cyberattack that exposed personal information of 716,000 individuals using its telehealth services. The breach was reported to authorities in March, but the full scope was only recently determined. OpenLoop learned on…
Security Affairs -
Pwn2Own Berlin 2026: The Full Schedule
According to Zero Day Initiative, Pwn2Own Berlin 2026 has arrived at OffensiveCon, with the enterprise-focused competition featuring AI Databases, Coding Agents, Local Inferences and a separate NVIDIA category. The event follows a random draw to determine…
thezdi.com -
Doppelgänger network spreads Russian disinformation via Telegram
According to DomainTools Investigations, the Doppelgänger, also known as the SDA or Structura, is a Russian-linked influence operation that combines narrative design with technical infrastructure to publish, distribute, and amplify content across multiple…
dti.domaintools.comDoppelgänger -
AI scanners find critical Windows bugs and dozens of new advisories
According to Microsoft, MDASH was used to discover 16 of the vulnerabilities fixed with the latest Patch Tuesday updates, part of the broader effort to scan their own code with AI. SecurityWeek notes that Microsoft stated 4 of these 16 were critical,…
SecurityWeek -
Sweet Security debuts AI red teaming to spot hidden attack paths
Sweet Security has unveiled Agentic AI Red Teaming, a new capability built into its Sweet Attack platform to identify exploitable attack chains that human teams might miss. The approach uses runtime intelligence gathered from inside client environments to…
SecurityWeek -
ShinyHunters3 articles this day · Security Affairs first
Instructure reaches agreement with ShinyHunters over Canvas breach · Congress Demands Details on Canvas Cyberattack Affecting Millions
3 outlets-
Instructure reaches agreement with ShinyHunters over Canvas breach
Instructure, the Canvas Learning Management System maker, has come to terms with the cybercriminal extortion group responsible for data stolen in a breach affecting nearly 9,000 educational institutions. According to incident update, the company has “reached…
Infosecurity -
Congress Demands Details on Canvas Cyberattack Affecting Millions
The US House Committee on Homeland Security has asked Instructure to brief them on the recent cyberattacks that disrupted Canvas, the online learning platform used by millions. An initial intrusion on 29 April disrupted tools relying on API keys, with…
SecurityWeek -
Instructure settles Canvas breach, ShinyHunters return data
Instructure settles with hackers after a major Canvas breach exposed student and educator data, including names, email addresses, student ID numbers, and some user messages, though passwords, dates of birth, government identifiers, and financial information…
Security Affairs
-
-
Avada Builder Flaws Expose One Million WordPress Sites
Two newly disclosed vulnerabilities in the Avada Builder WordPress plugin place around one million sites at risk of arbitrary file read and SQL injection attacks. According to Wordfence analysis published on 12 May, the flaws are CVE-2026-4782, an arbitrary…
-
SOCRadar offers free ransomware dashboard with live attack map
SOCRadar’s Free Ransomware Intelligence Dashboard, released under SOCRadar Labs, is a standalone, publicly available resource that does not require an account or subscription. Published on 13 May 2026, the dashboard displays key ransomware statistics at the…
SOCRadar -
Microsoft’s AI Tool MDASH Finds Two Critical Windows Zero Days
Microsoft has unveiled MDASH, a multi-model agentic scanning harness designed to autonomously discover, validate, and prove exploitable defects in complex codebases like Windows, and it is being tested by some customers in a limited private preview. MDASH…
-
Texas AG sues Netflix for secret data spying on viewers
Texas Attorney General Ken Paxton announced that he has sued Netflix for spying on Texans, including children, and for secretly collecting users’ data without their knowledge or consent. The suit alleges Netflix tracks and monetises detailed viewing…
Malwarebytes -
Webinar shows OT teams how to prove cyber physical security ROI
According to SecurityWeek News, the webinar “ROI for Cyber-Physical Security Programs” is aimed at helping OT security teams and asset owners move beyond pilot projects by focusing on ROSI, or Return on Security Investment. The event notes that in…
SecurityWeek -
Quest KACE Flaw CVE-2025-32975 Leaks Data of 60+ Organisations
CVE-2025-32975 is a critical authentication bypass vulnerability in Quest KACE Systems Management Appliance (SMA) used for endpoint management, with a CVSS score of 10.0, and it has been linked to exposure across more than 60 downstream organisations.…
-
NL: Dutch watchdog says healthcare lab failed data security rules before cyberattack affecting 850,000
According to NL Times, the Dutch Health and Youth Care Inspectorate (IGJ) has concluded that Clinical Diagnostics failed to adequately protect its data before last year’s cyberattack, which affected more than 850,000 women who had cervical cancer screening.…
DataBreachesNova -
UK: Regulator fines water company almost £1m for cybersecurity failures
According to the Information Commissioner's Office, South Staffordshire Water was fined £963,900 after a cyber attack from September 2020 to July 2022 that exposed the personal information of 633,887 customers and employees. The fine was issued on 7 May,…
DataBreaches -
Aylesbury Officer Fined for Photographing Sensitive Police Data
A police officer based in Aylesbury was found guilty of breaching data protection laws after photographing confidential information, according to The Bucks Herald. At Reading Magistrates’ Court on 28 April, PC Lily Maxey was found guilty of the breaches…
DataBreaches -
Gentlemen RaaS leak reveals 332 victims, internal chats exposed
According to Check Point Research, the Gentlemen ransomware‑as‑a‑service (RaaS) operation saw its administrator acknowledge a leak of an internal backend database, Rocket, on 4 May 2026, exposing 9 accounts and revealing end‑to‑end details of the operation.…
-
GhostEmperor2 articles this day · Dark Reading first
FamousSparrow hits Azerbaijani oil firm with DLL sideload · Chinese hackers hit Azerbaijan energy firm with multi wave attack
2 outlets-
FamousSparrow hits Azerbaijani oil firm with DLL sideload
The China-linked FamousSparrow APT has targeted an Azerbaijanian oil-and-gas company in the South Caucasus, a region that sits between Iran, Turkey and Russia, according to BitDefender. BitDefender notes that the group used a unique sideloading technique for…
Dark Reading -
Chinese hackers hit Azerbaijan energy firm with multi wave attack
Azerbaijan’s energy sector was targeted in a multi-wave intrusion attributed by Bitdefender with moderate-to-high confidence to the hacking group known as FamousSparrow (aka UAT-9244), which has ties to China and overlaps with Earth Estries and Salt Typhoon.…
The Hacker News
-
-
AI agents drive Latin America cyberattacks on govt, finance
Threat actors in Latin America are using AI agents to automate entire attack chains, from initial access to generating penetration tools on the fly, with organisations needing to prepare accordingly, according to TrendAI Research. The two campaigns,…
Dark Reading -
Cloudflare Moves Browser Run to Containers, Boosting Speed
Browser Run is now running on Cloudflare Containers, delivering faster performance and greater scale. The update allows spinning up 60 browsers per minute via the Workers binding and running up to 120 concurrently, four times the previous limit, with Quick…
Cloudflare -
Over Half of US and UK CISOs Would Pay Ransomware, Survey Finds
Published on 13 May 2026, the Infosecurity Magazine report notes that in the event of a ransomware attack, over half of CISOs would consider paying the ransom to end the incident and restore systems faster. According to Absolute Security, 58% of CISOs would…
Infosecurity -
Keymous+ group fuels surge in global DDoS hacktivist attacks
Keymous Plus, also known as Keymous+ threat group, markets itself as a hacktivist collective, but researchers describe it as a North African hybrid actor blending political performance with a commercial DDoS-as-a-Service platform and an alliance network…
SOCRadarKeymous+ -
[Webinar] Why Your AppSec Tools Miss the "Lethal Path" (and How to Fix It)
According to The Hacker News, a webinar titled “[Webinar] Why Your AppSec Tools Miss the “Lethal Path” (and How to Fix It)” brings together experts from Wiz and ex-Okta/GitLab/Auth0 to explain how attackers chain together tiny flaws to form a lethal path to…
The Hacker News -
Most Remediation Programs Never Confirm the Fix Actually Worked
Security teams have long struggled to prove that patches actually remove risk rather than just marking a ticket as done. The Mandiant’s M-Trends 2026 report puts the mean time to exploit at an estimated negative seven days, while Verizon’s 2025 DBIR notes a…
The Hacker News -
OpenLoop Health breach leaks 716k patients' personal data
The SecurityWeek article reports that 716,000 individuals were affected by a January 2026 data breach at the telehealth platform OpenLoop Health, with personal information exfiltrated from its systems. Hackers had access to OpenLoop Health systems between 7…
SecurityWeek -
May 2026 Patch Tuesday: 137 Vulnerabilities, No Zero-Days
May 2026 Patch Tuesday saw Microsoft release updates addressing 137 vulnerabilities across Windows and many Microsoft products, with no zero-day vulnerabilities for this month. Of these, 30 are rated Critical, with Elevation of Privilege vulnerabilities…
-
Microsoft 365 Apps for Enterprise2 articles this day · SecurityWeek first
Patch Tuesday Updates Fix 137 Flaws, Including Critical Word Bug · Attackers can exploit CVE-2026-40361 via zero click Outlook flaw
-
Patch Tuesday Updates Fix 137 Flaws, Including Critical Word Bug
May 2026 Patch Tuesday remedies 137 security vulnerabilities, including 31 marked critical by Microsoft, with no zero-days actively exploited in the wild. According to Microsoft, a zero-day is a flaw for which no official patch or security update is…
-
Attackers can exploit CVE-2026-40361 via zero click Outlook flaw
Microsoft has patched a critical zero-click Outlook vulnerability, tracked as CVE-2026-40361, described by Microsoft as a remote code execution flaw affecting Word. The flaw, a zero-click use-after-free, can be exploited to target Outlook users in an…
-
-
G7 cyber agencies publish AI SBOM minimum elements guidance
Multiple government cyber agencies have a new resource defining the minimum elements for software bills of materials (SBOMs) for AI to strengthen the AI-supply chain. The paper, Software Bill of Materials (SBOM) for Artificial Intelligence - Minimum…
Infosecurity -
Microsoft fixes 138 bugs, flags critical DNS heap overflow
Microsoft on Tuesday patched 138 security vulnerabilities across its product portfolio, with 30 rated Critical, 104 Important, three Moderate and one Low. Of these, 61 are privilege escalation bugs and 32 are remote code execution flaws, including…
-
Fortinet and Ivanti patch 18 flaws, including three critical bugs
Fortinet and Ivanti on Tuesday announced patches for 18 vulnerabilities across their product portfolios, including three critical-severity bugs. Fortinet published 11 advisories describing as many bugs, among them CVE-2026-44277 (CVSS 9.1) an improper access…
