News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Sat 16 May· 10 articles
-
CISA flags Exchange zero day flaw CVE-2026-42897 in KEV list
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Microsoft Exchange Server flaw, tracked as CVE-2026-42897 with a CVSS score of 8.1, to its Known Exploited Vulnerabilities (KEV) catalog. Microsoft warned that threat actors are…
-
Another detail emerges about Instructure’s agreement with ShinyHunters; Debate continues about whether to pay
DataBreaches[.]net reports that Instructure paid ShinyHunters after its second attack, and that the payment was reportedly higher than what would have been negotiated in April, with the exact amount not disclosed. The article notes that ShinyHunters has…
DataBreachesShinyHunters -
Russian Turla Group Deploys P2P Kazuar Botnet for Stealth
Russian-linked APT group Turla has upgraded its Kazuar backdoor into a modular peer-to-peer botnet designed for stealth and long-term access to compromised systems, according to Microsoft researchers. The Kazuar botnet now features Kernel, Bridge, and Worker…
Security Affairs -
Critical Flaw in Funnel Builder Plugin Hijacks WooCommerce Payments
The Hacker News reports a critical vulnerability in the Funnel Builder WordPress plugin that has moved into active exploitation to skim payments on WooCommerce checkout pages. The flaw allows unauthenticated attackers to inject arbitrary JavaScript into…
The Hacker News -
BlackFile vishing attack steals data from Microsoft 365 and Okta
According to Google Threat Intelligence Group, UNC6671—operating under the BlackFile brand—has run an extensive vishing extortion campaign that targets organisations via social engineering and single sign-on compromise. The group uses adversary-in-the-middle…
DataBreachesUNC6671 -
Michigan nurse guilty of $1.6M Medicare fraud via hospital bribes
A federal jury in the Eastern District of Michigan convicted a Michigan nurse and home health care agency owner yesterday for operating a $1.6 million scheme to defraud Medicare, according to Dissent reporting. The defendant, Ruby Scott, 55, of Farmington…
DataBreaches -
Supreme Court backs Illuminate in student data breach case
The Supreme Court of California has ruled in J.M. v. Illuminate Education, Inc, reversing the Court of Appeal and holding that J.M. failed to state viable claims under the Confidentiality of Medical Information Act (CMIA) and the Customer Records Act (CRA).…
DataBreaches -
Pwn2Own Berlin 2026 racks up $908k for 39 zero day wins
Pwn2Own Berlin 2026 concluded on 16 May 2026 with a final day that added to the event’s tally of impressive findings, bringing the running total to $908,750 for 39 unique zero days. The Master of Pwn standings were updated as Day Three unfolded, with…
thezdi.com -
PoC Code Published for Critical NGINX Vulnerability
PoC code targeting a newly patched critical NGINX vulnerability has been published, with technical details and exploitation notes circulating online. The issue, tracked as CVE-2026-42945 and rated at CVSS 9.2, was patched this week in F5’s quarterly patch…
-
Attackers hit OpenAI with malicious TanStack supply chain breach
OpenAI was hit by a supply chain attack linked to malicious TanStack packages, with two OpenAI employee devices downloading the compromised packages and exposing credential material from internal source code repositories. According to OpenAI, the TeamPCP…
Security AffairsTeamPCP
