News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Mon 18 May· 50 articles
-
Grafana Confirms Breach After Hackers Claim They Stole Data
Grafana confirms a data breach after being listed by Coinbase Cartel on its leak site, with the intrusion traced to a compromised token that granted access to Grafana Labs’ GitHub environment. SecurityWeek reports that Grafana admitted attackers downloaded…
SecurityWeekCoinbase Cartel -
Microsoft Windows 10 Version 18092 articles this day · The Hacker News first
MiniPlasma PoC revives CVE-2020-17103 flaw on fully patched Windows · MiniPlasma PoC reveals unpatched Windows privilege escalation flaw
-
MiniPlasma PoC revives CVE-2020-17103 flaw on fully patched Windows
Chaotic Eclipse has released a proof-of-concept for a new Windows privilege-escalation zero-day named MiniPlasma, claiming it works on fully patched systems and targets the cldflt[.]sys component of the Windows Cloud Files Mini Filter Driver in the…
-
MiniPlasma PoC reveals unpatched Windows privilege escalation flaw
Chaotic Eclipse has released a PoC for a Windows privilege escalation flaw codenamed MiniPlasma, which targets cldflt[.]sys, the Windows Cloud Files Mini Filter Driver, in a routine called HsmOsBlockPlaceholderAccess and can grant attackers SYSTEM privileges…
-
-
F5 NGINX Plus2 articles this day · Security Affairs first
Hackers Exploit NGINX Zero Day CVE-2026-42945 in Wild · NGINX Rift flaw CVE-2026-42945 exploited despite ASLR mitigations
-
Hackers Exploit NGINX Zero Day CVE-2026-42945 in Wild
The first in-the-wild attacks exploiting a critical-severity NGINX vulnerability patched last week have begun, according to VulnCheck. Tracked as CVE-2026-42945 (CVSS 9.2) and dubbed Nginx Rift, the flaw is a heap buffer overflow in the…
-
NGINX Rift flaw CVE-2026-42945 exploited despite ASLR mitigations
A critical NGINX flaw, CVE-2026-42945, is actively exploited in both NGINX Plus and NGINX Open Source, with a CVSS v4 score of 9.2. The vulnerability, dubbed NGINX Rift, arises from a heap buffer overflow in the ngx_http_rewrite_module, potentially allowing…
-
-
Attackers hijack JDownloader installers, inject malware for days
A week in security for May 11–May 17, 2026 was documented by Malwarebytes Labs, summarising a busy period of threat news. Highlights include attackers replacing JDownloader installer downloads with malware on the JDownloader website for several days, and…
Malwarebytes -
Pre-Stuxnet Fast16 Malware Tampered with Nuclear Weapons Simulations
A new analysis of the Lua-based fast16 malware confirms it was a cyber sabotage tool designed to tamper with nuclear weapons testing simulations. According to Symantec and Carbon Black teams, the pre-Stuxnet tool was engineered to corrupt uranium‑compression…
The Hacker NewsEquation Group -
Hackers Earn $1.3 Million at Pwn2Own Berlin 2026
Pwn2Own Berlin 2026 has come to an end, with participants earning a total of nearly $1.3 million for exploits targeting Windows, Linux, VMware, Nvidia, and AI products. According to TrendAI’s Zero Day Initiative (ZDI), white hat hackers were awarded…
SecurityWeek -
AI Fake Holocaust Images on Facebook Spark Profit Concerns
In May of last year, the Auschwitz-Birkenau State Museum warned publicly about a Facebook account using generative AI to create fake images of people who died in the Holocaust, noting that some images used real names, birthplaces and deportation histories…
Malwarebytes -
South Korea prepares AI deepfake ban for 2026 local elections
South Korea will hold local elections on 3 June 2026, and for the first time will enforce two laws aimed at curbing the use of AI deepfakes in political campaigns. Article 82-8 of the Public Official Election Act, established in 2023, prohibits generating…
Dark Reading
