CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 9–13 on weekend days.

Show as table
Articles published per day
DayArticles published
Sun 11 Oct9
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Today, Sun 25 Oct12 so far
Exploited only
51 articles

Latest days

Tue 19 May· 51 articles

  1. Poland tells officials to drop Signal after Russian phishing

    Poland has instructed government officials to stop using the popular instant messaging app Signal for sensitive communications and to move to a state-developed alternative. The decision follows repeated cyberattacks targeting Signal accounts belonging to…

    Security Affairs
  2. INTERPOL's Operation Ramz nets 201 arrests across Middle East

    According to INTERPOL, Operation Ramz was a multinational effort across the Middle East and North Africa that led to 201 arrests and the identification of 382 additional suspects. The first-of-its-kind operation, conducted by 13 countries between October…

    Security Affairs
  3. ClickFix tactics trick users into spreading Vidar Stealer malware

    The article reports that threat actors are eschewing traditional malware-driven attacks in order to bypass security tools and socially engineer victims, according to the Cyber Threat Intelligence Report 2026 published by Bridewell. The report notes attack…

    Infosecurity
  4. Compromised Nx Console Extension Steals Dev Credentials

    A compromised version of the Nx Console VS Code extension, version 18.95.0, published as rwl[.]angular-console, has been linked to a credential stealer and supply chain attack. The extension, with more than 2.2 million installations on the VS Code…

    The Hacker News
  5. Shai Hulud worm copycats strike NPM via supply chain attacks

    Shai-Hulud worm copycats are already hitting online targets just days after the malware’s source code was dumped on GitHub, with researchers warning that copycats would emerge and they were right. According to Ox Security, at least one threat actor is…

    Security Affairs
  6. Mini Shai Hulud worm breaches AntV, steals CI/CD keys on GitHub

    A new wave of the Mini Shai-Hulud worm has compromised packages across Alibaba’s AntV data visualisation ecosystem, including echarts-for-react, timeago[.]js, and dozens more, with stolen CI/CD secrets being dumped to thousands of public GitHub repositories…

    StepSecurity
  7. Critical CVE-2026-8153 Flaw Enables Remote Hijack of Cobots

    According to CISA and Universal Robots, PolyScope 5, the operating system powering the company’s cobots, is affected by CVE-2026-8153, an OS command injection in the Dashboard Server interface. The flaw is rated critical with a CVSS score of 9.8 and has been…

    SecurityWeekCVE-2026-8153CVE-2026-8153
  8. GitHub Action Compromised to Steal CI/CD Credentials

    On 19 May 2026, The Hacker News reports that threat actors compromised the popular GitHub Actions workflow actions-cool/issues-helper to harvest CI/CD credentials and exfiltrate them to an attacker-controlled server. According to StepSecurity, Varun Sharma…

    The Hacker News
  9. Hijacked npm account spreads credential‑stealing malware

    The Hacker News reports that Mini Shai-Hulud is pushing malicious versions of AntV npm packages by compromising a maintainer account, with the attack affecting packages tied to the npm maintainer account atool, including echarts-for-react, a popular React…

    The Hacker News
  10. Compromised atool account pushes malware to timeago.js and AntV

    The atool npm account, linked to hustcc on GitHub and the author of timeago[.]js, was compromised, with the account’s email listed as i@hust[.]cc. The attacker published two waves of malicious releases across 24 packages in a 10-minute window on 19 May 2026,…

    StepSecurity
  11. ISC Stormcast Shows Green Threat Level, Promotes SANS Podcast

    The ISC Stormcast for Tuesday, 19 May 2026 notes a Threat Level of green and identifies Handler on Duty as Jan Kopriva. The diary includes a link to learn more about classes Johannes Ullrich is teaching for SANS. It also promotes the podcast detail at SANS…

    SANS ISC

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device