News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 20 May· 57 articles
-
Supply chain strikes hit VS Code, PyPI and npm in 48 hour attack
The article discusses a surge of supply chain attacks that occurred between May 18 and May 19, 2026, during which multiple vulnerabilities were exploited across different layers of the software development pipeline. Notably, a compromised VS Code extension…
StepSecurity -
AI seen as both boon and bane for cybersecurity pros
The article discusses the mixed feelings of cybersecurity professionals towards artificial intelligence (AI). A recent survey indicated that while 16,029 cybersecurity experts see AI as having the greatest positive impact on security, they also believe it…
Dark Reading -
Fake Android Apps Sign Users Up for Costly Carrier Billing
A recent report highlights a fraudulent campaign targeting Android users in Malaysia, Thailand, Romania, and Croatia through nearly 250 malicious apps. These apps, disguised as popular applications, use techniques such as WebView automation, JavaScript…
Dark Reading -
Attackers exploit 'PinTheft' RDS flaw in Arch Linux to gain root
The article discusses a newly discovered Linux local privilege escalation vulnerability called 'PinTheft', targeting the RDS (Reliable Datagram Sockets) subsystem specifically in Arch Linux. The exploit allows attackers to gradually steal memory references…
Security Affairs -
CISA adds CVE-2026-45498 to KEV, urges Defender patch by June
CISA has added CVE‑2026-45498 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Microsoft Defender and is identified as the Microsoft Defender Denial of Service Vulnerability, which allows an attacker to cause a denial‑of‑service…
-
CISA warns of active exploit in Microsoft Defender CVE-2026-41091
CISA has added CVE‑2026‑41091 to its Known Exploited Vulnerabilities (KEV) catalogue. The affected vendor is Microsoft and the product is Defender. The vulnerability, named Microsoft Defender Link Following Vulnerability, allows an authorised attacker to…
-
CISA's KEV Catalog Helps Firms Prioritise Active Exploit Patches
CISA has added CVE-2010-0806 to its Known Exploited Vulnerabilities catalogue. The flaw affects Microsoft Internet Explorer and is identified as the Microsoft Internet Explorer Use-After-Free Vulnerability. It allows remote attackers to execute arbitrary…
-
CISA Adds CVE-2010-0249 to KEV Catalog, Urging IE Users to Patch
On 20 May 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2010‑0249 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Microsoft Internet Explorer and is identified as the Microsoft Internet Explorer…
-
CISA Updates KEV Catalog with New Actively Exploited Flaws
On 20 May 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2009‑3459 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Adobe Acrobat and Reader and is identified as the Adobe Acrobat and Reader Heap‑Based…
-
CISA logs CVE-2009-1537 DirectX flaw in KEV catalog
CISA has added CVE‑2009‑1537 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Microsoft DirectX, specifically the QuickTime Movie Parser Filter in quartz.dll, and is named the Microsoft DirectX NULL Byte Overwrite Vulnerability. It…
-
TeamPCP2 articles this day · Infosecurity first
GitHub Hit by Data Theft After VS Code Extension Compromise · GitHub Breach Exposes 3,800 Repos After VS Code Extension Attack
2 outlets-
GitHub Hit by Data Theft After VS Code Extension Compromise
GitHub confirmed a data breach involving the theft of approximately 4,000 internal repositories by a threat actor known as TeamPCP. The breach was reportedly facilitated through a compromised Visual Studio Code extension. GitHub detected and isolated the…
Dark Reading -
GitHub Breach Exposes 3,800 Repos After VS Code Extension Attack
The article reports that GitHub, the Microsoft-owned platform, confirmed that a third party gained unauthorized access to 3,800 internal repositories, with the breach detected on 19 May 2026. According to GitHub, the intrusion likely arose from a poisoned…
Infosecurity
-
-
Microsoft Windows2 articles this day · CISA first
CISA adds buffer overflow flaw CVE-2008-4250 to KEV catalogue · CISA adds seven KEV flaws, including 2026 Microsoft Defender bugs
-
CISA adds buffer overflow flaw CVE-2008-4250 to KEV catalogue
CISA has added CVE‑2008‑4250 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Microsoft Windows and is identified as the Microsoft Windows Buffer Overflow Vulnerability. It allows a remote attacker to execute arbitrary code by sending…
-
CISA adds seven KEV flaws, including 2026 Microsoft Defender bugs
CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation, released on 20 May 2026. The newly listed CVEs are CVE-2008-4250 (Microsoft Windows Buffer Overflow Vulnerability),…
-
-
Google posts exploit code for unpatched Chromium Fetch API bug
Google has published exploit code for a critical vulnerability in its Chromium codebase that affects millions of users across various browsers, including Chrome and Microsoft Edge. The proof-of-concept exploits the Browser Fetch API, enabling attackers to…
Ars Technica -
Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft
Microsoft has reported a supply chain attack targeting the _@antv_ npm packages, where a compromised maintainer account published malicious versions of popular data-visualization libraries. This led to credential theft in CI/CD environments, impacting…
Microsoft -
Processes and Culture Top Reasons Behind Data Breaches
The article examines the persistence of data breaches, highlighted by a study focused on Massachusetts incidents in 2024. Key issues include underreporting of breaches, particularly in private sectors like finance and healthcare. Panelists at the…
Dark Reading -
Microsoft releases RAMPART and Clarity to test AI agent security
Microsoft has unveiled two open-source tools, RAMPART and Clarity, to help developers test the security of AI agents during development. RAMPART, short for Risk Assessment and Measurement Platform for Agentic Red Teaming, is a Pytest-native framework for…
The Hacker News -
CVE-2026-8153 lets attackers hijack Universal Robots cobot OS
A critical command injection vulnerability in Universal Robots’ PolyScope 5 OS could allow an unauthenticated attacker to execute commands on the robot’s operating system, potentially compromising the controller and disrupting environments where cobots…
-
Microsoft calls for wider gaming security beyond accounts and IP
Microsoft’s Aaron Zollman argues that gaming is a “culture of cultures,” with more than 500 million monthly active players across Xbox consoles, PC, handheld devices, and Xbox cloud gaming, while globally over 3 billion people engage with gaming. He…
Microsoft -
Quantum Bridge raises $8M Series A for quantum safe key tech
Quantum Bridge, a Toronto, Canada-based startup, has announced an $8 million Series A funding round, taking its total funding to $16 million. According to SecurityWeek News, the round was led by a group including Wayra (Telefónica), Cadenza VC, Club degli…
SecurityWeek -
Microsoft Windows 11 Version 24H22 articles this day · Security Affairs first
Microsoft Rolls Out Mitigations for ‘YellowKey’ BitLocker Bypass · Microsoft flags BitLocker flaw CVE-2026-45585, urges mitigations
-
Microsoft Rolls Out Mitigations for ‘YellowKey’ BitLocker Bypass
Microsoft has rolled out mitigations for YellowKey, a recently disclosed zero-day vulnerability leading to a BitLocker bypass, now tracked as CVE-2026-45585 with a CVSS of 6.8. The flaw can be triggered by an attacker with physical access using a USB drive…
-
Microsoft flags BitLocker flaw CVE-2026-45585, urges mitigations
Microsoft has acknowledged a BitLocker bypass flaw, tracked as CVE-2026-45585 with a CVSS of 6.8, and has issued mitigations rather than a patch. The vulnerability, known as YellowKey, affects Windows 11 versions 24H2, 25H2 and 26H1 on x64, plus Windows…
-
-
Microsoft takes down Fox Tempest malware signing service
Microsoft says it dismantled a malware-signing-as-a-service operation called Fox Tempest, which helped cybercriminals make malware appear legitimate. The service let customers submit malicious files to be digitally signed with short-lived Microsoft-issued…
Malwarebytes -
Android malware uses fake apps to hijack premium SMS billing
According to new analysis from Zimperium's zLabs research team, Android malware campaign used hundreds of fake apps to silently sign users up to premium services on their mobile bills, with hardcoded operator targeting for Malaysia, Thailand, Romania and…
Infosecurity -
Mini Shai-Hulud worm hits npm AntV packages in hour long burst
The Mini Shai-Hulud worm has resurfaced in one of its largest single-registry waves to date, hitting hundreds of npm packages tied to the AntV data visualization ecosystem in a coordinated burst lasting around an hour. According to new analysis by Socket's…
Infosecurity -
Microsoft releases AI safety tools RAMPART and Clarity
Microsoft has open-sourced two tools designed to bring safety into the agent development workflow: RAMPART and Clarity. RAMPART is described as an open-source testing framework that brings red-teaming techniques directly into the development process and is…
Microsoft -
AI powered agents close app security gap, attacks jump to 87%
SecurityWeek reports that AI, and in particular agentic AI, is reshaping attack and defence in app security, with no clear distinction between emerging and primary targets. Digital[.]ai’s 2026 App Security Threat Report notes that the share of client-facing…
SecurityWeek -
Microsoft shuts down Fox Tempest malware signing service
Microsoft said it disrupted a malware-signing-as-a-service operation that used the Artifact Signing system to deliver malicious code and enable ransomware attacks, compromising thousands of machines and networks worldwide. The activity is attributed to a…
The Hacker NewsFox Tempest -
Infosecurity Europe 2026 Expands Programme, Returns to London
According to Dark Reading, Infosecurity Europe is the leading gathering for the cybersecurity industry in Europe, bringing the community together to share the latest innovations, learn from one another, and test and benchmark solutions. The event is…
Dark Reading -
1Password teams with OpenAI to stop secret leaks in AI coding
According to SecurityWeek, 1Password has partnered with OpenAI to address credentials leakage risks from AI coding agents, introducing a just-in-time credential model for OpenAI Codex designed to keep secrets out of prompts, code, repositories, terminals,…
SecurityWeek -
Anthropic Silently Patches Claude Code Sandbox Bypass
Anthropic has quietly patched a vulnerability that could have allowed an attacker to bypass Claude Code’s network sandbox and exfiltrate data, according to SecurityWeek. The researcher who found it said two sandbox bypasses were identified, with one tracked…
-
Webworm2 articles this day · Infosecurity first
Webworm Deploys EchoCreep and GraphWorm Backdoors Using Discord and MS Graph API · Webworm APT targets Europe with new Discord, OneDrive backdoors
2 outlets-
Webworm Deploys EchoCreep and GraphWorm Backdoors Using Discord and MS Graph API
Cybersecurity researchers have flagged fresh activity from a China-aligned threat actor known as Webworm in 2025, deploying custom backdoors that use Discord and the Microsoft Graph API for command-and-control communications, according to ESET. Webworm,…
The Hacker News -
Webworm APT targets Europe with new Discord, OneDrive backdoors
The China-aligned advanced persistent threat (APT) group Webworm has expanded its victim list beyond Asia, shifting focus to European governmental organisations as it evolves its tactics, according to Infosecurity Magazine. Analysis of Webworm activity in…
Infosecurity
-
-
B1ack’s Stash dumps 4.6M stolen cards after seller rule breach
Carding site B1ack’s Stash has released 4.6 million stolen credit and debit card records for free, not due to a law enforcement action but as a disciplinary measure after sellers on its marketplace were found reselling data on competing platforms. Each…
Security AffairsB1ack’s Stash -
Agent AI adoption reveals hidden identities, 57% risk in IAM
According to Orchid Security, the Identity Gap Snapshot 2026 released on 19 May 2026 highlights growing concerns as enterprises adopt Agent AI, with identity dark matter now accounting for 57% of identity and visible elements 43%. The findings underline that…
The Hacker News -
Firefox 151 Adds Anti Fingerprinting, Local Network Prompts
Firefox 151 packs big privacy upgrades into a small update, with Mozilla outlining several meaningful privacy and security improvements in version 151.0 released on 20 May 2026, including stronger anti-fingerprinting, broader protection for local network…
Malwarebytes -
Supply chain attack spreads via hacked atoolt NPM account
A fresh Mini Shai-Hulud supply chain attack has hit over 320 NPM packages, with the compromised maintainer account ‘atool’ publishing malicious versions across the @antv namespace, including timeago[.]js used by many projects. The incident also extended to…
SecurityWeek -
Enterprises Deploy AI Fast While Security Struggles to Keep Pace
As enterprises rush AI projects into production, security teams are increasingly forced into a reactive mode, with defence often lagging behind deployment. According to SecurityWeek, the shift from experimentation to production has left many organisations…
SecurityWeek -
AI fuels typosquatting supply chain attacks, CSP can't stop them
Typosquatting is no longer a user problem but a supply chain issue, with attackers embedding lookalike domains inside legitimate third‑party scripts used by web properties. AI has changed the economics: thousands of convincing domain variants can be…
The Hacker News
