News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 20 May· 57 articles
-
Real World ICS Breaches Highlight IT OT Gaps and APT Threats
SecurityWeek surveys real-world ICS security tales from a cross-section of practitioners, with John Simmons of FortiGuard Incident Response recounting an Iranian-linked APT attempting to move from IT to OT in the Middle East, using new malware and fresh…
SecurityWeek -
TamperedChef malware spreads via malicious ads, hitting thousands
According to Unit 42, researchers track TamperedChef-style activity in two main clusters, CL-CRI-1089 and CL-UNK-1090, with CL-CRI-1089 active since early 2023 and CL-UNK-1090 linked to Israeli infrastructure and code signing entities. They identified over…
unit42.paloaltonetworks.com -
Today’s Threat Detection Summit Explores AI, Alert Fatigue Fixes
SecurityWeek is hosting a virtual event today, the Threat Detection & Incident Response Summit, aimed at helping organisations cut through alert fatigue, leverage AI and unified platforms to speed investigations, and apply actionable threat intelligence. The…
SecurityWeek -
CypherLoc scareware locks browsers, fuels 2.8M tech support scams
Security researchers have sounded the alarm over CypherLoc, a browser-based scareware campaign that locks users’ browsers and pushes them towards fraudulent tech support. Since the start of 2026, Barracuda researchers said they have observed around 2.8…
Infosecurity -
TeamPCP5 articles this day · The Hacker News first
GitHub Confirms Hack Impacting 3,800 Internal Repositories · Malicious VS Code Extension Compromises GitHub Internal Repos
4 outlets-
GitHub Confirms Hack Impacting 3,800 Internal Repositories
Microsoft-owned code-hosting platform GitHub confirmed on 20 May 2026 that approximately 3,800 internal repositories were impacted in a supply chain attack. The intrusion stemmed from a poisoned VS Code extension installed by an employee, with GitHub stating…
SecurityWeek -
Malicious VS Code Extension Compromises GitHub Internal Repos
A malicious VS Code extension breached GitHub’s internal repositories after an employee installed a trojanised extension from the official marketplace. The incident led to the exfiltration of roughly 3,800 GitHub-internal repositories, with GitHub confirming…
Security Affairs -
TeamPCP GitHub Breach: Internal GitHub Repositories Allegedly Accessed
TeamPCP claims have emerged that GitHub’s internal source code and private organization data were accessed, with the post advertising about 4,000 private repositories and asking for a minimum of $50,000 from a single buyer. According to GitHub, the breach is…
SOCRadar -
Grafana breach confined to GitHub, no customer impact
Grafana Labs confirmed on May 19, 2026 that its investigation into the recent breach found no evidence that customer production systems or operations were compromised, though the Grafana Labs GitHub environment was affected. The breach scope covers public…
The Hacker News -
GitHub probing after threat actor offers internal repos for sale
GitHub said it is investigating unauthorized access to its internal repositories after TeamPCP listed the platform’s source code and internal organisations for sale on a cybercrime forum. The company noted that there is currently no evidence of impact to…
The Hacker News
-
-
How an image could compromise your Mac: understanding an ExifTool vulnerability (CVE-2026-3102)
ExifTool’s CVE-2026-3102 vulnerability could allow an attacker on macOS to run arbitrary commands by hiding instructions inside an image’s metadata, affecting ExifTool 13.49 and earlier. Discovered by Kaspersky’s GReAT in February 2026 and patched by the…
-
Vulnerability exploits now lead breach entry, DBIR shows 31% rise
Vulnerability exploitation has overtaken compromised credentials as the most common initial access vector for data breaches for the first time in nearly two decades, according to Verizon. The latest DBIR report shows that 31% of breaches started with…
Infosecurity -
Microsoft fixes BitLocker bypass YellowKey CVE-2026-45585
Microsoft on Tuesday released a mitigation for a BitLocker bypass vulnerability named YellowKey, tracked as CVE-2026-45585, after its public disclosure last week. According to Microsoft, the zero‑day flaw carries a CVSS of 6.8 and is described as a BitLocker…
-
DirtyDecrypt PoC Triggers LPE Flaw in Fedora, Arch, openSUSE
DirtyDecrypt (CVE-2026-31635) is a working PoC for a Linux kernel local privilege escalation flaw centered on a missing COW guard in rxgk_decrypt_skb, allowing writes to shared page-cache memory and potentially root access. The flaw was discovered and…
-
Interpol’s Operation Ramz nets 200 arrests in 13 MENA states
Interpol’s Operation Ramz marks the first cross-region collaboration in the Middle East, with law-enforcement from 13 MENA countries working alongside Interpol and private partners to conduct a five‑month series of investigations. The operation led to the…
Dark Reading -
Huawei router flaw knocks out Luxembourg telecom for three hours
A Huawei enterprise router flaw reportedly caused Luxembourg’s 2025 nationwide telecom outage, which affected landline, 4G/5G and emergency services for more than three hours after specially crafted traffic forced network devices into continuous reboot…
Security Affairs -
ISC Stormcast For Wednesday, May 20th, 2026 https://isc.sans.edu/podcastdetail/9938, (Wed, May 20th)
According to Internet Storm Center, ISC Stormcast for Wednesday, 20 May 2026 notes a green threat level and provides the usual updates and links for readers. The diary identifies the Handler on Duty as Jan Kopriva. It also points readers to a resource…
SANS ISC -
Vulnerability exploits lead breach causes, Verizon DBIR 2026 shows
Verizon’s 2026 DBIR finds vulnerability exploitation has overtaken credential abuse as the leading breach vector, with AI accelerating attacks and patching delays worsening the problem. The report analyzed 31,000 security incidents, of which more than 22,000…
SecurityWeek
