News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Fri 22 May· 47 articles
-
Drupal Core2 articles this day · SecurityWeek first
CISA Flags Drupal SQL Injection Flaw CVE-2026-9082 in KEV Catalog · Drupal Critical SQL Flaw CVE-2026-9082 Prompts Urgent Patch
-
CISA Flags Drupal SQL Injection Flaw CVE-2026-9082 in KEV Catalog
CISA has added CVE‑2026‑9082 to its Known Exploited Vulnerabilities catalogue, affecting the Drupal Core product from vendor Drupal. The vulnerability, named the Drupal Core SQL Injection Vulnerability, allows an attacker to achieve privilege escalation and…
-
Drupal Critical SQL Flaw CVE-2026-9082 Prompts Urgent Patch
Drupal has issued a warning regarding CVE-2026-9082, a critical vulnerability that impacts its API for database query sanitization, potentially allowing SQL injection attacks. This flaw can be exploited by unauthenticated attackers, leading to information…
-
-
Europol shuts down criminal VPN First VPN after global crackdown
Europol announced that law enforcement agencies have dismantled a VPN service called 'First VPN' which was utilized by cybercriminals for ransomware attacks and other illegal activities. The operation, led by French and Dutch authorities with support from…
Ars Technica -
Texas AG Sues Meta Over WhatsApp Encryption Claims
The Texas Attorney General has initiated a lawsuit against Meta, alleging that WhatsApp does not provide the promised end-to-end encryption (E2EE) for its messaging service, which is used by over 3 billion people. Since 2016, Meta has claimed that WhatsApp…
Ars Technica -
First VPN Used by 25 Ransomware Groups Dismantled in Global Raid
The article discusses the dismantling of the first VPN service used by 25 ransomware groups, a significant operation in the ongoing fight against cybercrime. Key insights from the takedown indicate that these VPNs were instrumental in facilitating…
The Hacker News -
Microsoft Leads Forrester Wave for Identity Security in Q2 2026
Microsoft has been recognized as a Leader in The Forrester Wave™ for Workforce Identity Security Platforms in Q2 2026. The recognition highlights Microsoft's strong current offerings and strategic position in identity security, showcasing the value of the…
Microsoft -
F5 BIG IP flaw lets attackers pivot to internal Linux hosts
The article discusses a sophisticated multi-stage Linux intrusion involving compromised internet-facing edge appliances like firewalls and VPNs, emphasizing the risks associated with such devices serving as entry points for attackers. The threat actor…
Microsoft -
Richmond Radiology Breach Hits 1.6 Million Patients
On July 1, 2025, Radiology Associates of Richmond (RAR) reported a data breach to HHS affecting over 1.4 million patients from an April 2024 incident. A second breach was reported on May 21, 2025, affecting 266,183 individuals, but details about the affected…
DataBreaches -
Lawmakers press CISA to explain AWS GovCloud key leak
Lawmakers are pressing the U.S. Cybersecurity & Infrastructure Security Agency (CISA) for answers regarding a serious data breach involving a contractor who posted sensitive agency information, including AWS GovCloud keys, on a public GitHub account named…
Krebs on Security -
Ghostwriter AI Phishing Hits Ukrainian Government Agencies
The article discusses the emergence of Ghostwriter, a malicious phishing malware targeting Ukrainian government entities. It emphasizes the threat posed by this malware, which utilizes AI techniques to enhance attack efficiency. The article further…
The Hacker News -
St. Luke’s and ManpowerGroup Use Microsoft Security for AI Growth
The article discusses how organizations like St. Luke’s University Health Network and ManpowerGroup are leveraging Microsoft Security solutions to strengthen their foundations for AI adoption. It highlights the importance of integrating security into the…
Microsoft -
Akamai Buys LayerX for $205m to Boost Zero Trust Browser Security
Akamai Technologies announced its acquisition of LayerX, a secure enterprise browser extension provider, for $205 million, adding to the trend of vendors integrating secure browsers into their security portfolios. LayerX enhances existing browsers by…
Dark Reading -
Megalodon Supply Chain Attack Hijacks Thousands of GitHub Repos
On May 18, 2026, a significant supply chain attack named **Megalodon** targeted over 5,500 public GitHub repositories in a 6-hour window. Attackers exploited weak branch protection to inject malicious CI/CD workflows designed to steal cloud credentials, SSH…
StepSecurity -
Iranian hackers revive with SEO poison, fake Zoom and AI backdoor
The article discusses the resurgence of the Iranian IRGC-affiliated threat actor, Nimbus Manticore, during the U.S. military campaign against Iran, named Operation Epic Fury, which commenced on February 28, 2026. The campaign involved sophisticated…
Check PointUNC1549 -
Trump Mobile leaks customer data after third party mishap
Trump Mobile has acknowledged that it inadvertently exposed customers' personal information, including names, email addresses, mailing addresses, cell numbers, and order identifiers, to the internet. A spokesperson stated that the company is investigating…
DataBreaches -
Iranian Hackers Hit US Gas Station Tank Monitors, Raising Alarms
This week's cybersecurity news from SecurityWeek covers significant topics, including: 1. **Iranian Hackers:** Suspected breaches of US gas station tank monitoring systems using unprotected devices, raising concerns about critical infrastructure safety. 2.…
SecurityWeek -
Canadian police arrest 23 year old for Kimwolf DDoS botnet
Canadian authorities arrested Jacob Butler, 23, accused of operating the Kimwolf DDoS botnet, allegedly responsible for compromising over 2 million Android devices. U.S. authorities are seeking his extradition. Butler faces charges of computer intrusion,…
Security Affairs -
New Jersey Bill 1852 urges firms to tighten breach response plans
Joseph Lazzarotti discusses the evolution of state breach-notification laws during the 2026 legislative sessions, emphasizing the need for businesses to enhance their incident response planning. Key considerations include mandatory notice timelines,…
DataBreaches -
Dutch FIOD arrests two over pro Russia hacking aid
Officials allege that **WorkTitans** and **MIRhosting** were used to assist pro-Russian hackers and circumvent EU sanctions. Youssef Z., a 57-year-old entrepreneur arrested in Amsterdam, had become increasingly elusive, disabling access to his LinkedIn and…
DataBreaches -
German Hospitals Suffer Patient Data Breach via Unimed Billing
German university hospitals are facing a significant patient data breach caused by hackers targeting an external billing service provider named Unimed, which processes billing for multiple hospitals across Germany. Reports indicate that the hack occurred in…
DataBreaches -
Hacker Returns $8.5M ETH After Verus Bridge Exploit, Keeps Bounty
A hacker returned approximately $8.5 million in Ethereum after exploiting the Verus cross-chain bridge, following negotiations for a white-hat bounty. The hacker returned 4,052.4 ETH and retained 1,350 ETH valued at around $2.8 million as part of the bounty…
DataBreaches -
Hugging Face Hiding Second-Stage Malware for npm Supply Chain Attack
Hackers, linked to North Korea, have exploited the Hugging Face platform by embedding second-stage malware within it, transforming it into a channel for malware delivery and data exfiltration. This sophisticated npm supply chain attack specifically targets…
DataBreaches -
Vietnam ministerial data breach leaks millions despite SOC
At the Vietnam Security Summit 2026, Lieutenant Colonel Tran Trung Hieu from the National Cybersecurity Center reported that two serious data breaches have affected ministerial-level agencies in Vietnam, resulting in the compromise of millions of user…
DataBreaches -
Ottawa Man Faces US Extradition Over Botnet Hit on 1M Devices
Jacob Butler, a 23-year-old from Ottawa, was arrested by Ontario Provincial Police and is facing extradition to the U.S. He is accused of participating in significant cyberattacks that impacted over one million devices globally. OPP's cybercrime team has…
DataBreaches -
Sen. Murphy Leads Illinois Bill to Block Targeted Ad Data Harvest
State Senator Laura Murphy is spearheading Senate Bill 340, which aims to establish the Illinois Consumer Data Privacy Act to protect consumers' personal data from targeted advertisements. The bill prohibits the collection, processing, or sale of sensitive…
DataBreaches -
Verizon DBIR: Healthcare Fends Off Increased Social Engineering Attacks
The Verizon 2026 Data Breach Investigations Report (DBIR) highlights a significant increase in social engineering attacks within the healthcare sector, primarily driven by advanced tactics utilizing artificial intelligence (AI). These attacks, which also…
Dark Reading -
Iranian APT Screening Serpens Unleashes New RATs in Espionage
The article reports on the Iranian APT group Screening Serpens, detailing its cyber espionage campaigns from mid-February to April 2026, targeting sectors in the U.S., Israel, UAE, and other Middle Eastern entities. It highlights the emergence of new Remote…
unit42.paloaltonetworks.comScreening Serpens -
Canadian Man Arrested for Operating Kimwolf Botnet
The US Justice Department announced the arrest of Jacob Butler, a 23-year-old Canadian national known online as 'Dort', for allegedly operating the Kimwolf DDoS botnet. He is charged with aiding and abetting computer intrusion and faces up to 10 years in…
SecurityWeek -
Chrome 148 patches WebRTC and UI flaws letting attackers run code
Google has released critical updates for its Chrome browser, addressing two high-severity vulnerabilities that could allow attackers to execute code remotely simply by visiting a compromised website. Users are encouraged to update their browsers to version…
Malwarebytes -
Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflows
A recent cybersecurity attack named 'Megalodon' targeted over 5,561 GitHub repositories, leveraging malicious CI/CD workflows to compromise systems. The attack underscores the vulnerabilities in the supply chain and cloud security domains, highlighting the…
The Hacker News -
Attackers Exploit Vulnerable Drivers Remotely Using BYOVD
The article discusses the concept of making vulnerable drivers exploitable under the Bring Your Own Vulnerable Driver (BYOVD) perspective. It highlights how attackers can utilize these vulnerabilities without the need for hardware access. Key points include…
The Hacker News -
Fake Gemini and Claude sites spread infostealer via poisoned SEO
Security researchers at EclecticIQ have detected a malicious campaign exploiting fake sites mimicking Google's Gemini coding tool and Anthropic's Claude Code to distribute information-stealing malware. This campaign employs SEO poisoning methods to rank…
Infosecurity -
TeamPCP infiltrates VSCode extension compromising 4,000 repos
A hacker group known as TeamPCP is conducting unprecedented open-source software supply chain attacks, significantly increasing cybersecurity threats. Recently, TeamPCP compromised GitHub, accessing around 4,000 repositories via a poisoned VSCode extension.…
Ars TechnicaTeamPCP -
Apple blocks $2.2bn of fraudulent App Store purchases yearly
Apple prevented over $2.2 billion in fraudulent transactions on the App Store in the past year, bringing total blocked fraud to over $11.2 billion in six years. The company employed machine learning and human reviews to enhance fraud detection, blocking 1.1…
Infosecurity -
Hackers Use ROADtools to Breach Microsoft Entra ID Defenses
The article discusses ROADtools, a security framework utilized for both offensive and defensive tactics in cloud environments, particularly targeting Microsoft Entra ID (formerly Azure AD). It highlights the tool's capabilities to enumerate accounts,…
unit42.paloaltonetworks.com -
Global police shut First VPN service, arrest admin in Ukraine
A global law enforcement operation has disrupted 'First VPN', a cybercrime service linked to ransomware attacks. Active since 2014, it had 32 exit nodes across 27 countries and served at least 25 ransomware groups. The FBI reported the dismantling of 33…
SecurityWeek -
CISA Flags CVE-2025-34291 Langflow Flaw in KEV Update
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2025-34291 from Langflow, which has a CVSS score of 9.4, and CVE-2026-34926 from Trend Micro Apex One,…
-
Cloud Atlas APT targets Russia, Belarus with phishing attacks
The report highlights ongoing activities of the Cloud Atlas group, linking them to significant phishing campaigns targeting government and commercial sectors in Russia and Belarus. The group employs new methods, utilizing malicious shortcuts to execute…
securelist.comInception Framework -
Canadian police arrest alleged Kimwolf DDoS botnet mastermind
The article discusses the arrest of the Kimwolf DDoS botnet operator in Canada, who was involved in DDoS-for-hire attacks. This case marks a significant development in cybercrime as it underscores the ongoing efforts by law enforcement to combat such illegal…
The Hacker NewsKimwolf -
Trend Micro patches zero day Apex One flaw CVE-2026-34926
TrendAI, the enterprise business of Trend Micro, has patched a zero-day vulnerability in its Apex One product, tracked as CVE-2026-34926. This medium-severity directory traversal issue can be exploited by unauthenticated local attackers with admin…
