News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Fri 22 May· 47 articles
-
Grafana hit by TanStack breach, data stolen, ransom refused
Grafana confirmed that unauthorized access to its GitHub repositories was a result of the TanStack supply chain attack, which took place on May 11. Key points include:\n- Malicious activity detected led to the rotation of GitHub workflow tokens, but one was…
SecurityWeek -
Hunt.io Report Shows STC Hosts Most Middle East C2 Servers
A recent report by Hunt.io reveals that the Saudi Telecom Company (STC) hosts the majority of command-and-control (C2) servers in the Middle East, accounting for over 72% of the regional activity. The study identified more than 1,350 C2 servers across 98…
Security Affairs -
China linked Webworm uses Discord, Graph to hit EU governments
A China-backed threat actor known as Webworm is targeting European governmental organizations, utilizing Discord and Microsoft Graphs for command-and-control (C2) operations. Security vendor ESET revealed Webworm's evolution from known malware to novel…
Dark ReadingWebworm -
Node.js NPM Stealer Targets Windows, macOS, Linux with C2 Ties
The report, authored by Xavier Mertens, discusses a newly discovered Node.js malware classified as a cross-platform NPM stealer targeting Windows (WSL), macOS, and Linux. The malicious code is obfuscated but includes embedded plain-text payloads. It features…
SANS ISC -
CISA Adds Langflow, Trend Micro Apex One Flaws to KEV List
CISA has added vulnerabilities from Langflow and Trend Micro Apex One to its Known Exploited Vulnerabilities (KEV) list. This update indicates that these vulnerabilities are actively being targeted by cyber attackers. Organizations are urged to apply…
The Hacker News -
Cisco patches Secure Workload API bug that leaks sensitive data
Cisco has released patches for a critical security flaw in its Secure Workload REST API, which had a CVSS score of 10.0, indicating a severe risk due to potential unauthorized data access. The update emphasizes the importance of securing network…
The Hacker News -
ISC Stormcast For Friday, May 22nd, 2026 https://isc.sans.edu/podcastdetail/9942, (Fri, May 22nd)
The page provides information about the ISC Stormcast for May 22, 2026, with Jan Kopriva listed as the handler on duty. The threat level is indicated as green. Links are provided to additional resources, including class information by Dr. Johannes Ullrich…
SANS ISC
