News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Sat 23 May· 15 articles
-
Ex Insurance Employee Ordered to Pay £355k for Data Misuse
The Information Commissioner’s Office (ICO) has secured a £355,880.10 confiscation order against Rizwan Manjra, a former Manchester motor insurance worker who unlawfully accessed personal information. The order must be paid within three months; failure to do…
DataBreaches -
INC Ransom Claims 275GB Beacon Mutual Data After Jan Breach
Rhode Island residents are concerned about security breaches involving state vendor systems. Following the RIBridges data breach affecting over 730,000 residents, Beacon Mutual Insurance revealed a cyberattack in January 2023 that compromised the personal…
DataBreachesINC Ransom -
npm introduces 2FA and install controls to secure supply chains
The article discusses npm's new security features aimed at improving software supply chain protection. Key updates include: 1. **Two-Factor Authentication (2FA) for Publishing**: Developers must enable 2FA to publish packages, reducing the risk of…
The Hacker News -
Critical Drupal SQLi flaw exposes thousands of PostgreSQL sites
Drupal has issued a critical security patch for a SQL injection vulnerability (CVE-2026-9082) that allows unauthorized attackers to compromise PostgreSQL-based sites. Exploit attempts were observed within 48 hours post-release, targeting nearly 6,000 sites…
-
GitHub Hosted Malware Attack Hits Eight Packagist Packages
The article titled "Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware" discusses a recent cybersecurity incident involving a supply chain attack that has compromised eight packages on Packagist, a popular PHP package…
The Hacker News -
South Staffs Water breach victims feel violated after £963k fine
Victims of a cyber attack on South Staffs Water in 2020 have expressed feelings of being 'violated' and 'unable to trust' after their personal data was stolen and leaked on the dark web. The breach affected 633,887 individuals, resulting in increased scam…
DataBreaches -
Ransomware groups shift to data theft extortion in 2026
In 2026, ransomware gangs are shifting from traditional encryption strategies to pure extortion by stealing sensitive data and threatening to leak it instead of encrypting systems. This change is driven by the risks and inefficiencies associated with…
Security Affairs -
AI finds 10k high severity flaws in widely used software
Claude Mythos AI has identified 10,000 high-severity vulnerabilities in widely-used software, highlighting the critical need for improved security measures in the field of cybersecurity. The article discusses how artificial intelligence is both a risk and a…
The Hacker News -
Underminr CDN flaw exposes 88 million domains in US, UK, Canada
The article discusses a cybersecurity vulnerability called 'Underminr', which exploits shared content delivery networks (CDNs) to disguise connections to malicious domains. This method is seen as an evolution of domain fronting, where attackers can navigate…
SecurityWeek -
Laravel-Lang Packages Hijacked to Deliver Credential Stealer
The article discusses a supply chain attack on Laravel-Lang PHP packages that were compromised to distribute a cross-platform credential stealer. The incident highlights the vulnerability of software supply chains to cyber threats. Cybersecurity…
The Hacker News -
Ghostwriter APT Hits Ukraine Gov with Prometheus Phishing
The Belarus-based APT group Ghostwriter has initiated a new phishing campaign targeting Ukrainian government agencies. The campaign uses the Prometheus online learning platform as bait, making it effective due to its familiarity among users. Emails sent from…
Security AffairsGhostwriter -
LiteSpeed cPanel Plugin Flaw Lets Attackers Gain Root via CVE-2026-48172
The article discusses a cybersecurity vulnerability associated with the LiteSpeed cPanel Plugin, designated as CVE-2026-48172. This vulnerability allows unauthorized users to execute scripts with root privileges, potentially leading to severe security…
-
Drupal Core SQL injection flaw exploited, added to US KEV catalog
The article discusses a recently discovered SQL injection vulnerability in Drupal Core, which is currently being exploited in the wild. This vulnerability has been added to the U.S. Cybersecurity and Infrastructure Security Agency's Known Exploited…
The Hacker News -
Malware Hiding via Stack Strings Reverse Engineers Seek New Tools
Xavier Mertens discusses malware obfuscation techniques, specifically focusing on stack strings in high-level programming. He highlights how these strings are dynamically constructed at runtime instead of being stored as literals, making them harder to…
SANS ISC -
Laravel-Lang Supply Chain Attack: Every Tag Across Multiple Composer Packages Rewritten to Steal CI Secrets
On May 22, 2026, an attacker with push access to the Laravel-Lang GitHub organization compromised three popular Composer packages by rewriting every git tag in a 15-minute window. This allowed malicious payloads to be executed upon installation, targeting CI…
StepSecurity
