News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 26 May· 55 articles
-
Iranian hackers use AI malware, SEO tricks in US aviation attacks
The article discusses Nimbus Manticore, an Iran-linked cyber threat group, which intensified its operations during the U.S. military operation against Iran in early 2026. Researchers from Check Point reported that the group employed innovative tactics…
Security AffairsUNC1549 -
Thousands hit by Android billing scam via fake messenger apps
A recent report from security firm zLabs highlights a significant mobile cyberattack involving Android carrier billing fraud, affecting thousands of users globally. The fraud primarily exploits malicious applications that trick users into incurring…
SecurityOnline -
Lazarus Uses Fileless RemotePE RAT Powered by DPAPI Loader
The Lazarus APT group, linked to North Korea, has introduced a sophisticated fileless remote access Trojan (RAT) called RemotePE, designed to avoid detection and forensic analysis. This malware operates entirely in memory, utilizing a three-stage toolchain,…
Security AffairsLazarus Group -
Tampered Chef malware hides in PDF tools, infects half of firms
Cybersecurity researchers have identified a global operation distributing trojanized software to corporate networks, significantly impacting over half of monitored customers. Known as the Tampered Chef malware, these deceptive applications masquerade as…
SecurityOnline -
Hackers Use MiniFast, MiniJunk V2 in Phishing, SEO Poisoning
The article discusses the deployment of new malware tools, MiniFast and MiniJunk V2, by Iranian hackers using phishing and SEO poisoning tactics. These techniques allow them to effectively target users and compromise security systems. Phishing remains a…
The Hacker News -
Operation Dragon Whistle phishing hits Changzhou University
Security researchers from Seqrite Labs have unveiled a sophisticated phishing campaign, Operation Dragon Whistle, targeting academic institutions in China, particularly focusing on Changzhou University. The attackers utilize social engineering tactics,…
SecurityOnlineUNG0002 -
Oncology Institute breached via TriZetto vendor, data at risk
The Oncology Institute reported a data breach related to a third-party vendor, confirmed on May 20, 2026. The breach potentially exposed patient information following a 2025 cyberattack, linked to the software provider, TriZetto. Despite the investigation…
Security Affairs -
Attackers Use KnowledgeDeliver LMS Flaw to Drop Godzilla Malware
The article discusses a recent vulnerability identified in the KnowledgeDeliver Learning Management System (LMS), which has been exploited to deploy two well-known threats: Godzilla and Cobalt Strike. It emphasizes the critical importance of securing…
The Hacker News -
Stormcast Programme Shows Green Threat Level and InfoSec Tools
The handler on duty is Brad Duncan, with a current threat level classified as green. The ISC Stormcast program for May 26th, 2026, is highlighted, along with a link to learn about classes taught by Dr. Johannes Ullrich. Additional resources include various…
SANS ISC -
Critical Flaw in Dell Container Storage Modules Calls for Patch
The article discusses a critical vulnerability related to Dell Container Storage Modules, which requires verification for full access to the report. Users are urged to contribute to support access. The page also references related security issues, including…
SecurityOnline -
Apache CXF patches LDAP, XXE and RCE flaws in urgent update
The Apache Software Foundation has released critical updates for the Apache CXF web services framework, addressing newly discovered vulnerabilities, including LDAP injection, XML External Entity (XXE) risks, and remote code execution. These vulnerabilities…
SecurityOnline -
Critical Memcached SASL Vulnerability Fixed in Version 1.6.42
Memcached, a high-performance key/value cache store for distributed systems, has recently fixed a significant SASL vulnerability (CVE-2026-47783 and CVE-2026-47784). This vulnerability includes two critical timing side-channel flaws related to username…
-
Apache ECharts XSS bug exposes session tokens, fixed in 6.1.0
The article discusses a recently discovered XSS vulnerability, tracked as CVE-2026-45249, in the Apache ECharts JavaScript library, particularly affecting its tooltip rendering component. This security flaw allows attackers to execute arbitrary code in…
-
7 Zip flaw CVE-2026-48095 lets attackers run code via NTFS images
Security researchers have identified a critical heap buffer overflow vulnerability in 7-Zip version 26.00, tracked as CVE-2026-48095. Discovered by Jaroslav Lobačevski from GitHub Security Lab, this flaw allows attackers to execute arbitrary code or crash…
-
Malicious Google ads push fake Claude sites spreading ACR Stealer
The article discusses the discovery of malicious webpages impersonating a program called "Claude" that are distributing the ACR Stealer malware. These pages are often found through malicious ads on Google and disguise themselves as legitimate download sites.…
SANS ISC
