News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 27 May· 68 articles
-
Cyber extortion shifts to data theft as ransomware use falls
The article "Out of the Crypt: The Evolving Cyber Extortion Economy" discusses the shift in cyber extortion tactics due to advancements in data recovery and compliance pressure, leading criminals to move away from ransomware towards pure data theft without…
unit42.paloaltonetworks.com -
Romanian Hacker Sentenced for Selling Oregon Network Access
Catalin Dragomir, a 45-year-old Romanian hacker, was sentenced to 4 years and 8 months in a U.S. prison for selling unauthorized access to an Oregon state emergency management network. Dragomir gained access in June 2021 and marketed it online for a $3,000…
Security Affairs -
Akira ransomware breach exposed by missing SSLVPN log integration
The content discusses the reconstruction of an Akira ransomware kill chain from perimeter and endpoint logs within a mid-sized organization, emphasizing the importance of integrating log sources from firewalls and Windows events. It outlines the phases of…
SANS ISCStorm-1567 -
Websites use OPFS SSD timing to spy on users' open tabs
Websites now employ a new technique called FROST (fingerprinting remotely using OPFS-based SSD timing) to monitor visitors by analyzing their interactions with solid-state drives (SSDs). This method exploits a side channel that measures SSD I/O latency to…
Ars Technica -
Luna Moth2 articles this day · DataBreaches first
FBI warns Silent Ransom Group targets law firms with IT scams · FBI Warns of Silent Ransom Group Targeting US Law Firms
2 outlets-
FBI warns Silent Ransom Group targets law firms with IT scams
The Silent Ransom Group (SRG), a ransomware actor, is increasingly targeting law firms using social engineering tactics, including impersonating IT personnel to gain access to sensitive data. The FBI has warned about their methods, which include phishing…
Dark Reading -
FBI Warns of Silent Ransom Group Targeting US Law Firms
The FBI has released a Flash Alert regarding the Silent Ransom Group (SRG), also called Luna Moth, Chatty Spider, and UNC3753. This group specifically targets US-based law firms using social engineering, impersonating IT support through phone calls and…
DataBreaches
-
-
CISA urges action on Daemon Tools Lite CVE-2026-8398 vulnerability
CISA has added CVE‑2026‑8398 to its Known Exploited Vulnerabilities (KEV) catalogue. The entry concerns Daemon Tools Lite, a product of Daemon, and relates to the Daemon Tools Lite Embedded Malicious Code Vulnerability. The vulnerability is described as an…
-
CISA warns CVE-2026-45321 in TanStack npm threatens credentials
On 27 May 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2026‑45321 to its Known Exploited Vulnerabilities (KEV) catalogue. The entry concerns TanStack’s TanStack product, which contains an unspecified vulnerability that allowed…
-
CVE‑2026‑48027 Compromises Nx Console, Leads to Credential Theft
On 27 May 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2026‑48027 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Nx Console, a development‑tool extension produced by Nx. The vulnerability, named the Nx…
-
GCHQ Chief Warns AI Weaponised Amid Rising Russian Cyber Threats
Anne Keast-Butler, the director of GCHQ, emphasizes the growing threat from Russia and the urgent need for enhanced cybersecurity measures in response to AI's rapid development. In a recent speech, she warned that AI is being weaponized and that Britain is…
SecurityWeek -
Iran restores internet after two month military blackout
On May 26, 2026, Iran's vice president announced partial restoration of Internet access after a two-month shutdown due to military conflicts. Cloudflare Radar data showed increased traffic and DNS queries starting from 11:00 UTC, indicating recovery. The…
Cloudflare -
Latin hackers breach 5.8M Uruguayan records, target governments
The article discusses the increasing cyber threats from Latin American cybercriminals targeting government agencies, with a notable case involving a breach of 5.8 million records of Uruguayan citizens. Groups like La Pampa Leaks and the Chronus Group are…
Dark ReadingLa Pampa Leaks -
AI Cuts Exploit Development Time to Hours, Leaving Defences Blind
New research indicates that AI-assisted exploit development has significantly accelerated the time required for attackers to create working exploits for known vulnerabilities (CVEs), dropping from approximately 125.3 days to just 0.5 days. This research,…
Dark Reading -
Grandoreiro and BTMOB malware target Windows, Android for fraud
The article discusses recent cybersecurity threats posed by Grandoreiro malware and BTMOB RAT campaigns, which specifically target Windows and Android users. These malware strains are associated with financial fraud, highlighting the growing risks in digital…
The Hacker News -
Malicious npm Package Steals Files from Claude AI Users on GitHub
The article discusses a cybersecurity incident where a malicious npm package infiltrated the Claude AI user directory via GitHub, resulting in file theft. The report emphasizes the vulnerabilities within supply chain attacks and urges users to be vigilant…
The Hacker News -
Speakers Can Exploit Pretalx Stored XSS Flaw CVE-2026-41241
Researchers at Novee Security identified a critical vulnerability in the Pretalx platform, a commonly used tool for managing conference submissions. This stored XSS vulnerability, tracked as CVE-2026-41241, allows registered speakers to execute malicious…
-
CrowdStrike and Google take down Glassworm botnet channels
CrowdStrike, Google, and the Shadowserver Foundation successfully disrupted the Glassworm botnet by taking down all four of its command-and-control channels simultaneously, which included both traditional servers and stealthy methods like utilizing Google…
Infosecurity -
Iran-linked group wipes LA Metro data, sparks espionage fears
The article discusses a cyber attack on the LA Metro attributed to an Iranian group called Ababil of Minab, linked to Iran's intelligence service (MOIS). In March 2026, this group claimed responsibility for breaching LA Metro, wiping out terabytes of data…
Security AffairsAbabil of Minab -
Schiphol Cargo Worker Arrested for Leaking Data to Drug Smugglers
A 24-year-old cargo worker at Schiphol Airport was arrested by the Royal Netherlands Marechaussee on May 19 for allegedly leaking confidential company information to drug traffickers. The investigation revealed that the suspect had unauthorized access to the…
DataBreaches -
Infosecurity Europe: Why Burnout in Cybersecurity Demands Risk-Based Response
The article discusses the urgent issue of burnout among cybersecurity professionals, emphasizing its classification as a critical risk rather than merely a wellness concern. Research from Cybermindz reveals that many cyber professionals experience…
Infosecurity -
SecurityWeek to Host 2026 AI Risk Summit at California Resort
SecurityWeek is set to host the 2026 Artificial Intelligence (AI) Risk Summit on August 11-12 at Ritz-Carlton, Half Moon Bay, CA. This event, now in its third year, will gather CISOs, security leaders, AI researchers, and risk professionals to discuss AI…
SecurityWeek -
Researchers reveal major LLMs can be fooled by multiturn tricks
Researchers at Cisco have warned that major large language models (LLMs) like OpenAI’s ChatGPT and others are vulnerable to multi-turn manipulation, where users can exploit ongoing conversations to bypass safety guardrails. This study evaluated various AI…
Infosecurity -
Scammers use fake World Cup 2026 offers to target football fans
The article discusses the rise of scam campaigns targeting football fans in anticipation of the FIFA World Cup 2026. Bitdefender Labs has uncovered over 55 malvertising campaigns exploiting fan loyalty and excitement through fake stores, social media ads,…
bitdefender.com -
Serpens Hackers Exploit CVE-2026-48172, Roll Out New RAT Variants
A recent cyber espionage campaign named Screening Serpens, linked to an Iranian advanced persistent threat group, targets multiple nations, particularly in the U.S., Israel, and UAE. The campaign is marked by sophisticated social engineering tactics,…
-
Fake UK Visa Site Leaks 100k Passport, Selfie Data
A website named UK Visa Portal has been exposed for leaking the personal information, including passports and selfies, of at least 100,000 applicants seeking U.K. immigration visas. The leak was reported to TechCrunch by an anonymous source, confirming that…
DataBreaches -
Link11 opens Lisbon hub to boost EU digital sovereignty
Link11, a European IT security provider, is opening a Technical Customer Excellence Hub in Lisbon to strengthen its commitment to digital sovereignty and regulatory compliance within the EU. The hub will relocate technical customer service to ensure…
SecurityOnline -
Dark Reading Turns 20: From Firewalls to AI Powered Security
The article commemorates Dark Reading's 20th anniversary by exploring the evolution of the cybersecurity industry from its focus on perimeter defenses, such as antivirus software and firewalls, to today's advanced technologies influenced by cloud computing,…
Dark Reading -
Albanian hacker 'Venom' extradited to France for VenomRAT malware
A 39-year-old Albanian national known as 'Venom' was extradited to France after being arrested in Greece in November 2025 as part of Operation Endgame. The arrest followed an investigation into his involvement in developing a Remote Access Trojan (RAT)…
DataBreaches -
Lithuania breach leaks 600k records via compromised logins
The Lithuanian Prosecutor General’s Office reported a significant data breach involving unauthorized access to over 600,000 records managed by the Centre of Registers. The breach was facilitated through the misuse of login credentials from authorized…
DataBreaches -
RevEng.AI raises $15M Series A to boost AI binary code analysis
RevEng.AI, a London-based cybersecurity startup, has secured $15 million in a Series A funding round, raising its total investments to $19.5 million. The funding was led by NATO Innovation Fund, along with support from Sands Capital and others. Founded in…
SecurityWeek -
GlassWorm Malware Takedown Shields Developer Supply Chains
The article discusses the recent takedown of GlassWorm malware, which targeted developer supply chain infrastructures. The operation disrupted various cyber-attack activities and illustrated the ongoing battle against evolving cybersecurity threats. Key…
The Hacker News -
SOCs Follow Three Critical Steps to Slash Early Attack Risks
The article emphasizes three critical steps for Security Operations Centers (SOCs) to effectively mitigate incident risks early. These steps focus on enhancing threat intelligence, optimizing incident response protocols, and fostering continuous improvement…
The Hacker News -
FBI warns of Kali365 phishing kit stealing Microsoft 365 tokens
The Kali365 phishing kit, highlighted by the FBI, is a phishing-as-a-service platform that targets Microsoft 365 accounts by stealing access tokens instead of passwords. This method is effective against both organizations and individual users, as it bypasses…
Malwarebytes -
Hacker Sentenced 4 Years for Selling Oregon State Network Access
A Romanian hacker, Catalin Dragomir, has been sentenced to 4 years and 8 months in prison for selling access to a state network in Oregon for $3,000 in Bitcoin. Arrested in November 2024 and extradited to the U.S. in January 2025, Dragomir pleaded guilty to…
SecurityWeek -
CrowdStrike, Google shut Glassworm botnet infecting dev tools
On May 26, 2026, cybersecurity firms, including CrowdStrike and Google, coordinated a simultaneous takedown of the Glassworm botnet, which had been infecting software developers since early 2025 through malicious developer tools. The group utilized…
Security Affairs -
How to Tackle Shadow AI Risks While Keeping Staff Productive
The article "5 Steps to Managing Shadow AI Tools Without Slowing Down Employees" discusses strategies for organizations to effectively manage unauthorized AI tools ('shadow AI') while ensuring that productivity is not hindered. It emphasizes the importance of…
The Hacker News -
Thousands of Fake FIFA Domains Target World Cup Fans
Over 4,300 fraudulent domains impersonating FIFA's official websites have been created to target fans of the upcoming 2026 FIFA World Cup. This operation, identified by Group-IB, involves multiple fraud schemes and actors, with many sites ready to activate…
InfosecurityGhost Stadium -
Lastwall Raises $11.5 Million for Quantum-Resilient Identity Platform
Lastwall, a company specializing in identity security and quantum resilience, recently raised $11.5 million in a Series A extension to expand its operations in North America. This funding was led by the Business Development Bank of Canada. Lastwall offers…
SecurityWeek -
How Credential Theft Evolves Beyond Passwords in Modern Cyber Threats
The article discusses the challenges of credential compromise in cybersecurity, emphasizing that credential theft is a critical tactic for attackers. It categorizes credentials into human and non-human types, detailing various forms such as passwords and…
SecurityWeek -
SymJack Attack Turns AI Coding Agents into Supply Chain Threats
The article discusses the SymJack attack, which exploits trust in AI coding agents to facilitate supply chain attacks. Malicious repositories can trick developers into using compromised code within the CI pipeline. The attack involves an attacker controlling…
SecurityWeek
