News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 27 May· 68 articles
-
CrowdStrike, Google Disrupt GlassWorm Botnet Via Solana, Calendar
The GlassWorm botnet, targeting the open-source software ecosystem, has been disrupted by CrowdStrike in collaboration with Google and the Shadowserver Foundation. This operation dismantled four command-and-control (C&C) channels utilized by the botnet,…
SecurityWeek -
Gitea bug exposes private container images to attackers
A recent vulnerability in Gitea has been identified, allowing unauthorized access to private container images without authentication. This weakness poses significant risks for users relying on Gitea for their development and deployment processes, as it…
The Hacker News -
Cox Media Group fined $930k for fake phone listening claims
A media company, Cox Media Group, and two marketing partners have been fined for falsely claiming they could listen to consumers' phone conversations through a service called "Active Listening." Despite concerns consumers had about their phones…
Malwarebytes -
Hackers linked to Iran breach LA Metro, steal sensitive data
A recent cyberattack on the Los Angeles public transportation system, LA Metro, has been attributed to a pro-Iranian hacktivist group known as Ababil of Minab. The breach, detected in mid-March, resulted in operational disruptions but did not affect transit…
SecurityWeekAbabil of Minab -
Attackers use fake LinkedIn PDF contract to harvest credentials
The article discusses a phishing campaign where cybercriminals impersonate LinkedIn, using Adobe's infrastructure to track victims. The phishing emails look like business inquiries with a fake 'contract' attachment that has double file extensions…
Malwarebytes -
UK firms to boost cyber spend as AI risks and tensions rise
A recent report reveals that 68% of UK businesses plan to increase cybersecurity expenditure in response to rising AI risks and geopolitical uncertainties. The Q1 2026 Barclays Business Prosperity Index indicates that a significant number of business leaders…
Infosecurity -
FBI warns of Kali365 phishing tool bypassing MFA in cloud firms
The FBI has issued a critical alert regarding the Kali365 phishing platform, which targets enterprise cloud environments and aims to hijack sensitive corporate information. This platform uses a method of token hijacking to bypass multi-factor authentication,…
SecurityOnline -
FBI warns Silent Ransom Group targeting US law firms via phishing
The FBI has issued a warning about the Silent Ransom Group (SRG), an extortion gang targeting U.S. law firms through phishing emails and social engineering tactics. SRG impersonates IT support, urging employees to provide remote access to their systems. They…
SecurityWeekLuna Moth -
Netherlands Blocks Kyndryl €100m Solvinity Deal Over Security
The Dutch government has rejected Kyndryl's €100 million bid to acquire Solvinity due to national security concerns, particularly regarding the control of critical digital infrastructure used for various public services in the Netherlands. This decision…
Security Affairs -
Moxa Linux Flaw Lets Local Users Gain Root Access via Dirty Frag
Moxa has issued a critical security advisory (MPSA-263140) concerning vulnerabilities in its Linux-based operating systems that allow local attackers to gain root privileges. The weaknesses are identified as 'Copy Fail' (CVE-2026-31431) and 'Dirty Frag'…
-
FreePBX Attackers Deploy JOMANGY Malware for Toll Fraud via CVEs
Cyble Research & Intelligence Labs has identified a significant exploitation campaign targeting FreePBX systems, perpetrated by a threat group known as INJ3CTOR3, which has been active since 2019. This campaign involves a new malware strain called JOMANGY,…
-
NVIDIA Releases Critical Security Patches for AI Frameworks
NVIDIA has released critical security updates addressing multiple vulnerabilities in its TensorRT-LLM AI frameworks and the Isaac Launchable platform. Key vulnerabilities include a high-severity deserialization flaw (CVE-2025-33255) in the Message Passing…
-
New PureLogs malware spreads via fake purchase order phishing
A new variant of the PureLogs infostealer malware has been identified, distributed via phishing emails featuring fake purchase orders. These emails contain a malicious JavaScript that initiates a multi-stage infection on Windows systems. Once executed, the…
Infosecurity -
AI chatbots inadvertently lead users to cryptojacking malware sites
A recent article discusses the emergence of AI chatbots that mistakenly redirect users to cryptojacking malware sites, raising concerns about cybersecurity risks associated with AI technologies. The piece highlights the need for greater vigilance and better…
The Hacker News -
Global Ghost CMS Poisoning Campaign Exploits Enterprise Blogs
A critical security alert has emerged regarding a cyber assault targeting web servers globally, driven by a Ghost CMS poisoning campaign exploiting vulnerabilities to distribute malware. The attack leverages a high-risk SQL injection vulnerability…
-
Microsoft SharePoint Has a New RCE Flaw. If You Haven’t Patched Yet, Go Do That.
A critical vulnerability in Microsoft SharePoint, identified as CVE-2026-45659, allows for remote code execution (RCE) with a CVSS score of 8.8. This flaw results from the deserialization of untrusted data and poses a significant risk as it requires minimal…
-
CISA urges patch of CVE-2026-48172 in cPanel LiteSpeed plugin
CISA has urged federal agencies to patch a critical vulnerability (CVE-2026-48172) in the LiteSpeed user-end plugin for cPanel, which is being actively exploited in the wild. The vulnerability, a privilege escalation issue with a CVSS score of 9.8, allows…
-
Anthropic debuts sandbox and security plugin for Claude AI
Anthropic introduced two new security features for its Claude AI: a self-hosted sandbox and a security guidance plugin. The sandbox allows operations in a user-controlled environment, enhancing security by keeping files within user perimeters and applying…
SecurityWeek -
SEO poisoned AI installer tricks devs into data stealing malware
A sophisticated cyber campaign targets software engineers using social engineering tactics, including a deceptive malicious AI installer. Threat actors employ SEO poisoning to ensure fake installation links appear before legitimate ones in search results.…
SecurityOnline -
Google CEO Pichai Outlines AI First Strategy After I/O 2026
The content discusses a significant interview with Google CEO Sundar Pichai post the Google I/O 2026 symposium, highlighting the company's shift towards an 'AI-first' strategy amid competition from generative AI advances. Key points include: 1. **Internal…
SecurityOnline -
Google boosts Gemini limits as video task devours developer quotas
Google has expanded its Gemini resource quotas in response to developer dissatisfaction, tripling five-hour and weekly usage limits. However, actual compute metrics remain significantly lower than expected. A recent incident highlighted a severe depletion of…
SecurityOnline -
Apache Fory CVE-2026-48207 flaw allows remote code execution
The content discusses a critical security vulnerability (CVE-2026-48207) in the Apache Fory Python module, specifically a deserialization policy bypass issue. This vulnerability, which carries a high severity score of 9.8, allows remote attackers to run…
-
Concrete CMS patches RCE and CSRF flaws in version 9.5.1
Concrete CMS has released version 9.5.1, which addresses critical security vulnerabilities including remote code execution flaws (CVE-2026-8134), insecure deserialization (CVE-2026-8135), and multiple Cross-Site Request Forgery (CSRF) vulnerabilities. The…
-
LiteSpeed cPanel Plugin flaw exposes Kubernetes clusters to attack
A critical vulnerability has been found in the Fission router associated with the LiteSpeed cPanel Plugin, allowing unauthorized access to private cluster processes with a CVSS score of 9.8. This flaw stems from improper isolation of internal routing paths,…
SecurityOnline -
ISC Handler Brad Duncan Says Threat Level Green, Notes Stormcast
The content provides an update from Brad Duncan, the handler on duty at the Internet Storm Center (ISC). The current threat level is indicated as green. There is a reference to the ISC Stormcast for May 27th, 2026, where additional information can be found…
SANS ISC -
GitHub fixes SSRF bug CVE-2026-9312 and kernel flaws
GitHub has released urgent security updates for vulnerabilities in GitHub Enterprise Server versions 3.16 to 3.20. Key issues addressed include: 1) Revocation of the release package signing key, requiring local GPG key rotation to avoid untrusted packages.…
-
Critical Twig template flaws let attackers run arbitrary PHP code
This alert outlines critical vulnerabilities in the Twig template language for PHP, specifically two remote code execution flaws: CVE-2026-46640 and CVE-2026-46633. CVE-2026-46640 involves a flaw in compiling dynamic attributes that can allow attackers to…
-
Critical Windows Kernel Flaw Lets Attackers Gain SYSTEM Rights
The content discusses a critical security vulnerability in Windows, identified as CVE-2026-40369, which allows attackers to escalate local privileges via an exploit in the Windows Kernel. This vulnerability enables unauthorized users to gain limited SYSTEM…
