News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Fri 29 May· 51 articles
-
Thousands of Oregon prison files accessed by prison worker
A former employee of Snake River Correctional Institution accessed thousands of files from the Oregon Department of Corrections over a six-month period, leading to a data breach discovery in January during a misconduct investigation. The unnamed employee was…
DataBreaches -
Dark Reading's 20 year journey: AI budget limits security gains
The content reflects on the 20th anniversary of Dark Reading, which has covered significant changes in cybersecurity since its inception in 2006. It highlights the industry's evolution from traditional defenses like antivirus software and firewalls to the…
Dark Reading -
Palo Alto Networks PAN-OS3 articles this day · CISA first
CISA KEV Catalog flags Palo Alto PAN-OS auth bypass flaw · Rapid7 flags active CVE-2026-0257 exploits in PAN-OS GlobalProtect
-
CISA KEV Catalog flags Palo Alto PAN-OS auth bypass flaw
CISA has added CVE‑2026‑0257 to its Known Exploited Vulnerabilities catalogue. The entry concerns Palo Alto Networks’ PAN‑OS software. The vulnerability, named “Palo Alto Networks PAN‑OS Authentication Bypass Vulnerability,” allows attackers to bypass…
-
Rapid7 flags active CVE-2026-0257 exploits in PAN-OS GlobalProtect
On May 13, 2026, Palo Alto Networks confirmed a medium severity authentication bypass vulnerability in PAN-OS (CVE-2026-0257). This flaw allows unauthenticated remote attackers to establish a VPN connection through the GlobalProtect gateway under specific…
-
CISA Adds Palo Alto PAN OS Auth Bypass CVE-2026-0257 to KEV List
On May 29, 2026, CISA added one new vulnerability, CVE-2026-0257, to its Known Exploited Vulnerabilities (KEV) Catalog. This vulnerability pertains to Palo Alto Networks' PAN-OS Authentication Bypass and represents a significant risk of active exploitation,…
-
-
Dutch police seize 17 million device botnet linked to ASOCKS
Authorities in the Netherlands dismantled a massive botnet consisting of over 17 million devices, managed via 200 servers. This operation was initiated following a report from a security researcher. The botnet was taken offline after being linked to ASOCKS,…
Ars Technica -
GREYVIBE2 articles this day · The Hacker News first
GREYVIBE Deploys AI Malware on Ukraine, Reveals Operational Slip · Russia linked GREYVIBE uses AI attacks against Ukraine
2 outlets-
GREYVIBE Deploys AI Malware on Ukraine, Reveals Operational Slip
The report discusses GREYVIBE, a Russian-linked hacking group active since 2025, targeting Ukrainian entities through AI-assisted malware across multiple attack vectors. Despite using sophisticated tactics, GREYVIBE exhibits notable operational mistakes that…
Security Affairs -
Russia linked GREYVIBE uses AI attacks against Ukraine
The article discusses GREYVIBE, a cybersecurity threat group linked to Russia, that is targeting Ukraine using AI-driven cyberattacks. It emphasizes the significance of these AI tactics in modern cyber warfare, showcasing the evolving nature of cyber…
The Hacker News
-
-
ChatGPhish flaw lets attackers weaponise AI summaries for phishing
The article discusses the emergence of a vulnerability known as 'ChatGPhish,' which exploits ChatGPT's web summaries to create opportunities for phishing attacks. It emphasizes the potential risks associated with AI-generated content, highlighting how…
The Hacker News -
Trump Mobile Data Leak Exposes Thousands of Customer Records
SecurityWeek's cybersecurity news roundup highlights critical developments, including the Trump Mobile data breach exposing customer information, Russian hackers accessing Treasury emails, a vulnerability in the Visual Studio Code Remote-SSH extension, and…
SecurityWeek -
Microsoft Named Gartner Leader for Endpoint Protection 7th Year
Microsoft has been recognized as a Leader in the 2026 Gartner Magic Quadrant for Endpoint Protection for the seventh consecutive time. This accolade highlights the effectiveness of Microsoft Defender, which combines advanced Endpoint Detection and Response…
Microsoft -
ShinyHunters claims Charter data leak, HIBP notes 4.9M affected
The ShinyHunters extortion group has allegedly leaked data from Charter Communications, including over 42 million customer records available on a Tor site. However, only 4.9 million individuals are likely affected according to data breach notification site…
SecurityWeekShinyHunters -
Attackers Deploy AI LLM Agent After Marimo CVE-2026-39987 Breach
The article titled "Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit" discusses the emergence of attackers utilizing Large Language Model (LLM) agents to exploit vulnerabilities identified in software, specifically…
-
APAC cyber insurance poised to more than double by 2025
The article discusses the evolution of the cyber insurance market in the Asia-Pacific (APAC) region, which has traditionally seen low adoption rates compared to its global counterparts. While organizations in APAC, including developed economies like Japan…
Dark Reading -
MokN raises $15M Series A to expand identity honeypot platform
French cybersecurity startup MokN has successfully raised $15 million in a Series A funding round, increasing its total investment to $18 million. Founded in 2023, MokN aims to transform identity protection by using innovative honeypots to lure attackers and…
SecurityWeek -
Flaw in Zapier integrations lets attackers inject malicious code
Research from Token Security reveals that complex integrations in low-code automation services like Zapier can lead to significant security vulnerabilities due to over-permissions and mismanagement of roles. An exploit chain was demonstrated that could have…
Dark Reading -
Ransomware gang poses as IT staff to hit US law firms
The Silent Ransom Group (SRG) has intensified its tactics by impersonating IT staff to breach systems, particularly targeting US law firms since 2023. This group employs social engineering techniques, including phone calls and in-person interactions, to gain…
InfosecurityLuna Moth -
Attackers exploit Gogs zero day to run code via pull requests
The open-source self-hosted Git service Gogs has a critical zero-day vulnerability, rated 9.4 on the CVSS scale, allowing remote code execution (RCE) via authenticated attackers exploiting an argument injection flaw through malicious pull requests. The flaw…
SecurityWeek -
Almerys breach exposes French health users' social security data
A major breach at Almerys, a French health-care payment processor, has been confirmed, potentially exposing sensitive personal data such as Social Security equivalents. The intrusion affected a system for approving medical coverage requests, prompting the…
DataBreaches -
California AG sues 23andMe over 2023 breach affecting 7 million
California Attorney General Rob Bonta has filed a lawsuit against Chrome Holding Co., formerly known as 23andMe, following a major data breach in 2023 that compromised the personal data of nearly 7 million customers. The lawsuit seeks civil penalties and…
DataBreaches -
Signal Users Warned of Phishing Scam Targeting Recovery Keys
A phishing campaign is targeting Signal users by sending fraudulent messages that impersonate Signal Support, aiming to steal backup recovery keys for accessing encrypted message archives. The messages contain red flags such as threats of data loss, requests…
Malwarebytes -
How Weak Security Funds Neo Nazi Hackers' Child Abuse Ring
The article discusses the activities and implications of a cybercriminal group known as 'The Com', which is linked to neo-Nazi ideologies and other violent crimes, including child exploitation. It outlines how inadequate cybersecurity practices in…
Dark ReadingThe Com -
DIL Observatory Links Cyber Attacks to Global Politics
The Digital Intelligence Lab (DIL) launched an observatory focused on analyzing cyber events in the context of broader geopolitical issues. This initiative arose from observed patterns connecting real-world events to significant cyber activities, exemplified…
Security Affairs -
California sues 23andMe over 2023 breach exposing 7 million users
California's Attorney General Rob Bonta has filed a lawsuit against the genetic testing company, 23andMe, formerly Chrome Holding Co., for allegedly failing to protect sensitive user data in a breach affecting nearly 7 million customers. The 2023 breach…
SecurityWeek -
Chaotic Eclipse leaks six Windows zero days, three exploited
A researcher known as Chaotic Eclipse publicly disclosed six zero-day vulnerabilities in Windows components, with three being exploited in attacks shortly thereafter. Microsoft criticized this uncoordinated disclosure, arguing it jeopardized customer…
Security Affairs -
2,000 Vulnerable Vibe Coded Apps Reveal Gaps in Security Stacks
The article discusses the limitations of security stacks as exposed by 2,000 Vibe-coded applications found to be vulnerable. It emphasizes the need for enhanced security measures to address the risks associated with these applications given the increasing…
The Hacker News -
Google releases Chrome 148, fixing 151 flaws with two critical CVEs
Google has released Chrome 148, which addresses 151 vulnerabilities, including 22 critical flaws. Notably, CVE-2026-9872 and CVE-2026-9873 were highlighted for their severity, with researchers earning $43,000 rewards for their discovery. The majority of the…
-
UK’s CyCOS Project Expands SME Cyber Help to Seven Communities
The CyCOS Project, a UK initiative to assist small and medium enterprises (SMEs) with cybersecurity, is expanding from two to seven communities as it transitions leadership to the Chartered Institute of Information Security (CIISec). Launched in late 2023,…
Infosecurity -
Romanian hacker jailed 56 months for Oregon state cyberattack
A Romanian hacker, Catalin Dragomir, was sentenced to 56 months in prison for his involvement in cyberattacks targeting U.S. government networks, specifically an Oregon state government office. He gained unauthorized access to the network in June 2021 and…
SecurityOnline -
Microsoft rolls out monochrome Copilot for Office enterprise apps
Microsoft has redesigned its Copilot tool within Microsoft 365, implementing a monochromatic aesthetic that emphasizes legibility and coherence across applications. The interface has been simplified to a text-oriented layout, reducing color and distractions…
SecurityOnline -
NuGet package Sicoob steals banking credentials via cloud secrets
The article discusses a malicious NuGet package named 'Sicoob' that targets cloud secrets to steal banking credentials. It highlights how the package is disguised as a legitimate npm package, compromising security in software supply chains. Security experts…
The Hacker News -
PureLogs info stealer hits firms via fake purchase order mail
The article discusses a newly discovered PureLogs info stealer campaign targeting enterprise environments, identified by FortiGuard Labs. This multi-stage attack leverages social engineering, sending deceptive emails disguised as urgent corporate purchase…
SecurityOnline -
Chinese hackers hit maritime, energy firms in Middle East war
Chinese hackers are exploiting the ongoing war in the Middle East to target maritime and energy sectors, as highlighted in ESET's APT Activity Report. They are aligning their cyber operations with Beijing's geopolitical interests, focusing on instability in…
Infosecurity -
Chinese PhaaS Hijacks Mobile Sessions, Bypassing MFA Defences
The article discusses the escalating threat posed by the Chinese Phishing-as-a-Service (PhaaS) ecosystem, which has shifted tactics to bypass modern security controls, particularly targeting mobile users. Analysts identified that these cybercriminals have…
SecurityOnline -
New BTMOB Android RAT offers easy APK builder for $5k lifetime
The article discusses BTMOB RAT, a new Android malware that allows attackers to fully control a compromised device without requiring coding skills. Sold for $5,000 for a lifetime license, it includes a user-friendly APK builder for generating malicious apps…
Security Affairs -
Malicious npm package leaks its GitHub token, exposing data theft
A newly identified malicious npm package, 'mouse5212-super-formatter', leaked its own hardcoded GitHub token, allowing researchers to observe data theft as it unfolded. Disguised as a sync utility, the package read and uploaded files from victim machines to…
Infosecurity -
Chinese Red Lamassu APT Targets Asian Telecoms with JFMBackdoor
Security researchers from PwC Threat Intelligence have identified a sophisticated cyber espionage campaign by the Chinese threat actor known as Red Lamassu, targeting telecommunications providers across Asia. This group, also referred to as Calypso APT, has…
SecurityOnlineRed Lamassu -
Docker Images Risk from Outdated Software, DDoS and Data Breaches
The article discusses the vulnerabilities and security issues associated with containerization, particularly in relation to Docker. It highlights how attackers can exploit outdated software versions in pre-built images, leading to various risks such as DDoS…
securelist.com -
North Korean hackers deploy memory only toolset against banks
Security researchers from Fox-IT have analyzed a sophisticated cyber espionage operation by a North Korean threat group targeting international financial institutions. This operation involves a new 'Lazarus memory-only toolset' that minimizes digital…
SecurityOnlineLazarus Group -
Kimsuky deploys HTTPSpy malware, expands toolkit for espionage
Kimsuky, a North Korean hacking group, has launched a new malware called HTTPSpy while expanding its toolkit to include HelloDoor and VS Code Tunnels. These developments highlight an evolution in their infiltration tactics, as they seek to enhance their…
The Hacker NewsKimsuky
