News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Sat 30 May· 13 articles
-
ShinyHunters leaks 4.9M Charter records after ransom ignored
A cybercrime group known as ShinyHunters leaked data from Charter Communications after the company allegedly refused to pay a ransom. The leaked records include around 4.9 million unique email addresses, names, phone numbers, and physical addresses, along…
Security AffairsShinyHunters -
Russia boosts spy ops to grab Western tech amid Ukraine war
Russia's intelligence agencies are intensifying efforts to acquire Western technology and defense secrets amid sanctions affecting its economy due to the ongoing war in Ukraine. Techniques include establishing fake companies and recruiting intermediaries to…
SecurityWeek -
Flowise AI tool hit by critical RCE flaw CVE-2026-40933
Obsidian Security has disclosed a remote code execution (RCE) vulnerability in Flowise (CVE-2026-40933), with a high severity rating (CVSS 9.9). Flowise is an open-source platform that aids in AI development. The vulnerability stems from a systemic command…
-
Apache Ignite Vulnerability Fixes Critical Security Loophole
The Apache Software Foundation has released a critical patch for Apache Ignite, addressing a severe vulnerability (CVE-2025-48977) that enables unauthorized data access via the application's default web interface. This flaw could allow attackers to read…
-
Microsoft slammed over criminalising PoC exploit disclosures
Microsoft has faced backlash from the research community for suggesting that the public release of proof-of-concept exploits for undisclosed vulnerabilities constitutes criminal activity. Kevin Beaumont discusses the conflict involving a user named Nightmare…
DataBreaches -
Signal phishing scam targets journalists for backup keys
A phishing campaign is targeting Signal users, particularly journalists and activists, by impersonating Signal Support and urging them to provide their backup recovery keys via text messages. The attackers exploit the urgency of potential data loss to…
Security Affairs -
Dutch police take down 17 million device botnet linked to ASOCKS
Dutch authorities have dismantled a massive botnet comprising at least 17 million devices, seizing over 200 servers linked to the operation. The botnet, connected to ASOCKS—a residential proxy service—was identified after a security researcher reported it to…
Security Affairs -
Palo Alto Networks PAN-OS2 articles this day · SecurityOnline first
PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation · Critical PANOS Flaw Lets Attackers Bypass Authentication
-
PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation
The article discusses an active exploitation of a vulnerability within PAN-OS, specifically a bypass in GlobalProtect authentication (CVE-2026-0257). This security flaw allows unauthorized access, posing significant risks to organizations utilizing the…
-
Critical PANOS Flaw Lets Attackers Bypass Authentication
The article discusses a critical security vulnerability in Palo Alto Networks' PAN-OS, identified as CVE-2026-0257, which allows authentication bypass and threatens enterprise perimeter networks globally. Threat actors are actively exploiting this flaw,…
-
-
Bulletproof Hosts Drive Global Phishing Targeting Finance, Energy
The article discusses recent cybersecurity findings regarding abusive bulletproof hosting networks that facilitate global phishing campaigns. Researchers from Intrinsec identified multiple campaigns distributing malicious JavaScript payloads, leveraging…
SecurityOnlineTeamPCP -
IBM flags critical WebSphere CVE-2026-8633 flaw in versions
IBM has issued a critical security bulletin regarding a remote code execution vulnerability in its WebSphere application server software, specifically affecting versions 8.5 and 9.0. This vulnerability, tracked as CVE-2026-8633, has a CVSS score of 9.8,…
-
Fake npm Packages Hit Corporate Builds via Dependency Confusion
Microsoft Threat Intelligence has identified a significant npm dependency confusion attack targeting corporate software development pipelines. The attack involved a threat actor using multiple fake accounts to publish malicious packages that impersonated…
SecurityOnline -
Microsoft warns of supply chain attack via malicious npm packages
Microsoft Threat Intelligence has revealed a supply chain attack exploiting malicious npm packages using dependency confusion techniques. On May 28-29, 2026, a threat actor published malicious packages mimicking real corporate namespaces, executing an…
Microsoft
