News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Sun 31 May· 12 articles
-
Palo Alto Networks PAN-OS2 articles this day · SecurityOnline first
CVE-2026-0257 flaw lets attackers hijack Palo Alto VPN logins · CVE-2026-0257 flaw in MCP Toolbox allows site based session hijack
-
CVE-2026-0257 flaw lets attackers hijack Palo Alto VPN logins
The article discusses CVE-2026-0257, a vulnerability in Palo Alto Networks' GlobalProtect VPN that allows attackers to forge authentication cookies and bypass login, confirmed to be exploited since May 17, 2026. Rapid7 reported that the flaw affects multiple…
-
CVE-2026-0257 flaw in MCP Toolbox allows site based session hijack
A critical vulnerability (CVE-2026-0257) has been identified in the MCP Toolbox, affecting its integration with enterprise database connectors. This flaw allows malicious websites to bypass security controls, exposing networks to session hijacking risks. The…
-
-
Stevens releases YARA X 1.17.0 with five performance upgrades
The recent release of YARA-X version 1.17.0 by Didier Stevens includes five performance improvements and one bug fix. This update aims to enhance the tool's efficiency and usability for users. The threat level currently is categorized as green, indicating a…
SANS ISC -
Ghost CMS mass hack via CVE-2026-26980 fuels ClickFix attack wave
The 'Security Affairs Malware Newsletter Round 99' compiles significant research and articles on malware activity. Key highlights include: Mass compromises of Ghost CMS via CVE-2026-26980 leading to ClickFix attacks. A TrapDoor crypto stealer targeting…
-
ShinyHunters Leak 5 Million Charter Communications Records
The Security Affairs newsletter Round 579, dated May 31, 2026, highlights significant cyber security developments, including data breaches, malware threats, and phishing campaigns impacting journalists and activists. Key points include: 1. **Data Breaches:**…
Security AffairsShinyHunters -
Bombay High Court blocks leak of HDFC AMC ransomware data
The Bombay High Court granted interim relief to HDFC Asset Management Company Ltd (HDFC AMC) concerning a ransomware attack by a group called 'Morpheus', which allegedly stole over 680 GB of sensitive company and investor data. The court issued a John Doe…
DataBreachesMorpheus -
Dutch authorities take down 17M device botnet in cybercrime raid
Dutch authorities have successfully dismantled a major botnet comprising 17 million infected devices. This action is part of ongoing efforts to combat cyber threats linked to IoT and network security. The operation targeted a significant network that had…
The Hacker News -
Critical CVE-2026-32999 flaw in Comet Backup permits remote code
A critical vulnerability (CVE-2026-32999) in Comet Backup allows attackers to execute remote code, posing a severe risk to enterprise backup systems with a CVSS score of 9.1. This flaw affects all versions prior to 26.4.3 and 26.5.0, enabling attackers to…
-
FBI warns of fake FIFA sites ahead of 2026 World Cup
The FBI has issued a critical warning about FIFA website spoofing scams as the 2026 World Cup approaches. Cybercriminals are utilizing typosquatting techniques, creating fake websites that closely resemble legitimate ones to deceive users seeking information…
SecurityOnline -
SolyxImmortal info stealer uses PC registry to steal browser data
A critical alert has been issued regarding the SolyxImmortal info stealer, which targets Windows operating systems to steal sensitive data. This malware establishes persistent access by copying itself to the APPDATA folder, modifying the Windows registry,…
SecurityOnline -
Inside a Massive Elderly Lottery Fraud Scam
The article reports on a significant legal case involving Troy Murray, who was sentenced to 121 months in prison for orchestrating a large-scale data-selling operation that facilitated a lottery fraud scam targeting elderly Americans. From 2016 to 2023,…
SecurityOnline -
World Cup 2026 fans face fake merch, streaming scams online
The article discusses a surge in football-related scams ahead of the FIFA World Cup 2026, primarily on social media. Cybercriminals are exploiting fans by promoting fake merchandise, illegal streaming services, and phishing schemes. Security researchers have…
SecurityOnline