News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Mon 1 Jun· 63 articles
-
Bitdefender uncovers 12,000+ scam ads across APAC health finance
Bitdefender Labs reveals a significant malvertising ecosystem in the APAC region, highlighting how scams proliferate through social media ads. Key findings include the identification of over 12,000 scam campaigns, with health and finance being the most…
bitdefender.com -
EU to use Anthropic's Mythos AI for cybersecurity research
The European Union is nearing access to Anthropic's AI model, Mythos, as part of Project Glasswing, aimed at improving cybersecurity and vulnerability discovery. This integration follows discussions between the European Commission and Anthropic, intending to…
Dark Reading -
Chinese malware cluster harvests user data through fake app sites
The report analyzes a second cluster of over 1,100 domains linked to Chinese malware delivery, focusing on user data collection and malware dissemination. It distinguishes between two clusters: the first primarily delivered malware with minimal obfuscation,…
dti.domaintools.com -
Hackers hijack Instagram accounts using Meta AI chatbot exploit
Meta's AI support chatbot has been exploited by hackers to gain access to high-profile Instagram accounts. The hackers manipulated the chatbot to change the email addresses associated with these accounts while using a VPN to mask their locations. This…
Ars Technica -
Oracle WebLogic Server2 articles this day · CISA first
CISA’s KEV Catalog Helps Firms Tackle Oracle WebLogic Risk · CISA flags Oracle WebLogic CVE-2024-21182 as actively exploited
-
CISA’s KEV Catalog Helps Firms Tackle Oracle WebLogic Risk
On 1 June 2026 the Cybersecurity and Infrastructure Security Agency added CVE‑2024‑21182 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Oracle WebLogic Server and is described as an unspecified vulnerability that could allow an…
-
CISA flags Oracle WebLogic CVE-2024-21182 as actively exploited
On June 1, 2026, CISA announced the addition of a new vulnerability, CVE-2024-21182, related to Oracle WebLogic Server, to its Known Exploited Vulnerabilities Catalog. This vulnerability has been identified as actively exploited and poses significant risks…
-
-
Red Hat NPM accounts hacked, Shai-Hulud worm steals credentials
Red Hat's official NPM accounts were compromised, leading to a malicious worm, named Shai-Hulud, affecting over 30 packages. This worm collects sensitive credentials during the npm install process and spreads by republishing backdoored packages.…
Ars Technica -
Microsoft drops threat against researcher after zero day leak
Microsoft is encountering significant backlash from the cybersecurity community after threatening criminal prosecution against a researcher, known as Nightmare-Eclipse, who disclosed multiple zero-day exploits. The situation began when the researcher…
Dark Reading -
flippercode WP Maps Pro2 articles this day · Security Affairs first
WP Maps Pro bug lets attackers create admin accounts · CVE-2026-8732 flaw in WP Maps Pro lets hackers add admin accounts
-
WP Maps Pro bug lets attackers create admin accounts
A critical-severity vulnerability in the WP Maps Pro WordPress plugin (CVE-2026-8732) has been reported, allowing unauthenticated attackers to take over websites by creating administrative accounts. The vulnerability, with a CVSS score of 9.8, affects the…
-
CVE-2026-8732 flaw in WP Maps Pro lets hackers add admin accounts
The article discusses a critical vulnerability identified as CVE-2026-8732 in the WP Maps Pro plugin for WordPress, which allows unauthenticated attackers to create admin accounts without a password. This flaw affects over 15,000 websites and has a CVSS…
-
-
Dutch police shut down 17‑million‑device botnet linked to Asocks
Dutch police have disrupted a massive botnet comprising 17 million infected devices, including computers, smartphones, and tablets. The operation followed a report from a security researcher to the Netherlands’ National Cyber Security Centre (NCSC-NL).…
SecurityWeek -
Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm
The article discusses a supply chain attack identified as 'Miasma,' which compromised Red Hat npm packages. This attack involved the use of a credential-stealing worm to infiltrate these packages, aiming to exploit vulnerabilities within the network…
The Hacker News -
Instagram Accounts Hijacked Via Meta AI Support Flaw
Recently, several Instagram accounts, including the Obama White House's, were compromised following reports on Telegram detailing how to exploit Meta's AI support assistant to reset passwords. Hackers used a VPN to simulate the target's IP address and…
Krebs on Security -
Cloudflare Slashes Server Boot Time from Hours to Minutes
This article discusses how Cloudflare reduced core unit boot time significantly from hours to just minutes through improvements in their network boot automation process. The boot sequence, managed by UEFI firmware, was plagued by long delays due to a…
Cloudflare -
Belgium flags active exploitation of CVE-2026-41089 Netlogon flaw
The Centre for Cybersecurity Belgium (CCB) issued a warning that threat actors are exploiting a critical-severity Windows Netlogon vulnerability, tracked as CVE-2026-41089, which carries a CVSS score of 9.8. This security flaw, disclosed on May 12 during…
-
Fake BlueWallet Site Lures Mac Users to Steal Crypto, Passwords
A fake website mimicking BlueWallet, a legitimate Bitcoin wallet, is targeting Mac users with malware that steals passwords, accounts, and cryptocurrencies. Users are tricked into downloading and executing an AppleScript that bypasses security measures. The…
Malwarebytes -
Palo Alto Networks PAN-OS4 articles this day · Security Affairs first
CVE-2026-0257 flaw lets hackers bypass Palo Alto VPN auth · CVE-2026-0257 Cache Warmer RCE Bug Hits
-
CVE-2026-0257 flaw lets hackers bypass Palo Alto VPN auth
A critical vulnerability (CVE-2026-0257) in Palo Alto Networks' PAN-OS GlobalProtect VPN allows attackers to bypass authentication and gain unauthorized access to VPNs. Disclosed in May 2026, the flaw has been actively exploited, prompting advisories from…
-
CVE-2026-0257 Cache Warmer RCE Bug Hits
A critical security vulnerability, tracked as CVE-2026-45247, has been identified in a Cache Warmer RCE flaw affecting Magento and Adobe Commerce platforms, rated with a severity of 9.8. This issue allows attackers to exploit the flaw by manipulating…
-
Palo Alto PANOS flaw exploited days after patch release
Threat actors are actively targeting a high-severity authentication bypass vulnerability (CVE-2026-0257) in Palo Alto Networks' PAN-OS just four days after its public disclosure. The vulnerability allows attackers to bypass VPN restrictions, and Palo Alto…
-
CISA flags PAN-OS flaw CVE-2026-0257 as attackers bypass VPN auth
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a significant vulnerability in Palo Alto Networks PAN-OS, tracked as CVE-2026-0257, to its Known Exploited Vulnerabilities catalog with a CVSS score of 7.8. This vulnerability allows…
-
-
Critical Flowise Bug CVE-2026-40933 Lets Attackers Hijack Servers
A critical vulnerability in the open-source AI platform Flowise, identified as CVE-2026-40933, allows attackers full server control by importing a malicious workflow file. This flaw primarily affects self-hosted deployments while the managed Flowise Cloud…
-
Linux Flaw and PANOS Bugs Fuel Rise in AI Powered Exploits
The article discusses recent developments in cybersecurity as of June 1, 2026. Key points include: 1) A newfound flaw in Linux and vulnerabilities in PAN-OS, suggesting increases in exploit threats. 2) AI usage in Cybersecurity is on the rise, with…
The Hacker News -
Ransomware gangs peak in European afternoons, study shows
A study analyzing 16,699 ransomware leak posts over two years reveals that ransomware operators primarily operate during business hours, peaking in the European afternoon, challenging the common narrative of nocturnal hackers. Key findings indicate that the…
Security Affairs -
Infosecurity 2026 hosts ransomware war room drill for UK retailers
Infosecurity Europe 2026 will feature 'Enter the War Room: A Tabletop Experience', a 90-minute immersive exercise simulating a ransomware attack on a fictional supermarket, 'BlueCart'. This exercise aims to prepare cybersecurity teams for real-life threats,…
Infosecurity -
Dragos buys Phosphorus to boost critical IoT security
Industrial cybersecurity firm Dragos has acquired Phosphorus, an xIoT security specialist, to enhance its capabilities in securing connected devices in critical infrastructure. Phosphorus, founded in 2017, offers a platform that helps organizations identify…
SecurityWeek -
China linked hackers step up Dragon Weave attacks on Czech Taiwan
China-aligned hacking groups have intensified their attacks, notably targeting the Czech Republic and Taiwan, raising concerns about cybersecurity threats associated with geopolitical tensions. The article discusses the rise of 'Dragon Weave', a malicious…
The Hacker News -
Pentagon ends Anthropic deal amid Trump AI military push
The Trump administration is advocating for the integration of artificial intelligence (AI) in the U.S. military, while facing concerns over safety and ethical implications from within the military and tech companies. Adm. Frank Bradley expresses the need for…
SecurityWeek -
AI to Assist, Not Replace, SOC Analysts at Infosecurity 2026
At Infosecurity Europe 2026, vendors discussed the role of AI in Security Operations Centers (SOCs), asserting that while AI will automate repetitive tasks, it will not replace human analysts. Vendors emphasized the need for transparency in AI operations,…
Infosecurity -
RedHat Cloud npm packages steal secrets via preinstall hook
On June 1, 2026, eight npm packages in the @redhat-cloud-services scope were discovered to contain malicious payloads that execute via a preinstall hook during npm installations. This sophisticated multi-stage credential harvester targets sensitive data such…
StepSecurity -
MSPs Embrace Security Growth Platforms and Proactive Cyber Defence
The article discusses the shift of Managed Service Providers (MSPs) towards the Security Growth Platform, moving beyond traditional virtual Chief Information Security Officer (vCISO) tools. It highlights the necessity for MSPs to adapt to evolving security…
The Hacker News -
Linux kernel CIFSwitch flaw lets low priv users gain root access
A long-standing vulnerability in the Linux kernel, identified as CIFSwitch, has been discovered that impacts the CIFS subsystem, allowing low-privileged users to gain root-level privileges on many Linux distributions for over 19 years. The flaw is related to…
SecurityWeek -
Ukrainian networks hit by stealth Gamaredon worm via WinRAR flaw
A new report reveals that the Russian state-linked Gamaredon group has developed a sophisticated worm, referred to as GammaWorm, that hides its components within Windows NTFS Alternate Data Streams, enabling it to infect Ukrainian networks almost undetected.…
-
Dark web leaks expose Italian hotel, AT&T, Hinge and Llama AI data
The SOCRadar Dark Web Team identified multiple new listings selling large datasets on underground forums. Key highlights include: 1. **Italian Hospitality Dataset**: A seller claims to offer 230,000 customer records at a low price, framed as data-only to…
SOCRadar -
Hackers Exploit Top 10 Identity Tactics: Phishing to SIM Swaps
The article discusses the top 10 identity attack techniques used by hackers, emphasizing that most cyberattacks begin with compromised identities. The techniques include: 1. **Phishing and Spear-Phishing** - Fraudulent communication that mimics legitimate…
SOCRadar -
Container Attacks Surge, Threatening Cloud Infrastructure Worldwide
The article discusses the increasing threat of container attacks in modern infrastructure, highlighting various attack vectors that are being exploited by malicious actors. It begins with an introduction to containerization, emphasizing its reliance on…
securelist.com -
SpaceX engineer finds 19 year Linux CIFS bug enabling root
The article discusses a critical Linux vulnerability called CIFSwitch, discovered by Asim Manizada, a SpaceX security engineer. This 19-year-old logic bug allows unauthorized users to forge CIFS authentication keys, potentially granting root access on…
Security Affairs -
Attackers Steal OpenAI Codex Tokens via Compromised npm Package
The article discusses a significant security breach involving the theft of OpenAI Codex authentication tokens through a supply chain attack affecting the codexui-android npm package. The incident highlights vulnerabilities in API security and emphasizes the…
The Hacker News -
Attackers Use ChatGPT Sites to Spread Malware Through Fake Pages
A recent report by Push Security has revealed that cybercriminals are utilizing legitimate ChatGPT domains to deliver malware via phishing attacks. The attackers exploit ChatGPT's code-rendering capabilities to create fake download pages masquerading as…
Infosecurity -
China linked hackers deploy Linux router implant to hijack DNS
A cyber espionage campaign targeting enterprise operations in Southeast Asia has been identified, involving a China-linked group deploying a custom Linux router implant on border routing devices. This implant circumvents traditional security measures,…
SecurityOnline -
Critical WP Maps Pro flaw lets hackers add admin accounts
The article discusses a critical vulnerability in the WP Maps Pro plugin that is currently being exploited to create unauthorized admin accounts. The exploitation of this flaw poses significant security risks to websites using this plugin, urging users to…
The Hacker News
