News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 2 Jun· 73 articles
-
Attackers Hijack Red Hat npm Scope to Steal Cloud Secrets
On June 1, 2026, Red Hat's npm namespace was hijacked, leading to the distribution of malicious packages designed to steal developer credentials and cloud secrets. The attack involved publishing 32 compromised packages within 72 seconds, leveraging Red Hat's…
Infosecurity -
UK firms consider AI powered attacks their top cyber threat
The article reports on a study by ManageEngine which reveals that AI-powered cyber-attacks are the greatest concern for UK organizations, with 43% of respondents prioritizing investment in AI threat preparedness over traditional threats like ransomware and…
Infosecurity -
23andMe exposed genetic information of millions, lawsuit says
A lawsuit has been filed against 23andMe by the California Attorney General for allegedly failing to secure sensitive genetic data after a 2023 breach that exposed information from nearly seven million users. The breach was attributed to old…
Malwarebytes -
Red Hat NPM supply chain attack spreads credential stealing worm
On Monday, Red Hat's NPM repository suffered a supply chain attack where hackers maliciously published 32 compromised packages aimed at distributing a credential-stealing worm. The attack likely involved automation, compromising the CI/CD pipeline using…
SecurityWeek -
SideCopy targets Afghan finance ministry using Xeno RAT
The article discusses a cyber espionage incident involving a group linked to Pakistan called SideCopy, which has targeted the Finance Ministry of Afghanistan using a malware known as Xeno RAT. The group is noted for exploiting various cyber tactics to gain…
The Hacker NewsSideCopy -
Mobile Game Fake Virus Alerts Trick Users Into Malware Scams
The article discusses the prevalence of fake virus alerts in mobile games, which are often used by cybercriminals as scams to trick users into divulging personal information or downloading malicious software. Examples of common scams include fake alerts…
Malwarebytes -
Leaders overlook threat intel gaps, putting firms at risk
A new study presented at Infosecurity Europe 2026 reveals that business leaders struggle with understanding threat intelligence, which may leave organizations vulnerable to cyber threats. The report highlights an 'intelligence-stakeholder gap' where valuable…
Infosecurity -
EU sectors improve cyber defence but health, water lag
The ENISA NIS360 2026 report highlights improvements in cybersecurity across EU critical sectors, noting that while overall progress is being made, some vital areas remain vulnerable. The banking, electricity, and telecommunications sectors rank highest in…
Security Affairs -
Oracle WebLogic Server3 articles this day · SecurityOnline first
CVE-2024-21182 Fuels SilentCryptoMiner Attack on Streaming Sites · Grandoreiro Banking Trojan Evades Defense via Lookalike Software
-
CVE-2024-21182 Fuels SilentCryptoMiner Attack on Streaming Sites
A critical exploit has been detected, specifically CVE-2024-21182 affecting Oracle WebLogic Server. A new variant of the SilentCryptoMiner malware is being deployed across popular digital entertainment platforms, leading to severe degradation of user…
-
Grandoreiro Banking Trojan Evades Defense via Lookalike Software
A critical exploit, CVE-2024-21182, affects Oracle WebLogic Server. Concurrently, the Grandoreiro banking trojan resurfaces, leveraging phishing campaigns to target banking customers in Europe and Latin America. This trojan is known for bypassing security…
-
The Shai-Hulud Infiltration: Red Hat Exploited in Sovereign Supply Chain Breach
The article discusses a critical alert regarding an exploit detected in Oracle WebLogic Server (CVE-2024-21182) and highlights a recent supply chain compromise involving Red Hat's NPM packages. Adversaries managed to upload malicious packages that exploit…
-
-
Dashlane thwarts brute force 2FA attack, under 20 vaults hit
Dashlane, a password management and credential security provider, reported a brute-force attack that targeted its accounts starting May 31. The attackers used automated software to guess two-factor authentication (2FA) codes in an attempt to register their…
SecurityWeek -
SVG Phishing Emails Use Base64 JavaScript to Redirect Users
Xavier Mertens reports a recent surge in phishing emails that utilize SVG files to deliver malicious content. These SVG files, while simplistic and lacking graphical elements, contain JavaScript designed to redirect victims to phishing sites. The payload is…
SANS ISC -
Oracle launches first monthly security patch, fixes 77 flaws
Oracle has released its first monthly Critical Security Patch Update (CSPU) addressing 77 vulnerabilities, including 12 critical issues. The CSPU is designed to provide quicker fixes for high-priority vulnerabilities, supplementing the quarterly Critical…
SecurityWeek -
Fake RVTools installer uses Sectigo cert to deliver Python RAT
A recent cybersecurity alert highlights a sophisticated espionage campaign targeting virtualization administrators through a fake RVTools installer. This malicious payload uses a valid Sectigo code-signing certificate to bypass security measures, allowing it…
SecurityOnline -
Malware Hides C2 in Steam Comments to Hijack WordPress Sites
GoDaddy researchers discovered malware affecting around 1,980 WordPress sites that utilizes Valve’s Steam platform as a command-and-control (C2) infrastructure. The malware hides its C2 instructions within Steam Community profile comments using invisible…
Security Affairs -
High-Severity Ivanti ITSM Vulnerability Exposes IT Systems
A critical vulnerability (CVE-2026-9614) has been identified in the Ivanti IT Service Management platform, scoring 8.8 on the CVSS scale, allowing unauthorized administrative access. The issue impacts both cloud and on-premise systems, with urgent updates…
-
Twill Typhoon RAT hits Asia Pacific firms via cloud mimic malware
A new cyber espionage operation known as the Twill Typhoon RAT campaign is targeting organizations in the Asia-Pacific region, employing sophisticated tactics to gain access to corporate environments. The attackers utilize a strategy that includes mimicking…
SecurityOnlineMUSTANG PANDA -
Apache Fesod SSRF bug CVE-2026-49328 exposes internal systems
A newly discovered Apache Fesod SSRF vulnerability (CVE-2026-49328) has emerged, exposing enterprise systems to unauthorized access due to improper validation of inbound web requests in its UrlImageConverter component. The security flaw allows attackers to…
-
Dashlane says brute force breach took vaults from under 20 users
Dashlane reported a brute-force attack that resulted in the download of encrypted vaults of under 20 user accounts. Despite the breach, the company stated that customer passwords remain safe due to encryption measures in place. Users have been advised to…
The Hacker News -
AMD extends AM5 platform support to 2029, backing upgrades
The article discusses AMD's recent extension of support for its AM5 platform until 2029, following the launch of the AM5 architecture in 2022. This decision reflects AMD's commitment to platform longevity and backward compatibility, promoting cost-effective…
SecurityOnline -
CVE-2026-5386 flaw in KMW CCTV lets hackers take over feeds
A critical security vulnerability (CVE-2026-5386) has been identified in KMW CCTV cameras, impacting the KM-IP521 and KM-IP421 models. This vulnerability has a CVSS score of 9.1, allowing unauthorized users to change administrative passwords and access…
-
Anthropic Eyes Wall Street Debut as SEC Accepts Confidential S1
Anthropic is progressing toward a public listing with its confidential S-1 filing confirmed by the SEC, moving beyond traditional venture capital to Wall Street. Financials are undisclosed, but analysts speculate a potential $10.9 billion in quarterly…
SecurityOnline -
Fleet GitOps flaws expose secrets, enable attacks across clusters
The page discusses critical security vulnerabilities identified in the Fleet GitOps platform, notably affecting multi-tenancy setups. Key vulnerabilities include: 1. **CVE-2026-44935** - Cross namespace secret disclosure, allowing unauthorized access to…
-
Severe Casdoor Identity Platform Flaws Expose Corporate Networks
A critical security alert highlights vulnerabilities in the Casdoor identity and access management system, affecting versions 2.362.0 and earlier. Key vulnerabilities include: 1) CVE-2026-9090, where attackers exploit a flaw in SAML certificate verification…
-
ISC Stormcast For Tuesday, June 2nd, 2026 https://isc.sans.edu/podcastdetail/9954, (Tue, Jun 2nd)
This content features an update from the Internet Storm Center (ISC) for June 2, 2026, managed by handler Brad Duncan. The current threat level is indicated as green, suggesting low risk. Additional resources include links to classes offered by Dr. Johannes…
SANS ISC -
Google patches Android zero‑day bug in Qualcomm, MediaTek chips
A critical Android zero-day flaw has been identified, prompting Google to issue a significant security patch. This update addresses vulnerabilities including CVE-2025-48595, a notable memory management error that can be exploited for code execution. The June…
-
Rancher CVE-2026-44939 lets attackers hijack Kubernetes clusters
The article highlights multiple high-severity vulnerabilities recently discovered in the Rancher container management platform, which pose significant risks to Kubernetes environments. Key points include: 1. **CVE-2026-41052**: A privilege escalation flaw…
-
How Core Values Shape Trust and Decisions in Cybersecurity Teams
The page discusses the importance of defining and adhering to core values in cybersecurity operations (SecOps). It emphasizes that having consistent values is crucial for decision-making and building trust among stakeholders, especially in complex…
dti.domaintools.com -
Critical CVE-2026-5509 flaw hits TP Link Archer routers
The content reports a critical security vulnerability in TP-Link routers, specifically tracked as CVE-2026-5509, affecting models like Archer BE450v1 and BE7200 v1. This command injection vulnerability, which has a CVSS score of 8.5, allows authenticated…
-
Esri fixes critical ArcGIS Server flaws after CVE-2026-9181 alert
Esri has released an urgent security patch for ArcGIS Server, which addresses multiple critical vulnerabilities affecting versions 12.0 and prior. The most severe flaw, identified as CVE-2026-9181, is a high-severity directory traversal vulnerability with a…
-
Alberto Hill Exposes BCA LTD's Fake Threats for Profit
Alberto Daniel Hill's report on digital security in Argentina, Uruguay, and Mexico highlights significant cyber breaches and failures. He combines forensic skills with direct engagement with threat actors to expose breaches and holds governments accountable,…
DataBreaches -
From API key to live threat detections in minutes: how Elastic Security ingests Google Threat Intelligence
The upcoming livestream titled "Put agentic AI to work" will showcase how Elastic Security utilizes Google Threat Intelligence (GTI) for effective threat detection and alert enrichment. The integration leverages AI-driven workflows for real-time…
elastic.co
