News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 3 Jun· 68 articles
-
Attackers leverage AI to bypass leading EDR defences
Sophos X-Ops analysts reported that an unidentified threat actor is using AI to automate evasion techniques for endpoint detection and response (EDR) systems. The attackers developed malware testing environments that employ Python scripts, some AI-generated,…
Dark Reading -
CISA flags Mirasvit cache flaw CVE-2026-45247 as exploited.
On 3 June 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2026‑45247 to its Known Exploited Vulnerabilities (KEV) catalogue. The entry concerns Mirasvit Full Page Cache Warmer, a Magento extension used on Adobe Commerce platforms,…
-
Dashlane confirms brute force attack hit 20 encrypted vaults
Dashlane issued a security advisory stating that an external party executed a brute force attack against user accounts, obtaining access to 20 encrypted vaults. The attack aimed to bypass two-factor authentication (2FA) methods. Users expressed confusion…
Ars Technica -
Tropical Blend: Cyber & Politics Ramp Up Across Latin America
China-linked espionage groups have targeted at least a dozen nations in Latin America, focusing on geopolitical interests such as maritime shipping and oil production. Notable state-sponsored threats include the Chinese APT groups FamousSparrow and…
Dark ReadingGhostEmperor -
Google Gemini flaw lets hijacked notifications take over Android
A recent article highlights a cybersecurity vulnerability affecting Google Gemini on Android devices related to notifications from WhatsApp and Slack. This vulnerability has serious implications for user privacy and data security.
The Hacker News -
Cyber Insurance Premiums Drop While Exclusions Rise for Firms
Cyber insurance policies are becoming more affordable, but coverage exclusions are increasing, causing potential surprises for customers. Key points discussed at the Gartner Security & Risk Management Summit include: 1. Prices for policies are stabilizing,…
Dark Reading -
Microsoft 365 Android apps flaw lets attackers hijack accounts
A coding flaw in several Microsoft 365 Android applications, including Word, PowerPoint, and Excel, inadvertently disabled a security setting designed to protect user authentication, exposing accounts to potential compromise. Researchers at Enclave…
Dark Reading -
Attackers siphoned exec email from stock exchange for five months
A cyber espionage campaign targeted a senior executive's Outlook account at a major global stock exchange, allowing attackers to silently steal emails over five months (October 2025 to March 2026). Investigated by Broadcom's Symantec and Carbon Black, the…
Security Affairs -
Fake Invoice Scam Lures Victims Into Calling Fraudulent Numbers
A new fake invoice scam has been identified, targeting victims with emails masquerading as legitimate receipts from companies like PayPal and Amazon. These emails incite fear of unexpected charges, prompting individuals to call a provided phone number. The…
Malwarebytes -
Coralogix Lands $200M Series F, Valuation Jumps to $1.6B
Coralogix has successfully raised $200 million in Series F funding, enhancing its total funding to $550 million, and reaching a valuation of $1.6 billion. The investment, co-led by Advent, CPPIB, and Greenfield, will aid in product development, expansion of…
SecurityWeek -
Google DoubleClick Abused in New Malspam Campaign to Deliver DesckVB RAT
The article discusses a new malspam campaign that exploits Google DoubleClick to deliver the DesckVB Remote Access Trojan (RAT). The campaign showcases the evolving threat landscape in cyber security, emphasizing the importance of robust defenses. Key points…
The Hacker News -
Microsoft 365 Android apps leak tokens via forgotten debug flag
The article discusses a significant vulnerability in Microsoft 365 Android apps that allows any application to steal account tokens due to a leftover debug flag. This oversight poses a major risk to user data and security. The piece highlights the increasing…
The Hacker News -
Tving apologises after user data leak prompts CEO response
Tving, an OTT platform, faced a significant controversy due to a leak of users' personal information, with CEO Choi Joo-hee issuing a public apology on June 3, 2026. She confirmed that the leak resulted from unauthorized external access and acknowledged that…
DataBreaches -
FSB Says Foreign Spy Malware Hit Russian Officials' Phones
On June 2, 2026, Russia's Federal Security Service (FSB) announced a major foreign espionage operation, claiming that malware was installed on senior officials' mobile devices to intercept communications and conduct surveillance. Despite the alarming nature…
Security Affairs -
Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)
The article discusses a newly developed autonomous AI tool that has identified a two-year-old remote code execution (RCE) vulnerability in Redis, designated as CVE-2026-23479. This tool represents a significant advancement in cybersecurity, demonstrating how…
-
Attackers Hunt Swagger Files for Sensitive Data Urging Dev Checks
The page discusses the ongoing scanning of API documentation files, specifically 'swagger.json', by attackers. It highlights the advantages of REST over SOAP for API design but warns that swagger.json files can inadvertently expose sensitive information. The…
SANS ISC -
Infosecurity Europe: Vulnerability Management Innovator Konvu Wins Cyber Startup Award
Konvu, an AI triage management platform, has won the first Infosecurity Europe Cyber Startup Award for its innovative vulnerability management solution. The platform automates investigation and provides exploitability decisions, addressing the gap between…
Infosecurity -
Fake Ghidra and dnSpy Sites Spread RemusStealer Malware
The Check Point Research article outlines a large-scale malware distribution operation that uses well-designed impersonation sites for legitimate software, specifically targeting open-source and freeware tools. Key points include: 1. **Impersonation Sites**:…
Check Point -
Critical Kirki plugin flaw lets hackers hijack admin accounts
A recent report from SecurityWeek warns that hundreds of thousands of websites are vulnerable to attacks due to two critical vulnerabilities in the Kirki and Burst Statistics WordPress plugins. The Kirki plugin, used for website design enhancements, has an…
-
Most Powerful AI Agents Lack Basic Defences, Study Finds
Adversa AI's analysis of 100 AI agents reveals concerning security issues, where only 11 agents are deemed 'capable well-defended.' A ‘lethal trifecta’ of private data access, exposure to untrusted content, and outbound action abilities poses significant…
SecurityWeek -
GitHub flaw lets attackers steal OAuth tokens in one click
The article discusses a newly identified vulnerability in GitHub that allows attackers to perform a one-click attack to steal OAuth tokens. This exposes users to significant risks, particularly in software development where such tokens are regularly used for…
The Hacker News -
Hackers Target Global Stock Exchange in Espionage Operation
Hackers infiltrated the email account of a senior executive at a major global stock exchange, gaining access from October 2025 to March 2026. The attack, which lasted approximately 150 days, aimed at espionage, allowing attackers to collect sensitive…
SecurityWeek -
GreyVibe Hackers Use AI Enhanced Phishing to Spy on Ukraine
The content details the GREYVIBE threat actor group's cyber espionage activities targeting Ukraine, particularly since August 2025. Their operations involve complex social engineering tactics, with multi-vector attacks leveraging deceptive emails and fake…
SecurityOnlineGREYVIBE -
Malwarebytes launches Scam Number Check tool to fight phone fraud
The article introduces the "Scam Number Check" tool by Malwarebytes, designed to help users identify suspicious phone calls. Scammers caused over $21 billion in losses in the U.S. last year, highlighting the danger of such calls. The tool allows users to…
Malwarebytes -
IMA Diligence Services Data Breach Impacts 525,000 People
IMA Diligence Services has reported a data breach affecting over 525,000 individuals after unauthorized access to a legacy server. The breach, identified in December, revealed that sensitive personal and financial information, including names, Social…
SecurityWeekXiaoqiying -
Google Gemini voice flaw lets hackers hide commands
A new vulnerability in Google Gemini's voice assistant allows attackers to exploit prompt injection through notifications, enabling social engineering attacks. SafeBreach's research highlights how malicious commands can be concealed in foreign languages or…
Dark Reading -
AI Boosts Identity Visibility, Shrinking IAM Attack Surface
The article discusses the importance of reducing the Attack Surface in Identity and Access Management (IAM) through Identity Visibility and Intelligence Platforms (IVIP). Key points include leveraging AI to enhance cybersecurity, improving visibility into…
The Hacker News -
Linux Kernel2 articles this day · Security Affairs first
CISA warns of active Linux kernel flaw enabling container escapes · CISA Adds Critical Linux and Android Flaws to KEV Catalog
-
CISA warns of active Linux kernel flaw enabling container escapes
The US cybersecurity agency CISA has issued a warning regarding the exploitation of a Linux kernel vulnerability (CVE-2022-0492) which allows privilege escalation and container escapes. This vulnerability, with a CVSS score of 7.8, affects cgroups v1 of the…
-
CISA Adds Critical Linux and Android Flaws to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two significant vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2022-0492, a Linux Kernel Improper Authentication flaw with a CVSS score of 7.0, and…
-
-
Android Framework2 articles this day · Security Affairs first
Android Local Privilege Flaw CVE-2025-48595 Exploited in the Wild · Google fixes 124 Android bugs, patches active CVE-2025-48595
-
Android Local Privilege Flaw CVE-2025-48595 Exploited in the Wild
The blog post discusses CVE-2025-48595, a high-severity vulnerability in the Android Framework, included in Google's June 2026 security update. This flaw, which allows local elevation of privilege, is marked as potentially being exploited in the wild. It…
-
Google fixes 124 Android bugs, patches active CVE-2025-48595
Google has issued its June 2026 Android security updates, addressing 124 vulnerabilities, including the critical CVE-2025-48595, a privilege escalation flaw with a CVSS score of 8.4 that is actively being exploited in targeted attacks. This vulnerability…
-
-
HD Moore shares ways to spot threats beyond zero day flaws
The article discusses a cybersecurity webinar titled "Beyond the Zero-Day: See Your Network Like an Attacker" featuring HD Moore, the creator of Metasploit. It focuses on practical strategies to enhance threat detection and network defense against cyber…
The Hacker News -
US govt launches voluntary AI model cybersecurity review program
On June 2, 2026, President Donald Trump signed an executive order inviting developers of advanced AI models to voluntarily submit their models for cybersecurity review by the US government prior to release. This order establishes a framework that allows…
Infosecurity -
New HTTP/2 Bomb Exploit Disables Thousands of Web Servers
A new exploit known as 'HTTP/2 Bomb' has been discovered by cybersecurity firm Calif, which combines old denial-of-service techniques to disable major web servers. This exploit affects over 880,000 websites utilizing HTTP/2 with default configurations in…
SecurityWeek -
Brazil faces surge in ransomware as top threat actors target 2026
The article outlines the top 10 cyber threat actors targeting Brazil in 2026, highlighting the country's vulnerability as Latin America's primary target for cybercrime. Key actors include LockBit 5.0, Qilin, and Akira, with significant impacts observed…
SOCRadarLockBit 5.0 -
SideCopy XenoRAT Uses Pashto Lures in Afghan Gov Espionage
Security researchers identified a cyber espionage campaign involving a SideCopy XenoRAT malware attack targeting Afghan government networks. The campaign employs spear-phishing emails with localized Pashto filenames to deliver a malicious shortcut. This…
SecurityOnlineSideCopy -
Windows Search flaw lets attackers steal NTLMv2 hashes remotely
The article discusses an unpatched vulnerability in the Windows Search feature that allows attackers to steal NTLMv2 password hashes. This issue poses a significant risk, as it can be exploited remotely, compromising network security. Organizations are urged…
The Hacker News -
Boards Use Cyber Risk Quantification to Show Financial Impact
The article discusses strategies for boards to prioritize Cyber Risk Quantification (CRQ) to enhance cybersecurity management. Key points include: 1. Focusing on monetary aspects of cybersecurity risks can facilitate board support, as demonstrated by BP's…
Infosecurity -
Finance exec at stock exchange breached via Outlook email attack
A recent cyberattack targeted a senior finance executive at a global stock exchange, allowing hackers to access months of sensitive email communications. The attackers used legitimate Windows tools to infiltrate Microsoft Outlook and exfiltrate data, raising…
Dark Reading -
Microsoft Warns Researcher Following Zero Day Disclosure Threat
Microsoft faced backlash after threatening legal action against researchers disclosing zero-day vulnerabilities. One researcher, "Nightmare Eclipse," released details of several unpatched vulnerabilities affecting Microsoft products, prompting a dispute over…
SecurityWeek
