News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Thu 4 Jun· 70 articles
-
IronWorm Rust malware steals secrets via compromised npm packages
A new malware campaign called 'IronWorm' is targeting the open source software ecosystem, particularly developers through compromised npm workflows. Written in Rust, it steals sensitive developer secrets such as API keys and SSH keys, which are then used to…
Dark Reading -
TA49224 articles this day · SecurityWeek first
Chinese hacking group TA4922 widens attacks across Asia, Europe · TA4922 cybercrime group targets Europe and Africa with Atlas RAT
4 outlets-
Chinese hacking group TA4922 widens attacks across Asia, Europe
China's cybercrime group TA4922 is expanding its global operations, previously focused on Japan, now targeting countries like Taiwan, South Korea, and several in Europe. This group uses diverse tactics including phishing and various malware delivery methods,…
Dark Reading -
TA4922 cybercrime group targets Europe and Africa with Atlas RAT
The article discusses the expansion of a Chinese-speaking cybercrime group, TA4922, into Europe and Africa, transitioning from its original focus on East Asia. This group employs a variety of tactics including malware delivery, credential phishing, and…
Infosecurity -
TA4922 Phishing Spreads Across UK, Germany, Italy, South Africa
The article discusses the expansion of phishing attacks by the China-linked cyber group TA4922 to countries including the UK, Germany, Italy, and South Africa. It highlights the group's increasing tactics and methods, as well as the rising threat level to…
The Hacker News -
Chinese Cybercrime Group in Spotlight for Record Campaign Pace
A recently identified Chinese-speaking cybercrime group known as TA4922 has been intensifying its operations globally, as detailed by Proofpoint. This group utilizes social engineering tactics to distribute malware and engage in credential phishing and…
SecurityWeek
-
-
4 Critical Threats Where Attackers Have the Advantage
Gartner's analysts have highlighted four critical threats where attackers currently have the advantage: deepfakes, software supply chain risks, prompt injections, and AI application compromises. During the Gartner Security and Risk Management Summit, it was…
Dark Reading -
Dashlane explains how attackers managed to download encrypted password vaults
Dashlane reported a coordinated hacking attempt aimed at accessing the encrypted password vaults of its users. Attackers exploited the device enrollment feature, sending automated requests to numerous accounts, which led to fewer than 20 vaults being…
Ars Technica -
Updating the taxonomy of failure modes in agentic AI systems: What a year of red teaming taught us
The Microsoft AI Red Team updated the Taxonomy of Failure Modes in Agentic AI Systems to reflect new findings from twelve months of red teaming. The v2.0 version expands on failure modes unique to agentic systems and adds seven new categories, such as…
Microsoft -
Israeli Water Malware Flaw, Doppelgänger Misinformation Exposed
This newsletter highlights recent cybersecurity developments, particularly focusing on threats emerging from North Korea (DPRK) and various malware campaigns. Key points include: 1. **ZionSiphon OT Malware**: DTI analyzed a malware targeting Israeli water…
dti.domaintools.com -
Microsoft rebrands WinUI 3 as WinUI, pushing native over web apps
Microsoft rebranded its WinUI 3 framework as WinUI during the Build 2026 developer conference, emphasizing a shift back towards high-performance native applications rather than resource-heavy web technologies. This strategic move aims to eliminate hybrid…
SecurityOnline -
Google backs Merkle Tree Certs to thwart quantum crypto threats
The article discusses the impending challenges posed by quantum computing to current cryptographic methods like RSA and ECC, highlighting the threat of 'harvest now, decrypt later' tactics. In response, the US and EU are planning a shift to quantum-resistant…
SecurityOnline -
Windows 11 Context Menu Slammed for Clutter Lack of Customisation
The article discusses the criticisms of the Windows 11 context menu, highlighting issues with its cluttered layout that prioritizes system defaults over user convenience. Users find it cumbersome as legacy options require additional clicks to access,…
SecurityOnline -
Mirasvit Full Page Cache Warmer2 articles this day · SecurityWeek first
CISA adds Magento cache flaw CVE-2026-45247 to KEV catalogue · CISA warns federal agencies to patch critical Magento cache flaw
-
CISA adds Magento cache flaw CVE-2026-45247 to KEV catalogue
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the Mirasvit Full Page Cache Warmer flaw (CVE-2026-45247) to its Known Exploited Vulnerabilities catalog. This critical PHP object injection vulnerability impacts Mirasvit versions…
-
CISA warns federal agencies to patch critical Magento cache flaw
The US cybersecurity agency CISA has issued a warning to federal agencies to promptly patch a significant vulnerability (CVE-2026-45247) in the Mirasvit Full Page Cache Warmer for Magento 2 extension, which has been exploited for remote code execution (RCE).…
-
-
Cisco Unified Communications Manager2 articles this day · Security Affairs first
Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public · Cisco Fixes CVE-2026-20230 SSRF Flaw in Unified CM, Root Risk.
-
Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public
Cisco has released patches for CVE-2026-20230 in its Unified CM software following the public disclosure of exploit code for this vulnerability. This security update is critical for protecting network systems from potential attacks. The advisory underscores…
-
Cisco Fixes CVE-2026-20230 SSRF Flaw in Unified CM, Root Risk.
Cisco has patched a critical vulnerability in its Unified CM system, tracked as CVE-2026-20230, which allows unauthenticated attackers to execute server-side request forgery (SSRF) attacks. The flaw arises from improper validation of HTTP requests and…
-
-
Apache Fory flaw lets attackers run code remotely, CVE-2026-50076
A high-severity vulnerability has been identified in Apache Fory, impacting distributed enterprise networks through unauthorized remote code execution. This issue, tracked as CVE-2026-50076, arises from a deserialization bypass due to inadequate verification…
-
Critical RCE flaw in Everest Forms Pro lets hackers hijack sites
A major vulnerability has been discovered in the Everest Forms Pro plugin for WordPress, allowing unauthenticated attackers to execute remote code and take over websites. This critical flaw, recorded as CVE-2026-3300, received a CVSS score of 9.8 and affects…
-
Claude Code GitHub Action flaw lets one issue hijack many repos
The article discusses a critical flaw in the Claude Code GitHub Action, which allowed a single malicious issue to hijack multiple repositories. This vulnerability underscores significant risks associated with the increasing prevalence of AI technologies in…
The Hacker News -
Agentic AI Is Transforming Defense, But Only Secure IT Infrastructure Will Maximize It
The article discusses the impact of Agentic AI on defense systems, emphasizing the necessity of a secure IT infrastructure to harness its full potential. Key points include the transformative capabilities of AI in enhancing defense mechanisms, the importance…
The Hacker News -
Offroad secures $7M seed to apply agentic AI to identity risk
Offroad, a New York and Tel Aviv-based startup, has raised $7 million in seed funding to enhance identity management in organizations. Their approach focuses on using agentic AI to address identity risks by autonomously investigating and rectifying issues…
SecurityWeek -
Webinar to Examine Third Party Risk Program Gaps on June 4 2026
SecurityWeek is hosting a live webinar on June 4, 2026, focusing on the performance of third-party risk programs in organizations. The session will utilize real-world data to identify gaps and suggest improvements to enhance security. Key topics to be…
SecurityWeek -
Willow debuts IAM platform for AI agents, backed by £7m seed
Willow, formerly known as Webrix, has launched an identity and access management platform aimed at securing enterprise AI agents, backed by $7 million in seed funding from Hetz Ventures and Wix executives. The platform functions as a centralized gateway for…
SecurityWeek -
Bugcrowd rolls out EU data residency to ease sovereignty worries
Bugcrowd has introduced a Data Residency Option to address growing data sovereignty concerns in the EU. This expansion is crucial for organizations as geopolitical tensions and regulatory complexities increase, necessitating strict compliance with EU data…
Dark Reading -
AI driven cyber threats surge as firms adopt Zero Trust defenses
The article "ThreatsDay Bulletin" discusses significant cybersecurity threats, particularly involving AI agents that have been misused. It highlights various new stories, including malicious command and control (C2) tools, exploits involving JavaScript…
The Hacker News -
Microsoft warns fake AI assistant JustAskJacky spreads malware
Microsoft warns that the adoption of AI in organizations presents new cyber threats, as attackers exploit AI capabilities to distribute malware. During Infosecurity Europe, experts highlighted the risks of flawed AI code and demonstrated a specific attack…
Infosecurity -
Anthropic’s Claude Mythos Beats GPT5.5 in Chrome Exploit Test
During Infosecurity Europe 2026, a benchmark called ExploitBench revealed that Anthropic’s AI model, Claude Mythos, outperformed OpenAI’s GPT5.5 in exploiting real-world Google Chrome vulnerabilities. Conducted by Bugcrowd in collaboration with Carnegie…
Infosecurity -
VoidZero Joins Cloudflare, Pledges Vite Stays Open Source, Funded
VoidZero, known for creating tools like Vite, is joining Cloudflare, along with its entire team. Key points include: 1. **Open Source Commitment**: Vite and its related products (Vitest, Rolldown, Oxc, Vite+) will remain open source and vendor-agnostic. 2.…
Cloudflare -
Google Gemini voice flaw lets attackers hijack devices via alerts
SafeBreach researchers discovered a critical vulnerability in Google’s Gemini voice assistant that allows attackers to use indirect prompt injections through common messaging notifications. This new attack, termed 'Fake Context Alignment,' was found to…
SecurityWeek -
ProtonMail walks tightrope between privacy and crime prevention
ProtonMail, a Swiss privacy service, emphasizes the challenge of preventing criminal use of its platform while maintaining user privacy and end-to-end encryption. COO Raphael Auphan highlighted that they cannot access user message contents due to their…
Infosecurity -
Hitachi Energy RTU500
The CISA advisory (ICSA-26-155-04) announces vulnerabilities in Hitachi Energy's RTU500 products, specifically within certain firmware versions. If exploited, these vulnerabilities can lead to denial of service, impacting system availability,…
-
CVE-2025-11482 flaw disables B&R OPC UA server, update urged
The ICS Advisory ICSA-26-155-03, released on June 4, 2026, informs about a vulnerability in the B&R PPT30 Operating System that affects versions prior to 1.8.0, specifically identified as CVE-2025-11482. This vulnerability could allow unauthenticated…
-
NAVTOR NavBox
The advisory from CISA, released on June 4, 2026, details a vulnerability in NAVTOR NavBox version 4.16.1.20, identified as CVE-2026-21404. This vulnerability allows local attackers to exploit hard-coded credentials in its SOAP functionality, granting…
-
Hitachi Energy MACH HiDraw
The ICS Advisory for Hitachi Energy MACH HiDraw (released on June 4, 2026) warns of a buffer overflow vulnerability (CVE-2026-7310) affecting versions 9.22 and earlier, which can lead to application outages and arbitrary code execution. The advisory…
-
Hitachi Energy ITT600 Explorer flaw sparks denial of service risk
The ICS Advisory for Hitachi Energy ITT600 Explorer, released on June 4, 2026 (Alert Code: ICSA-26-155-02), details vulnerabilities that could allow denial of service (DoS) attacks. Versions affected include ITT600 Explorer prior to 2.1 SP6. The…
CISA -
Travelers Alerted to Fake Booking Sites and Phishing Scams
The article discusses the prevalence of travel scams that target individuals during holiday bookings, exploiting emotional decision-making and the sharing of personal information. Key scams include fake booking websites that clone legitimate platforms,…
Malwarebytes -
Fake YouTube Ads Deliver FlutterShell Backdoor to macOS Users
The article discusses the FlutterShell backdoor that is spreading to macOS through malicious Google and YouTube ads. Malvertising continues to be a prevalent threat as attackers exploit popular platforms to deliver harmful software. The piece emphasizes the…
The Hacker News -
DriveSurge cluster spreads malware through fake update scams
A recent cybersecurity alert highlights the active DriveSurge threat cluster, a sophisticated operation compromising numerous websites through various malicious tactics. This Initial Access Broker (IAB) uses a Pay-Per-Install model, employing a Traffic…
SecurityOnline -
Gamaredon Uses WinRAR Vulnerability to Launch Modular Spy Campaign on Ukrainian Targets
The article discusses a multi-faceted cyber espionage campaign executed by the Russia-linked APT group, Gamaredon, targeting Ukraine. The group has exploited a vulnerability in WinRAR (CVE-2025-8088) to deploy modular, fileless malware, which operates…
-
US, Thai Police and Tech Freeze $3.8M Crypto in SE Asia Scam Raid
Law enforcement and tech companies recently disrupted over 1.4 million accounts involved in scam networks across Southeast Asia, as part of 'Disruption Week.' This initiative, led by the US Department of Justice's Scam Center Strike Force and various…
SecurityWeek
