News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Fri 5 Jun· 54 articles
-
Sound Blaster Speaker Bluetooth Flaw Lets Hackers Control PCs
Researcher Rasmus Moorats discovered a serious security flaw in the Creative Sound Blaster Katana V2X speaker, allowing it to be hacked over Bluetooth without authentication. The speaker's proprietary protocol, CTP, permits remote code execution, enabling…
Ars Technica -
SolarWinds Serv-U2 articles this day · CISA first
CISA warns of exploited SolarWinds Serv-U flaw, urges patching · CISA warns of active SolarWinds ServU exploit CVE-2026-28318
-
CISA warns of exploited SolarWinds Serv-U flaw, urges patching
CISA has added CVE‑2026‑28318, the SolarWinds Serv‑U Uncontrolled Resource Consumption Vulnerability, to its Known Exploited Vulnerabilities catalogue. The flaw affects SolarWinds Serv‑U and can be triggered by unauthenticated, specially crafted POST…
-
CISA warns of active SolarWinds ServU exploit CVE-2026-28318
On June 5, 2026, CISA added a new vulnerability, CVE-2026-28318, to its Known Exploited Vulnerabilities (KEV) Catalog due to evidence of active exploitation. This vulnerability, associated with SolarWinds Serv-U, represents a significant risk to federal…
-
-
US Gas Stations Warned as Hackers Target Exposed Fuel Tank Gauges
In the U.S., cybercriminals are exploiting Internet-exposed Automatic Tank Gauge (ATG) systems at gas stations, prompting warnings from multiple federal agencies. These ATGs, critical for monitoring fuel and chemical storage, have been found vulnerable,…
Dark Reading -
IronWorm and Miasma Worms Hit npm in Supply Chain Attacks
The article discusses the emergence of two new variants of malware, IronWorm and Miasma Worm, that have targeted the npm (Node Package Manager) ecosystem through supply chain attacks. It highlights how these worms exploit vulnerabilities within software…
The Hacker News -
FBI warns that Silent Ransom Group uses IoT devices in attacks
The Silent Ransom Group (SRG), also known as Luna Moth and UNC3753, is a cyber extortion group uncovered by Resecurity, which revealed their Fast Flux infrastructure targeting U.S. law firms and businesses. This group has been active since 2022 and focuses…
Security AffairsLuna Moth -
AiTM phishing kit steals Microsoft 365 logins with CAPTCHA gate
This report details a sophisticated Adversary-in-the-Middle (AiTM) credential-harvesting kit specifically targeting Microsoft 365 and Entra ID identities. The attack involves a three-to-five stage funnel process, beginning with a CAPTCHA gate to filter…
dti.domaintools.com -
Claude Code Action bug leaks API keys via prompt injection
The blog post discusses security vulnerabilities in Anthropic's Claude Code GitHub Action, primarily related to how AI agents interact with CI/CD workflows. It highlights that unsecured processing of GitHub content can lead to exposure of sensitive…
Microsoft -
CVE Lite CLI speeds up npm flaw fixes with actionable tips
CVE Lite CLI is an open-source lightweight command line security scanner focused on identifying vulnerabilities in npm, pnpm, and Yarn packages during JavaScript and Typescript software development. Developed by Sonu Kapoor, it addresses issues developers…
SecurityWeek -
New Android Spyware Asin Targets Arabs with Fake War Map Apps
The article discusses the emergence of Android spyware known as Asin, which targets Arabic users through deceptive methods including fake news, PDF files, and applications that map wars. This phishing tool exploits geopolitical tensions and misinformation to…
The Hacker News -
Adaptive AI worms ready to strike dev teams via zero day exploits
The article discusses the impending threat of adaptive AI worms, described as 'viruses with wings and brains.' These autonomous entities will rapidly self-propagate by exploiting zero-day bugs and unpatched software vulnerabilities, posing a significant risk…
Dark Reading -
Attackers Exploit PANOS Flaw to Bypass GlobalProtect VPN
Palo Alto Networks' Unit 42 has reported active exploitation of a vulnerability in PAN-OS (CVE-2026-0257) by an unidentified actor targeting GlobalProtect. This vulnerability allows attackers to bypass authentication controls and establish unauthorized VPN…
-
UNC3753 voice phishing hits US law firms, steals data
The Mandiant report documents a targeted extortion campaign by the threat cluster UNC3753 targeting US law firms and professional services from January to May 2026. The group employs techniques such as voice phishing and social engineering to gain remote…
Google CloudUNC3753 -
Cisco Catalyst SD-WAN Manager2 articles this day · SecurityWeek first
Cisco SD-WAN Has a New Root-Level Problem, and There’s No Fix Yet · Cisco SDWAN flaw lets attackers gain root via CLI exploit
-
Cisco SD-WAN Has a New Root-Level Problem, and There’s No Fix Yet
Cisco has identified a significant privilege escalation vulnerability, tracked as CVE-2026-20245, in its Catalyst SD-WAN Manager. This flaw allows authenticated local attackers to execute arbitrary commands as the root user through file upload command…
-
Cisco SDWAN flaw lets attackers gain root via CLI exploit
Cisco has reported a newly exploited SD-WAN product vulnerability, CVE-2026-20245, affecting the CLI of Cisco Catalyst SD-WAN Manager. This vulnerability allows authenticated local attackers to execute arbitrary commands as root through specially crafted…
-
-
AI chatbot tricks spread fake tools for cryptojacking attacks
SecurityWeek’s latest cybersecurity roundup highlights significant threats and developments in the industry. Key stories include: 1. **AI Chatbot Exploitation:** Attackers use AI chatbot recommendations and SEO tricks to distribute fake utilities, gaining…
SecurityWeek -
White House rolls out AI cybersecurity agreement with firms
The White House has issued an executive order aimed at enhancing federal cybersecurity by creating a voluntary framework for private sector developers to share frontier AI models with the government. This initiative, part of Trump's administration's…
Dark Reading -
New OP512 Threat Targets IIS Servers with Custom Web Shell
The article discusses a new cyber threat cluster named OP-512 that specifically targets Microsoft IIS servers using a custom web shell framework. This cluster is characterized by its espionage tactics, aiming to exploit vulnerabilities in IIS to gain…
The Hacker News -
Cisco patches SSRF flaw in Unified CM enabling root access
Cisco has issued fixes for CVE-2026-20230, a critical server-side request forgery (SSRF) vulnerability in Cisco Unified Communications Manager and Session Management Edition. This flaw can lead to root-level compromise when the WebDialer service is enabled.…
-
ShinyHunters Leak Exposes 2.6M DentaQuest Dental Records
The ShinyHunters extortion group has leaked 234 GB of data allegedly taken from DentaQuest, a dental benefits administrator affecting approximately 2.6 million accounts. The leaked data includes personal and health information such as names, addresses,…
SecurityWeekShinyHunters -
Lloyds Treats AI Agent Security as Engineering Challenge
Lloyds Banking Group is advancing its approach to agentic AI security by treating it as an engineering challenge rather than a theoretical concept. During a session at the OWASP GenAI Security Summit, Manija Poulatova and Kirsty Montignani detailed the…
Infosecurity -
Only 10% of SOCs See Real Value From AI Security Tools
The article discusses the challenges faced by Security Operations Centers (SOCs) in deriving value from Artificial Intelligence (AI) in security operations. It highlights that only 10% of SOCs report obtaining excellent value from AI tools. Key points…
The Hacker News -
Chrome 149 Patches 429 Vulnerabilities
Google has released Chrome 149, addressing a record 429 vulnerabilities, significantly outpacing prior security fixes. Over 100 of these were marked as critical or high-severity, primarily involving use-after-free and insufficient validation flaws. The most…
-
Brave launches $60 privacy browser dropping crypto, AI rewards
Brave Software has launched Brave Origin, a premium version of their browser focused on user privacy by removing cryptocurrency features, AI components, and rewards systems. It follows a paid model costing $59.99 for a license usable on up to 10 devices,…
SecurityOnline -
OWASP releases agentic AI security framework for governance
The Open Worldwide Application Security Project (OWASP) has introduced a new agentic AI security maturity framework to help organizations align their AI deployments with appropriate governance measures. This framework, detailed in their paper "State of…
Infosecurity -
Trump signs voluntary AI security order for prerelease testing
President Donald Trump signed an executive order establishing a voluntary framework for federal assessment of advanced AI models' national security risks prior to public release. This order allows a 30-day testing period for government agencies to evaluate…
SecurityWeek -
PCPJack builds 230 node cloud email relay on AWS, Azure and GCP
Researchers from Hunt.io revealed that a threat actor known as PCPJack created a 230-node cloud-based email relay network using servers from Amazon Web Services, Google Cloud, and Microsoft Azure. This discovery was made after PCPJack mistakenly left access…
Security AffairsPCPJack -
Vect Ransomware Hits Supply Chains, Fuelling Double Extortion
The article provides an in-depth analysis of the Vect Ransomware, which surfaced on December 31, 2025. This financially motivated ransomware-as-a-service group utilizes a structured affiliate program and has rapidly expanded its operations. Vect conducts…
SOCRadarVect -
Infosecurity Europe: AI Coding Tools Need Built-In Security for Agentic Development Era
At Infosecurity Europe,Boaz Barzel, field CTO of Ox Security, emphasized the need for built-in security in AI coding tools to address emerging risks in an era of rapid development cycles. Traditional application security methods can't keep up with the…
Infosecurity -
AI: Threat, tool, or both?
The article discusses the evolving public perception of Artificial Intelligence (AI), highlighting a Pew Research survey indicating increased concerns over AI's societal impacts, such as job displacement and misinformation. Awareness of AI technologies is…
Malwarebytes -
Five Eyes Warns of Chinese Spies Using Fake Job Posts
The Five Eyes intelligence alliance (FBI, MI5, ASIO, CSIS, NZSIS) has issued an alert regarding Chinese military intelligence posing as recruiters to target government and military personnel for sensitive information. Using fake job postings on platforms…
SecurityWeek -
Hackers Exploit Everest Forms Pro Flaw to Seize WordPress Sites
Hackers have been exploiting a critical vulnerability in the Everest Forms Pro WordPress plugin, allowing them to take control of affected websites. This flaw has raised significant security concerns among users and web administrators. The article emphasizes…
The Hacker News -
Healthcare Must Adopt AI Defences Against Surge in Cyber Attacks
Experts warn that healthcare organizations (HCOs) must adopt AI-powered tools to effectively detect and manage cyber threats, as reactive security approaches are inadequate. At Infosecurity Europe, Sher Baig emphasized the sector's vulnerability due to…
Infosecurity -
Large-Scale Malvertising Network Floods Asia-Pacific Social Media Platforms
Broad Malvertising Infrastructure Reuses Templates at Scale Security researchers recently uncovered a massive underground fraud network stretching across
SecurityOnline -
Fake Context Alignment attack hijacks Google Gemini via WhatsApp
A researcher at SafeBreach, Or Yair, identified a new attack method called Fake Context Alignment, which allows malicious actors to exploit Google’s Gemini voice assistant via WhatsApp notifications. This method involves using indirect prompt injection…
Security Affairs -
The Digital Sovereign: Google Wallet Pioneers Cryptographic Identity and Streamlined Commerce in Europe
Google is expanding its mobile ecosystem by introducing Digital ID support in selected EU countries this summer, partnering with Sparkasse for a privacy-centric age verification protocol. Users will undergo a stringent onboarding process involving a video…
SecurityOnline -
RCI Hospitality breach via IDOR flaw leaks 40k personal records
RCI Hospitality Holdings, a major adult nightclub operator in the U.S., reported a data breach affecting around 40,000 individuals. The breach was due to an insecure direct object reference (IDOR) vulnerability found in one of its IIS web servers, which…
SecurityWeek -
World Cup 2026 scams surge: fake sites, banking malware
The article discusses the emerging cybersecurity threats associated with the FIFA World Cup 2026, highlighting scams that include fake websites, banking malware, and stolen logins. It emphasizes the importance of vigilance and updated security measures to…
The Hacker News -
Malware hides in MSI branded JPEG via WeTransfer link
The blog post by Xavier Mertens discusses a newly discovered malware technique involving a malicious JavaScript payload hidden in an MSI-branded JPEG file. The payload originates from a WeTransfer link and executes PowerShell commands to decode further…
SANS ISC -
New Remcos RAT variant evades detection via phishing batch file
The article discusses the emergence of a new variant of the Remcos RAT (Remote Access Trojan) discovered by G Data Analysts, which employs advanced evasion tactics to infiltrate corporate networks. The infection chain begins with a phishing email featuring a…
SecurityOnline
