News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Mon 8 Jun· 74 articles
-
Phishing attacks strike Microsoft Teams, posing as IT support
The article discusses the increasing incidence of phishing attacks via Microsoft Teams, highlighting how threat actors impersonate IT departments to deceive employees into compromising their accounts. Key points include recent incidents involving groups like…
unit42.paloaltonetworks.comAPT29 -
Luna Moth2 articles this day · SecurityWeek first
Silent Ransom Group Targets Law Firms Using Vishing to Steal Data · Silent Ransom Group uses fast flux to hit law firms worldwide
2 outlets-
Silent Ransom Group Targets Law Firms Using Vishing to Steal Data
A financially motivated threat group, identified as UNC3753 or the Silent Ransom group, is targeting US law firms, professional services, and financial organizations in a severe data theft and extortion campaign. Utilizing a blend of social engineering…
Dark Reading -
Silent Ransom Group uses fast flux to hit law firms worldwide
The Silent Ransom Group (SRG) has been identified using a fast flux network of infected devices to obscure its operational infrastructure. The gang employs voice phishing and social engineering tactics to infiltrate organizations, particularly targeting law…
SecurityWeek
-
-
Japan Hospital Data Leak Exposes 180,000 Records From Sold Drives
Japan's National Hospital Organization has reported a data leak involving hard drives from two hospitals in Hokkaido, affecting personal information from at least 180,000 patients and employees. The Hokkaido Medical Center was first alerted last June when a…
DataBreaches -
NSO Group3 articles this day · SecurityWeek first
Meta Says NSO Group Violated Court Order With WhatsApp Phishing · Meta Blocks NSO Linked WhatsApp Phishing via Court Order
3 outlets-
Meta Says NSO Group Violated Court Order With WhatsApp Phishing
Meta has accused NSO Group of violating a court injunction by continuing to target WhatsApp users through phishing campaigns and the creation of test accounts. Following user reports, Meta disrupted these attempts to lure users into clicking malicious links.…
Security Affairs -
Meta Blocks NSO Linked WhatsApp Phishing via Court Order
Meta has successfully blocked a new phishing attack targeting WhatsApp, attributed to NSO Group, by filing a contempt order. This development highlights ongoing concerns about cybersecurity, particularly regarding mobile security vulnerabilities. The report…
The Hacker News -
WhatsApp blocks new NSO spear phishing attack despite court ban
WhatsApp has disrupted a spear-phishing attack allegedly linked to the NSO Group, a spyware company, in violation of a court order preventing it from targeting WhatsApp users. In a legal saga, WhatsApp sued NSO in 2019 after discovering that a vulnerability…
SecurityWeek
-
-
Check Point Security Gateway4 articles this day · SecurityOnline first
Check Point warns of IKEv1 flaw linked to Qilin ransomware · CISA adds Check Point CVE-2026-50751 to Known Exploited list
-
Check Point warns of IKEv1 flaw linked to Qilin ransomware
Check Point has identified a critical zero-day vulnerability (CVE-2026-50751) affecting its Security Gateways and Spark Firewalls, specifically in implementations using the deprecated IKEv1 key exchange protocol. This authentication bypass flaw, assigned a…
-
CISA adds Check Point CVE-2026-50751 to Known Exploited list
CISA has added CVE‑2026‑50751 to its Known Exploited Vulnerabilities catalogue. The entry concerns Check Point’s Security Gateway product and describes an improper authentication vulnerability in the IKEv1 key exchange that could allow an unauthenticated…
-
Check Point VPN zero day flaw lets attackers in, fuels ransomware
On June 8, 2026, Check Point disclosed a critical zero-day vulnerability, CVE-2026-50751, in its Remote Access VPN and Firewall products. This vulnerability, with a CVSS score of 9.3, allows unauthenticated attackers to establish VPN sessions due to a logic…
-
Check Point VPN Vulnerability Exploited in the Wild with Ransomware Links
A critical vulnerability in Check Point VPN, identified as CVE-2026-50751, poses a severe threat to remote access deployments, with a CVSS severity score of 9.3. The flaw allows unauthorized users to establish VPN sessions by bypassing authentication through…
-
-
Linux kernel flaw grants root access via one character change
The article discusses a critical flaw in the Linux kernel that allows for local root access through a one-character modification in the code. This vulnerability poses significant security risks, as exploits for this flaw have already been made public. The…
The Hacker News -
GitHub Account Hacked, Malicious Code Blocked by Python Linter
On June 8, 2026, the GitHub account of a co-founder of Pythagora-io/gpt-pilot was compromised, resulting in a malicious force push that included a credential-stealing payload named Shai-Hulud. The attack was thwarted by a Python linter, ruff, which caught…
StepSecurity -
CISA warns of LiteLLM command injection flaw CVE-2026-42271
On 8 June 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2026‑42271 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects BerriAI’s LiteLLM product and is tracked as the BerriAI LiteLLM Command Injection…
-
Cyber Threats Continue After US and Iran Ceasefire, Warns Analyst
The article discusses the implications of a U.S.-Iran ceasefire, emphasizing that while kinetic warfare may pause, cyber warfare continues unabated. Despite warnings from various U.S. agencies about Iranian-affiliated cyber actors targeting critical…
Dark Reading -
Open source packages hit by Miasma malware via AI coding agents
Microsoft faced a critical security incident where 73 of its open source packages were compromised, embedding advanced credential-stealing code. This malware, identified as Miasma, is activated when developers use AI coding agents. The attack reflects a…
Ars Technica -
Security startup raises $37 million to launch AI driven platform
A Security has raised $37 million in funding to launch its autonomous offensive security and remediation platform. Founded by Yossi Torati (CEO), Omer Gull (CPO), and Yuval Itzchakov (CTO), the company plans to use this investment to expand its capabilities.…
SecurityWeek -
US Government Responds to Miasma npm Attack on Red Hat Packages
The diary entry dated June 8, 2026, by Kenneth Hartman discusses ongoing developments in the TeamPCP supply chain campaign which was previously documented. Key updates include: the U.S. government's response, notably CISA adding critical vulnerabilities to…
SANS ISC -
Hades campaign targets PyPI with Shai Hulud inspired malware
The article discusses a recent cyberattack campaign, dubbed the 'Hades' campaign, targeting the Python Package Index (PyPI) with malicious software inspired by the Shai-Hulud worm. The attacks affected 37 PyPI wheels across 19 packages, demonstrating the…
Dark Reading -
Attackers Exploit AI Hype to Launch ChatGPT and Claude Phishing
The article from Microsoft Threat Intelligence discusses how threat actors exploit the current AI hype to enhance social engineering attacks. It highlights campaigns impersonating popular AI platforms like ChatGPT, DeepSeek, and Claude to lure victims,…
Microsoft -
AI Generated Apps Fuel Shadow IT Raising Data Security Concerns
In early 2025, Andrej Karpathy introduced 'vibe coding', a software development method driven by AI that emphasizes rapid and user-friendly application building, often without traditional IT involvement. By 2026, Anthropic's CEO predicted that AI would…
SecurityWeek -
AI scams cost US victims nearly $900 million, FBI reports
According to the FBI's 2025 Internet Crime Report, Americans lost approximately $893 million to AI-related scams, driven largely by advancements in technologies like voice cloning and deepfake media. There were over 22,000 reported complaints highlighting…
Malwarebytes -
North Korean hackers hit developers via fake GitHub repo phishing
A recent analysis from Proofpoint revealed that North Korean hackers, identified as UNK_DeadDrop, are using phishing tactics to target software developers at nearly 100 organizations in the U.S. This campaign involves over 250 emails sent in early 2026,…
InfosecurityUNK_DeadDrop -
Check Point VPN flaw lets attackers bypass IKEv1 password checks
The article discusses a critical vulnerability in Check Point VPN that allows attackers to bypass password protections in IKEv1 setups. This flaw poses significant risks for network security, particularly as organizations increasingly rely on VPNs for secure…
The Hacker News -
WPEverest Everest Forms Pro2 articles this day · SecurityWeek first
Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access · CVE-2026-3300 flaw in Everest Forms Pro lets attackers run code
-
Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access
A recent vulnerability, tracked as CVE-2026-3300, has been identified in the Everest Forms Pro plugin for WordPress, allowing attackers to gain admin access by injecting PHP code via form fields. Discovered by researcher h0xilo and disclosed through…
-
CVE-2026-3300 flaw in Everest Forms Pro lets attackers run code
A critical vulnerability (CVE-2026-3300) in the Everest Forms Pro WordPress plugin has been actively exploited, allowing remote attackers to inject PHP code on more than 100,000 sites due to improper input handling. This security flaw permits unauthorized…
-
-
OpenAI introduces Lockdown Mode and Active Sessions for ChatGPT
OpenAI has introduced two new security controls for ChatGPT aimed at enhancing account protection. The first, Lockdown Mode, restricts the model's access to the web and external services to mitigate data theft through prompt injection. This feature prevents…
Infosecurity -
⚡ Weekly Recap: Instagram Account Hacks, Android Zero-Day, GitHub Worm and More
The article discusses the latest cybersecurity news, including high-profile incidents such as Instagram account hacks and vulnerabilities related to Android zero-day exploits. It highlights the evolution of cyber threats and emerging attack vectors involving…
The Hacker News -
Iranian hackers claim cyber strikes on Israeli radar amid tensions
On June 7, 2026, amidst escalating tensions between Iran and Israel, the Iranian-linked hacker group Handala claimed responsibility for cyberattacks targeting Israeli radar systems and critical infrastructure, including a "cyber siege" on the Kfar Yona…
SOCRadarHandala -
AI phishing surge overwhelms SOCs flooding Tier 1 alerts
The article discusses the overwhelming volume of alerts generated by AI-driven phishing attacks, which are straining Security Operations Centers (SOCs) and increasing the burden on Tier 1 analysts. It emphasizes the need for effective strategies to…
The Hacker News -
Cloudflare rolls out real time threat intel for WAF rules
Cloudflare introduces a new integration that allows security teams to utilize real-time threat intelligence from its Threat Events platform to create proactive Web Application Firewall (WAF) rules. This helps automate the blocking of high-risk IPs associated…
Cloudflare -
Cybersecurity M&A Roundup: 26 Deals Announced in May 2026
In May 2026, 26 cybersecurity mergers and acquisitions (M&A) were announced, highlighting the ongoing trend of consolidation in the cybersecurity sector. Notable transactions include Akamai's acquisition of LayerX for $205 million, Check Point's purchase of…
SecurityWeek -
Mid and South Essex NHS Trust Hit by Third Party Data Breach
A cyber attack linked to a major NHS data breach has resulted in the compromise of approximately 2,380 patient test records in Essex, according to the Mid and South Essex NHS Foundation Trust. The breach affected data managed by the third-party provider…
DataBreaches -
Instagram Recovery Tool Bug Exposed 20,225 Accounts to Password Reset Abuse
Meta disclosed a security incident involving an Instagram account recovery tool, where attackers exploited a flaw to send password reset links to emails not associated with the targeted accounts. The breach, affecting 20,225 people including 30 in Maine,…
DataBreaches -
FTC orders Illuminate to fix data after 10 million student breach
The FTC has finalized a modified order against Illuminate Education Inc. to address data security failures that resulted in a breach exposing personal data of 10.1 million students. The company is required to implement a data security program, limit data…
DataBreaches -
Cyberattack closes Evanston Township High School
Evanston Township High School has canceled summer school, sports camps, and on-campus activities due to a ransomware attack that has disrupted access to district systems, internet services, and infrastructure. The attack affects phone systems and Google…
DataBreaches -
AI security guide helps firms tackle rising software flaws
The page discusses the rising importance of AI in cybersecurity and highlights the risks associated with software vulnerabilities. It offers resources for understanding and mitigating these risks, including a guide on how to secure against vulnerabilities…
The Hacker News -
Lansing Community College breach exposes 174,000 personal records
Lansing Community College (LCC) has notified over 174,000 individuals that their personal information was compromised in a data breach identified in February 2025. Hackers accessed sensitive data, including names, addresses, dates of birth, driver's license…
SecurityWeek -
RenEngine Loader malware hits pirated Far Cry, FIFA games
A recent malware campaign targets users of pirated PC games, particularly those related to franchises like Far Cry, Need for Speed, FIFA, and Assassin’s Creed. Over 400,000 devices globally have been infected, with approximately 30,000 cases in the US. The…
Malwarebytes -
UNC3753 gang uses vishing and USB drops to steal legal data
The article discusses the active extortion campaign by the cybercrime group UNC3753, which targets US legal and financial firms using social engineering techniques. The group, also known as Luna Moth or Silent Ransom Group, employs voice phishing (vishing)…
Security AffairsUNC3753
