News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 10 Jun· 79 articles
-
US charges Russian hacker Denis Obrezko in Void Blizzard case
A suspected Russian hacker, Denis Obrezko, 36, has been arrested and is in U.S. custody after being charged with conspiracy related to cyberattacks executed by the Russia-aligned group Void Blizzard. He appeared in federal court in Boston and is being held…
DataBreachesVoid Blizzard -
Chelan County faces third week outage after Memorial Day malware
On June 8, Andrew Simpson reported that Chelan County is facing its third week of disruptions due to a malware incident detected over Memorial Day weekend. Officials became aware of the issue on May 24 and promptly shut down affected systems while…
DataBreaches -
Critical UpdraftPlus CVE-2026-10795 Exploit Targets Millions
A critical vulnerability (CVE-2026-10795) has been discovered in the UpdraftPlus plugin for WordPress, affecting over three million installations. Hackers are exploiting this flaw, allowing unauthenticated individuals to bypass security and execute arbitrary…
-
CISA orders US agencies to patch critical flaws in 72 hours
The US Cybersecurity and Infrastructure Security Agency (CISA) has introduced a new directive, Binding Operational Directive (BOD) 26-04, mandating federal agencies to fix critical vulnerabilities within three days while allowing them to defer less critical…
Dark Reading -
Saskatoon man sought for US extradition in school crypto hack
A Saskatoon man, Ryan James Roach, is facing extradition to the United States for allegedly conspiring to install malware, steal login credentials, and mine cryptocurrency from American educational institutions. Roach was ordered into custody in Saskatoon…
DataBreaches -
Parliamentary probe urged after 67M ID records leaked
A civil society group has requested a parliamentary investigation into a significant data breach affecting around 67.1 million individuals, following the leakage of national ID numbers and healthcare details by a government agency. Thanarat Kuawattanaphan,…
DataBreaches -
ServiceNow Says Bug Bounty Reports Triggered False Alert
A recent security alert from ServiceNow resulted from bug bounty research that was initially mistaken for a security breach. The company detected anomalous activity linked to a security issue that could inadvertently grant unauthorized access to specific…
Dark Reading -
Insurers Scramble to Cover AI Risks as Firms Deploy New Tech
The article discusses the insurance industry’s response to the rising risks associated with AI adoption in businesses. As companies deploy AI technologies, many insurers are either excluding AI-related risks from traditional policies or developing…
Dark Reading -
Nightmare-Eclipse Drops Yet Another Microsoft Exploit, RoguePlanet
The article discusses a new proof-of-concept (PoC) exploit named RoguePlanet released by a researcher known as Nightmare-Eclipse. This exploit takes advantage of a zero-day vulnerability in Windows Defender, enabling attackers to gain SYSTEM-level access to…
Dark Reading -
TikTok Reels Ads Push Vidar Malware via Fake Free Software
Cybercriminals are increasingly using short-form video platforms like TikTok and Instagram Reels to distribute malware disguised as scams promising free software. Two active campaigns trick users into running malicious PowerShell commands or visiting harmful…
Malwarebytes -
China linked JDY botnet grows to 1,500 devices for reconnaissance
The content highlights the expansion of the JDY botnet, which is linked to China and has grown to over 1,500 devices. This botnet is primarily utilized for cyber reconnaissance activities. The article discusses implications for network security and the need…
The Hacker News -
TikTok, Instagram Reels abused to spread Vidar via fake tutorials
Threat actors are using TikTok and Instagram Reels to promote the Vidar infostealer, disguising it as software tutorials for unlocking premium services. ReversingLabs identified two campaigns leveraging platform algorithms to reach large audiences. One…
Infosecurity -
Microsoft releases open source ASSERT to test AI behaviour
The content discusses the release of Adaptive Spec-driven Scoring for Evaluation and Regression Testing (ASSERT), an open-source framework by Microsoft's Responsible AI team. ASSERT aims to convert natural language behavioral requirements of AI systems into…
commandline.microsoft.com -
One in Five Browser Phishing Attacks Bypass Security Defences
A recent report by Menlo Security reveals that 20% of browser-based phishing attacks go undetected by traditional cybersecurity tools. The report highlights that these tools often fail to address the unique threats posed by browser sessions, where sensitive…
Infosecurity -
SilabRAT Malware as a Service Targets Crypto via Email Spam
The newly identified SilabRAT Trojan is a sophisticated remote access malware that operates as malware-as-a-service, targeting cryptocurrency by hijacking session credentials. Developed by a known Russian-speaking hacker, it is marketed for $5000 monthly and…
Infosecurity -
Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities
Ivanti, Fortinet, and SAP have released critical patches to address multiple vulnerabilities, enhancing security for their users. The updates aim to mitigate potential risks associated with these vulnerabilities, reinforcing the importance of timely patch…
The Hacker News -
Kyushu power firm loses SSD, risking data of 11 million customers
A Kyushu power company may have leaked personal information of nearly 11 million individuals after losing a storage drive. The drive was reported missing on May 26, following a routine monthly process of transferring customer details onto an SSD by a…
DataBreaches -
Unpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCE
A recent vulnerability, CVE-2026-5027, in Langflow is being exploited for unauthenticated remote code execution (RCE). This unpatched flaw raises security concerns as it allows attackers to execute arbitrary code on affected systems without authentication,…
-
The Gentlemen2 articles this day · Krebs on Security first
Krebs tracks clues to Gentlemen ransomware gang's elusive leader · Ransomware gang The Gentlemen surges to second most active
2 outlets-
Krebs tracks clues to Gentlemen ransomware gang's elusive leader
A cybercrime group called **The Gentlemen** has become the second most active ransomware gang, gaining traction due to its effective recruitment strategy that offers affiliates 90% of any ransom paid. Brian Krebs investigates potential clues that may reveal…
DataBreaches -
Ransomware gang The Gentlemen surges to second most active
The Gentlemen, a cybercrime group, has swiftly become the second most active ransomware gang, with 332 reported victims since its establishment in mid-2025. Their aggressive recruitment strategy offers affiliates a 90% share of ransoms, attracting…
Krebs on Security
-
-
Fire District Sues Ex IT Firm Over Cybersecurity Negligence
The St. George Fire Protection District No. 2 has filed a lawsuit against its former IT security provider, General Informatics LLC, claiming that negligence in cybersecurity led to a significant cyberattack that compromised their network. The lawsuit,…
DataBreaches -
CISA Adds Cisco, Chrome, Arista Flaws to KEV List as Attacks Rise
The article discusses the recent addition of vulnerabilities found in Cisco, Chrome, and Arista to the CISA KEV (Known Exploited Vulnerabilities) Catalog, indicating active exploitation. It highlights the urgency for organizations to prioritize updates and…
The Hacker News -
Infostealers hit millions, leak billions of credentials in 2025
Infostealers are increasingly the primary tool for credential theft, with over 11.1 million devices infected in 2025 and 3.3 billion credentials circulating in illegal markets. These malware programs operate stealthily, often using social engineering to…
SecurityWeek -
Cyera secures $600M, valuation jumps to $12B amid AI boom
Data security firm Cyera has raised $600 million in a recent funding round, increasing its valuation to $12 billion. This investment follows a $400 million Series F round, bringing its total funding to over $2.3 billion. Led by Evolution Equity Partners, the…
SecurityWeek -
Unauthenticated ServiceNow API flaw leaks customer data
The blog post discusses a recent breach involving ServiceNow, where customer data was exposed through an unauthenticated API access. The key points include: 1. **Incident Notification**: On June 5, 2026, ServiceNow informed customers about unauthorized…
SOCRadar -
Russian APTs exploit WinRAR flaw CVE-2025-8088 to target Ukraine
Russian APT groups, Earth Dahu (Gamaredon) and SHADOW-EARTH-066, are exploiting a patched WinRAR flaw (CVE-2025-8088) to deploy malware via phishing attacks, despite the vulnerability being fixed in July 2025. Researchers found that these groups continue to…
-
69% Say Cloud Tool Sprawl Weakens Security Efforts
The 2026 Cloud Security Report highlights significant challenges faced by organizations in cloud security, with 69% of respondents identifying tool sprawl and visibility gaps as the primary barriers to effectiveness. Conducted by Cybersecurity Insiders and…
SecurityOnline -
Cloudflare extends WAF protection to private origin applications
Cloudflare has introduced Application Services for Private Origins, enabling secure routing of public traffic to private applications without exposing them to the public internet. This development bridges the gap between public and private infrastructures,…
Cloudflare -
Microsoft patches record 206 flaws, fixing three zero‑day bugs
Microsoft's latest Patch Tuesday, dated June 2026, addresses a record 206 security vulnerabilities, including 32 classified as critical and three zero-day vulnerabilities that were disclosed before patches were available. Notably, one zero-day in Windows…
-
CVE-2026-10520 lets hackers run root on Ivanti Sentry
CVE-2026-10520 is a critical OS command injection vulnerability in Ivanti Sentry, allowing remote unauthenticated attackers to execute commands with root privileges. The flaw, rated with a CVSS score of 10.0, affects Ivanti Sentry versions prior to R10.5.2,…
-
IDF veteran Aryon raises $29M to stop cloud misconfigurations
Aryon Security, a cybersecurity startup founded by veterans from the Israel Defense Forces, has secured $29 million in Series A funding, bringing its total to $38 million. The funding round was led by Brightmind Partners and is aimed at enhancing their…
SecurityWeek -
MS Patch Tuesday 2026 Fixes 206 Flaws Including Three Zero Days
The June 2026 Patch Tuesday from Microsoft addresses a significant total of 206 vulnerabilities, including three zero-day vulnerabilities, notably the HTTP/2 Bomb Flaw (CVE-2026-49160). Key highlights include: 1. **Critical Vulnerabilities**: High-risk…
-
Vertiv UPS and HVAC flaws expose data centres to remote attacks
Researchers from Claroty have identified multiple vulnerabilities in widely used HVAC and UPS products from Vertiv, which could allow attackers to remotely disrupt operations in data centers. The flaws include an authentication bypass and remote code…
SecurityWeek -
AI Threats and Governance Top CISO Forum Mid Year Review Webinar
The SecurityWeek network is hosting a CISO Forum Mid-Year Review Webinar on June 10, 2026, focusing on AI's impact on cybersecurity. Attendees will learn about AI-driven threats and defenses, particularly the challenges posed by unmonitored AI use (Shadow…
SecurityWeek -
88% of people struggle to tell what’s real online
A recent report by Malwarebytes reveals that 88% of people struggle to discern real content online, attributing this difficulty to the rise of artificial intelligence (AI) tools that can create convincing fake media. Key findings include: 84% feel that video…
Malwarebytes -
Zero day RoguePlanet exploit targets Windows Defender for LPE
A new zero-day exploit named 'RoguePlanet' targeting Microsoft Windows has been released by the security researcher Nightmare Eclipse, following the recent Patch Tuesday updates from Microsoft. This exploit allows for local privilege escalation (LPE) by…
SecurityWeek -
CISA flags Arista, Chrome, Cisco flaws; patch by June 23
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three significant vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. These include: 1. **CVE-2026-7473**: A flaw in the Arista Extensible Operating System which may…
-
Security teams adopt 12 best practices to safely integrate AI apps
The article discusses the challenges and best practices for security teams to effectively integrate AI applications into operational security workflows. It outlines 12 key practices: 1) Visibility for identifying risks, 2) Understanding risk through…
SecurityWeek -
Anthropic launches cybersecurity AI models, experts raise concerns
Anthropic has launched two new AI models, Fable 5 and Mythos 5, enhancing their Project Glasswing AI program focused on cybersecurity. Mythos 5 is touted as the most capable model for cybersecurity, to be initially deployed with US government collaboration…
Infosecurity -
Validating Automated Pentest Results: Expert Tips on Security
The webpage features a recurring theme on cybersecurity and pentesting, highlighting a webinar about validating automated pentesting results. It also provides expert insights into various cybersecurity challenges, including threat detection beyond zero-day…
The Hacker News
