News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Thu 11 Jun· 67 articles
-
Oracle PeopleSoft Enterprise PeopleTools3 articles this day · SecurityWeek first
ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities · ShinyHunters hits Oracle PeopleSoft via CVE-2026-35273 flaw
-
ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities
The article discusses the exploitation of a zero-day vulnerability (CVE-2026-35273) in Oracle PeopleSoft by the hacking group ShinyHunters, which resulted in breaches at several universities. It highlights the implications of the breach for cybersecurity,…
-
ShinyHunters hits Oracle PeopleSoft via CVE-2026-35273 flaw
The article reports on an active cyber extortion campaign by the threat group ShinyHunters (UNC6240), targeting Oracle PeopleSoft systems through the exploitation of a critical vulnerability (CVE-2026-35273) identified in the Environment Management…
-
Oracle issues urgent patch for PeopleSoft CVE-2026-35273 flaw
Oracle has issued an out-of-band advisory for a critical vulnerability in its PeopleSoft software, allowing unauthenticated remote code execution. The vulnerability, tracked as CVE-2026-35273, affects PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62,…
-
-
Ivanti Sentry3 articles this day · Security Affairs first
CISA Adds Ivanti Sentry Command Injection Flaw to KEV Catalogue · Critical Ivanti Sentry flaw exploited 24 hours after disclosure
-
CISA Adds Ivanti Sentry Command Injection Flaw to KEV Catalogue
CISA has added CVE‑2026‑10520 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Ivanti Sentry (formerly MobileIron Sentry) and is identified as the Ivanti Sentry OS Command Injection Vulnerability, which permits a remote…
-
Critical Ivanti Sentry flaw exploited 24 hours after disclosure
A critical vulnerability in Ivanti Sentry (CVE-2026-10520) was exploited within 24 hours of its disclosure, affecting versions prior to R10.5.2, R10.6.2, and R10.7.1. This OS command injection flaw received a maximum CVSS score of 10, allowing unauthorized…
-
Ivanti Sentry gateways compromised by CVE-2026-10520 injection bug
Attackers are exploiting a critical OS command injection vulnerability, CVE-2026-10520, in Ivanti Sentry, which allows remote code execution with root privileges. Despite initial claims of no active exploitation, security researchers from Shadowserver…
-
-
AI‑driven phishing rises despite overall drop, Zscaler warns
Phishing attack volume has decreased by 20% across most sectors, yet the risk from these attacks is considered to be rising due to an increase in targeted, high-quality phishing attempts facilitated by AI. Zscaler's annual phishing report suggests hackers…
Dark Reading -
OpenClaw AI Agent Vulnerable to Code Execution and Data Leak
The article discusses new attacks targeting the OpenClaw AI agent, which have the potential to manipulate it into executing unauthorized code and disclosing sensitive information. This vulnerability raises significant concerns regarding AI security and…
The Hacker News -
GreatXML flaw lets hackers bypass BitLocker using recovery XML
The article discusses a recent vulnerability, termed "GreatXML exploit," which enables bypassing Windows BitLocker security measures via exploitation of Recovery Partition XML files. The discovery highlights significant concerns about data protection on…
The Hacker News -
Gentlemen ransomware spreads like a worm, infecting 478 victims
The article discusses the emergence of the Gentlemen ransomware, which has reportedly claimed 478 victims and exhibits worm-like propagation abilities, allowing it to spread rapidly across networks. It highlights the increasing threat of ransomware in the…
The Hacker News -
Dev Machine Guard spots Miasma, Hades worms in npm, PyPI
The article discusses the emerging threats posed by the Miasma and Hades worms, which are currently infiltrating npm and PyPI ecosystems by executing malicious code upon project open and package import. Unlike traditional threats that rely on install times,…
StepSecurity -
German Court Holds Google Liable for AI Overview Defamation
A German court ruled that Google can be held liable for defamatory claims produced by its AI Overviews, asserting that disclaimers about verifying AI-generated results are insufficient to escape liability. The ruling arose after two publishers were falsely…
Malwarebytes -
Women sue Dutch health over Nova ransomware cervical data leak
In July 2025, the Nova ransomware gang hacked Clinical Diagnostics, compromising cervical cancer screening data of 850,000 women. The lab paid an undisclosed ransom amount but faced further issues when the Dutch Health and Youth Care Inspectorate found it…
DataBreachesNova ransomware gang -
CISA Directs Agencies to Use Risk Based Patch Priority
The Cybersecurity and Infrastructure Security Agency (CISA) has directed U.S. federal agencies to adopt a risk-based approach to managing vulnerabilities, prioritizing patches based on threats actively exploited. This new operational directive, BOD 26-04,…
Infosecurity -
OT Segmentation Gaps Leave Infrastructure Open to Cyber Threats
The article discusses the challenges of operational technology (OT) security, particularly emphasizing the importance of network segmentation to protect against cyber threats. While segmentation strategies are recommended, their effectiveness depends on…
Dark Reading -
New MaaS OnyxC2 steals data from 210+ apps via DLL sideloading
OnyxC2 is a new Malware-as-a-Service (MaaS) that provides enterprise-grade data theft capabilities for $250 to $6,000, depending on the package. It targets over 210 applications, including browsers, email clients, and password managers, by using DLL…
Security Affairs -
Criminal IP at Infosecurity Europe 2026: Introducing AITEM, the Next Chapter of Attack Surface Management
Criminal IP, a cyber threat intelligence platform, showcased its capabilities at Infosecurity Europe 2026, unveiling AITEM (AI-based Threat Exposure Management), a new framework aimed at enhancing Attack Surface Management (ASM). This framework emphasizes…
SecurityOnline -
Fake AI study guides spread AsyncRAT malware on Windows PCs
Cybercriminals are utilizing fake AI study guides to distribute AsyncRAT malware, as reported by Fortinet. This attack targets Windows users through disguised files claiming to be learning resources. The malware executes multi-stage attacks that utilize…
Infosecurity -
SOC Alert Fatigue Hits Analysts as Alerts Overwhelm Security Team
The article discusses the phenomenon of alert fatigue in Security Operations Centers (SOCs), which arises from the overwhelming volume of alerts generated by security systems. Key contributions to alert fatigue include the lack of automated prioritization…
SecurityWeek -
Critical LangGraph Checkpointer Bugs Enable Remote Code Execution
The article discusses critical vulnerabilities identified in LangGraph, an open-source framework designed for stateful AI agents. Key points include: 1. **Vulnerability Identification**: Check Point Research highlighted three vulnerabilities in LangGraph's…
-
Cybersecurity Stars Awards 2026 Announce Winners in 95 Categories
The article announces the winners of the Cybersecurity Stars Awards 2026, which recognizes excellence and innovation in the cybersecurity field across 95 categories. It emphasizes the importance of advancements in cybersecurity technologies and practices.…
The Hacker News -
Claude AI Patch Released After Worm Code Leak and Phishing Threat
The ThreatsDay Bulletin from The Hacker News highlights several critical cybersecurity updates as of June 11, 2026. Noteworthy points include the leak of worm code, a phishing incident targeting an AI agent, and the release of a patch for Claude action…
The Hacker News -
CISA rolls out new directive to speed patching of critical flaws
The US Cybersecurity and Infrastructure Security Agency (CISA) has announced a new directive, BOD 26-04, which requires federal agencies to focus on patching high-risk security flaws, building on previous guidance established with BOD 22-01 and the Known…
SecurityWeek -
OnyxC2 stealer rents for £250 a month, steals data from 210 apps
The OnyxC2 stealer, available for rent on a cybercrime network, starts at $250 per month and is notable for its stealth and extensive capabilities. Developers provide different pricing tiers, including options for premium features and even outright purchases…
SecurityWeek -
Security Teams Struggle to Fit Threat Training Into Schedules
A recent study by ISC2 reveals that many cybersecurity teams struggle to find time for training on emerging cyber threats, despite increased budgets for training. The study surveyed nearly 1,000 cybersecurity leaders from large enterprises and found that 73%…
Infosecurity -
Automated Remediation: Microsoft Resolves Cumulative Update Rollback Failures
Microsoft released routine security updates for Windows 11, which led to installation anomalies for some enterprise endpoints. Issues arose primarily for users upgrading to Windows 11 versions 24H2 or 25H2, generating specific error codes such as 0x80073712…
SecurityOnline -
Brickcom Cameras Expose Live Feeds to Remote Hackers, CISA Warns
The ICS Advisory ICSA-26-162-03, released on June 11, 2026, addresses vulnerabilities in several Brickcom Cameras, specifically versions 3.2.3.5.6 of the Cube, Dome, Bullet, and Box models. Key points include: 1. Vulnerabilities allow remote, unauthenticated…
CISA -
Naxclow IoT Platform flaws open devices to remote hijack
The advisory discusses security vulnerabilities in the Naxclow IoT Platform, released on June 11, 2026, with the alert code ICSA-26-162-02. Specifically, several versions of Naxclow devices, including the Smart Doorbell X3 and the X Smart Home, are at risk…
CISA -
Hard coded credentials in Yarbo app put robot telemetry at risk
The CISA advisory (ICSA-26-162-01) highlights critical vulnerabilities in the Yarbo Android/iOS mobile application and its cloud infrastructure, exposing users to risks like unauthorized access to telemetry data and command issuance of robots. Key points…
CISA -
Hackers Exploit Langflow Vulnerability for Remote Code Execution
A high-severity vulnerability, tracked as CVE-2026-5027, has been identified in the low-code AI development platform Langflow, which has a CVSS score of 8.8. The flaw is a path traversal issue that allows attackers to write files to arbitrary locations on…
-
Siemens says Desigo CC patches trigger false malware alerts
Siemens has alerted customers that patch files for its Desigo CC building management system are being incorrectly flagged as malware by various antivirus engines. The patches for Desigo CC versions 7 to 9 include a PowerShell script, which Siemens suspects…
SecurityWeek -
VRChat breach exposes 2.4M users’ emails, login history
VRChat, Inc. disclosed a data breach affecting over 2.4 million users, revealing unauthorized access to user profile and login data between May 10 and 12, 2026. Exposed information may include usernames, email addresses, login history, and VRChat+…
Malwarebytes -
AI drives CISOs to shift funds to breach attack simulations
The article discusses how artificial intelligence (AI) has disrupted traditional vulnerability management practices, leading Chief Information Security Officers (CISOs) to redirect their budgets towards Breach and Attack Simulation (BAS) strategies. It…
The Hacker News -
Interpol Busts SniperDz Phishing Service, Leading to 200 Arrests
Interpol has dismantled a phishing-as-a-service platform called SniperDz, which had been operational since at least 2015. This crackdown was part of Operation Ramz, conducted from October 2025 to February 2026 across 13 MENA countries, resulting in 201…
Infosecurity -
FBI shuts down fake job sites targeting US clearance holders
The U.S. FBI has seized 13 fraudulent websites linked to a Chinese operation aimed at targeting American workers with security clearances. These fake sites posed as consulting firms with bogus job listings to recruit individuals for sensitive information.…
SecurityWeek -
GreatXML flaw lets attackers bypass BitLocker after Defender scan
On June 10, 2026, security researcher Chaotic Eclipse revealed a new exploit named GreatXML that bypasses BitLocker encryption after running a Microsoft Defender Offline Scan. The exploit allows attackers to gain SYSTEM privileges in Recovery Mode, requiring…
Security Affairs -
UK tells Apple, Google to block nude images on phones by 2026
The UK government has mandated that Apple and Google must implement device-level protections to block nude images on smartphones and tablets sold in the UK by September 2026. If they fail to comply, legislation including fines and possible criminal charges…
Malwarebytes -
Palo Alto fixes Cortex flaw: Splunk patches Enterprise bug
On Wednesday, Splunk and Palo Alto Networks released patches addressing multiple vulnerabilities across their products, including critical and high-severity issues. Palo Alto identified a significant flaw in its Cortex platforms (CVE-2026-0274) that could…
-
Extortion-Only Attacks Increase, With Data Theft Dominating Ransomware Claims
The article discusses a recent surge in extortion-only cyber attacks, noting that 65% of related claims handled did not involve data encryption. In 2025, data theft accounted for 87% of ransomware claims, while only 13% involved encryption. Insurers…
Infosecurity -
Most Third‑Party AI Skills Differ From Their Docs, Study Shows
The article discusses the security risks associated with third-party skills used by AI agents, emphasizing the need for Behavioral Integrity Verification (BIV). BIV audits the claims of a skill against its actual behavior across metadata, executable code,…
unit42.paloaltonetworks.com
