News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Fri 12 Jun· 53 articles
-
New macOS Tahoe 26 artefact logs menu choices for forensic probes
The article discusses a newly discovered artifact called App.MenuItem in macOS Tahoe 26, highlighting its significance for forensic investigations. This artifact logs user actions, providing insights into menu selections across the system, which can…
unit42.paloaltonetworks.com -
Handala2 articles this day · SecurityWeek first
Handala hackers breach Cal Water, leak 2M customers' data · Handala hackers leak 5GB Cal Water data, expose customer PII
2 outlets-
Handala hackers breach Cal Water, leak 2M customers' data
On June 11, 2026, the Iran-linked hacking group Handala claimed to have breached California Water Service (Cal Water), accessing sensitive billing data of approximately 2 million customers and releasing a 5GB data dump. The breach, purportedly a retaliation…
Security Affairs -
Handala hackers leak 5GB Cal Water data, expose customer PII
The Iranian hacking group Handala claimed to have breached California Water Service (Cal Water), releasing 5GB of stolen data as retaliation against the US. The breach affected a customer billing database and Cal Water's RTKBase system, exposing personal…
SecurityWeek
-
-
Oracle PeopleSoft Enterprise PeopleTools7 articles this day · Security Affairs first
CISA Adds Oracle PeopleSoft Flaw CVE-2026-35273 to KEV Catalog · ShinyHunters Uses Oracle Zero-Day to Rampage Higher Ed
-
CISA Adds Oracle PeopleSoft Flaw CVE-2026-35273 to KEV Catalog
CISA has added CVE-2026-35273 to its Known Exploited Vulnerabilities (KEV) catalogue. The entry concerns Oracle PeopleSoft Enterprise PeopleTools and is titled “Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function…
-
ShinyHunters Uses Oracle Zero-Day to Rampage Higher Ed
ShinyHunters exploited a zero-day vulnerability (CVE-2026-35273) in Oracle's PeopleSoft software, affecting over 100 organizations, particularly in higher education. The vulnerability, which allowed remote code execution without authentication, was active…
-
ShinyHunters exploit PeopleSoft flaw CVE-2026-35273, hit 100 unis
A critical vulnerability (CVE-2026-35273) in Oracle’s PeopleSoft software has been exploited by the ransomware group ShinyHunters, targeting about 100 organizations, predominantly in the higher education sector. The vulnerability, which has a severity rating…
-
ShinyHunters Exploits Oracle PeopleSoft Flaw Leaks Data Worldwide
Mandiant and Google Threat Intelligence Group (GTIG) reported an active compromise and extortion campaign by UNC6240 (ShinyHunters) targeting Oracle PeopleSoft applications between May 27 and June 9, 2026. The exploitation involved CVE-2026-35273, a critical…
-
Active Exploitation of Oracle PeopleSoft Zero-Day (CVE-2026-35273)
On June 10, 2026, Oracle announced a critical security vulnerability (CVE-2026-35273) affecting PeopleSoft Enterprise PeopleTools. The vulnerability, which could allow remote code execution without authentication, has a CVSS score of 9.8. Active exploitation…
-
CISA flags Oracle PeopleSoft bug CVE-2026-35273 in KEV catalog
CISA has added one new vulnerability, CVE-2026-35273, related to Oracle PeopleSoft Enterprise, to its Known Exploited Vulnerabilities (KEV) Catalog due to evidence of active exploitation. This vulnerability is considered a significant risk for federal…
-
CVE-2026-35273 flaw used in ShinyHunters attack on universities
The article discusses a critical zero-day vulnerability in Oracle PeopleSoft, identified as CVE-2026-35273, which was exploited in an ongoing ShinyHunters campaign targeting over 100 organizations, predominantly universities, from May 27 to June 9, 2026.…
-
-
Arch Linux AUR breach hijacks 400+ packages to deliver malware
The article reports that over 400 Arch Linux AUR packages have been hijacked to distribute infostealer malware and an eBPF rootkit. This incident highlights significant vulnerabilities in software supply chains and the increasing sophistication of cyber…
The Hacker News -
Conti2 articles this day · SecurityOnline first
Ukrainian admits Conti ransomware conspiracy after US extradition · Ukrainian hacker pleads guilty to Conti ransomware role worldwide
2 outlets-
Ukrainian admits Conti ransomware conspiracy after US extradition
Oleksii Oleksiyovych Lytvynenko, a Ukrainian national extradited from Ireland to the U.S., has pleaded guilty to conspiracy charges related to the Conti ransomware operation. This announcement was made by the U.S. Department of Justice. Lytvynenko, aged 44,…
DataBreaches -
Ukrainian hacker pleads guilty to Conti ransomware role worldwide
Ukrainian Oleksii Lytvynenko pleaded guilty in U.S. federal court for his role in deploying the Conti ransomware, which inflicted significant damage globally from 2020 to 2022. The ransomware attacked over 1,000 networks across 47 U.S. states and 31…
SecurityOnline
-
-
LabCorp Settles Lawsuits Stemming from 2019 AMCA Breach
In 2019, the American Medical Collection Agency (AMCA) breach impacted LabCorp and led to the exposure of personal data for over 10 million patients, including names, Social Security numbers, and health information. Due to the fallout, AMCA filed for Chapter…
DataBreaches -
Over 400 Arch Linux AUR Packages Hijacked in Supply Chain Attack
Over 400 Arch Linux AUR packages have been hijacked to deliver an infostealer and an eBPF rootkit, highlighting vulnerabilities within supply chain security. The article discusses the implications of such cyberattacks on user security and the integrity of…
The Hacker News -
Google sues Chinese smishing gang using Gemini AI for phishing
Google has initiated a lawsuit against a Chinese smishing network that allegedly utilized Gemini AI for phishing attacks. The suit highlights concerns over the increasing integration of AI technologies in cybercrime, especially in crafting sophisticated…
The Hacker News -
Ivanti Sentry2 articles this day · SecurityWeek first
CISA urges immediate patch for Ivanti Sentry CVE-2026-10520 flaw · Ivanti Sentry Exploitation Attempts Hitting Honeypots
-
CISA urges immediate patch for Ivanti Sentry CVE-2026-10520 flaw
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Ivanti Sentry, identified as CVE-2026-10520, to its Known Exploited Vulnerabilities catalog, urging immediate patching by June 14, 2026. This…
-
Ivanti Sentry Exploitation Attempts Hitting Honeypots
The US Cybersecurity and Infrastructure Security Agency (CISA) has flagged a recently patched Ivanti Sentry vulnerability (CVE-2026-10520) with a critical CVSS score of 10/10, identified as an OS command injection that can be exploited remotely to execute…
-
-
China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade
China-linked hackers have reportedly compromised Linux login software, embedding backdoors that allowed them to remain undetected for nearly a decade. The sophisticated attack demonstrates the ongoing threat posed by state-backed cyber operatives and…
The Hacker News -
Police dismantle AudiA6 crypto laundering ring after EUR336m bust
International law enforcement agencies have dismantled a major cryptocurrency laundering service known as 'AudiA6'. This platform was involved in laundering over EUR 336 million for cybercriminals from 2022 to 2025, serving as a key financial conduit for…
SecurityOnline -
US authorities seize deepfake porn sites CFAKE.com, SOCFAKE.com
Recently, U.S. federal authorities seized deepfake porn websites CFAKE.com and SOCFAKE.com, marking a significant enforcement action under the TAKE IT DOWN Act, which criminalizes the unauthorized publication of sexually explicit digital forgeries. Acting…
SecurityOnline -
Whistleblower sues IBM, AT&T over hidden foreign hacks
SecurityWeek's weekly roundup highlights critical cybersecurity developments: 1. **IBM and AT&T Lawsuit**: A whistleblower claims the companies covered up foreign hacks to retain federal contracts. 2. **University of Oxford Data Breach**: Access to alumni…
SecurityWeek -
UK Police and Apple team up to cut iPhone thefts by 18%
The UK Metropolitan Police and Apple have collaborated to enhance security measures for stolen iPhones, making them less appealing to thieves. Key initiatives include improved technical protections in iOS that require biometric authentication for critical…
Malwarebytes -
FBI and Europol bust crypto laundering ring AudiA6, arrest two
An international law enforcement operation led by the FBI and Europol dismantled 'AudiA6', a cryptocurrency laundering service suspected of laundering over €336 million ($389 million) for cybercriminals between 2022 and 2025. The operation, involving…
Infosecurity -
FulcrumSec Breach Exposes 4.8TB of Data from Global Schools Group
The Global Schools Foundation (GSF), a non-profit K-12 education organization based in Singapore, experienced a significant data breach in April 2026, perpetrated by a group known as FulcrumSec. They accessed sensitive data from the Global Schools Group…
DataBreachesFulcrumSec -
Anthropic launches Claude models, experts warn of exploit risks
Anthropic has launched the Claude Fable 5 and Mythos 5 models, emphasizing enhanced capabilities yet maintaining existing cybersecurity concerns. Mythos 5, an upgrade from the previous Preview model, can potentially identify critical exploits, prompting…
Dark Reading -
GitHub to Update npm to Thwart Software Supply Chain Attacks
GitHub is set to release version 12 of its npm package manager, introducing three critical security changes aimed at preventing software supply chain attacks. These changes, effective from July 2026, will block certain installation scripts, prevent Git…
Infosecurity -
Anthropic’s Claude Fable 5 Sparks Dual Use Debate in AI
Anthropic recently launched Claude Fable 5, a Mythos-class AI model designed with safeguards for high-risk domains like cybersecurity and bioweapons. Concerns arise over its dual-use potential in both offense and defense, demanding proactive AI governance.…
SecurityWeek -
ISC Stormcast June 12 2026: Jan Kopriva Green Threat Level
The page features an ISC Stormcast for June 12th, 2026, presented by handler Jan Kopriva. The current threat level is indicated as green. There are links to previous diaries, discussions, and educational classes taught by Dr. Johannes Ullrich. It also…
SANS ISC -
Hackers Trick AI Coding Agents Into Running Malicious Code
The article discusses the emerging threat known as 'Agentjacking,' where attackers manipulate AI coding agents into executing harmful code. This method exploits the advanced capabilities of AI, posing significant cybersecurity risks. By tricking AI into…
The Hacker News -
Former Iowa school IT worker jailed for sabotage after departure
Ezekiel Dean Potter, a former IT worker for Saydel Community School District in Iowa, was sentenced to 21 months in federal prison for disrupting technology systems after leaving the district. His actions affected classroom technology and staff accounts. He…
DataBreaches -
How AI Is Changing Managed Detection and Response Services
The article "Rethinking MDR as Attackers and Defenders Embrace AI" discusses the evolving landscape of Managed Detection and Response (MDR) services in the context of increasing AI utilization by both attackers and defenders. It emphasizes the importance of…
The Hacker News -
Darktrace finds 80% of sports firms hit by cyber attacks last year
Over 80% of professional sports organizations were targeted by cyber-attacks in the past year, with 57% experiencing multiple incidents. Researchers from Darktrace report that these organizations are appealing targets due to high-profile events, sensitive…
Infosecurity -
LangGraph flaw lets attackers run code on self hosted AI agents
The article discusses a significant vulnerability in LangGraph, revealing that a flaw chain can potentially lead to remote code execution in self-hosted AI agents. It addresses the implications of this weakness for AI security, highlighting the need for…
The Hacker News -
Steam gamers warned of fake FACEIT verification credential scam
The article highlights a scam targeting Steam users, particularly gamers on the FACEIT platform, which involves fake verification pages designed to steal account credentials. Cybercriminals create convincing pages that mimic legitimate FACEIT branding and…
Malwarebytes -
Chrome 149 patches 28 flaws, five critical, amid rising bug count
Google released the Chrome 149 update, addressing 28 high and critical vulnerabilities, including five classified as critical. Key issues include various use-after-free bugs and validation flaws, which pose risks for remote code execution (RCE) and data…
SecurityWeek -
Interpol shuts down Sniper Dz phishing network, arrests admin
Interpol successfully dismantled the Sniper Dz phishing platform and arrested its admin, marking a significant blow against cybercrime. The operation aimed to curb phishing attacks and protect victims. The initiative underscores global cooperation in…
The Hacker News -
Anthropic refutes jailbreak claims on Claude Fable 5 AI model
Anthropic has rejected claims of a prompt-based jailbreak affecting its Claude Fable 5 AI model, asserting the strength of its advanced safety systems and extensive testing. The model, launched with cybersecurity safeguards, defaults to a less capable…
SecurityWeek -
21,786 Home Cameras, No Password, No Warning
In May 2026, a report revealed that over 21,786 home cameras were streaming live video without any authentication or protection, exposing them to anyone online. Mysterium VPN conducted an analysis and identified that, of over three million accessible…
Security Affairs -
Fake Indian tax notice spreads stealthy in memory malware
Operation TaxShadow is a sophisticated phishing campaign involving a fake tax notice that delivers in-memory malware. Initiated through a fraudulent email that mimics communication from Indian tax authorities, victims are directed to a malicious ZIP file…
SecurityOnline
