News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Mon 15 Jun· 74 articles
-
Attackers now exfiltrate data within 72 minutes, Unit 42 warns
The article "Inside the Modern SOC: The 72-Minute Race" from Unit 42 explores the rapid acceleration of cyberattacks, highlighting that attackers can move from initial access to data exfiltration in as little as 72 minutes due to advancements in AI. It…
unit42.paloaltonetworks.com -
EtherRAT malware exploits Ethereum blockchain for resilient C2
The article discusses the findings of a recent threat hunting operation that uncovered a malicious infrastructure distributing EtherRAT malware, phishing pages, and other malicious software. EtherRAT, developed in Node.js, is a Remote Access Trojan (RAT)…
Malwarebytes -
Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails
The article discusses a cybersecurity breach where Chinese hackers exploited Google Workspace rules to steal sensitive emails related to research and defense. This incident highlights vulnerabilities in email security protocols and underscores the importance…
The Hacker News -
Cisco Catalyst SD-WAN Manager2 articles this day · SecurityOnline first
CISA flags Cisco Catalyst SD WAN flaw CVE-2026-20262 in KEV list · Cisco SD-WAN Vulnerability Exploited in the Wild: Patch CVE-2026-20262 Now
-
CISA flags Cisco Catalyst SD WAN flaw CVE-2026-20262 in KEV list
On 15 June 2026 the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2026‑20262 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Cisco’s Catalyst SD‑WAN Manager product and is officially named the Cisco Catalyst…
-
Cisco SD-WAN Vulnerability Exploited in the Wild: Patch CVE-2026-20262 Now
A critical vulnerability in Cisco's SD-WAN Manager, tracked as CVE-2026-20262, is under active attack, posing significant risks to affected systems. The flaw, stemming from inadequate validation of user input during file uploads, allows authenticated…
-
-
CISA flags LiteSpeed cPanel Plugin UNIX symlink vulnerability
CISA has added CVE‑2026-54420 to its Known Exploited Vulnerabilities catalogue, affecting the LiteSpeed cPanel Plugin. The vulnerability, named LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability, allows a user with FTP or web shell…
-
North Korean hackers weaponise developer tools to spread malware
North Korean hackers are increasingly using developer tools as channels for delivering malware, exploiting trusted platforms to bypass security measures. This trend poses significant risks as it can make detection difficult, thereby complicating defenses…
The Hacker News -
Attackers hijack Microsoft Copilot to leak data CVE-2026-42824
The article discusses a recently discovered Microsoft Copilot attack named 'SearchLeak', which allows attackers to exfiltrate files like emails and documents with a malicious link. This three-stage attack leverages a specific URL structure, enabling prompt…
-
The Gentlemen2 articles this day · SecurityWeek first
Mackay Sugar Hit by Ransomware as Crushing Season Stalls · Mackay Sugar Suffers Gentlemen Ransomware Attack, Mills Halted
2 outlets-
Mackay Sugar Hit by Ransomware as Crushing Season Stalls
Mackay Sugar, Australia's second-largest sugar producer, reported a cyberattack on June 10, 2026, affecting key operations during the critical crushing season. Two of its three mills were offline, prompting the company to engage cybersecurity experts and…
Security Affairs -
Mackay Sugar Suffers Gentlemen Ransomware Attack, Mills Halted
Mackay Sugar, Australia's second-largest sugar producer, experienced a ransomware attack on June 10 that affected operations at two of its cane-processing mills in Queensland. The company initiated interim processes to maintain critical business functions…
SecurityWeek
-
-
AMD removes TSME from Ryzen CPUs, users express anger
AMD has removed the Transparent Secure Memory Encryption (TSME) feature from its consumer CPUs, a change that has surprised and frustrated users. Initially introduced to protect against physical data threats, TSME was available on lower-end Ryzen chips,…
Ars Technica -
Supply chain hijack hits WordPress plugins, creating rogue admins
A recent supply-chain attack has targeted popular WordPress plugins, compromising over 1.2 million sites. The malware, identified by Sansec, affected JavaScript files in OptinMonster, TrustPulse, and PushEngage. Upon detection of an admin account, the…
Infosecurity -
CISOs face pressure to suppress security flaw disclosures
A recent report highlights that 95% of Chief Information Security Officers (CISOs) feel pressured to delay or suppress the disclosure of negative security findings. This pressure arises from various sources including the board, PR teams, and C-level…
Dark Reading -
LiteLLM flaw lets lowpriv users hijack AI gateways
The article discusses a vulnerability within LiteLLM that allows low-privilege users to take over AI gateway servers. Published on June 15, 2026, by Swati Khandelwal, it highlights the security risks associated with this vulnerability, emphasizing the need…
The Hacker News -
UNC65083 articles this day · Google Cloud first
China-Nexus Actor Spied on US Researchers Undetected for a Year · Chinese Hackers Target Medical, Military, and AI Research in North America
3 outlets-
China-Nexus Actor Spied on US Researchers Undetected for a Year
A China-aligned threat actor, UNC6508, conducted an extensive spying campaign on US academic, medical, and military institutions for over a year, utilizing custom malware to steal credentials from researchers' Web applications. Discovered by Google Threat…
Dark Reading -
Chinese Hackers Target Medical, Military, and AI Research in North America
The Google Threat Intelligence Group (GTIG) reported on cyberespionage activities of a group associated with the Chinese government, identified as UNC6508, which has been active since at least 2023. This group mainly targets North American medical, academic,…
SecurityWeek -
Chinese Hackers Use REDCap Flaw to Spy on US Universities and Labs
The Google Threat Intelligence Group (GTIG) reported on a sophisticated cyber campaign attributed to the Chinese threat actor UNC6508, targeting North American academic, medical, and military institutions. This actor exploited REDCap servers to deploy custom…
Google Cloud
-
-
Anubis Ransomware Hits Adriatic Port, Highlights Maritime Risks
Anubis ransomware group targeted the Adriatic Port Authority, resulting in a warning over maritime security vulnerabilities. This cyber-attack, which occurred in December 2025 but was reported in June 2026, compromised about 2% of the port's data, notably…
InfosecurityAnubis -
Microsoft Defender beats SEG rivals in email threat detection
Microsoft's quarterly email security benchmarking data reveals key insights about Microsoft Defender's performance compared to secure email gateways (SEG) and integrated cloud email security (ICES) vendors over one year. Key findings include: 1.…
Microsoft -
Uncanny Automator hack exposes data, spreads malicious WP update
The Uncanny Automator breach, confirmed by its maker Uncanny Owl on June 12, 2026, exposed customer data and injected a malicious update into WordPress sites via a flawed update channel. Attackers manipulated the Pro update package and accessed the licensing…
SecurityOnline -
Critical flaw in Microsoft 365 Copilot leaks emails and MFA codes
A critical vulnerability in Microsoft 365 Copilot could have enabled attackers to access emails, files, and multi-factor authentication codes with a single click. This flaw raises significant concerns about enterprise security, emphasizing the need for…
The Hacker News -
AI Native OSes Shift Social Engineering Defence from Users
The article discusses the rise of AI-native operating systems and their potential to combat social engineering attacks by shifting the responsibility from users to systems. This change is enabled by advancements in authentication methods, context…
Dark Reading -
AI Turns CVSS Scores into Clear Business Risk Insights for Firms
The article discusses how AI can enhance vulnerability management by translating technical findings into business risks. Traditionally, cybersecurity data, primarily indicated through CVSS scores, does not adequately reflect the real-world implications of…
Rapid7 -
US mandates Anthropic to disable Claude Fable 5 and Mythos 5
The US government has ordered Anthropic to disable its AI models, Claude Fable 5 and Mythos 5, due to national security concerns regarding their potential abuse by adversaries. Anthropic decided to disable these models globally instead of filtering access by…
Malwarebytes -
Take It Down Act fuels SF's deepfake porn site takedown
The podcast episode 'Deepfake porn sites are going offline' revisits an interview with David Chiu, San Francisco City Attorney, discussing the legal actions taken against deepfake pornography websites that exploit images without consent. Research indicates a…
Malwarebytes -
The Quarry PhaaS operation fuels US IRS and SSA scams nationwide
The blog article from SOCRadar provides an in-depth analysis of a cybercrime operation named "The Quarry," which is a Phishing-as-a-Service (PhaaS) ecosystem. The operation, led by a threat actor known as RockyBelling, sells phishing toolkits to nearly 200…
SOCRadarRockyBelling -
Chrome zero day, UniFi exploits, macOS malware top weekly threats
The article from The Hacker News presents a weekly recap on significant cybersecurity developments. Key topics include a critical 0-day vulnerability in Chrome, exploits targeting UniFi systems, new malware stealing data from macOS, and a notable security…
The Hacker News -
Novo Nordisk breach exposes trial data and provider contacts
Novo Nordisk confirmed a data breach affecting its IT systems, leading to unauthorized access and the theft of personal data. The attack targeted clinical trial data, which included pseudonymized information such as patient IDs, participation details,…
Security Affairs -
NewCore secures $66M seed funding for AI ready identity platform
Israeli cybersecurity startup NewCore has raised $66 million in seed funding from major investors including Cyberstarts and Index Ventures. The company, founded by veterans of Israeli intelligence, has developed a security-first identity platform aimed at…
SecurityWeek -
US Blocks Foreign Access to Anthropic's Fable 5 and Mythos 5 AI
The US government has issued a ban preventing foreign nationals from accessing Anthropic's latest AI models, Fable 5 and Mythos 5, due to concerns over their use in cyberattacks. The directive follows reports of adversaries utilizing AI models to generate…
Dark Reading -
UC San Diego turns 2000 old Pixel phones into eco cloud data centre
A research team at UC San Diego is developing a low-carbon cloud data center using 2,000 retired Google Pixel smartphones, launching in autumn 2026. This initiative, called "phone cluster computing," aims to tackle the issue of embodied carbon from hardware…
SecurityOnline -
Fox Kitten Hackers Mix Espionage with Ransomware Profit
The article provides a comprehensive profile of the Iranian threat actor group named Fox Kitten, known for its dual role of collecting intelligence for the Iranian regime and facilitating ransomware attacks for profit. Active since 2017, this state-sponsored…
SOCRadarFox Kitten -
Ukrainian admits guilt in Conti ransomware case, faces 20 years
A Ukrainian national, Oleksii Oleksiyovych Lytvynenko, pleaded guilty in a US court to charges related to the Conti ransomware group. Arrested in Ireland in 2023 and extradited to the US in 2025, he admitted to joining the group in September 2021 and…
SecurityWeekConti -
JLR Orders 30,000 Staff to Reset Passwords In Person After Breach
Jaguar Land Rover (JLR) mandated all 30,000 employees to perform in-person password resets following a cybersecurity incident that raised concerns about potential credential compromises. Ashish Shrestha, the former chief information security officer of JLR,…
DataBreaches -
Onboarding Password Mistakes Leave Firms Open to Cyber Attacks
The article discusses common onboarding password mistakes that lead to cybersecurity risks. It emphasizes the importance of setting secure password policies during employee onboarding processes. Key points include the need for multi-factor authentication,…
The Hacker News -
Novo Nordisk breach exposes trial patient and staff data
Novo Nordisk, a major pharmaceutical company, reported a cybersecurity incident where unauthorized access to internal IT systems occurred, leading to potential exposure of personal data of patients involved in clinical trials. Although the data comprised…
SecurityWeek -
Attackers Leverage CVE-2026-0257 to Bypass GlobalProtect VPN Auth
Palo Alto Networks has issued a warning regarding an active exploitation of CVE-2026-0257, a vulnerability in PAN-OS that allows unauthorized users to bypass authentication and establish VPN connections. The flaw affects GlobalProtect portals and gateways…
-
French Government Messaging Platform Breached by Mysterious ‘Misere’ Hacker
On June 8, 2026, the French government's secure messaging platform, Tchap, was reported breached, affecting 73,467 out of 825,000 registered employees. A threat actor named 'misere' claimed responsibility, alleging theft of over 13.5GB of data, including…
SecurityWeekmisere -
Adware hits over 100k users via Chrome wallpaper extensions
The article discusses the discovery of 152 Chrome wallpaper extensions with 105,000 installs that are linked to adware and fake traffic. Published on June 15, 2026, by Ravie Lakshmanan, it highlights concerns over browser security and the prevalence of…
The Hacker News -
Australian regulator orders Amex to fix insider threat data flaws
The Australian Privacy Commissioner has ordered American Express to address security weaknesses in five data systems to mitigate insider threats and restrict employee access to sensitive customer information, especially for vulnerable and high-profile…
DataBreaches
