News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Mon 15 Jun· 74 articles
-
ShinyHunters says it breached Council of Europe, stole 300 GB
The hacking group ShinyHunters claims to have breached the Council of Europe, exfiltrating nearly 300 GB of sensitive data, including payroll information for over 10,000 employees, along with various personal records. The group threatens to publish this data…
SecurityWeekShinyHunters -
Experts urge US to reverse ban on Anthropic AI models
Over 50 cybersecurity professionals are urging the US government to reverse its ban on two AI models, Mythos 5 and Fable 5, from Anthropic, which were prohibited due to alleged national security concerns. Anthropic announced the suspension of these models’…
Infosecurity -
Popular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on Sites
The article discusses cybersecurity threats, specifically focusing on a recent supply chain attack where popular WordPress plugin scripts were tampered with to introduce hidden backdoors in websites. The implications of such vulnerabilities are significant,…
The Hacker News -
Iran Hajj Organisation data leak exposes 168m records on dark web
The SOCRadar Dark Web Team reported several concerning developments concerning the sale of sensitive data. Key findings include: 1. **Iran's Hajj Organization Data**: A breach allegedly impacting 168 million records related to travel and personal details was…
SOCRadarAPT43 -
FBI, Google shut down China phishing service tied to $1.9bn loss
The FBI and Google have taken down Outsider Enterprise, a major phishing-as-a-service platform based in China that resulted in billions in losses. The operation, involving the distribution of phishing kits through Telegram, led to attacks affecting hundreds…
SecurityWeek -
UK govt AI hackathon finds 400+ serious flaws in public code
The UK government has identified over 400 vulnerabilities through internal hackathons utilizing frontier AI models. Organized by the Government Cyber Coordination Centre, these hackathons aimed to scan public code repositories across nine government…
Infosecurity -
Attackers exploit Jenkins flaw to execute code through config.xml
A critical vulnerability affecting Jenkins, tracked as CVE-2026-53435, allows attackers to execute arbitrary code on Jenkins controllers by exploiting how config.xml files are handled. This flaw has a CVSS score of 8.8 and has been actively exploited within…
-
Maine takes breach portal down after fake VRChat, Discord filings
Maine has temporarily taken its breach reporting portal offline due to the submission of two false data breach reports that impersonated companies such as VRChat and Discord. The Attorney General's office noted that these false reports, claiming severe…
Infosecurity -
Maine AG halts breach portal after VRChat, Discord claims
The Maine Attorney General's Office has temporarily disabled its data breach portal due to fraudulent submissions related to reported data breaches. This system, which cataloged nearly 6,000 incidents since mid-2020, required organizations to report the…
SecurityWeek -
Supply Chain Attack Hits WordPress Plugins via Awesome Motive CDN
A supply chain attack has compromised popular WordPress plugins (OptinMonster, TrustPulse, and PushEngage) through Awesome Motive's CDN, allowing attackers to inject malicious JavaScript into the plugins' files. This attack mimics previous supply chain…
Security Affairs -
X VPN users hit by trojanized installer delivering STX RAT
The ongoing cyber threat campaign attributed to the actor Leda Elacoate involves a trojanized software distribution operation targeting cryptocurrency users and VPN clients, notably X-VPN. The attack began in January 2026 with malicious installers for…
SecurityOnlineLeda Elacoate -
Firefox VPN drops data cap, adds 26 countries for summer travel
Mozilla has announced a temporary summer upgrade for its Firefox built-in VPN service, eliminating the previous 50GB monthly data cap and expanding the number of available server countries from 4 to 26 until August 31. This unlimited data offer is designed…
SecurityOnline -
Didier Stevens' base64dump.py spots Windows malware in JPEG
The article discusses the analysis of a suspicious JPEG file with malicious content, focusing on identifying potential custom encodings in its BASE64 strings. Didier Stevens presents findings using his tools, highlighting the prevalence of BASE64 characters…
SANS ISC -
New Chinese Espionage Group OP 512 Targets IIS Servers
The article discusses the discovery of a new espionage group, OP-512, identified by ReliaQuest Threat Research. This group exploits vulnerabilities in Internet Information Services (IIS) servers, utilizing a custom web shell framework with unique…
SecurityOnlineOP-512 -
UK Will Require Child Phones to Block Nude Images by September
The Malwarebytes blog article summarizes the notable cybersecurity events from June 8 to June 14, 2026. Key points include: iPhones set to lose value for thieves due to improved security measures. Fake verification pages targeting Steam users lead to account…
Malwarebytes -
Gentlemen ransomware gang spreads fast with AI and stolen creds
The Gentlemen ransomware group emerged in September 2025 and has quickly become the second most prolific ransomware operation by targeting 483 victims across 66 countries, with 380 of these incidents occurring in 2026 alone. Their success is attributed to…
Security AffairsThe Gentlemen -
UNC3753 Vishing Campaign Targets US Law Firms with Fake Invoices
The active UNC3753 vishing campaign targets US law firms and financial services, utilizing social engineering and remote access tools to steal sensitive data. The attackers initiate the scheme with generic invoice emails to establish trust, followed by phone…
SecurityOnlineUNC3753 -
Sniper Dz scam tricks MENA users with fake Facebook offers
The article discusses a new scam, Sniper Dz, which targets users in the MENA region using deceptive Facebook offers and browser alerts. It highlights the technique of social engineering employed by the scammers to trick users into providing sensitive…
The Hacker News -
Attackers exploit Palo Alto VPN flaw, urgent patch needed
Palo Alto Networks has issued a warning regarding the active exploitation of a vulnerability in PAN-OS GlobalProtect VPN. The flaw poses a significant risk to organizations, encouraging immediate attention to apply available patches. The advisory highlights…
The Hacker News -
Payroll Pirate Phishing Attack Hijacks Sessions to Steal Salaries
The Payroll Pirate campaign targets corporate finance departments, focusing on stealing salary payments by compromising HR and payroll accounts. Attackers utilize sophisticated phishing tactics, including AiTM session hijacking, to bypass MFA and intercept…
SecurityOnline -
Oracle PeopleSoft Enterprise PeopleTools4 articles this day · SecurityOnline first
Oracle PeopleSoft flaw lets attackers bypass auth, CVE-2026-35273 · Codex Rate Limit Reset: OpenAI Introduces Flexible Limits
-
Oracle PeopleSoft flaw lets attackers bypass auth, CVE-2026-35273
The page discusses a critical vulnerability labeled CVE-2026-35273, identified in Oracle PeopleSoft Enterprise PeopleTools, which allows for missing authentication in a critical function. Access to detailed reports on the vulnerability requires user support.…
-
Codex Rate Limit Reset: OpenAI Introduces Flexible Limits
The content discusses the introduction of flexible rate limit resets by OpenAI for Codex, aimed at improving developer efficiency. Key points include: 1. **Manual Reset Autonomy**: Users can now manually trigger rate limit resets, enhancing control over…
-
CVE-2026-35273 flaw lets attackers wipe Wazuh logs via PeopleSoft
A critical CVE-2026-35273 vulnerability has been identified in Oracle PeopleSoft Enterprise PeopleTools, allowing authenticated endpoints to manipulate central log storage systems. This vulnerability, categorized with a CVSS score of 10, stems from unescaped…
-
UEFI shim bug CVE-2026-35273 enables Secure Boot bypass
A critical vulnerability (CVE-2026-35273) has been identified in outdated UEFI shim bootloaders, threatening multiple operating systems by enabling Secure Boot bypass exploits. Attackers can exploit these flaws during early boot phases, bypassing operating…
-
-
FreePBX modules Superfecta and UCP hit by critical RCE bugs
A critical alert highlights two severe remote code execution (RCE) vulnerabilities in FreePBX, affecting the Superfecta module and User Control Panel (UCP). Both vulnerabilities, rated with a CVSS score of 8.6, allow authenticated attackers to gain control…
SecurityOnline -
Export block disables Claude AI worldwide, refunds until June 20
The page discusses a new export control directive affecting Anthropic's Claude AI models, resulting in their global deactivation due to security vulnerabilities. Affected users can apply for prorated refunds if they subscribed or upgraded between June 9 and…
SecurityOnline -
Linux Kernel 7.1 Release: Stability and Driver Enhancements
The Linux Kernel 7.1 has been released, focusing on stability improvements and driver updates. Key enhancements include minor updates for display, network, and audio drivers, alongside fixes for networking utilities and architectural changes for memory…
SecurityOnline -
Microsoft previews Windows 11 app updates ahead of stable rollout
Microsoft is rolling out updates to built-in applications for Windows 11 through the Windows Insider program. Among the apps being updated are Calculator, Camera, Clock, Media Player, Paint, Photos, and Sound Recorder. Key improvements include more accurate…
SecurityOnline -
Meta rolls out AI token limits amid ballooning cost fears
Meta is implementing a token minimization strategy to control skyrocketing AI usage costs, which are projected to exceed billions of dollars by 2026. The company plans to set AI budget caps and establish token usage limits in response to high employee…
SecurityOnline -
US blocks access to Anthropic's Claude AI after jailbreak flaws
The U.S. government has issued an export control directive affecting Anthropic's Claude Fable and Mythos 5 AI models due to national security concerns, leading to a suspension of foreign access to these technologies. This move comes in light of…
SecurityOnline -
ISC Stormcast For Monday, June 15th, 2026 https://isc.sans.edu/podcastdetail/9972, (Mon, Jun 15th)
The page features an ISC Stormcast update for June 15th, 2026, with the handler on duty, Jan Kopriva. It highlights a current threat level categorized as green. Additional resources include links for learning about classes taught by Dr. Johannes Ullrich at…
SANS ISC -
WinRAR Flaw CVE-2025-8088 Hits Ukrainian Firms Despite Patch
The content focuses on the ongoing exploitation of the WinRAR vulnerability CVE-2025-8088, targeting Ukrainian organizations despite a patch being released in 2025. Attackers use NTFS Alternate Data Streams to deliver malicious payloads through RAR files…
-
CISA warns of active exploits in Ivanti, Cisco, Oracle and Chrome
This report highlights a critical security alert regarding the detection of active exploits, specifically referencing several vulnerabilities between June 8 and June 14, 2026. It details that the Cybersecurity and Infrastructure Security Agency (CISA) has…
-
CodeIgniter Vulnerability Enables Arbitrary Code Execution (CVSS 9.8)
A critical vulnerability, tracked as CVE-2026-48062, has been discovered in the CodeIgniter framework, which affects many PHP web applications. This flaw has a CVSS score of 9.8 and allows attackers arbitrary code execution due to insufficient validation in…
