News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 16 Jun· 79 articles
-
Phantom Stealer hits banks via phishing, steals data in memory
The article discusses a new threat called Phantom Stealer, a fileless malware targeting banks and high-value organizations through phishing campaigns. It employs sophisticated evasion techniques and operates entirely in memory, making detection difficult.…
Dark Reading -
US export ban on Anthropic AI models sparks security backlash
The security community has criticized the U.S. government's decision to ban the export of Anthropic's AI models, Mythos and Fable, to foreign nationals. This decision followed a national security concern regarding the models' capabilities to discover software…
Dark Reading -
Dev Machine Guard Thwarts npm and Python Supply Chain Attacks
The article discusses the growing threat of npm and Python supply chain attacks on developer machines, highlighting recent incidents such as the Miasma and Hades worms. It introduces Package Configs, a feature of Dev Machine Guard designed to audit developer…
StepSecurity -
CISA Adds CVE-2026-48907 Joomla Editor Flaw to Known Exploited List
CISA has added CVE‑2026‑48907 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Widget Factory’s Joomla Content Editor. The Widget Factory Joomla Content Editor Improper Access Control Vulnerability allows unauthenticated users to…
-
GRU hackers use compromised routers to spy on UK officials
The report outlines an ongoing Russian cyber operation, primarily by GRU-linked APT28/Fancy Bear, focusing on intelligence gathering through compromised routers and messaging platforms. Key findings include the manipulation of SOHO routers for DNS hijacking,…
dti.domaintools.comAPT28 -
iRhythm suffers ransomware breach, patient data stolen
iRhythm Technologies, a U.S. digital healthcare company, reported a cyberattack that resulted in stolen patient and proprietary data, accompanied by a ransom demand. The attack was disclosed in a SEC Form 8-K on June 10, 2026, identifying unauthorized…
Security Affairs -
Attackers Hijack Model Uploads via Google Vertex AI SDK Flaw
The article discusses a significant vulnerability found in Google Vertex AI SDK that allows attackers to hijack model uploads through a technique called bucket squatting. This security flaw could lead to unauthorized access and manipulation of machine…
The Hacker News -
One threat actor demanded $50 million from Novo Nordisk. Another one demanded $25 million. Neither got paid.
We couldn't load analysis for this article. Use the referenced report link below.
DataBreaches -
Earth Lusca2 articles this day · Infosecurity first
FishMonger uses new SprySOCKS backdoor with kernel drivers · SprySOCKS backdoor gains Windows kernel stealth, hits governments
2 outlets-
FishMonger uses new SprySOCKS backdoor with kernel drivers
FishMonger, a threat group linked to China, has utilized a new Windows variant of the SprySOCKS backdoor to infiltrate government targets in countries such as Honduras, Taiwan, Thailand, and Pakistan. This version employs kernel drivers, enhancing its…
Dark Reading -
SprySOCKS backdoor gains Windows kernel stealth, hits governments
The article discusses recent developments regarding the SprySOCKS backdoor, which has now expanded from operating solely on Linux to include Windows systems. This expansion, identified by ESET, introduces two Windows variants (WIN_DRV and WIN_PLUS) that…
Infosecurity
-
-
ClickFix tricks users with fake updates and new malware loaders
The article discusses the ClickFix campaigns that have expanded the delivery of malware using new loaders and fake update lures. These tactics exploit users by disguising malicious software as legitimate updates, increasing the vectors through which…
The Hacker News -
Rokarolla Android Trojan steals data, spies via fake apps
The Rokarolla Android Trojan is a new malware that combines banking fraud with extensive device surveillance and remote control capabilities. Distributed via fake downloads of benign applications like TikTok and Chrome, it can control infected devices…
Dark Reading -
ShapedPlugin breach exposes WordPress sites via CVE-2026-10735
A significant supply chain attack on the ShapedPlugin WordPress plugin, discovered by Wordfence on June 11, 2026, compromised plugins distributed via official channels. Hackers injected malware into premium updates, particularly targeting Easy Digital…
-
iRhythm breach exposes patient data after social engineering attack
iRhythm, a health company specializing in cardiac monitoring, disclosed a data breach involving unauthorized access to third-party-hosted business applications. The incident, reported on June 8, included social engineering tactics and resulted in the theft…
SecurityWeek -
Aembit Extends IAM for Agentic AI to Microsoft Copilot Studio
Aembit has announced an integration of its identity and access management (IAM) platform with Microsoft’s Copilot Studio, aiming to enhance security for enterprise AI agents. This integration allows security teams to manage access conditions and track…
SecurityOnline -
Hacker Conversations: Isira Adithya, the Evolution of an Ethical Hacker
Isira Adithya, a Sri Lankan hacker and ethical hacking expert, showcases a journey driven by curiosity from a young age. He began exploring hacking at 11, initially focusing on game modifications and later transitioning to Wi-Fi hacking with guidance from an…
SecurityWeek -
Fortinet warns of active exploits in unpatched FortiSandbox flaws
Fortinet is facing active exploitation of three critical vulnerabilities in its FortiSandbox software, confirmed by cybersecurity firm Defused Cyber. Two of these vulnerabilities were reportedly unpatched for two months, while the third had a patch released…
-
Malware group shifts to ClickFix lures on WordPress sites
The campaign linked to the 'Lorem Ipsum' malware has shifted its delivery method from Trojanized Microsoft Teams installers to ClickFix lures hosted on compromised WordPress sites. This change was necessitated by Microsoft's disruption of a malware-signing…
Dark ReadingRapid Brigantine -
Magnitude secures $10M to deploy AI agents for third party risk
Cybersecurity startup Magnitude has officially launched after raising $10 million in seed funding led by Ballistic Ventures. Based in San Francisco, it aims to improve third-party risk management (TPRM) using an autonomous AI workforce that continuously…
SecurityWeek -
SecurityWeek Report Warns of Shadow AI Risks in Cybersecurity
The report from SecurityWeek provides a comprehensive analysis of the role of artificial intelligence (AI) in cybersecurity through five key topics: Generative AI, Agentic AI, Shadow AI, Machine Learning (ML), and Artificial General Intelligence (AGI). It…
SecurityWeek -
Rokarolla Android Trojan Hijacks Devices, Drains Bank Accounts
The article details the Rokarolla trojan, an advanced Android banking malware that not only drains bank accounts but also takes complete control of infected devices. Identified by Zimperium's zLabs, it targets 217 banking and cryptocurrency applications with…
Infosecurity -
Android Malware Rokarolla Steals PINs, SMS Codes and Crypto Funds
The article discusses a newly discovered Android malware named Rokarolla, which is capable of stealing sensitive information such as PINs, SMS verification codes, and funds from crypto wallets. Identified by the cybersecurity community, this malware poses…
The Hacker News -
AppViewX releases Agent Identity Security for AI agent protection
AppViewX has launched Agent Identity Security, a product designed to govern and secure AI agents within enterprises. This solution addresses the growing challenges posed by ungoverned AI agents and the threats from quantum computing. Key features include…
SecurityOnline -
Free World Cup streams hide malware traps and fake virus alerts
The article warns against "free World Cup stream" sites that seem to offer live football matches but are actually scams promoting malware, ads, and fraudulent downloads. These sites often replicate identical templates, using deceptive ads and hidden…
Malwarebytes -
Cloudflare releases new DMARC manager to simplify email security
Cloudflare's DMARC Management feature is now generally available, offering a redesigned user experience aimed at simplifying email authentication for all customers. This tool emphasizes the importance of proper email authentication protocols like SPF, DKIM,…
Cloudflare -
Ent lands $100M seed round to advance AI driven endpoint security
Ent, a new endpoint security company, has raised $100 million in seed funding to enhance workspace security by analyzing user and AI agent behaviors in real-time to prevent potential risks before they escalate. Founded by cybersecurity experts Elias Manousos…
SecurityWeek -
Cardiac patients’ medical data stolen and held to ransom
The article discusses a data breach affecting iRhythm, a cardiac monitoring provider, where sensitive patient data, including personal health information (PHI), was stolen and held for ransom. The breach was reported to the SEC after iRhythm was contacted by…
Malwarebytes -
FulcrumSec Claims Novo Nordisk Hack, Steals 1.3TB of Trial Data
FulcrumSec has claimed responsibility for a cyber attack on Novo Nordisk, a leading Danish pharmaceutical company. The company disclosed that hackers accessed internal IT systems and exfiltrated data related to clinical trials, including pseudonymized…
SecurityWeekFulcrumSec -
Hackers Capitalize on AI Hype With Sophisticated Attacks
As AI gains prominence, cybercriminals are leveraging AI-related themes for social engineering attacks. A report from Microsoft highlights a rise in phishing and malvertising tactics that exploit popular platforms like ChatGPT and Claude to trick users into…
SecurityOnline -
TrustCloud Automates Trust Assessments for CISOs Today
The article discusses the challenges faced by CISOs in assessing the trustworthiness of production applications, emphasizing the manual and time-consuming nature of questionnaires currently in use. TrustCloud aims to offer a solution through its Application…
SecurityWeek -
GitGuardian debuts endpoint protection for developer secrets
GitGuardian has launched Developer Endpoint Protection to secure developer workstations amid increasing attacks on credentials stored there. After a year of incidents where attackers harvested credentials from developer machines, the focus has shifted to…
SecurityOnline -
Over Two-Thirds of Security Pros Say Cyber Is Getting Harder
A recent report, _The Life and Times of Cybersecurity Professionals, Volume VIII_, reveals that 68% of cybersecurity professionals believe their job has become more challenging over the past two years. Key findings from the survey of 380 practitioners…
Infosecurity -
Rockwell CompactLogix flaws leak data, allow DoS attacks
The advisory details vulnerabilities in Rockwell Automation's CompactLogix series, specifically the 5370 L1, L2, and L3 versions. The identified issues could allow attackers to cause denial-of-service conditions due to improper validation checks. The…
-
Rockwell Logix Controllers Flaw Causes Denial-of-Service
The advisory from CISA (ICSA-26-167-03) addresses a vulnerability affecting Rockwell Automation Logix 5370 and 5570 Controllers that could lead to a denial-of-service (DoS) condition, resulting in a major nonrecoverable fault (MNRF). Versions impacted…
CISA -
Handala Claims Data Breach at California Water Utility, No Outage
California Water Service (Cal Water) is investigating hacking claims made by the Iran-linked group Handala, which alleges to have stolen several gigabytes of data from the utility's systems. The group claimed it could have disrupted water supply operations…
SecurityWeekHandala -
Trump signs NSPM-12 to harden national security cybersecurity
President Trump signed National Security Presidential Memorandum-12 (NSPM-12) aimed at enhancing the cybersecurity of National Security Systems (NSS), which are crucial for processing classified information. The memorandum introduces a governance structure…
SecurityWeek -
Survey shows 94% of attacks rely on anonymous infrastructure
A recent survey indicates that 94% of cybersecurity incidents involve anonymized infrastructure, highlighting a reactive approach among security teams. The need for proactive measures and a shift towards frameworks like Zero Trust is emphasized to better…
The Hacker News -
DragonForce Ransomware Exploited Microsoft Teams to Hide in Attack Against Major Company
A ransomware group, DragonForce, exploited Microsoft Teams to infiltrate a major U.S. services firm undetected for two months. They used a Go-based Remote Access Trojan (RAT), dubbed Backdoor.Turn, to hide command and control (C&C) traffic by masquerading as…
InfosecurityDragonForce -
Microsoft patches critical Copilot AI flaw that leaked 2FA codes
Microsoft recently patched a critical vulnerability in its M365 Copilot AI platform, which allowed hackers to extract two-factor authentication (2FA) codes and other sensitive data from user emails. Researchers from Varonis demonstrated a proof-of-concept…
Ars Technica -
Chainguard launches Athena to guard open source from AI threats
Chainguard, an open-source security firm, has launched a coalition called Athena with partners including JPMorgan, BNY, and Cisco to protect open-source software from AI threats. This initiative aims to share vulnerability intelligence and create solutions…
Infosecurity
