News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 17 Jun· 83 articles
-
Windows crypto clipper malware hijacks clipboard via Tor
The content discusses a newly identified Windows-based cryptocurrency clipper malware that has been affecting users since February 2026. This malware employs clipboard data theft to acquire valuable cryptocurrency information. It uniquely utilizes a portable…
Microsoft -
Roblox Developers Lose Games to Malware via Fake Job Offers
The article discusses the increasing threat of malware attacks on Roblox developers, who are losing entire games to hackers. The attackers use social engineering tactics to persuade developers to execute malware disguised as legitimate software, leading to…
Malwarebytes -
Russian hackers breach Fortinet SSL VPN using GPU cluster
A significant breach has been reported involving Fortinet firewalls, providing Russian-speaking attackers access to major organizations, including Oracle and Chevron. The breach compromised nearly 74,000 Fortinet devices across 194 countries, with plaintext…
Ars Technica -
SOCRadar Launches Free FortiBleed Exposure Checker and Publishes the Most Extensive Dataset on the Fortinet Credential Leak
SOCRadar has launched a free FortiBleed Exposure Checker, enabling organizations to check if their IP addresses or domains are compromised in the FortiBleed dataset. This dataset reveals a significant leak affecting tens of thousands of Fortinet firewalls,…
SOCRadar -
INC ransomware hits over 800 victims, targets healthcare sector
The article discusses the rise of the ransomware group INC, which specializes in ransomware-as-a-service (RaaS) and has achieved notable success by targeting vulnerable sectors such as healthcare, where victims face immediate operational pressure to pay…
Dark ReadingINC -
Microsoft MDASH AI scanner boosts vulnerability detection to 96.5%
Microsoft introduced codename MDASH, a multi-model AI-powered scanning system for detecting and remediating software vulnerabilities. Unlike traditional methods that rely on fixed security reviews, MDASH operates at enterprise scale by integrating directly…
Microsoft -
Splunk AI Toolkit flaw allows arbitrary command execution
The Splunk AI Toolkit has two critical vulnerabilities: CVE-2026-20266, an OS Command Injection issue rated at CVSS 9.1, and CVE-2026-20265, an insecure default domain allowlist rated at CVSS 4.3. Patches are available in version 5.7.4. The OS Command…
-
Critical flaw in Gravity SMTP (CVE-2026-4020) exposes API keys
The page discusses a critical vulnerability in the Gravity SMTP plugin, tracked as CVE-2026-4020, which currently has a CVSS score of 7.5. The vulnerability allows unauthenticated attackers to access sensitive information via a flawed REST API endpoint. The…
-
Cisco ISE flaw CVE-2026-20181 allows RCE, data leak feared
The page discusses critical vulnerabilities in the Cisco Identity Services Engine (ISE) and the ISE Passive Identity Connector (ISE-PIC). Two main vulnerabilities are highlighted: CVE-2026-20181, which allows remote code execution with a CVSS score of 9.1,…
-
Microsoft Named Leader in Forrester XDR Report for Q2 2026
Microsoft has been recognized as a Leader in The Forrester Wave™: Extended Detection and Response Platforms, Q2 2026. The company achieved the highest rankings in the Strategy category and Vision, receiving top scores in critical areas including identity…
Microsoft -
Fake Reviews and AI Voices Fuel New Crypto Clipper Scam
The article discusses a Crypto Clipper campaign that exploits fake reviews, AI narrators, and VirusTotal comments to defraud victims in cryptocurrency transactions. The campaign involves the use of social engineering tactics, where attackers manipulate…
The Hacker News -
Anthropic pulls Claude Fable, Mythos models after US export ban
Anthropic recently took its AI models, Claude Fable 5 and Mythos 5, offline due to a U.S. government export-control directive barring foreign access. The company had previously warned that these models possess capabilities for both cybersecurity defense and…
Ars Technica -
Microsoft Defender zero day RoguePlanet triggers urgent patch work
This article confirms the existence of a zero-day vulnerability in Microsoft Defender, referred to as RoguePlanet. Microsoft has acknowledged the issue and announced that a patch is currently in development. The article emphasizes the importance of prompt…
The Hacker News -
AI Powered Attacks Surge, Identity Security Turns Critical
The blog post discusses how AI is accelerating cyberattacks and emphasizes the importance of identity security in mitigating risks. Key points include: 1. **AI's Role in Cyberattacks**: AI enables faster and more personalized attacks, enhancing capabilities…
techcommunity.microsoft.com -
Critical LDAP injection flaw found in Apache Shiro framework
A critical vulnerability, tracked as CVE-2026-49268, has been discovered in the Apache Shiro framework, specifically within the DefaultLdapRealm class. This LDAP injection flaw poses a significant risk, allowing attackers to manipulate Distinguished Names…
-
London Clinic staff charged over Princess Kate record breach
A hospital worker at The London Clinic, where the Princess of Wales had abdominal surgery, is facing criminal prosecution for allegedly accessing her medical records. Three trusted employees have been dismissed after an investigation revealed they attempted…
DataBreaches -
The browser blind spot: Why your security tool may not be blocking what you think it is [Guest Diary], (Wed, Jun 17th)
This guest diary by Varun Murdula discusses the enforcement gap in Cloud Access Security Brokers (CASBs) due to the QUIC protocol, which runs over UDP and is not visible to traditional CASB traffic inspection, primarily designed for TCP. The article…
SANS ISC -
Hacker Leverages Tailscale and OpenSSH to Keep C2 Access Alive
A recent article discusses a case involving a junior hacker who successfully maintained access to their command and control (C2) infrastructure using Tailscale and OpenSSH after the initial connection was lost. This incident highlights the evolving…
The Hacker News -
DragonForce hides malware in Microsoft Teams via custom backdoor
DragonForce ransomware operators successfully hid malware within Microsoft Teams for one to two months, using a custom backdoor called Backdoor.Turn to mask their command-and-control traffic. This method involved obtaining a Teams visitor token and routing…
Security AffairsDragonForce -
Rokarolla malware steals bank, crypto logins via fake overlays
The article discusses a new Android malware named Rokarolla, which can completely take over devices and steal sensitive banking and cryptocurrency login details from over 200 apps. It uses deceptive overlay screens to capture user information, including PINs…
Malwarebytes -
CISA flags critical Joomla JCE bug enabling remote code execution
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical flaw in the Widget Factory Joomla Content Editor (JCE), identified as CVE-2026-48907 with a CVSS score of 10.0, to its Known Exploited Vulnerabilities catalog. This…
-
North Korean Fake IT Workers Uncovered in US Laptop Farm Scheme
A North Korean scheme to implant fake IT workers in Western firms has been uncovered, with one operative attempting to infiltrate a company that tracks such fraud. The investigation by Nisos revealed a suspicious job application mirroring a job posting and a…
Infosecurity -
SecurityWeek webinar reveals how attackers log in to bypass MFA
The SecurityWeek Network hosts a live webinar on June 17, 2026, focusing on modern identity attacks. It highlights how attackers now log in rather than break in, utilizing social engineering, MFA fatigue, session hijacking, and more to bypass security…
SecurityWeek -
GitBait Phishing Uses GitHub Pages to Hit Mexican Banks
A phishing operation called GitBait has been targeting customers of Mexican banks by utilizing GitHub Pages and SheetBest, a cloud service, to avoid traditional server infrastructure. Over the last three years, the initiative has affected at least 12…
Infosecurity -
Rust clipboard hijacker steals crypto through fake GitHub apps
The report discusses a sophisticated campaign involving a Rust-based clipboard hijacker that targets cryptocurrency users. The campaign employs various deceptive tactics to create a false sense of legitimacy, including fake engagement through GitHub,…
Check Point -
Enterprise AI app data leaks jump 93%, sparking DLP violations
The amount of sensitive enterprise data uploaded to AI applications has nearly doubled, with a 93% increase in data transfers reported by Zscaler in their 2026 AI Threat Report. Key findings include that over half of the data transfers were attributed to…
Infosecurity -
AI driven phishing surge exposes 86% of Fortune 100 firms data
A recent report from SpyCloud reveals a significant rise in phishing attacks targeting enterprises, driven by advancements in AI and phishing-as-a-service (PhaaS) platforms. Key findings include: 78% of organizations reported increased phishing volumes, with…
SecurityOnline -
Cloudflare One stack eases Zero Trust migration for firms
The Cloudflare One stack is a newly launched toolkit aimed at simplifying the adoption of Zero Trust network architectures. It helps organizations automate the deployment and management of security workflows by providing agents with contextual knowledge…
Cloudflare -
FortiSandbox CVE-2026-39813 lets hackers bypass auth, run code
FortiSandbox has critical vulnerabilities (CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089) affecting its API and Web UI components, allowing attackers to bypass authentication, escalate privileges, and execute commands without valid credentials. These…
-
1Password Buys Apono for Up to $300M to Boost Access Security
1Password has acquired Israel-based Apono, a company focused on just-in-time access governance for human, machine, and AI use. The acquisition is valued between $250 million and $300 million. Apono's technology dynamically grants temporary permissions based…
SecurityWeek -
AI driven attacks worry pros as alert fatigue hits security teams
A recent study at Infosecurity Europe 2026 highlights that AI-powered attacks are the primary security concern for cybersecurity professionals, with 41% citing them as a top challenge. A significant issue for security teams is alert fatigue, where 26% of…
Infosecurity -
AI confidence gap: Executives feel safe while staff warn of risks
A recent report by Heimdal reveals a significant confidence gap regarding AI risk management, with 29% of US executives feeling that AI risk is under control, compared to only 7% of the practitioners responsible for daily AI operations. In the UK, the…
SecurityOnline -
Tenet Security raises $6 million to stop rogue AI agents
Tenet Security, founded by Barak Sternberg and Nevo Poran and headquartered in the US after originating from Israel, focuses on real-time detection and prevention of dangerous AI agent behavior. Their patent-pending technology addresses threats from both…
SecurityWeek -
NCSC CEO: Hostile states linked to three-quarters of cyber attacks affecting UK's critical systems
Dr. Richard Horne, CEO of the NCSC, indicated that 75% of cyber attacks on the UK's critical infrastructure in the past year are attributed to hostile state actors, such as Russia, China, and Iran. During his speech at RUSI’s Annual Security Lecture, he…
ncsc.gov.uk -
Exposure Validation Boosts Threat Prioritisation for Firms
The article discusses Adversarial Exposure Validation (AEV), a new approach in cybersecurity that enhances security visibility and prioritization for organizations. AEV allows companies to identify and manage security vulnerabilities more effectively by…
The Hacker News -
Cybercriminals Are Targeting EdTech: Data Breaches and Ransomware Attacks on the Rise
The education technology (EdTech) sector has seen a surge in cyberattacks, primarily due to its storage of sensitive data like student records and payment information. Notable threat actors such as ShinyHunters and FulcrumSec are at the forefront, employing…
DataBreachesShinyHunters -
GitHub ignores alerts on ShaiHulud worm threatening dev supply
GitHub rejected two vulnerability reports from Deep Specter Research concerning design flaws that may allow variants of the Shai-Hulud supply-chain worm to compromise numerous software packages and developer accounts globally. These reports were deemed…
DataBreachesTeamPCP -
IE: HSE fined €300,000 after Tullamore hospital data breach
We couldn't load analysis for this article. Use the referenced report link below.
DataBreaches -
Rockwell Automation Patches Vulnerabilities in ICS Controllers and Software
Rockwell Automation has released patches for multiple vulnerabilities impacting its ICS products, including Logix and CompactLogix controllers, RSLinx software, and FactoryTalk suite. Key issues include: Three critical vulnerabilities in FactoryTalk…
SecurityWeek -
Rokarolla Android Trojan hits banks via fake TikTok, Chrome apps
The article discusses the Rokarolla Android Trojan, which targets 217 banking and crypto applications, stealing user credentials and interfering with device functionality. This malware spreads through malicious sites disguised as popular apps like TikTok and…
Security Affairs
