CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 9–13 on weekend days.

Show as table
Articles published per day
DayArticles published
Sun 11 Oct9
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Today, Sun 25 Oct12 so far
Developing
Exploited only
83 articles

Latest days

Wed 17 Jun· 83 articles

  1. Fortinet devices breached worldwide as hackers leak credentials

    A significant cyber attack targeting over 30,000 Fortinet devices across nearly 200 countries has been uncovered. Researchers from SOCRadar discovered the operation, believed to be orchestrated by Russian-speaking threat actors, through an exposed server.…

    Dark Reading

  2. Windows and Linux users: The deadline to update Secure Boot keys is near

    Windows and Linux users are urged to update cryptographic keys that secure systems against UEFI firmware-based malware, with a deadline of June 24. The expiring Microsoft-signed certificates are essential for Secure Boot, which prevents bootkit attacks by…

    Ars Technica

  3. 24 Billion Record Leak Exposes Telegram Users’ Passwords Online

    A massive data breach involving 24 billion stolen records has been identified, highlighting ongoing issues with the illegal circulation of personal information. The database was briefly exposed online and consists of records from various sources, including…

    Malwarebytes

  4. DragonForce ransomware leverages Teams for new Backdoor.Turn C2

    The DragonForce ransomware group has deployed a sophisticated new backdoor, Backdoor.Turn, which utilizes Microsoft Teams relay servers for command-and-control operations. This malware, tracked by Broadcom's Symantec and Carbon Black threat hunters, is…

    SecurityWeekDragonForce

  5. Attack surface threats set to surge in 2026, experts warn

    The article from The Hacker News discusses the top 10 attack surface exposures anticipated in 2026. It highlights the growing importance of attack surface management in cybersecurity as threats evolve and organizations increasingly rely on digital…

    The Hacker News

  6. Ukraine gains EU cyber defence aid via new Security Reserve

    The Ukrainian government can now access EU cyber support against cyber-attacks after being included in the EU Cybersecurity Reserve, approved by the EU Council. Despite not being an EU member, this allows Ukraine to utilize services from 47 trusted private…

    Infosecurity

  7. Malwarebytes Wins AV TEST Top Product Award with 17.5/18 Score

    Malwarebytes has been awarded the AV-TEST Top Product award for achieving 17.5 out of 18 points in a recent Windows security test. The test evaluated 14 security applications based on their ability to protect against malware, system performance impact, and…

    Malwarebytes

  8. Microsoft Defender bug CVE-2026-50656 allows admin takeover

    Microsoft recently acknowledged a vulnerability in its Defender software, tracked as CVE-2026-50656, which could allow for privilege escalation, with a CVSS score of 7.8. This vulnerability, called 'RoguePlanet', was disclosed by researcher Nightmare…

    SecurityWeekCVE-2026-50656CVE-2026-50656

  9. JetBrains Plugins Steal AI API Keys via Chrome Extensions

    The article discusses a cybersecurity threat involving malicious JetBrains plugins that steal AI API keys. These plugins operate as Chrome extensions, allowing hackers to capture user conversations with AI chatbots. The threat highlights vulnerabilities in…

    The Hacker News

  10. FulcrumSec2 articles this day · Security Affairs first

    EdTech firms hit by ShinyHunters and FulcrumSec cyberattacks · FulcrumSec Targets Novo Nordisk, Leaks Clinical and Research Data

    1 outlet

  11. JetBrains plugins leak API keys, 70k installs since 2025

    Security researchers from Aikido Security discovered 15 malicious plugins on the JetBrains Marketplace that have been stealing API keys from developers. These plugins, posing as AI coding assistants, have been installed approximately 70,000 times since their…

    Infosecurity

  12. Oracle June 2026 Patch Fixes 245 Flaws, Including 120 Critical

    Oracle released its June 2026 Critical Security Patch Update (CSPU), adding 245 new patches to address severe vulnerabilities across multiple products, including Communications and MySQL. Approximately 120 vulnerabilities are classified as critical, and…

    SecurityWeek

  13. GoFlateLoader Malware Bypasses AV Using Oversized Files

    The article discusses a newly detected loader malware known as GoFlateLoader, which is designed to deliver information-stealing payloads globally. Since April 2026, it has protected over 33,000 users from threats primarily in Brazil, India, and Argentina.…

    SecurityOnline

  14. Microsoft Copilot Cowork Wins Fortune 500 Adoption After Preview

    Microsoft has launched its agentic AI system, Copilot Cowork, aimed at facilitating complex task execution for enterprises. After a three-month preview, many Fortune 500 companies have adopted it. Copilot Cowork not only automates collaboration across tools…

    SecurityOnline

  15. SANS Survey Shows Staffing Shortfalls and AI Hurdles in SOCs

    The SANS Institute's 2026 SOC Survey reveals that staffing remains the biggest challenge for Security Operations Centers (SOCs), as 14% of practitioners identify it as a primary issue, though 59% of cybersecurity leaders believe management is proactive about…

    Infosecurity

  16. China linked JDY botnet expands to 1,500 devices, scans military

    The JDY botnet, a reconnaissance network linked to Chinese state-sponsored hackers, has re-emerged, expanding from 650 to over 1,500 compromised devices since early 2024. Primarily targeting military-related networks, the botnet conducts rapid scans for new…

    SecurityOnline

  17. Chrome and Firefox patches fix over 70 flaws, stopping RCE threats

    Recent updates for Chrome and Firefox address over 70 vulnerabilities, including high-severity memory safety bugs. Chrome versions 149.0.7827.155/.156 fix 33 security flaws, including six critical use-after-free issues that could lead to remote code…

    SecurityWeek

  18. China-Linked FishMonger Ports SprySOCKS to Windows With Kernel-Level Stealth and UEFI Bootkit Hints

    ESET researchers have identified two new Windows variants of the SprySOCKS backdoor, previously known only in its Linux form, attributed to the China-linked actor FishMonger. These variants, named WIN_DRV and WIN_PLUS, utilize innovative tactics to increase…

    Security AffairsEarth Lusca

  19. Supply chain attack compromises 140 npm packages via typosquat

    A major supply chain attack, known as the Mastra attack, has impacted the JavaScript ecosystem, compromising over 140 npm packages. The attack involves a clean Mastra package that uses a malicious typosquatted package named 'easy-day-js' as a dependency.…

    SecurityOnline

  20. UK Set to Ban Social Media for Under 16s From 2027

    The UK government announced a new ban on social media access for minors under 16, targeting platforms like Facebook, Instagram, and TikTok, set to take effect in early 2027. This decision, supported by a significant majority of parents and public polling,…

    Dark Reading

  21. Widget Factory Joomla Content Editor3 articles this day · SecurityOnline first

    AdGuard blocks Joomla exploit and launches email tracking shield · Joomla and LiteSpeed Bugs Let Attackers Run Code, Gain Root

    2 outletsCVE-2026-48907CVE-2026-48907Exploited

  22. UK bans under 16s from social media, orders ID checks from 2027

    The UK government announced a nationwide ban on social media for users under 16, set to take effect in spring 2027. This policy mandates age verification for all accounts, including adult registrations. A public consultation revealed strong support, with 90%…

    SecurityOnline

  23. Hijacked npm Account Leads to 144 Package Compromise in Mastra

    The article discusses the compromise of 144 npm packages within the Mastra ecosystem following a hijacked contributor account. Key points include: 1. The breach highlights vulnerabilities in package management systems, especially within open-source software…

    The Hacker News

  24. Dark web RAT SilabRAT sold for £5k monthly to steal crypto

    The content discusses a new remote access trojan (RAT) called SilabRAT, which is marketed on dark web forums as a subscription service for $5,000 per month. The malware, also known as SnappyClient, is designed primarily for cryptocurrency theft and operates…

    SecurityOnline

  25. 3 Recently Patched Fortinet FortiSandbox Vulnerabilities in Hacker Crosshairs

    Three newly patched vulnerabilities in Fortinet's FortiSandbox, rated critical, are actively being exploited. Defused's honeypots detected attempts targeting CVE-2026-39808, CVE-2026-39813, and CVE-2026-25089. CVE-2026-39808 allows authentication bypass,…

    SecurityWeekCVE-2026-39808CVE-2026-39808Exploited

  26. Critical Joomla JCE Flaw Lets Hackers Execute PHP Code, CISA Warns

    CISA has issued a warning about an actively exploited vulnerability in the Joomla JCE (Joomla Content Editor) component that allows for PHP code execution. This flaw poses significant risks as it is being actively targeted in supply chain attacks,…

    The Hacker News

  27. Google launches Wear OS 7 with real time updates and AI smarts

    This article discusses the launch of Google Wear OS 7, highlighting its key features and enhancements aimed at improving user experience and device performance. Notable updates include: 1. **Live Updates**: Introduction of real-time information delivery for…

    SecurityOnline

  28. ChatGPT drops below 50% market share as Gemini, Claude surge

    The content discusses the current state of the AI market, focusing on ChatGPT's declining market share as it slips below 50% for the first time, while rivals like Google's Gemini and Anthropic's Claude are experiencing significant growth. ChatGPT currently…

    SecurityOnline

  29. Cloudflare releases free DMARC tool to fight email spoofing

    Cloudflare has officially launched its DMARC Management feature, which is designed to enhance email authentication and prevent domain spoofing and phishing attacks. This feature provides users with a user-friendly interface to enforce DMARC policies, aiding…

    SecurityOnline

  30. Google Unveils Android 17 and Innovative June Pixel Drop

    The content reports on the launch of Google's Android 17 operating system and the June Pixel Drop update. Key features include enhanced user privacy controls, advanced multitasking options with a new 'Bubbles' feature, and AI integration via the Gemini model…

    SecurityOnline

  31. Google fixes 33 Chrome bugs, including critical CVE-2026-12437

    Google has released a major security update for Chrome, addressing 33 vulnerabilities, including seven rated as critical. These critical flaws primarily involve use-after-free errors that may allow remote code execution. Key vulnerabilities include…

    SecurityOnlineCVE-2026-12437CVE-2026-12437

  32. Attackers hijack Fortra BoKS servers via CVE-2026-9862 flaw

    A critical vulnerability has been identified in Fortra BoKS, tracked as CVE-2026-9862, exposing privileged access servers in Linux and UNIX systems. The flaw, an OS command injection within the autoregistration handler, allows remote attackers to execute…

    SecurityOnlineCVE-2026-9862CVE-2026-9862

  33. Microsoft turns to AWS as AI coding spikes trigger GitHub outages

    Microsoft is facing significant server capacity issues due to the surge in AI coding activities, leading to frequent outages on GitHub. To manage this crisis, they have started renting cloud computing resources from Amazon, a primary competitor, while also…

    SecurityOnline

  34. Malicious npm packages hit Mastra AI, steal credentials.

    On June 17, 2026, an attacker compromised the @mastra npm organization and published malicious versions of 13 packages in the Mastra AI framework. All infected packages included a new typosquat package named easy-day-js, which mimicked the popular dayjs…

    StepSecurity

  35. Hard-coded Yarbo app flaws let attackers hijack robot fleet

    Security researchers have identified critical vulnerabilities in the Yarbo robot's mobile apps. The first vulnerability (CVE-2026-10557) involves hard-coded MQTT credentials common across all devices, allowing attackers to exploit and control the entire…

    SecurityOnlineCVE-2026-10557CVE-2026-10557

  36. ISC Stormcast June 2026: Green Threat, Xavier Mertens on Duty

    The content summarizes a daily ISC Stormcast for June 17, 2026, presented by handler Xavier Mertens, with the threat level rated as green. It includes links to resources on SANS courses by Dr. Johannes Ullrich, discussions, and various security-related data…

    SANS ISC

  37. SpaceX to buy Cursor AI tool for $60 billion amid coding race

    SpaceX is set to acquire Cursor, an advanced AI programming tool, for $60 billion. This acquisition aims to enhance SpaceX’s competitive position against rivals like OpenAI and Anthropic in the AI-assisted coding domain. The deal involves a stock merger with…

    SecurityOnline

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device