News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Thu 18 Jun· 73 articles
-
New USB Spread Crypto Clipper malware hijacks wallets via Tor
Microsoft has detected a new self-propagating malware known as Crypto Clipper, which spreads via USB drives to steal cryptocurrency credentials. The malware monitors clipboard contents for wallet addresses and seed phrases, capturing screenshots and sending…
Ars Technica -
Splunk Enterprise2 articles this day · SecurityOnline first
CISA Adds Splunk Auth Bypass Flaw to KEV Catalog, Urging Patches · Splunk CVE-2026-20253: CVSS 9.8 RCE Exploited in the Wild
-
CISA Adds Splunk Auth Bypass Flaw to KEV Catalog, Urging Patches
CISA has added CVE‑2026-20253 to its Known Exploited Vulnerabilities catalogue. The flaw affects Splunk Enterprise and is named the Splunk Enterprise Missing Authentication for Critical Function Vulnerability. It allows an unauthenticated attacker to create…
-
Splunk CVE-2026-20253: CVSS 9.8 RCE Exploited in the Wild
The page discusses a critical vulnerability in Splunk Enterprise, identified as CVE-2026-20253, which allows for remote code execution due to insufficient authentication controls in the PostgreSQL sidecar service. The CVSS score is 9.8, and it affects…
-
-
FulcrumSec2 articles this day · DataBreaches first
Novo Nordisk breach exposes 1.3TB after GitHub token leak · GSG breach leaks 183k accounts after plaintext password flaw
2 outlets-
Novo Nordisk breach exposes 1.3TB after GitHub token leak
The article discusses a significant breach at Novo Nordisk, highlighted by the exploitation of a GitHub access token that led to unauthorized access to sensitive data. The attackers accessed essential information, including personal data from clinical trials…
Dark Reading -
GSG breach leaks 183k accounts after plaintext password flaw
The data breach involving the Global Schools Group (GSG) impacted multiple school brands, revealing a total of 183,164 affected user accounts, including 83,132 student accounts, 88,856 parent accounts, and 11,176 staff accounts. Significant amounts of…
DataBreaches
-
-
Apple patches Beats Buds eavesdropping bug CVE-2025-20701
Apple has released a firmware update for its Beats Studio Buds to address a severe eavesdropping vulnerability identified as CVE-2025-20701. This flaw allowed nearby hackers to exploit improper authentication in the earbuds' Bluetooth firmware, potentially…
-
MexicanMafia2 articles this day · Infosecurity first
Operation Escaneo Signals Shift in LatAm Threat Landscape · Fortinet, Ivanti flaws exploited in Latin America cyber campaign
2 outlets-
Operation Escaneo Signals Shift in LatAm Threat Landscape
The article discusses "Operation Escaneo," a sophisticated cyber intrusion campaign attributed to a financially motivated threat actor, identified as MexicanMafia, which targets critical infrastructure in Latin America. This operation signifies a shift in the…
Dark Reading -
Fortinet, Ivanti flaws exploited in Latin America cyber campaign
A cyberattack campaign known as Operation Escaneo has targeted government and financial institutions in Latin America, particularly Mexico, exposing a range of critical infrastructures. The campaign was identified after attackers accidentally left a staging…
Infosecurity
-
-
Tor based clipboard malware steals crypto via USB shortcuts
A new clipper malware, tracked by Microsoft Threat Intelligence since February 2026, is targeting cryptocurrency wallets by hijacking the clipboard through malicious USB shortcut files. This malware operates through the Tor network, making it difficult to…
Security Affairs -
Hacker exposes FIFA Entra flaw, threatening World Cup broadcast
A serious vulnerability in FIFA's Microsoft Entra system allowed an ethical hacker, known as 'BobDaHacker', to access critical systems controlling World Cup broadcasts. On June 14, 2026, they exposed weaknesses in FIFA's access control that could have led to…
Dark Reading -
New Windows OXLOADER spreads CASTLESTEALER via Google Ads
The Elastic Security Labs analysis reveals a new Windows loader called OXLOADER responsible for distributing the CASTLESTEALER infostealer through malicious Google Ads. The key points include: OXLOADER evades detection via sophisticated obfuscation…
elastic.co -
Forrester study finds Microsoft Security AI delivers 124% ROI
We couldn't load analysis for this article. Use the referenced report link below.
Microsoft -
AI agnostic harness speeds up multi repo vulnerability scanning
The article discusses the process of building a vulnerability harness designed for scanning and validating code across multiple repositories. It emphasizes the need for a model-agnostic approach to maintain flexibility amidst rapid changes in the AI…
Cloudflare -
Node.js fixes critical WebCrypto TLS flaws in urgent update
The Node.js project has released critical security updates to address severe vulnerabilities across versions 26.x, 24.x, and 22.x. Developers are urged to apply these updates urgently to protect against potential cyber attacks. The updates address two…
-
Popa botnet exploits Android TV boxes to fuel NetNut proxy fraud
The Popa botnet, operating via compromised Android-based TV boxes, has been linked to advertising fraud, data scraping, and account takeovers. Researchers found ties between Popa and NetNut, a residential proxy service owned by Alarum Technologies. Popa…
Krebs on Security -
HCRG Care Group hit by Medusa ransomware, patients angered
In February 2025, the Medusa ransomware gang claimed responsibility for a cyberattack on the UK healthcare provider HCRG Care Group. While HCRG initially confirmed a breach but offered limited details, the independent outlet SuspectFile revealed that a…
DataBreachesMedusa -
F5 patches critical NGINX flaws enabling remote code execution
F5 has addressed two critical vulnerabilities in NGINX Open Source software, which could allow remote code execution attacks. This update is essential for organizations relying on NGINX for web server functions. Users are strongly advised to apply the…
The Hacker News -
Outdated REDCap servers expose research to China linked hackers
A report by Censys indicates that most internet-accessible REDCap servers are outdated and vulnerable to attacks, particularly from state-sponsored actors like the China-linked group UNC6508. REDCap, a web-based platform used in medical research, is…
SecurityWeekUNC6508 -
Cybersecurity breach includes Crime Stoppers of Hamilton data
The Navigate360 ("P3") data breach, affecting Crime Stoppers of Hamilton, has gained attention in Canada. Hamilton police are aware of the breach, which involves a cybersecurity incident on a U.S.-based platform contracted by the Canadian Crime Stoppers…
DataBreaches -
Salesforce Data Leak Tied to Compromised Klue Battlecards App
The article from Dark Reading discusses a security breach affecting Salesforce customers through a compromise of the Klue Battlecards app. This marks the third incident involving third-party application integrations with Salesforce leading to unauthorized…
Dark ReadingIcarus -
Cisco patches critical ISE flaw letting admins gain root access
Cisco has fixed a critical vulnerability, tracked as CVE-2026-20181, in its Identity Services Engine (ISE), which allows authenticated administrators to execute commands and gain root access due to improper user input validation. The vulnerability has a CVSS…
-
Malicious NastyC2 npm Packages Are Targeting Developers Worldwide
The page discusses recent cybersecurity news and updates, focusing on various threats and vulnerabilities. Key points include: 1. **Claude Chat Abuse**: An emerging issue in the cybersecurity landscape. 2. **NastyC2 npm Packages**: Malicious packages posing…
The Hacker News -
Fake GitHub stars drive crypto clipboard hijacker malware
A new cryptocurrency-stealing malware campaign is using fake popularity tactics, like bogus GitHub stars and AI-generated YouTube videos, to deceive users. Check Point Research identified this Rust-based 'clipboard hijacker', which swaps crypto wallet…
Infosecurity -
Global Schools Group breach exposes 183k accounts, passport data
The report details findings from the Global Schools Group (GSG) data breach, affecting multiple international school brands. An attack on GSG resulted in significant data exposure, including 183,164 user accounts (83,132 students, 88,856 parents, and 11,176…
DataBreaches -
ICO drops criminal case against nurse over Princess' data leak
The UK's Information Commissioner's Office (ICO) has decided not to pursue a criminal investigation against a former healthcare worker who attempted to access and sell the medical records of the Princess of Wales. This decision comes after the ICO conducted…
Infosecurity -
New Clipper Malware Steals Data via USB LNK Worm Using Tor C2
Microsoft has detailed a new Windows malware campaign known as the Clipper malware, which utilizes a USB LNK worm and communicates through a Tor-based command and control infrastructure. This highlights ongoing cybersecurity threats and the methods attackers…
The Hacker News -
INC ransomware jumps as RaaS threat, over 830 victims since 2023
The article discusses the rise of the INC ransomware, which has emerged as a significant Ransomware-as-a-Service (RaaS) threat in 2026. Since 2023, it has claimed over 830 victims, highlighting the increasing severity of ransomware attacks on organizations.…
The Hacker NewsInc -
F5 Patches Critical NGINX Vulnerabilities Enabling Unauthenticated Code Execution
F5 has released urgent updates to address critical vulnerabilities in NGINX, specifically CVE-2026-42530 and CVE-2026-42055, both rated at CVSS 9.2. The first vulnerability allows unauthenticated code execution through a Use-After-Free condition in the…
-
DragonForce hides ransomware C2 via Microsoft Teams relays
The article discusses how DragonForce hackers are exploiting Microsoft Teams relays to conceal a backdoor and manipulate command-and-control (C2) traffic. This tactic allows the malicious actors to operate undetected by using legitimate communication…
The Hacker NewsDragonForce -
Accenture acquires Dragos, runZero, NetRise for $4.1B OT boost
Accenture has announced the acquisition of a majority stake in Dragos and full acquisitions of runZero and NetRise for approximately $4.1 billion, aiming to enhance its position in operational technology (OT) cybersecurity. The acquisitions will combine…
SecurityWeek -
Security Teams Reduce Debt by Targeting Vulnerability Exposure
The article discusses strategies for organizations to alleviate security debt by addressing the exposure of vulnerabilities within their systems. Key points include identifying and prioritizing critical applications that carry the most risk, treating…
Dark Reading -
Cloudflare’s Project Galileo turns 12, shielding civil society
Cloudflare's Project Galileo, launched 12 years ago, offers free cybersecurity services to over 3,400 organizations including journalists and human rights defenders across 120 countries. To mark its anniversary, Cloudflare released a comprehensive report…
Cloudflare -
Microsoft Defender Bug CVE-2026-50656 Allows Full Windows Control
Microsoft confirmed a critical vulnerability named RoguePlanet (CVE-2026-50656) that allows attackers to gain complete control over Windows systems by exploiting weaknesses in Microsoft Defender's Malware Protection Engine. The flaw enables privilege…
-
Universal TCP/IP Connectivity Undermines Zero Trust, Experts Warn
The article discusses challenges in cybersecurity, emphasizing that vulnerabilities (CVE) are not the sole cause of breaches. The author, Tod Beardsley, highlights the issue of universal connectivity in TCP/IP networks, which can expose systems to…
SecurityWeek -
Cybercriminals fear AI will steal their hacking jobs Sophos warns
The article discusses how cybercriminals are voicing concerns about the impact of artificial intelligence (AI) on their jobs, paralleling worries seen in legitimate sectors. An analysis by Sophos Counter Threat Unit reveals that as AI tools become more…
Infosecurity -
FortiBleed exposes 75,000 FortiGate firewalls to credential theft
In mid-June 2026, researchers uncovered the FortiBleed campaign, affecting Fortinet FortiGate firewalls, with an estimated 30,000 to 75,000 devices compromised across 194 countries. Threat actors extracted configuration files and cracked credential hashes,…
DataBreaches -
NCSC issues alert on Fortinet credential leak, urges checks
The UK’s National Cyber Security Centre (NCSC) has issued an alert regarding a global campaign targeting Fortinet firewalls and VPN gateways. Organizations using these services are advised to investigate potential impacts after a database of credentials was…
ncsc.gov.uk -
Orphaned AI Agents Pose Hidden Access Risks in Corporate Networks
The article from The Hacker News discusses the concept of 'Orphaned AI Agents' and highlights the hidden access risks they pose within organizational networks. Key points include the importance of recognizing these orphaned agents, the potential security…
The Hacker News -
Israeli startup Dream raises $260M, hits $3B valuation global
Israeli cybersecurity startup Dream has successfully raised $260 million in funding, increasing its valuation to $3 billion. The funding round was co-led by Bicycle Capital and Group 11, with contributions from various investors. Founded in 2023 by Shalev…
SecurityWeek -
Retro gamers hit by fake GitHub homebrew hiding Windows malware
The article warns retro gaming fans, particularly those using the PlayStation Vita, about a rising threat of fake projects on GitHub that disguise malware as homebrew software. A specific case is detailed involving a malicious project named EQVita, which…
Malwarebytes
