News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Thu 18 Jun· 73 articles
-
DarkForums private chat exposed as public IP leaks user anonymity
Covert Security highlights a significant security oversight involving DarkForums, a large English-language hacking community on the dark web. Despite claiming to offer private, encrypted communication via a Jabber server, their actual IP address was…
DataBreaches -
VRChat Faces Misinformation After Data Breach Notice on Maine Site
Esteban Morin, Head of Legal at VRChat, discussed a data breach notice mistakenly associated with the company due to a fraudulent submission on the Maine Attorney General's website. Despite no actual data compromise, the notice led to widespread…
DataBreaches -
Checkout Page Scripts Trigger PCI DSS Compliance Worries
The article discusses how scripts on checkout pages have become a significant compliance issue under the Payment Card Industry Data Security Standard (PCI DSS). It emphasizes the need for businesses to ensure that any scripts embedded in their checkout…
The Hacker News -
Atlassian, Splunk release patches for critical AI Toolkit flaw
Atlassian and Splunk have announced patches for critical vulnerabilities in their products. Splunk addressed a critical issue in its AI Toolkit (CVE-2026-20266) that could allow admin attackers to execute arbitrary OS commands. A medium-severity information…
-
Rokarolla Android Trojan Hits 200 Banking Apps, Evades Lock
A new banking trojan named 'Rokarolla' has been identified by mobile security firm Zimperium, targeting over 200 cryptocurrency and banking applications on Android devices. Distributed via malicious websites disguised as popular apps, Rokarolla impersonates…
SecurityWeek -
Cisco patches critical ISE command execution flaw CVE-2026-20181
Cisco has issued critical security patches for a command execution vulnerability (CVE-2026-20181) affecting its Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC), which could allow attackers with admin credentials to execute…
-
ShinyHunters2 articles this day · SecurityWeek first
Kodak Confirms ShinyHunters Extortion Breach Affecting 2.2 Million · Kodak Confirms Breach After ShinyHunters Steals 2.2M Records
2 outlets-
Kodak Confirms ShinyHunters Extortion Breach Affecting 2.2 Million
Kodak has confirmed a data breach linked to the ShinyHunters extortion group, which claims to have stolen over 2.2 million records including customer personal information (PII) and internal corporate data. They threatened to release the data unless Kodak…
Malwarebytes -
Kodak Confirms Breach After ShinyHunters Steals 2.2M Records
Kodak has confirmed a data breach after the ShinyHunters hacker group claimed to have stolen over 2.2 million records, including personal customer information. The group threatened to leak the data unless a ransom is paid. Kodak is currently investigating…
SecurityWeek
-
-
F5 patches NGINX remote code flaws CVE-2026-42530, CVE-2026-42055
F5 has released critical security updates for multiple NGINX vulnerabilities, including CVE-2026-42530 and CVE-2026-42055, both with a CVSS score of 9.2. These flaws can lead to code execution and denial-of-service (DoS) conditions. Exploiting these…
-
Microsoft Defender Zero Day Lets Attackers Run SYSTEM Code
Microsoft has confirmed a zero-day vulnerability in its Defender software, tracked as CVE-2026-50656, which enables privilege escalation due to a flaw in the Malware Protection Engine. While a security patch is under development, the issue was brought to…
-
Hostile States Behind 75% of Cyber-Attacks on UK Critical Infrastructure, NCSC Warns
The UK's National Cyber Security Centre (NCSC) reported that 75% of cyber incidents affecting critical infrastructure in the UK during the past year stemmed from nation-state actors, primarily Russia, China, and Iran. In a speech delivered by CEO Richard…
Infosecurity -
Velvet Ant’s Operation Highland: A Decade Inside Critical Infrastructure
The Velvet Ant group, linked to China, operated undetected within an organization's network for nearly a decade, as uncovered by Sygnia's incident response team in a campaign named Operation Highland. The hackers leveraged tools and tactics to implant a…
-
SailPoint acquires Entro for $200m to boost identity security
SailPoint has finalized an agreement to acquire Entro, an Israeli firm focused on non-human identity (NHI) and credential security. Valued at approximately $200 million, this acquisition aims to enhance SailPoint's capabilities in identity security,…
SecurityWeek -
Interpol sees Asia Pacific cybercrime rise amid digital boom
Cybercrime is surging in the Asia-Pacific region, driven by the rapid adoption of digital technologies, according to Interpol's latest report. Cybercrime now constitutes 30% of criminal activity in more than half of the surveyed countries. Key findings…
Infosecurity -
OpenAI launches Scheduled Tasks for ChatGPT to track web updates
OpenAI has introduced a new feature called 'Scheduled Tasks' for ChatGPT, aimed at enhancing its proactive capabilities. This feature will allow users to schedule tasks that not only send reminders but also monitor the web for crucial updates automatically.…
SecurityOnline -
Microsoft AI growth in China driven by ByteDance’s $1B spend
Microsoft's AI business in China, primarily driven by ByteDance, has achieved significant growth despite geopolitical tensions and US export bans on high-end chips. ByteDance, a major client relying on OpenAI's models via Microsoft Azure, is projected to…
SecurityOnline -
Moxa NPort servers hit by critical root access bug CVE-2026-10829
Moxa has revealed two critical vulnerabilities in its NPort serial device servers, particularly affecting devices bridging serial equipment to Ethernet networks. The most severe vulnerability, CVE-2026-10829, involves a stack-based buffer overflow, allowing…
-
AsyncRAT lures hide in fake AI learning files to steal data
Recent cybersecurity research by FortiGuard Labs reveals a new threat involving AsyncRAT AI lures, which are malicious archives disguised as AI learning resources. Users seeking AI education fall victim to these attacks. The malware typically starts with a…
SecurityOnline -
Apple WWDC 2026 Unveils AI Tools for Xcode Siri On Device
Apple's WWDC 2026 showcased significant advancements in its artificial intelligence ecosystem through updates to developer tools such as Xcode 27, App Intents, and the Apple Foundation Models. Key highlights include: 1. **Agentic Coding in Xcode 27**: This…
SecurityOnline -
WhatsApp rolls out View Once for text messages to boost privacy
WhatsApp is introducing a 'View Once' feature for text messages, similar to what is already available for photos and videos. Users will be able to send messages that can be read only once, with the text disappearing from both cloud storage and devices upon…
SecurityOnline -
OpenAI boosts Rust Foundation with $600k platinum membership
OpenAI has joined the Rust Foundation as a Platinum Member, making an annual contribution of $325,000 and a one-time donation of $275,000, totaling $600,000. This funding aims to support the Rust ecosystem maintainers, enhance the Rust infrastructure, and…
SecurityOnline -
Apple to Raise iPhone and Mac Prices Amid AI Driven Chip Shortage
Apple is set to raise its product prices due to significant component shortages caused by the surge in AI development. CEO Tim Cook confirmed in an interview that the demand for memory and storage components has outpaced supply, leading to skyrocketing costs…
SecurityOnline -
FortiBleed leak exposes 75k Fortinet admin passwords online
A significant cybersecurity breach, dubbed 'FortiBleed,' has revealed admin passwords for approximately 75,000 Fortinet firewalls exposed on the internet. Security researcher Bob Diachenko discovered access to valid Fortinet VPN credentials, which included…
Security Affairs -
Khmer Shadow campaign targets Cambodia with NIGHTFORGE malware
The Acronis Threat Research Unit has revealed a previously unknown espionage campaign named Khmer Shadow, targeting Cambodian defense and public works sectors. The attackers distribute a new malware, NIGHTFORGE, via spear-phishing emails containing…
SecurityOnline -
EU launches Shield 6G initiative to secure future 6G networks
The article discusses the EU's proactive steps in developing security measures for the upcoming 6G network, dubbed "Shield-6G." This initiative aims to address the anticipated complexities and security challenges posed by increased interconnectedness and AI…
Dark Reading -
Microsoft warns of npm supply chain attack via mastra packages
Microsoft Threat Intelligence reported a significant npm supply chain compromise impacting over 140 packages in the mastra scope, initiated through the takeover of the ehindero npm maintainer account. The attacker published a malicious package,…
Microsoft -
FortiBleed hijacks 30,000+ Fortinet devices across 194 countries
The FortiBleed campaign has compromised 30,791 Fortinet firewalls and VPN credentials worldwide, affecting organizations across 194 countries, including banks, hospitals, and telecommunications companies. Identified by SOCRadar, the operation involves…
SecurityOnline -
Internet Storm Center Reports Green Threat Level on June 18, 2026
The content is a brief update from the Internet Storm Center (ISC) for June 18th, 2026, featuring Guy Bruneau as the handler on duty and indicating a threat level of green. There is a link to learn more about classes taught by Dr. Johannes Ullrich for SANS,…
SANS ISC -
SSH brute force surges tied to world events, honeypot data shows
This guest diary by Adam Nason examines SSH brute force attack behaviors over three months, analyzing over 20 million attempts logged by a DShield Honeypot. The study correlates these attacks with significant cyber events and geopolitical tensions,…
SANS ISC -
AI driven surge forecasts 66,000 CVEs for 2026, 6.5% critical
The 2026 vulnerability forecast from the Forum of Incident Response and Security Teams (FIRST) anticipates a significant increase in disclosed CVEs, reaching around 66,000—marking a 46.3% rise compared to original predictions. This surge is attributed to the…
SecurityOnline -
China Influence Operations Target US AI Debate, OpenAI Warns
OpenAI has taken action against two covert influence operations originating from China that misused ChatGPT to impact the US AI policy debate, as detailed in their June 2026 threat report. These operations involved creating misleading narratives about AI and…
SecurityOnline -
CVE-2026-48713 flaw in i18next lets attackers inject code
The i18next prototype pollution flaw, tracked as CVE-2026-48713, poses a significant risk to the npm ecosystem's translation tools, specifically affecting i18next-fs-backend with a CVSS score of 9.1. The vulnerability allows unauthorized attackers to write…
-
Zyxel fixes CVE-2026-7273 buffer overflow in GS1900 switches
Zyxel has issued firmware patches for a critical vulnerability in its GS1900 series switches, identified as CVE-2026-7273, which carries a CVSS score of 8.8. This stack-based buffer overflow flaw allows unauthenticated attackers on the same local network to…
