News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Sat 20 Jun· 10 articles
-
Hackers Bypass MFA by Targeting ArcGIS Recovery Weaknesses
Cybercriminals are exploiting vulnerabilities in ArcGIS Account Recovery configurations to gain unauthorized access to customer environments. Esri warns that hackers are bypassing multi-factor authentication by targeting weak built-in accounts, compromising…
SecurityOnline -
The Gentlemen ransomware gang deploys eight variant EDR killer
The article discusses "The Gentlemen," a ransomware group known for its sophisticated tactics, particularly its centralized EDR-killer suite called GentleKiller. Developed for affiliates, this framework contains eight variants that impersonate legitimate…
Security AffairsThe Gentlemen -
Injunctions Fail to Stop Global Schools Group Data Leak
Global Schools Group (GSG) sought court injunctions to prevent the publication of sensitive data after a significant data breach. The High Court of Bombay issued an ad-interim injunction on June 12, 2026, while a Singapore court issued a similar injunction a…
DataBreachesFulcrumSec -
Gravity SMTP WordPress Plugin flaw exposes API keys, urging patch
The article discusses a security vulnerability in the Gravity SMTP WordPress Plugin that has been exploited by hackers to expose sensitive API keys. It highlights the importance of addressing vulnerabilities promptly to protect user data. This incident…
The Hacker News -
Macron pushes for global AI rules amid US Anthropic curbs
French President Emmanuel Macron urged wealthy democracies to collaborate on regulating advanced artificial intelligence (AI) systems during a recent high-level meeting with top AI executives. Macron highlighted the necessity of international partnerships to…
SecurityWeek -
FortiBleed attack targets FortiGate SSL VPN worldwide
The article discusses the 'FortiBleed' operation, a large-scale credential-spraying attack on Fortinet FortiGate SSL VPN devices and MSSQL servers, which occurred in June 2026. Led by a multi-operator crew, the attack involved automated attempts to log in…
Security Affairs -
CISA warns of FortiBleed credential leak exposing 74,000 devices
CISA has issued an alert regarding the FortiBleed incident, which has leaked credentials for approximately 74,000 Fortinet devices, including firewalls and VPN gateways. Attackers are actively exploiting these credentials globally, targeting both government…
Security Affairs -
FortiBleed campaign hits Fortinet devices with password spraying
The article from Unit 42 details a large-scale credential theft and password spraying campaign targeting Fortinet and other devices, termed 'FortiBleed.' This attack involves actors leveraging a curated password list derived from previous breaches to perform…
unit42.paloaltonetworks.com -
Microsoft 365 phishing uses OAuth device code to bypass passwords
A new phishing technique, uncovered by ReversingLabs, exploits Microsoft 365 accounts without requiring passwords. Instead of fake login pages, attackers use a legitimate Microsoft sign-in process, leveraging OAuth 2.0 Device Authorization Grant flow.…
SecurityOnline -
GlassWASM malware lurks in VS Code extensions using Solana
Security researchers identified GlassWASM malware embedded in two trojanized Visual Studio Code extensions listed on the Open VSX marketplace. The malicious packages, `exargd/vsblack@0.0.1` and `noellee-doc/flint-debug@0.1.1`, were uploaded by a newly…
SecurityOnlineGlassWorm
