News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 13 so far |
Tue 23 Jun· 68 articles
-
Icarus2 articles this day · Dark Reading first
LastPass reports data breach after Klue hack exposes CRM data · Scope of Salesforce Attacks Expands as Icarus Leaks Data
2 outlets-
LastPass reports data breach after Klue hack exposes CRM data
The content reports a cybersecurity breach involving LastPass, linked to stolen OAuth tokens from the vendor Klue. This attack allowed unauthorized access to LastPass's Salesforce data, compromising customer contact information such as names, emails, phone…
SecurityOnline -
Scope of Salesforce Attacks Expands as Icarus Leaks Data
The article discusses the recent expansion of Salesforce data breaches linked to the application vendor Klue. Attackers used Klue's OAuth tokens to access several companies' Salesforce data, impacting tech and cybersecurity firms. The extortion group Icarus…
Dark Reading
-
-
Ubiquiti UniFi OS2 articles this day · CISA first
CISA Adds Four Exploited UniFi OS and Lantronix Flaws to KEV Catalog · CISA adds Ubiquiti UniFi OS flaw CVE-2026-34908 to KEV list
-
CISA Adds Four Exploited UniFi OS and Lantronix Flaws to KEV Catalog
The page discusses four critical vulnerabilities detected in Ubiquiti UniFi OS and Lantronix EDS5000 devices, all added to CISA's KEV catalog. These vulnerabilities, including CVE-2025-67038 and CVE-2026-34908, pose severe risks with a CVSS score of up to…
-
CISA adds Ubiquiti UniFi OS flaw CVE-2026-34908 to KEV list
CISA has added CVE‑2026-34908 to its Known Exploited Vulnerabilities catalogue, affecting Ubiquiti’s UniFi OS. The vulnerability is an improper access control flaw that could allow a malicious actor with network access to make unauthorised changes to the…
-
-
Samsung Mobile Devices2 articles this day · SecurityWeek first
CVE-2026-20971 flaw in Samsung KNOX risks Galaxy takeover · Eight Year Old Samsung KNOX Flaw CVE-2026-20971 Patched
-
CVE-2026-20971 flaw in Samsung KNOX risks Galaxy takeover
A serious vulnerability (CVE-2026-20971) has been discovered in Samsung's KNOX security system, specifically in the kernel's PROCA and FIVE subsystems. This use-after-free flaw can allow attackers to exploit a race condition during process integrity checks,…
-
Eight Year Old Samsung KNOX Flaw CVE-2026-20971 Patched
Researchers identified a high-severity, eight-year-old vulnerability in the KNOX kernel of Samsung devices, affecting models from Galaxy S9 to S25 (CVE-2026-20971, CVSS 7.8). The flaw arises from a race condition that could be exploited via an untrusted app,…
-
-
Internet Society Launches $3.5M Cyber Fund for Nonprofits
The Internet Society Foundation has opened applications for the Common Good Cyber Fund (CGCF) from June 23 to August 4, 2026. This global initiative aims to provide at least $3.5 million in funding through approximately 15 two-year grants to support…
SecurityOnline -
White House Moves Up Quantum Resistant Deadline for Agencies
The White House has accelerated the timeline for government agencies to adopt quantum-resistant encryption, necessitating a transition to these systems by 2030 for high-value assets and by 2031 for digital signature schemes, five years ahead of previous…
Ars Technica -
Malicious AI skills bypass ClawHub despite VirusTotal screening
The article discusses OpenClaw, an AI agent utilizing third-party skills from ClawHub, which has been exploited for malicious purposes. The study highlights that early campaigns saw several malicious skills targeting users, particularly infostealers and…
unit42.paloaltonetworks.com -
CISA flags active exploit in Ubiquiti UniFi OS CVE-2026-34910
CISA has added CVE‑2026-34910 to its Known Exploited Vulnerabilities catalogue, affecting Ubiquiti’s UniFi OS. The vulnerability is an improper input validation flaw that could allow a malicious actor with network access to execute arbitrary commands.…
-
Lantronix EDS5000 Command Injection Flaw Under Active Attack
CISA has added CVE‑2025‑67038 to its Known Exploited Vulnerabilities catalogue. The entry concerns the Lantronix EDS5000 series and is titled the Lantronix EDS5000 Code Injection Vulnerability. In a single sentence, the flaw permits attackers to inject…
-
Cordyceps flaw leaves CI/CD open to supply chain attack
A new vulnerability known as 'Cordyceps' threatens CI/CD workflows by allowing attackers to exploit malicious pull requests to compromise software supply chains. The issue affects notable platforms including Microsoft's Azure Sentinel and Google's AI Agent…
Dark Reading -
Five Eyes Warn AI Could Soon Power Smarter Cyber Attacks
The intelligence alliance known as Five Eyes (comprising the United States, United Kingdom, Canada, Australia, and New Zealand) has expressed concerns regarding the rapid advancements in artificial intelligence that could enhance offensive hacking…
DataBreaches -
Trump orders agencies to shift to quantum safe encryption by 2030
On June 22, 2026, President Trump signed Executive Order 14409 to ensure federal systems transition to post-quantum encryption by December 31, 2030, and post-quantum authentication by December 31, 2031. This EO addresses the urgency posed by advancements in…
Cloudflare -
FortiBleed steals 110m credentials from FortiGate firewalls
The article discusses a recent cybersecurity incident known as 'FortiBleed', which targeted FortiGate firewalls and was part of a massive credential harvesting operation involving 110 million credentials. The attack highlights the vulnerabilities in firewall…
The Hacker News -
Dragos rolls out EmberAI OT security tool with decade of data
Dragos has launched EmberAI, an artificial intelligence module specifically designed for operational technology (OT) cybersecurity. Built on the Intelligence Fabric, EmberAI utilizes a decade's worth of data on adversary tracking, vulnerabilities, and…
SecurityWeek -
DifyTap flaws expose AI platform data, let attackers steal files
Researchers from Zafran Labs have identified four vulnerabilities in Dify, an open-source AI platform used by major companies to support over a million applications. The vulnerabilities, collectively referred to as 'DifyTap,' include: 1. CVE-2026-41947 (CVSS…
-
UK duo plead guilty to Scattered Spider TfL and health hacks
Two men, Thalha Jubair (20) and Owen Flowers (18), pleaded guilty in the UK to charges related to a cyberattack on Transport for London, part of their involvement in the cybercrime group Scattered Spider. Their actions caused serious damage to the transport…
Krebs on SecurityScattered Spider -
Dark web fuels cybercrime as 8.4bn records leak in 2026
The article from Malwarebytes explores the dark web, detailing both its legitimate uses and its thriving criminal underbelly. Key findings from a 48-hour investigation include: 1. The dark web supports privacy for journalists and activists but is also home…
Malwarebytes -
Critical flaws in Dify AI expose tenant data to attackers
Zafran Security has identified four critical vulnerabilities in the open-source AI platform Dify, potentially allowing attackers to access sensitive data from other users in multi-tenant configurations. The vulnerabilities include issues with Dify’s tracing…
SecurityWeek -
Fake AI Agent Skills Evade Scans, Spread to 26k Agents
A recent report highlights the alarming rise of fake AI agent skills that have passed security scans and proliferated to approximately 26,000 agents. This raises significant concerns regarding the security vulnerabilities in AI chatbots and the potential…
The Hacker News -
Trump Orders US Agencies to Shift to Quantum Safe Crypto by 2030
The content discusses the recent order from former President Trump setting a deadline for federal agencies to transition to post-quantum cryptographic algorithms by 2030. This initiative is driven by the need to enhance cybersecurity measures against future…
The Hacker News -
Fake npm package steals Chrome passwords using Windows RAT
A malicious npm package, named 'postcss-minify-selector-parser', impersonated a widely used build tool, embedding a multi-stage Windows remote access trojan (RAT) in a supply chain attack. The attack was revealed by JFrog, which noted the package's deceptive…
Infosecurity -
GitHub updates actions/checkout to stop Pwn request attacks
GitHub has updated its actions/checkout feature to prevent common patterns of Pwn requests, a significant step in enhancing workflow security within software supply chains. This update aims to block specific attack vectors that threaten GitHub workflows,…
The Hacker News -
OpenAI Expands Daybreak to Help Defenders Patch Flaws
OpenAI has expanded its cyber-defense program, Daybreak, which aims to streamline patch automation for software vulnerabilities. The newly released GPT-5.5-Cyber model has shown improved capabilities in identifying and fixing flaws, scoring a record 85.6% in…
Infosecurity -
Trump orders US agencies to shift to quantum safe crypto by 2031
On June 22, 2026, President Trump signed an executive order mandating US federal agencies to complete their migration to post-quantum cryptography (PQC) by 2030 or 2031. This order aims to protect sensitive data and critical infrastructure against future…
Infosecurity -
Global raid dismantles SocGholish malware used by ransomware
The article discusses the recent takedown of the SocGholish malware framework, known for exploiting traffic distribution systems (TDS) to infiltrate networks. An international law enforcement operation led to the seizure of 106 servers and remediation of…
Dark Reading -
Meta Stops Employee Tracking Scheme After Data Leak Fears Surface
Meta has halted a controversial employee-tracking program after a security review revealed that sensitive data collected, including keystrokes and screen content, was more accessible internally than intended. The program, part of Meta's Model Capability…
Malwarebytes -
Scammers set up GTA 6 preorder sites demanding crypto payments
As Rockstar Games prepares to open pre-orders for Grand Theft Auto VI (GTA 6) on June 25, 2026, scammers have begun to create fake websites offering early access for a fee in cryptocurrency. Experts warn that these sites are unauthorized and fraudulent, as…
Infosecurity -
Fake Shop Scams Surge Across Europe, Impersonating Top Brands
A Bitdefender Labs investigation identified over 55 fake-shop campaigns targeting consumers across 12 European countries from March to May 2026, impersonating major brands like Samsung, Nike, and Adidas. These campaigns utilized various channels, including…
bitdefender.com -
Deep Instinct CISO/CIO Carl Froggett Warns of AI Misuse Threat
Carl Froggett serves as both CISO and CIO at Deep Instinct, highlighting the synergy between technology and security in business. He believes the combination of these roles can enhance collaboration, although it risks losing impartiality. Froggett's…
SecurityWeek -
FortiBleed hits 430k firewalls, stealing 110m credentials
The FortiBleed attack campaign targets over 430,000 FortiGate firewalls globally, compromising them to harvest credentials through a Golang-based tool called FortigateSniffer. This tool captures authentication data across 24 protocols, resulting in the theft…
Dark Reading -
Overfocus on Hackers Obscures Real Cybersecurity Weaknesses
Marco A. De Felice discusses the overemphasis on identifying threat actors in cybersecurity, while neglecting root causes and incident response strategies. He highlights "structural fragility," where organizations fail to secure the vast amounts of sensitive…
DataBreaches -
Algerian Extradited to US Over $900k Bank Fraud Marketplace
Abdellah Belmili, a 26-year-old Algerian, was arrested in Spain and extradited to the US for allegedly operating two cybercrime marketplaces, including Market0Day and Spoxy, between 2020 and 2023. The US Justice Department reported that Belmili used phishing…
SecurityWeek -
FFmpeg PixelSmash flaw lets hackers run code via crafted media
A critical vulnerability, tracked as CVE-2026-8461, has been identified in the FFmpeg media processing framework, allowing attackers to remotely crash applications and execute arbitrary code. The flaw exists within the MagicYUV decoder of FFmpeg's libavcodec…
-
Agentic AI Turns Autonomous Weapons Into Silent Cyber Threats
The article titled "Agentic AI: The Weapon That No Longer Needs a Warrior" discusses the evolution of offensive artificial intelligence (AI) in cybersecurity. It highlights how agentic AI technologies are capable of executing tasks without human…
The Hacker News -
OpenAI Enhances Daybreak Initiative with AI Patch Tools
OpenAI has enhanced its Daybreak cybersecurity initiative with new tools aimed at reducing the bottleneck in patch deployment, which has become critical due to the increased speed of vulnerability discovery driven by AI models. The updated Codex Security…
SecurityWeek -
Texas Parks vendor breach exposes data of 3 million Texans
In a recent data breach, hackers accessed the personal information of over three million Texans through a third-party vendor for the Texas Parks and Wildlife Department (TPWD). The compromised data may include passport numbers, driver's license information,…
Malwarebytes -
IAB hijacks 430k FortiGate firewalls in FortiBleed credential grab
A Russian initial access broker (IAB) is targeting over 430,000 FortiGate firewalls in the FortiBleed credential-harvesting campaign, as reported by SOCRadar. This multi-vendor operation, ongoing since at least February, compromises exposed firewalls to…
SecurityWeek -
Xsolis Confirms Phishing Breach Exposes 1.4 Million Health Records
Xsolis, a healthcare technology company, reported a major data breach impacting 1.4 million individuals after a phishing attack on January 20, 2026. The breach exposed sensitive personal and health information, prompting the company to investigate and…
Security Affairs
