News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 16 so far |
Tue 23 Jun· 68 articles
-
UK Teens Admit Hacking TfL, Causing £29m Losses Across London
Two British teenagers, Thalha Jubair and Owen Flowers, pleaded guilty to hacking Transport for London (TfL) in 2024, resulting in £29 million in losses and service disruptions. The National Crime Agency (NCA) reported that the hack affected various systems,…
InfosecurityScattered Spider -
London Hydro breach exposes data of 170,000 customers
London Hydro, a Canadian electricity provider, is investigating a data breach that potentially affected the personal and account information of its approximately 170,000 customers. The breach, announced on June 20, likely involved unauthorized access to…
SecurityWeek -
Fake GTA 6 early access sites trick gamers into crypto payments
The article discusses the rise of scams claiming to offer early access to Grand Theft Auto VI (GTA 6), emphasizing that these are fraudulent sites not authorized by Rockstar Games. Scammers use enticing offers requiring cryptocurrency payments, which are…
Malwarebytes -
GitBait phishing hits Mexican banks via fake GitHub Pages login
The GitBait phishing campaign targets at least 12 financial institutions in Mexico, utilizing GitHub Pages and the SheetBest API to harvest banking credentials. Unattributed financially motivated operators have been active for approximately three years,…
SecurityOnline -
Trump signs order to protect US data from quantum attacks by 2030
President Trump signed Executive Order 14409 to enhance data protection against quantum computing threats, notably addressing the 'harvest now, decrypt later' strategy by cyber adversaries. The order assigns federal agencies, including OMB, NIST, and NSA, to…
SecurityWeek -
Five Eyes Warn AI Boosts Cyber Threats, Urges Firms to Act
The Five Eyes cybersecurity agencies have issued an urgent statement addressing the threats posed by frontier AI, noting its potential to transform cyber offensive and defensive capabilities quickly. They called on businesses to enhance cyber resilience to…
Infosecurity -
Meow macOS ClickFix Stealer Targets Global Tech, Media Firms
The macOS ClickFix AppleScript stealer, identified by Netskope Threat Labs as part of the Meow malware family, is an infostealer and remote access trojan targeting macOS users in technology, media, and business sectors across Asia, North America, and…
SecurityOnline -
Attackers inject backdoor into ShapedPlugin WordPress Pro updates
A recent supply chain attack targeted ShapedPlugin, a WordPress plugin vendor, whereby attackers compromised its build and distribution pipeline, injecting backdoor malware into Pro plugin updates. Users who installed or updated any ShapedPlugin Pro products…
Security Affairs -
Dropping Elephant hits Asian energy firms via fileless LNK attack
The Dropping Elephant malware utilizes advanced fileless techniques to launch attacks on primarily Asian energy-sector entities. This campaign leverages a China-themed decoy document to deliver a remote access trojan (RAT) directly into system memory,…
SecurityOnlineQUILTED TIGER -
Squidbleed flaw leaks user data via memory leak in proxy
A newly discovered vulnerability in the Squid Proxy, named 'Squidbleed', allows attackers to leak user credentials and sensitive data due to a memory leak flaw present since 1997. This issue, identified as CVE-2026-47729, stems from improper handling of…
-
AryStinger malware hijacks over 4,300 outdated routers in Asia
Security researchers at QiAnXin XLab have uncovered AryStinger malware infecting over 4,300 outdated routers worldwide, particularly targeting RTL819X series devices. This malware exploits vulnerabilities such as CVE-2013-3307 and CVE-2016-5681 to create a…
-
Xsolis Data Breach Exposes 1.4M Patients After Phishing Attack
Xsolis, a healthcare technology company, has reported a data breach impacting approximately 1.4 million individuals due to a targeted phishing attack. The unauthorized activity was detected on January 22, following a phishing incident two days prior. The…
SecurityWeek -
Chinese actors seize cloud DNS, seed Thai gambling via SEO spam
The article discusses a significant cloud DNS takeover campaign conducted by a suspected Chinese operator, targeting 163 organizations across various sectors, including government and healthcare. The attack involves SEO poisoning by exploiting abandoned…
SecurityOnline -
Fake WhatsApp docs push VBScript to install ManageEngine RMM
The article discusses a malicious campaign utilizing VBScript via WhatsApp, where attackers employ fake documents to install the ManageEngine Remote Monitoring and Management (RMM) tool. This tactic involves social engineering, targeting unsuspecting users…
The Hacker News -
Android Developer Verification: Google Reveals the Full Timeline
Google's Android developer verification program, announced in 2025, mandates valid developer signatures for sideloaded apps to combat fraud. Despite criticism regarding the potential threat to Android's open ecosystem, Google emphasized safety, introducing a…
SecurityOnline -
OpenAI launches GPT 5.5 Cyber to boost vulnerability patching
OpenAI has introduced GPT-5.5-Cyber to enhance cybersecurity efforts by assisting defenders in patching security vulnerabilities effectively. The innovation aims to leverage AI to help organizations safeguard against cyber threats more efficiently. Key…
The Hacker News -
Tata Electronics breach leaks 630GB of Apple, Tesla design files
Tata Electronics, part of India's Tata Group, has confirmed a recent cyberattack during which hackers claimed to have stolen confidential documents related to Apple and Tesla. The group World Leaks published over 630GB of data, containing more than 200,000…
SecurityOnlineWorld Leaks -
Apple ends AirPort Utility support in upcoming iOS, macOS updates
Apple is deprecating the AirPort Utility application as part of a broader dismantling of its legacy ecosystem, following the termination of Time Capsule support. With iOS 27 and macOS 27, the AirPort Utility will not be available for new downloads from the…
SecurityOnline -
Apple’s iOS 27 Beta 2 brings Wallet Insights and Write with Siri
Apple has released iOS 27 Developer Beta 2, focusing on refinements and introducing several new features. Key updates include an expanded Apple Wallet Insights feature, a new 'Write with Siri' option on the keyboard, improved Siri performance, stable iPhone…
SecurityOnline -
CVE-2024-40766 exposes SonicWall firewalls to ransomware
The article discusses CVE-2024-40766, a severe vulnerability in SonicWall's SonicOS affecting firewall access controls. Despite patches being available, many organizations fail to implement essential post-patch configurations, leaving themselves vulnerable…
-
Codex Update Cuts Excessive Logging to Protect SSD Lifespan
The Codex v0.142.0 update addresses a significant issue where persistent low-level logging was damaging solid-state drive (SSD) lifespans due to excessive writes. Initially reported in April, the Codex team implemented an immediate fix following developer…
SecurityOnline -
Tinyproxy flaws allow HTTP request smuggling, urge patch now
Tinyproxy has three critical vulnerabilities (CVE-2026-54388, CVE-2026-54387, CVE-2026-55202) that could allow attackers to exploit HTTP request smuggling techniques. These flaws have a maximum CVSS severity score of 9.3 and can lead to request hijacking,…
-
ISC Diary Reports Low Threat Level Amid New Training Resources
The content is a summary of a cybersecurity diary entry from the ISC (Internet Storm Center). The handler on duty is Manuel Humberto Santander Pelaez, and the threat level is categorized as green, indicating low risk. It includes links to learn more about…
SANS ISC -
Libssh2 flaw CVE-2026-55200 allows remote code execution
The content details a critical vulnerability in libssh2, tracked as CVE-2026-55200, with a CVSS score of 9.2. This flaw allows remote code execution through an out-of-bounds write due to unchecked packet length in the transport layer. All versions of libssh2…
-
Critical MariaDB bugs let attackers run shell commands via Galera
The article discusses critical vulnerabilities in the MariaDB server, highlighting three major flaws (CVE-2026-48163, CVE-2026-48165, CVE-2026-49261) with the highest severity rating of 10.0 (CVSSv3). These vulnerabilities allow attackers to execute…
-
Mitel fixes 12 critical bugs in MiCollab, MiVB SVI allowing RCE
Mitel disclosed 12 critical vulnerabilities in MiCollab and MiVoice Business Solution Virtual Instance (MiVB SVI), with six rated CVSS 10.0. These flaws allow unauthenticated attackers to execute arbitrary commands, posing significant risks to sensitive…
SecurityOnline -
Signed UEFI app flaw enables Secure Boot bypass on major OEMs
CERT/CC has revealed a Secure Boot bypass impacting various vendor-signed UEFI applications. Discovered by ESET researcher Martin Smolar, this vulnerability allows attackers to execute unverified code before the OS loads, undermining Secure Boot's purpose to…
SecurityOnline -
HAProxy flaws enable response smuggling denial of service attacks
HAProxy has two critical vulnerabilities defined as CVE-2026-55203 and CVE-2026-55204, with severities of 9 and 8.7 respectively. The main issues are an integer overflow in the FastCGI demux record length field, which may lead to response smuggling, and a…
