News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 16 so far |
Wed 24 Jun· 64 articles
-
Cisco Catalyst SD-WAN Manager2 articles this day · Google Cloud first
Cisco Catalyst SD WAN bug exploited pre patch, gave root access · Zero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager
-
Cisco Catalyst SD WAN bug exploited pre patch, gave root access
In June 2026, Mandiant reported that a serious vulnerability in Cisco's Catalyst SD-WAN, identified as CVE-2026-20245, was exploited by attackers starting in March, prior to Cisco's official disclosure of the flaw. This vulnerability allows someone with…
-
Zero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager
In June 2026, Mandiant reported on a threat actor exploiting a zero-day vulnerability (CVE-2026-20245) in the Cisco Catalyst SD-WAN Manager. This vulnerability allowed the attacker to escalate privileges from a compromised admin account to root access by…
-
-
Microsoft led takedown stops Amadey and StealC malware networks
International authorities and tech firms have disrupted a significant cybercrime operation targeting two connected tools, Amadey and StealC. These platforms facilitated the theft of millions in login credentials and over $47 million in ransom payments.…
Ars Technica -
Experts Warn 2026 FIFA World Cup Faces Ticket Fraud Surge
The 2026 FIFA World Cup presents heightened cybersecurity risks as threat actors target attendees and event operations across the US, Canada, and Mexico. Flashpoint research indicates a complex threat landscape, including physical security concerns and…
Dark Reading -
RSnake Hansen urges CISOs to adopt ethics code against kickbacks
The article discusses whether Chief Information Security Officers (CISOs) need a code of ethics. Industry expert Robert 'RSnake' Hansen advocates for such a code to prevent self-dealing and conflicts of interest that may jeopardize enterprise and national…
Dark Reading -
Europol seizes StealC, Amadey, SocGholish in Operation Endgame
Europol's Operation Endgame disrupted the infrastructure of malware services StealC, Amadey, and SocGholish from June 15-19, 2026. The operation involved multiple international law enforcement agencies and private firms targeting malware that facilitates…
Security Affairs -
Microsoft Leads CNAPP Shift From Visibility to Risk Reduction
The article discusses the evolution of Cloud-Native Application Protection Platforms (CNAPP) and Microsoft's alignment with leading cloud risk management solutions. It highlights the shift from simple visibility and compliance in cloud security to a focus on…
Microsoft -
AI agents vulnerable to hidden attacks via everyday data sources
The content focuses on the vulnerabilities of AI agents to malicious instructions disguised within seemingly benign data sources. It highlights six categories of traps: content injection, semantic manipulation, cognitive state traps, behavioral control,…
SecurityWeek -
Critical FFmpeg MagicYUV flaw allows remote code via video
A critical vulnerability named PixelSmash has been uncovered in FFmpeg's MagicYUV video decoder, tracked as CVE-2026-8461, with a CVSS score of 8.8. This flaw allows attackers to create malformed video files (AVI, MKV, or MOV) that can crash systems or…
-
CISA warns of active attacks on Lantronix EDS5000 critical flaw
The article from The Hacker News covers a critical vulnerability in the Lantronix EDS5000 devices, actively exploited according to CISA. It emphasizes the importance of cybersecurity measures and provides insights into various resources and webinars related…
The Hacker News -
More Malicious OpenClaw Skills Threaten AI Supply Chain
The article discusses the discovery of five malicious skills on ClawHub, OpenClaw's ecosystem marketplace, which can bypass security checks and conduct harmful activities such as stealing credentials. Researchers from Palo Alto Networks identified these…
Dark Reading -
GitHub Action Compromised: Attack Steals Tokens, Propagates Backdoor
On June 24, 2026, the codfish/semantic-release-action GitHub repository was compromised when an attacker force-pushed a malicious commit (ID: 6b9501e) and redirected seven version tags to this commit. This led to workflows using those tags executing the…
StepSecurity -
Researchers trick AI browsers into stealing GitHub SSH keys
Recent developments in AI security highlight a concerning vulnerability where researchers from LayerX successfully manipulated AI-powered browsers, causing them to leak sensitive user credentials. The technique, dubbed BioShocking, involved convincing these…
Infosecurity -
Amadey and StealC Malware Takedown Yields 27 Million Logins
The article discusses the disruption of the Amadey and StealC malware network, resulting in the recovery of 27 million stolen credentials. The operation targets cybercrime, highlighting law enforcement efforts to combat these malware networks that facilitate…
The Hacker News -
Europol Shuts Down StealC and Amadey Malware Networks Worldwide
Europol coordinated an operation, called Operation Endgame, that successfully disrupted the infrastructure of two prominent infostealer malware strains, StealC and Amadey. This takedown, involving various law enforcement agencies and industry partners,…
Infosecurity -
Microsoft, police take down Amadey, StealC malware infrastructure
Microsoft, along with law enforcement and various cybersecurity companies, has successfully dismantled the infrastructure used by the malware families Amadey and StealC, as part of the ongoing Operation Endgame. This operation uniquely targeted what is…
SecurityWeek -
New SRIL and AIVEX Approach Tackles AI Supply Chain Gaps
The article discusses the shortcomings of current vulnerability remediation approaches like Software Bill of Materials (SBOMs), Vulnerability Exploitability eXchange (VEX) statements, and CVSS scores in addressing supply chain attacks, particularly within…
SecurityWeek -
Scammers Pose as Malwarebytes in Fake Subscription Renewal Scheme
The article discusses the rise of renewal scams that impersonate Malwarebytes, targeting its customers with fraudulent subscription notices. These scams utilize lookalike sender email addresses and often contain alarming charge amounts and official-looking…
Malwarebytes -
North Korea macOS backdoor uses prompt injection to evade AI
A new macOS backdoor linked to North Korea utilizes prompt injection to evade AI analysis by embedding 38 fabricated system messages designed to mislead AI malware detection. Identified as macOS.Gaslight, this Rust implant not only obfuscates its presence…
Infosecurity -
XM Cyber finds macOS XPC exploit that disables EDR, MDM tools
Cybersecurity firm XM Cyber has unveiled a technique that allows standard macOS user accounts to silently disable endpoint security tools such as EDR and MDM agents without triggering alerts. This exploitation leverages known weaknesses in XPC connections…
-
How Hackers Broke into Madison Square Garden
We couldn't load analysis for this article. Use the referenced report link below.
DataBreaches -
Why Frontier AI makes prioritization the most important part of your CTEM program
The article explores the implications of Frontier AI on vulnerability management within cybersecurity, highlighting the necessity of prioritization in Continuous Threat Exposure Management (CTEM) programs. With an expected 10x increase in vulnerabilities due…
Security Affairs -
Tata Electronics confirms cyberattack as hackers leak data
We couldn't load analysis for this article. Use the referenced report link below.
DataBreaches -
LastPass customer data exposed after partner Klue suffers hack
LastPass has disclosed a new data breach affecting customer information and support records, stemming from a hack at its technology partner, Klue. Though LastPass's own systems were not compromised, hackers were able to access substantial data about LastPass…
DataBreaches -
Cisco CUCM CVE-2026-20230 SSRF flaw lets attackers gain root
The article discusses a critical vulnerability in Cisco Unified Communications Manager (CVE-2026-20230), which is being actively exploited. The flaw, with a CVSS score of 8.6, allows unauthenticated remote attackers to carry out server-side request forgery…
-
Nathan Austad jailed 18 months for DraftKings credential stuffing
Nathan Austad, a third suspect in the 2022 hacking of DraftKings, has been sentenced to 18 months in prison for his role in a credential-stuffing attack that compromised over 60,000 accounts. He pleaded guilty in December 2025 and has been ordered to pay…
SecurityWeek -
Cordyceps CI/CD flaws leak 300 repos to supply chain attacks
The article highlights vulnerabilities in Cordyceps CI/CD systems that have exposed over 300 GitHub repositories to potential supply-chain attacks. These weaknesses could allow attackers to manipulate software supply chains, emphasizing the need for stronger…
The Hacker News -
KDDI breach exposes 14.2 million emails across six Japanese ISPs
KDDI, a Japanese telecommunications operator, confirmed a security breach affecting six other ISPs, compromising approximately 14.2 million customer email accounts. The breach was attributed to unauthorized access to an email system linked to these ISPs,…
Infosecurity -
CISA urges patching as hackers exploit critical Ubiquiti flaws
CISA warns that threat actors are targeting three critical vulnerabilities in Ubiquiti devices, identified as CVE-2026-34908, CVE-2026-34909, and CVE-2026-34910, all rated with a CVSS score of 10/10. These flaws allow unauthorized access and command…
-
Microsoft, Europol take down StealC and Amadey malware
The article discusses the threats posed by infostealers like StealC and malware delivery services like Amadey within the cybercrime ecosystem. Infostealers are responsible for stealing sensitive information such as usernames, passwords, and session tokens,…
Microsoft -
Apple's MacOS Gap Lets Users Disable Security Tools
Apple's macOS has a vulnerability that allows users with standard privileges to disable enterprise security tools, including EDRs and MDMs, without needing admin credentials. Researchers at XM Cyber discovered this issue involves the exploitation of how…
Dark Reading -
Why Context Is Crucial for AI Driven Cybersecurity Decisions
The content discusses the critical importance of context in agentic AI systems, particularly in cybersecurity applications. It emphasizes that accurate context enables AI to make informed decisions, whereas inadequate or incorrect context can lead to rapid…
SecurityWeek -
Iranian MuddyWater disguises espionage as ransomware attacks
A report from NCC Group highlights the blending of ransomware activities with nation-state cyber espionage, exemplified by the Iranian-linked group MuddyWater's efforts to mask espionage by posing as the Chaos ransomware group. This strategy includes using…
InfosecurityMuddyWater -
Woodgnat IAB Uses Backdoor.Mistic RAT in WordPress, Teams Attacks
The article discusses a new remote access trojan (RAT) called Backdoor.Mistic, deployed by an initial access broker (IAB) known as Woodgnat or KongTuke, linked to several ransomware groups. Active since May 2024, Woodgnat targets various sectors, including…
SecurityWeekKongTuke -
AI adversaries compel firms to adopt Zero Trust security models
The article 'Dawn of the Apex Agentic Adversary' discusses emerging threats in cybersecurity, emphasizing the importance of managing vulnerabilities in AI systems. It highlights the rapid evolution of adversarial AI, which poses unique risks surpassing…
The Hacker News -
Cordyceps vulnerabilities put millions of open source repos at risk
A cybersecurity firm, Novee, has identified a systemic class of vulnerabilities known as 'Cordyceps' in CI/CD workflows within open source software supply chains, affecting millions of repositories. These vulnerabilities allow unauthenticated attackers to…
SecurityWeek -
Sextortion scammers bluff webcam recordings to extort victims
The article discusses a prevalent sextortion scam, where scammers claim to have recorded individuals via webcam while engaging in inappropriate activities, demanding payment to prevent the release of the purported footage. The emails often contain vague…
Malwarebytes -
LastPass breach via Klue exposes Salesforce data from Gong, 8x8
The cybersecurity firm LastPass has reported that it was affected by a recent hack involving Klue, wherein a threat actor named Icarus used compromised credentials to access the systems of Klue. This breach resulted in unauthorized access to connected…
SecurityWeekIcarus -
CISA flags Ubiquiti, Lantronix flaws; urges US patch by June 2026
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added several vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, specifically targeting Ubiquiti UniFi OS and Lantronix EDS5000. The vulnerabilities include: 1.…
-
StrikeShark deploys SharkLoader through Exchange and SharePoint
The article describes the StrikeShark campaign, involving new malware called SharkLoader, used to deploy Cobalt Strike agents. Initial infections were achieved through exploiting vulnerabilities in public-facing applications such as Microsoft Exchange and…
securelist.com
