News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 17 so far |
Thu 25 Jun· 75 articles
-
Hospitality hit by ZIP LNK PowerShell phishing campaign
Microsoft Threat Intelligence identified a multi-stage intrusion campaign targeting the hospitality industry since April 2026. The campaign deploys photo-themed ZIP archives containing malicious LNK files that trigger a PowerShell attack leading to a Node.js…
Microsoft -
Cisco Unified Communications Manager2 articles this day · Dark Reading first
CISA Adds Cisco UC Manager SSRF Flaw to KEV Catalog · Cisco CUCM flaw allows hackers to gain root access in 24 hours
-
CISA Adds Cisco UC Manager SSRF Flaw to KEV Catalog
CISA has added CVE‑2026‑20230 to its Known Exploited Vulnerabilities catalogue, affecting Cisco Unified Communications Manager and Unified Communications Manager Session Management Edition. The vulnerability is a server‑side request forgery (SSRF) flaw that…
-
Cisco CUCM flaw allows hackers to gain root access in 24 hours
A critical vulnerability in Cisco Unified Communications Manager (CUCM), tracked as CVE-2026-20230, has been weaponized by attackers within 24 hours of a proof-of-concept (PoC) release. This server-side request forgery (SSRF) flaw allows unauthenticated…
-
-
Critical PTC Windchill flaw CVE-2026-12569 under active attack
CISA has added CVE‑2026‑12569 to its Known Exploited Vulnerabilities catalogue. The flaw affects PTC’s Windchill and FlexPLM products and is described as an improper input validation vulnerability that allows an unauthenticated, remote attacker to execute…
-
Chinese threat actors use TinyRCT against SE Asian governments
The article discusses the CL-STA-1062 cyber activity targeting governments and critical infrastructure in Southeast Asia, primarily by Chinese-speaking attackers. This group has been active since March 2022 and used a hybrid toolkit, introducing the custom…
unit42.paloaltonetworks.com -
Gamaredon refines cyber espionage using USB malware and cloud
The article discusses the advancements made by the Russian APT group, Gamaredon, which has refined its tactics, techniques, and procedures (TTPs) in a bid to enhance its cyber espionage effectiveness, particularly against Ukraine. Key highlights include: 1.…
Dark ReadingGamaredon Group -
Man jailed 18 months for DraftKings credential stuffing fraud
Nathan Austad has been sentenced to 18 months in prison for his involvement in a hacking scheme targeting the DraftKings fantasy sports and betting website, which lead to the theft of approximately $600,000 from 60,000 user accounts. He pleaded guilty to…
DataBreaches -
Tata Electronics Confirms Data Breach After 630GB Leak Claim Targets Apple and Tesla
Tata Electronics confirmed a data breach after hackers claimed to have stolen 630GB of data, including documents related to Apple and Tesla. The breach affected parts of their IT infrastructure, but the company stated that operations remained unaffected. The…
Security AffairsWorld Leaks -
Hackers hit Canvas, PowerSchool vendors, endangering school data
The article discusses the increasing cyber threats faced by educational institutions and their reliance on educational technology (edtech) vendors. Attacks have shifted focus from individual schools to edtech companies, with cybercriminals targeting tools…
Dark Reading -
Curl fixes 18 bugs including 25 year old CVE-2026-8932 in libcurl
Curl has released a significant update addressing 18 vulnerabilities, including one that has persisted for 25 years. These issues cover problems such as authentication bypass, memory safety, and improper host validation affecting libcurl, which serves over…
-
Asia's scam centres thrive despite crackdowns, costing $40bn
The article discusses the ongoing issues of cybercrime in Asia, particularly focusing on the resilience of scam centers in the region despite law enforcement crackdowns. Criminal organizations profiting from online scams generate substantial illegal revenue,…
Dark Reading -
Police Warn of 'Parcel Expert' Job Scams Affecting Remote Workers
The article warns about "Parcel Expert" job offers, classifying them as parcel mule scams designed to exploit unsuspecting individuals into participating in fraudulent activities involving stolen goods. These scams often present attractive remote job offers,…
Malwarebytes -
Nation state hackers target UK water systems, report warns
The report analyzes the increasing targeting of water and wastewater systems by nation-states, driven by their vulnerability and strategic importance. It highlights recent cyber activities linked to Iran, Russia, and China. Iran's attacks focus on public…
dti.domaintools.com -
CHN delays breach notice, raising HIPAA compliance concerns
In August 2025, a data breach at the Colorado Health Network (CHN) was reported after the threat group Cephalus claimed to have obtained 900 GB of data. Although Cephalus vanished shortly after making this claim and did not leak any data publicly, CHN had…
DataBreachesCephalus -
Microsoft Leads Forrester Wave for Endpoint Management Q2 2026
Microsoft has been recognized as a Leader in the Forrester Wave for Endpoint Management Platforms as of Q2 2026. The report highlights the shift in endpoint management, emphasizing the need for connected platforms rather than mere device inventory and policy…
Microsoft -
Maven support added to GitHub Checks blocks compromised Java deps
StepSecurity has introduced support for Maven in GitHub Checks and OSS Package Search, enabling enhanced security by blocking compromised Java dependencies in pull requests. This update aims to protect Java developers from supply chain attacks, similar to…
StepSecurity -
KongTuke uses stealthy Mistic backdoor via DLL sideloading
The article discusses 'Mistic,' a stealthy backdoor used by the hacking group KongTuke, known for financially motivated ransomware attacks since April 2026. Mistic utilizes DLL sideloading, camouflaging itself as a legitimate Microsoft process to gain access…
Security AffairsKongTuke -
Google warns Cisco flaw exploited months before June 2026 patch
A Google report reveals that a severe vulnerability (CVE-2026-20245) in Cisco products was exploited months prior to its disclosure on June 4, 2026. This vulnerability, stemming from improper validation in the command-line interface of Cisco Catalyst SD-WAN…
-
Chrome ad blocker with 10m+ installs poses script‑injection risk
A recent investigation has revealed that a Chrome ad blocker, which has over 10 million installations, possesses dormant script injection capabilities. This alarming discovery highlights vulnerabilities in popular browser extensions, raising concerns about…
The Hacker News -
Google flags Turla’s STOCKSTAY backdoor aimed at Ukraine, Europe
Google Threat Intelligence Group (GTIG) published an analysis on STOCKSTAY, a .NET backdoor utilized by the Russian cyber espionage group Turla since December 2022. This backdoor targets Ukrainian government and military organizations, displaying code…
Google CloudTurla -
Over 20 Million US Home IPs Hijacked for Proxy Cybercrime: Report
A report by the Digital Citizens Alliance reveals that over 20 million residential IP connections in the US are unknowingly used for proxy services, primarily benefiting cybercriminals. The report highlights that many households remain unaware of their…
Infosecurity -
Cloudflare Workflows gains saga rollback for safer transactions
The article discusses the introduction of saga rollbacks in Cloudflare Workflows, which allow developers to define rollback logic directly within each step of a workflow. This feature aims to address inconsistencies when a step fails, particularly in…
Cloudflare -
Google to allow external payments in Play Store from June 2026
Google is set to launch a revised billing structure on June 30, 2026, which allows eligible developers in the U.S., U.K., and EEA to integrate their payment systems while also directing users to external sites for purchases. This change follows an antitrust…
SecurityOnline -
Dialog Member Data Exposed Amid Hack Claim Dispute
The article discusses the security failure of Dialog, an exclusive network founded by Peter Thiel, which had personal information of its elite members publicly exposed on its app distribution site. Despite this data being readily accessible, Dialog claimed…
DataBreaches -
Runlayer bags $30m Series A to secure AI tools for enterprises
Runlayer, an AI enablement and control platform based in New York, has successfully raised $30 million in its Series A funding round, increasing its total funding to $42 million. Founded in 2025, Runlayer offers a secure control layer for AI tools in…
SecurityWeek -
Smart TVs face proxyware threat as 24 year curl bug resurfaces
The article "ThreatsDay Bulletin" discusses various cybersecurity threats and incidents reported on June 25, 2026. Key highlights include: 1) The emergence of proxyware on smart TVs which compromises user privacy, 2) A 24-year-old bug in the curl library…
The Hacker News -
Handala hack claim against Cal Water yields only minor data leak
California Water Service (Cal Water) investigated a claimed cyberattack by the Iranian hacker group Handala and found no evidence of impact on its operational technology. Handala, believed to be linked to Iranian government actions, alleged access to Cal…
SecurityWeekHandala -
Ukrainian Postal Service Hit by Cyberattack, Systems Disrupted
Ukrposhta, Ukraine's national postal service, experienced system malfunctions due to a cyberattack on its IT systems. They are currently working to restore operations and promise to provide updates. The nature of the cyberattack and details on the damage or…
DataBreaches -
Cobalt Report: Trust in AI Vulnerability Scanners Drops to 9%
A recent study from Cobalt reveals a significant decline in trust for automated AI vulnerability scanning tools, dropping from 29% to 9% among cybersecurity professionals. The Cobalt State of Pentesting Report 2026 found that over three-quarters of…
Infosecurity -
CISA urges US agencies to adopt SASE for zero trust security
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released a new guide to assist federal agencies in adopting Secure Access Service Edge (SASE) technology, facilitating a transition from the outdated perimeter-based Trusted Internet…
Infosecurity -
Lantronix Serial-to-IP Converter Flaw Exploited in Attacks After OT Threat Warning
The cybersecurity agency CISA has reported an exploited vulnerability tracked as CVE-2025-67038 affecting Lantronix EDS5000 serial-to-IP device servers, allowing unauthenticated attackers to execute arbitrary OS commands with root privileges. This…
-
Why Traditional Defences Fail Against AI Powered Cyber Attacks
The article explores insights from Richard Bejtlich on the importance of Network Detection and Response (NDR) in countering advanced AI-driven cyber threats. Emphasis is placed on the limitations of traditional security measures against evolving threats…
The Hacker News -
GitLab fixes critical XSS flaws in Analytics dashboard
GitLab released security updates for Community Edition (CE) and Enterprise Edition (EE) addressing 13 vulnerabilities, including three high-severity issues. The most critical, CVE-2026-10086, is an XSS flaw in the Analytics dashboard allowing authenticated…
-
Google patches Chrome after critical WebGL flaw CVE-2026-13028
Google has released a security update for Chrome addressing 18 vulnerabilities, including four critical issues. The updated version is 149.0.7827.196/197 for Windows and Mac, and 149.0.7827.196 for Linux. Users are advised to update their browsers manually…
-
Apple stops Siri fetching web links in iOS 27 beta 2 for safety
Apple's Siri, in the iOS 27 Developer Beta 2, has been updated to refuse to process external URLs due to safety issues. If a user asks Siri to summarize a URL, the assistant will decline, citing a need to avoid potential security threats from malicious…
SecurityOnline -
macOS XPC flaw lets standard users disable EDR and MDM tools.
A new security flaw has been identified in macOS that allows standard users to disable enterprise security tools like EDR and MDM. This vulnerability, discovered by XM Cyber, takes advantage of the XPC service, which is used for inter-process communication.…
Infosecurity -
Enterprises limit AI after Accenture finds wasteful PDF tasks
Major enterprises, initially enthusiastic about adopting artificial intelligence (AI) tools, are now limiting access due to significant wastage of resources. Notably, Accenture discovered that non-technical staff were using AI for trivial tasks, such as…
SecurityOnline -
Ransomware attacks in Europe surge 55% as Qilin variant dominates
A recent report by Black Kite reveals a significant rise in ransomware attacks across Europe, increasing by 55.1% in early 2026 compared to the previous year, with an average of 171 incidents per month. The report identifies Germany, the UK, France, Italy,…
Infosecurity -
Fake domain renewal emails lead to Renovarix phishing site
The article discusses a scam involving fake domain renewal emails that target website owners, aiming to trick them into sharing personal and payment information. The scam begins with a convincing email suggesting that a domain is about to expire, directing…
Malwarebytes -
Kaspersky warns SMBs of AI driven phishing surge in 2026
The Kaspersky SMB Threat Report 2026 highlights significant cyber threats targeting small and medium-sized businesses (SMBs), revealing over 33,300 detected cyberattacks in early 2026, primarily using popular AI tools as lures. Key findings include a…
securelist.com
