News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 13 so far |
Mon 29 Jun· 64 articles
-
WhatsApp rolls out usernames for 3bn users to boost privacy
WhatsApp is introducing usernames later this year, allowing its 3 billion users to connect without sharing phone numbers. Users can reserve their usernames now to avoid name overlap at launch, enhancing privacy by preventing strangers from accessing personal…
Security Affairs -
SimpleHelp2 articles this day · Dark Reading first
SimpleHelp Auth Bypass Flaw (CVE‑2026‑48558) Grants Tech Access · Djinn malware exploits SimpleHelp flaw to steal AI credentials
-
SimpleHelp Auth Bypass Flaw (CVE‑2026‑48558) Grants Tech Access
CISA has added CVE‑2026‑48558 to its Known Exploited Vulnerabilities (KEV) catalogue. The affected vendor is SimpleHelp and the product is SimpleHelp; the vulnerability is named the SimpleHelp Authentication Bypass Vulnerability. In one sentence, the flaw…
-
Djinn malware exploits SimpleHelp flaw to steal AI credentials
The article discusses the 'Djinn' infostealer malware, delivered through the CVE-2026-48558 vulnerability in SimpleHelp, an RMM tool. This malware targets cloud and AI credentials by exploiting administrative access. Attackers use obfuscated JavaScript to…
-
-
Silent Ransom Group hits Fox Rothschild, leaks law firm data
Fox Rothschild, a prominent law firm, fell victim to a data breach orchestrated by the Silent Ransom Group (SRG), which has been targeting law firms extensively. On May 21, 2023, SRG accessed Fox Rothschild’s network, exfiltrating sensitive data and…
DataBreachesLuna Moth -
UAC-01852 articles this day · Security Affairs first
FBI Offers $10m Reward for Russian Phishing on Signal, WhatsApp · US offers $10m bounty for Russian hackers targeting Signal
2 outlets-
FBI Offers $10m Reward for Russian Phishing on Signal, WhatsApp
Federal authorities are offering a reward of up to $10 million for information leading to the identification of a Russian cyber group responsible for compromising thousands of Signal and WhatsApp accounts, primarily targeting US government officials and…
Ars Technica -
US offers $10m bounty for Russian hackers targeting Signal
The U.S. government has announced a reward of up to $10 million for information leading to the identification of Russian hackers linked to groups UNC5792 and UNC4221. These hackers are targeting government officials, military personnel, and journalists…
Security Affairs
-
-
Indian govt patches 14 flaws after researcher uncovers data risk
An independent security researcher uncovered 14 vulnerabilities in Indian government systems, including critical ones that could have compromised personal data of millions. Key findings included poor access controls on government education and civil service…
Dark Reading -
Designer unveils privacy tees to block facial recognition
A recent article discusses innovative clothing designs aimed at evading facial recognition technology. Researcher Bill Swearingen proposes the creation of graphic tees and other garments with patterns that can confuse AI models used in surveillance systems.…
Dark Reading -
Iran, Russia, China Target Water Systems Using Weak Passwords
Nation-state actors, particularly from Iran, Russia, and China, are increasingly targeting water systems worldwide, leveraging weak passwords and exposed PLCs rather than sophisticated malware. Research from DomainTools highlights that these attacks, dating…
Dark Reading -
Malicious 'Perplexity' Chrome Extension Steals Search Data
The article discusses a malicious Chrome extension named 'Perplexity', which intercepts user searches and input in the address bar, posing a significant security threat. It outlines how the extension compromises user privacy, potentially allowing…
The Hacker News -
Northern Ireland cyberattack hits schools, risking student data
The number of schools in Northern Ireland affected by a recent cyber-attack is greater than initially believed. The Education Authority (EA) informed parents through letters that their child's personal data may have been accessed. Notably, 23 schools were…
DataBreaches -
Judge refuses to drop negligence claims in MOVEit breach lawsuit
In a recent legal development, defendants in a multi-district litigation regarding a significant data breach of Progress Software's MOVEit file-transfer application have been unsuccessful in their attempt to dismiss negligence claims against them. These…
DataBreaches -
Chromium extension uses AI‑related branding to redirect browser search
Microsoft Threat Intelligence has identified a malicious Chromium extension posing as an AI-powered search tool, specifically imitating Perplexity AI. The extension was created to intercept search queries and collect user data by routing them through a…
Microsoft -
WhatsApp Rolls Out Username Feature to Boost User Privacy
WhatsApp is introducing usernames to enhance user privacy by allowing users to share their identities without disclosing personal phone numbers. This change aims to address security concerns and increase safety in communications on the platform.
The Hacker News -
WhatsApp Rolls Out Username Feature to Hide Phone Numbers
WhatsApp is launching a new username feature that allows users to communicate without revealing their phone numbers. This update caters to users who may be hesitant to share their phone numbers in various scenarios, such as group chats or when meeting…
SecurityWeek -
Mustang Panda leverages Zoho WorkDrive against Indian government
The article discusses a cyber threat attributed to the Mustang Panda group, revealing their use of Zoho WorkDrive as a command channel to launch attacks against the Indian government. This represents a novel approach, leveraging legitimate software to avoid…
The Hacker NewsMUSTANG PANDA -
OpenAI Reveals GPT-5.6 Sol Cybersecurity Model, Restricts Early Access
OpenAI has unveiled GPT-5.6 Sol, a new advanced model in its GPT-5 series, specifically tailored for cybersecurity tasks. Access is currently limited to selected partners, a decision influenced by the US government. The new model is described as the most…
Infosecurity -
Uber Amazon pay algorithms cause unpredictable gig worker earnings
In the latest episode of the Lock and Code podcast, host David Ruiz discusses the concept of algorithmic wage discrimination with UC Irvine law professor Veena Dubal. The episode highlights how companies like Uber and Amazon utilize data-driven models to…
Malwarebytes -
119 Edge extensions promised useful tools, instead downloaded malware
Microsoft has removed 119 malicious browser extensions from its Edge add-on store, linked to a single adware campaign known as 'StegoAd.' These extensions masqueraded as useful tools like ad blockers and VPNs while secretly downloading additional malware,…
Malwarebytes -
Linux kernel bugs and AI malware spur Turla backdoor surge
This article discusses recent trends and events in cybersecurity, highlighting key issues such as Linux kernel vulnerabilities, the rise of AI-based malware, and the Turla backdoor affecting infostealers. It emphasizes the evolving landscape of threats and…
The Hacker News -
Telegram hosted Millenium RAT hits 60k PCs via fake game cheats
A new malware campaign utilizing a Telegram-based remote access trojan (RAT) named Millenium RAT has infected over 60,000 Windows devices worldwide, primarily in early 2026. Security firm Group-IB highlighted that the latest version has transitioned from…
InfosecurityY2K Operators -
New Attack Abuses Claude Code and Harmless-Looking Repositories to Hijack Developer Machines
Mozilla's 0Din security researchers have identified a sophisticated attack method exploiting AI coding tools like Claude Code. By embedding indirect prompts in seemingly benign repositories, attackers can trigger a reverse shell on developers' systems…
SecurityWeek -
Straiker raises $64M Series A to secure AI agents in enterprises
Cybersecurity startup Straiker raised $64 million in a Series A funding round, totaling $85 million raised so far. Co-led by Marathon Management Partners and other notable investors, Straiker's platform identifies AI agents within organizations, enhancing…
SecurityWeek -
Google warns of AI driven Russian influence targeting EU and NATO
This report from the Google Threat Intelligence Group analyzes the evolving pro-Russia influence ecosystem, four years into the Russia-Ukraine war. It details how Russia has adapted its influence operations (IO) from a focus on Ukraine to broader global…
Google Cloud -
NAIC PeopleSoft Zero-Day Hack by ShinyHunters, Denies Leak
The National Association of Insurance Commissioners (NAIC) confirmed it was targeted in a recent hacking campaign exploiting a zero-day vulnerability in Oracle PeopleSoft. The attacks, discovered on June 11, were attributed to the ShinyHunters cybercrime…
SecurityWeekShinyHunters -
WSL Containers Windows 11: Native Linux Orchestration
Microsoft announced WSL Containers at Build 2026, enhancing the Windows Subsystem for Linux (WSL) to allow native Linux container management within Windows 11 without needing third-party tools like Docker. Contrary to misconceptions, this feature is not…
SecurityOnline -
UK businesses underreport ransomware due to stigma, fear
Alex Scroxton reports on the underreporting of ransomware attacks among UK businesses due to fear of stigma and potential reputational damage. Data from the City of London Police indicates that between April 2025 and March 2026, 323 organizations reported…
DataBreaches -
Libya Central Bank probes dark web leak after cyber breach
Libya’s Central Bank (CBL) is investigating data published on the dark web following a recent cyberattack. The bank's technical teams, in collaboration with international experts, are analyzing the data to determine its nature and potential linkage to the…
DataBreaches -
Misdirected emails at TVET college force POPIA breach reporting
Misdirected internal emails that reveal personal information can trigger mandatory data breach reporting under South Africa's POPIA law, even if the disclosure was accidental. A notable case involved Central Johannesburg TVET College, where employees'…
DataBreaches -
Apple removes VKontakte, MAX apps from the Russian App Store
Apple has removed two significant Russian applications, VKontakte (VK) and MAX, from its App Store amidst ongoing sanctions and disputes regarding push notifications. The VK Group has criticized Apple for the sudden and unnotified removal, claiming it has…
SecurityOnline -
Researchers Automate Favicon Based Host Recon via Shodan
Rob VandenBrink discusses automating the favicon.ico method for host reconnaissance in penetration testing. This technique leverages historic DNS mining to identify target hosts by analyzing the favicon.ico file, which many organizations standardize across…
SANS ISC -
236,000 DCloud UniApp sites used for crypto and phishing scams
The article discusses the alarming revelation that approximately 236,000 DCloud Uni-App sites are being exploited for cryptocurrency scams, phishing activities, and wallet draining. This situation highlights the vulnerabilities in the current digital…
The Hacker News -
Quantum Threat Spurs Push for Post Quantum Crypto Adoption
The article emphasizes the significance of post-quantum cryptography in securing credentials as quantum computing advances. It outlines the vulnerabilities current cryptographic methods face against quantum attacks and argues for urgent transition strategies…
The Hacker News -
Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse
The article discusses the expansion of Gamaredon's cyber attacks targeting Ukraine, emphasizing new malware and the exploitation of cloud services. The piece highlights the evolving tactics of this threat actor, which has intensified its operations using…
The Hacker NewsGamaredon Group -
StegoAd hides malware in Edge extensions, 2.6 million installs
The article discusses the StegoAd campaign, where 119 malicious browser extensions on the Microsoft Edge Add-ons store falsely posed as useful tools like ad blockers and VPNs, accumulating 2.6 million installs over two years without detection. Microsoft…
Security Affairs -
Linux Kernel Flaw 'DirtyClone' Lets Local Users Gain Root Access
JFrog has released details on a critical Linux kernel vulnerability, CVE-2026-43503 (DirtyClone), which enables local users to gain root privileges. The CVSS score is 8.8, and the vulnerability, identified as a variant of previous issues such as DirtyFrag…
-
White House Urges AI Firms to Curb New Models Over Security Fears
OpenAI and Anthropic are limiting the release of their new AI models at the request of the Trump administration, citing cybersecurity risks. OpenAI's model, GPT-5.6 Sol, will be available only to approved partners, emphasizing the need for safeguards and a…
SecurityWeek -
The Gentlemen ransomware gang targets global firms with stealth
The article discusses the emergence of 'The Gentlemen', a ransomware-as-a-service (RaaS) group that has gained prominence for its attacks targeting large corporations and critical infrastructure. Utilizing sophisticated tactics, the group leverages…
securelist.comThe Gentlemen -
US Federal Insurance Regulator Confirms Data Breach Via Oracle Flaw
The US National Association of Insurance Commissioners (NAIC) has confirmed a data breach affecting US citizens' credit rating data, traced back to a zero-day vulnerability in Oracle PeopleSoft. Detected on June 11 and disclosed on June 17, unauthorized…
Infosecurity -
EU tentatively labels AWS and Azure as digital gatekeepers
The European Commission has tentatively designated Amazon Web Services (AWS) and Microsoft Azure as "gatekeepers" under the Digital Markets Act (DMA), requiring them to enhance compliance with European regulations. This designation is prompted by their…
SecurityOnline
