News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 16 so far |
Mon 29 Jun· 64 articles
-
US Offers $10 Million Bounty for Russian State Hackers as Messaging App Attacks Evolve
The US government has announced rewards of up to $10 million for information about two Russian-linked cyber threat groups, UNC5792 and UNC4221. These groups have targeted US government officials, military leaders, and journalists through phishing campaigns…
SecurityWeekUAC-0185 -
IPv6 flaw lets container users break out to root on CentOS/RHEL
Security researcher Massimiliano Oldani has introduced IPV6_FRAG_ESCAPE, a proof-of-concept exploit that allows for an IPv6 container escape on CentOS and RHEL 10. The vulnerability exploits a patched bug in the Linux kernel's `__ip6_append_data()`, which…
SecurityOnline -
Russian hackers blamed for £1.9bn Jaguar Land Rover cyber attack
A recent report alleges that Russian hackers were behind the cyber-attack on Jaguar Land Rover (JLR), which is estimated to have cost the UK economy £1.9bn ($2.5bn). Security experts suggest potential Kremlin involvement, citing the lack of ransom demands…
Infosecurity -
SharkLoader Uses Fake Installers to Deploy Cobalt Strike Globally
The article discusses SharkLoader, a malware loader identified in a global cyber campaign called StrikeShark. SharkLoader delivers a Cobalt Strike Beacon and targets governmental, diplomatic, and software firms across Asia, Latin America, Europe, and the…
SecurityOnlineStrikeShark -
Ukraine, FBI Unveil Russian Cyber Spy Operation Targeting Signal
The Security Service of Ukraine (SSU), in collaboration with the FBI, has uncovered a sustained Russian cyber espionage campaign targeting the messaging accounts of officials, military personnel, and activists in Ukraine, Europe, and the United States. The…
Security Affairs -
NTLM Reflection Bypass CVE-2026-24294 Gets Public PoC Exploit
TL;DR Synacktiv publicly disclosed a new NTLM reflection bypass tracked as CVE-2026-24294. The flaw gives a local user
SecurityOnline -
Dark Web exposes Okta, MTS Bank and municipal data leaks
The SOCRadar Dark Web Team reports multiple significant data leaks. The incidents include: 1. **Naucalpan de Juarez SQL Database:** Allegedly contains municipal data that could lead to identity fraud and phishing. 2. **Okta Dataset:** A leak of 3.29 million…
SOCRadar -
Microsoft pulls 119 malicious Edge extensions using font tricks
Microsoft has taken action against 119 malicious Edge extensions that were using images and fonts to hide malware. This move is part of a broader effort to enhance browser security and protect users from potential ad fraud and other cyber threats. The…
The Hacker News -
FBI alerts users to Russian Signal backup key scam
The FBI has issued a public service announcement warning that Russian intelligence officers are targeting high-risk users on Signal by attempting to steal backup recovery keys. The campaign involves deception tactics where Russian cyber actors impersonate…
Infosecurity -
macOS.Gaslight Rust backdoor steals data via Telegram bot
The macOS.Gaslight malware, discovered by SentinelLABS, targets macOS users and is believed to be associated with North Korean threat actors. It employs a Rust backdoor to steal information, including browser data and passwords, while evading detection by…
SecurityOnline -
OpenAI launches GPT 5.6 Sol model for cybersecurity defence
OpenAI has introduced its new GPT-5.6 model lineup, featuring three tiers: Sol, Terra, and Luna. Sol is highlighted as the most powerful model specifically designed for cybersecurity tasks, capable of high-intensity reasoning. Following consultations with…
SecurityWeek -
Thai hospitals targeted by spear phishing RAR malware campaign
A cyberattack targeting Thailand's healthcare sector has been identified, involving spear-phishing techniques that utilize RAR archive phishing to distribute malware. The campaign, active for about ten weeks, primarily affects hospitals and government health…
SecurityOnline -
Public PoC released for critical libssh2 SSH flaw CVE-2026-55200
The article discusses the release of a public Proof of Concept (PoC) for a critical vulnerability in the libssh2 library, identified as CVE-2026-55200. This client-side SSH flaw could have severe implications for security. The news highlights the importance…
-
Chrome flaw forces update as 3 million Texan breach surfaces
The article from Malwarebytes Labs provides a summary of key cybersecurity events that occurred during the week of June 22 to June 28, 2026. Major highlights include: Malware threats targeting Chrome session cookies and video files, signaling new attack…
Malwarebytes -
Edgecution Malware Turns a Microsoft Edge Extension Into a Backdoor
Edgecution malware is a malicious Microsoft Edge extension functioning as a backdoor, linked to the Initial Access Broker associated with Payouts King ransomware. It targets enterprise Windows users via social engineering tactics in Microsoft Teams, using a…
SecurityOnline -
Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer
The article titled "Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer" discusses a recent supply chain attack involving compromised npm and Go packages that exploit VS Code tasks to deploy a Python-based infostealer. These incidents…
The Hacker News -
Google rents 110k NVIDIA GPUs from SpaceX amid AI compute crunch
The technology sector is currently facing a significant compute shortage impacting companies, especially Google and Meta. Google has implemented strict limits on its Gemini AI model, directly affecting Meta's ability to utilize AI tokens effectively. In…
SecurityOnline -
Google Wallet adds Gmail based package tracking for US shoppers
Google Wallet has introduced package tracking through integration with Gmail, allowing users to receive automatic updates on deliveries directly on the Wallet home screen. When an order receipt or tracking number is detected in Gmail, Google Wallet generates…
SecurityOnline -
Cisco Unified CM RCE Flaw Exploited in the Wild as PoC Code Goes Public
A vulnerability in Cisco Unified Communications Manager, tracked as CVE-2026-20230, has a CVSS score of 8.6 and is actively being exploited in the wild. This flaw allows attackers to gain root access by sending crafted HTTP requests to the WebDialer service,…
-
CISA flags six KEV flaws as weekly 1,909 new CVEs emerge
The CVE report for June 22-28, 2026, reveals 1,909 new vulnerabilities, with 173 categorized as critical; 14 of these have a maximum CVSS score of 10. The week saw high-severity vulnerabilities primarily involving cross-site scripting and SQL injection. CISA…
SecurityOnline -
Critical Dell Wyse bug (CVE-2026-41120) lets attackers run code
The article discusses two critical vulnerabilities found in the Dell Wyse Management Suite, identified as CVE-2026-41120 and CVE-2026-49506, with severity ratings of 9.8 and 7.2 respectively. These vulnerabilities allow remote code execution, posing a…
-
Rob VandenBrink Heads Response as Threat Level Stays Green
The content features a post from the ISC (Internet Storm Center) detailing the current threat level as green, with Rob VandenBrink as the Handler on Duty. It highlights the ISC Stormcast for June 29, 2026, and promotes classes taught by Dr. Johannes Ullrich…
SANS ISC -
Gemini CLI flaw allows remote code execution (CVE-2026-12537)
A critical vulnerability (CVE-2026-12537) in Google Cloud Gemini CLI poses a significant risk, with a CVSS score of 10, due to its potential for unauthenticated remote code execution in CI/CD workflows. Developers using versions prior to 0.39.1 and 0.1.22…
-
CVE-2026-50160 flaw exposes Hoppscotch to admin token takeover
A critical vulnerability in the Hoppscotch API, identified as CVE-2026-50160, poses a significant security risk to self-hosted API deployments. It enables attackers to execute a mass assignment attack, allowing them to overwrite crucial security parameters,…
