CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 10–13 on weekend days.

12 Oct1314151617181920Busiest · 9621222324255Today
  • On CISA KEV CVEs
  • Other coverage
Show as table
Articles published per day
DayArticles published
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Sun 25 Oct13
Today, Mon 26 Oct5 so far
Developing
Exploited only
80 articles

Latest days

Tue 30 Jun· 80 articles

  1. Apple rolls out WebKit patches after AI tools uncover four flaws

    Apple has released security updates for iOS, iPadOS, macOS, and Safari, addressing multiple WebKit vulnerabilities, with four of these flaws discovered using AI tools like Claude and Codex. The updates include fixes for issues that could cause crashes when…

    Security Affairs

  2. FIFA 2026 Approaches as Phishing Threats Rise, Zero Trust Urged

    The article discusses cybersecurity risks associated with the FIFA 2026 event, particularly focusing on phishing and impersonation threats. It emphasizes the importance of addressing these threats proactively, highlighting potential statistics and indicators…

    The Hacker News

  3. Oracle E-Business Suite3 articles this day · The Hacker News first

    Exploitation of Recent Oracle E-Business Suite Vulnerability Begins · Attackers actively exploit the Oracle E-Business Suite flaw CVE-2026-46817

    3 outletsCVE-2026-46817CVE-2026-46817Exploited

  4. SimpleHelp4 articles this day · SecurityOnline first

    Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer · CVE-2026-48558 SimpleHelp flaw lets attackers deploy malware

    4 outletsCVE-2026-48558CVE-2026-48558Exploited

  5. TrendAI alerts on Booking.com hotel phishing with TONResolver RAT

    Cybercriminals are targeting Booking.com partner hotels in Japan through phishing emails that impersonate guest complaints. The campaign, detected by TrendAI in May 2026, utilizes malware named TONResolver, hosted on The Open Network (TON) blockchain. This…

    Infosecurity

  6. NVIDIA patches critical AIStore auth bypass flaw rated 9.8 CVSS

    NVIDIA has issued critical security updates to address several severe vulnerabilities in its AI platforms, including an authentication bypass flaw rated 9.8 CVSS in AIStore. This flaw poses significant risks as it can allow attackers unauthorized access,…

    SecurityOnline

  7. ToddyCat APT’s Umbrij Tool Steals Corporate Gmail via Google API

    The report details a new tool, Umbrij, developed by the ToddyCat APT group to exploit corporate email accounts through the Google API. This tool automates the acquisition of OAuth tokens by utilizing a technique called Shadow Token via Remote Debug (STRD),…

    securelist.comToddyCat

  8. AI powered security faces rising costs with token based pricing

    The article discusses the rising costs associated with AI integration in cybersecurity platforms, highlighting a shift from fixed software licensing to a token-based consumption model. As organizations increasingly utilize AI for security functions, they…

    SecurityWeek

  9. Apple patches 28 flaws in iOS, macOS and Safari updates

    On June 30, 2026, Apple released updates for iOS/iPadOS, macOS, and Safari, addressing several vulnerabilities. Most updates target web browser components such as WebKit, while a few relate to the kernel and IOGPUFamily. None of the vulnerabilities are…

    SANS ISC

  10. UK healthcare sees cyber attacks jump tenfold due to legacy flaws

    A report from SonicWall reveals that the UK healthcare sector has faced a tenfold increase in cyber-attacks from January to May 2026, compared to the entire year of 2025. The data indicates 264,000 cyber events during the first five months of 2026, making it…

    Infosecurity

  11. AirDrop and Quick Share flaws let nearby attackers crash devices

    Recent flaws in AirDrop and Quick Share have been identified, allowing nearby attackers to trigger crashes and bypass security checks. The vulnerabilities pose significant risks to wireless communication systems, highlighting the need for enhanced security…

    The Hacker News

  12. Nissan Employee Data Breached in Oracle PeopleSoft Hack

    Nissan disclosed a data breach resulting from a zero-day vulnerability in Oracle PeopleSoft, which may have compromised employee data across the US, Canada, Mexico, and Brazil. The breach could involve sensitive information, including Social Security Numbers…

    SecurityWeekShinyHunters

  13. INC Ransomware Hits APAC Factories, Japanese Food Firms via GPO

    The article discusses recent developments in a cyber threat involving the INC Ransomware, which has been detected actively exploiting APAC manufacturing sectors and Japanese food companies. The malware employs a sophisticated toolkit designed for various CPU…

    SecurityOnlineINC Ransomware

  14. Sports Venues Face Rising Cyber Threats Ahead of 2026 World Cup

    In 2026, 84% of sports organizations reported cyber incidents, indicating a heightened risk for the digitized sports sector. The analysis highlights that sports are attractive targets due to their visibility, valuable data, and dependencies on third-party…

    darktrace.com

  15. Anthropic’s Claude Fable 5 to Require ID Checks and Paid Credits

    The article discusses recent developments regarding Anthropic's upcoming Claude Fable 5 model, which reportedly will require users to purchase separate credits for access and undergo strict identity verification checks. Hidden text in the app indicates that…

    SecurityOnline

  16. Google rolls out Gemini AI image tool using Gmail, Photos

    Google has expanded its Gemini app's 'Personalized Intelligence' feature, now available for free to eligible users in the U.S. This allows the app to generate custom AI images using personal data from Gmail and Google Photos. Users can request personalized…

    SecurityOnline

  17. AI browsers enable BioShocking attack to steal user credentials

    The article discusses a new attack method called the "BioShocking Attack," which exploits AI browsers to leak user credentials. This attack poses significant risks to user privacy and security by manipulating browser functionalities to extract sensitive…

    The Hacker News

  18. Hotel staff targeted by phishing based malware dropping Node.js

    A multi-stage malware campaign targeting the hospitality sector, particularly hotel staff in Europe and Asia, has been active since April 2026. Attackers employ phishing techniques using fake attachments to bypass email security and install a persistent…

    SecurityOnline

  19. UK SMEs Hit Hard by Ransomware Surge, Manufacturing Most Affected

    The article reports that over 300 UK firms experienced ransomware attacks in the past year, with small and medium-sized enterprises (SMEs) being the most affected. The City of London Police's data indicates that the number of reported incidents was around 26…

    Infosecurity

  20. LoadMaster flaw lets attackers run root commands remotely

    The article discusses a critical security vulnerability in Progress Kemp's LoadMaster system, which could allow attackers to execute root commands without authentication. It emphasizes the importance of addressing such vulnerabilities in API security to…

    The Hacker News

  21. STOCKSTAY malware hits Ukraine, Italy via phishing RDP exploits

    The identified malware, STOCKSTAY, is linked to the Russian threat actor Turla, primarily targeting Ukrainian military and Italian diplomatic entities. It utilizes spear-phishing emails with malicious RDP files and WinRAR exploits (CVE-2025-8088) for…

    SecurityOnlineCVE-2025-8088CVE-2025-8088Exploited

  22. Apple patches 30+ flaws, including AI found WebKit bugs

    Apple has released updates to address over 30 vulnerabilities in its iOS, macOS, and Safari platforms, which include bugs discovered through AI techniques, particularly in the WebKit framework. These updates are crucial for ensuring the security of Apple's…

    The Hacker News

  23. Quantifind Raises $200M to Boost AI Risk Intelligence Platform

    Quantifind has raised $200 million in a growth funding round, bringing its total funding to nearly $320 million. Led by Summit Partners, previous investors included Citi Ventures and S&P Global. Based in Palo Alto, CA, Quantifind offers AI-based risk…

    SecurityWeek

  24. TinyRCT malware breaches Southeast Asia energy government sites

    A major cyber espionage campaign by a group identified as CL-STA-1062, suspected to involve Chinese-speaking hackers, has compromised at least ten organizations across Southeast Asia, specifically targeting critical energy infrastructure and government…

    SecurityOnlineUAT-7237

  25. OpenClaw AI app gains Apple approval, enabling deep phone access

    The article discusses the launch of OpenClaw, a new agentic AI app now available on iOS and Android. This app allows users to grant AI deep system permissions, enabling it to perform tasks autonomously by accessing device features like the camera, calendar,…

    SecurityOnline

  26. Critical flaws let hackers hijack Daktronics billboards

    Critical vulnerabilities have been discovered in Daktronics controllers, impacting highway signs and digital billboards. A cybersecurity researcher identified three key issues: a path traversal exploit, an authenticated file upload vulnerability, and the use…

    SecurityWeek

  27. Cursor releases iOS beta app for remote AI coding on iPhone

    The article highlights the release of the iOS beta version of the AI-driven coding tool, Cursor. This mobile application allows developers to remotely connect to their development machines, enabling them to issue tasks, monitor progress, and merge code from…

    SecurityOnline

  28. Tata Electronics Breach Exposes iPhone 18 Pro Details on Dark Web

    A data breach at Tata Electronics led to a significant leak of confidential information regarding the iPhone 18 Pro and Pro Max, including supplier lists and device specifications. The hackers have begun releasing internal documents on the dark web after…

    SecurityOnline

  29. WhatsApp adds username chat to keep your phone number private

    WhatsApp has introduced a new 'Usernames' feature aimed at enhancing user privacy by allowing individuals to communicate without sharing their phone numbers. Users can reserve their usernames starting this week, with the official feature launching later. The…

    SecurityOnline

  30. WSO2 patches critical JWT bypass flaw, putting bank APIs at risk

    In June 2026, WSO2 patched seven vulnerabilities in its API platform, including the critical [CVE-2026-5430](https://securityonline.info/cve-watchtower/?cve_detail=CVE-2026-5430), which scores 10/10 for allowing JWT authentication bypass. This vulnerability…

    SecurityOnlineCVE-2026-5430CVE-2026-5430Exploited

  31. Threat Level Remains Green as New ISC Stormcast Podcast Drops

    The report details a session led by Rob VandenBrink, highlighting the current threat level as 'green'. A podcast titled 'ISC Stormcast For Tuesday, June 30th, 2026' is available for listeners. Additionally, there are links to SANS classes taught by Dr.…

    SANS ISC

  32. Synology MailPlus Server Patched for CVSS 10 Flaw CVE-2026-13136

    Synology has resolved three critical vulnerabilities in its MailPlus Server, particularly highlighting CVE-2026-13136, which has a CVSS score of 10. This vulnerability enables remote attackers to read/write files and execute denial-of-service attacks. Other…

    SecurityOnlineCVE-2026-13136CVE-2026-13136

  33. WolfSSL fixes critical X.509 bypass and heap overflow flaws

    Developers have patched six high-severity vulnerabilities in the wolfSSL embedded SSL library, which include a critical X.509 trust-chain bypass and dangerous heap buffer overflows. Immediate updates are necessary to prevent potential remote code execution…

    SecurityOnline

  34. Researchers Find Critical Flaws in EVoke Charging Stations

    The EVoke Charging Station Management System has four critical vulnerabilities with a highest severity score of 9.4, allowing unauthorized access and disruption of charging services. The main vulnerabilities include authentication bypass and insufficient…

    SecurityOnline

  35. Cacti issues fix for critical preauth SQLi and file inclusion flaw

    **Critical Alert: Cacti Vulnerabilities Summary** **Product:** Cacti **Number of Vulnerabilities:** 4 (including CVE-2026-39893, CVE-2026-39948, CVE-2026-39955, CVE-2026-39938) **Severity Rating:** High (9.3 to 9.8, Critical) **Key Issues:** 1.…

    SecurityOnlineCVE-2026-39893CVE-2026-39893

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device