News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Wed 1 Jul· 78 articles
-
CISA Flags SharePoint CVE-2026-45659 in KEV Catalog
CISA has added CVE‑2026‑45659 to its Known Exploited Vulnerabilities catalogue, affecting Microsoft SharePoint Server. The vulnerability, named Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability, allows an authorised attacker to…
-
Phishing Now Fingerprints Devices to Deliver OS Specific Payloads
The article discusses sophisticated phishing campaigns that tailor their attacks based on the victim's device and operating system. Attackers use user-agent data to fingerprint victims, leading to increased success rates as the campaigns deploy OS-specific…
Dark Reading -
Fake 'Search for Perplexity AI' extension spied on user searches
A fake Chrome extension named 'Search for perplexity ai' was discovered to be spying on users' search queries by routing their traffic through a fraudulent domain. The extension recorded user data such as IP addresses, browser headers, and user-agent…
Malwarebytes -
Oracle EBS flaw CVE-2026-46817 under attack, 950 systems exposed
A critical vulnerability in Oracle E-Business Suite, designated as CVE-2026-46817, is currently being exploited, with around 950 vulnerable systems exposed on the internet. The flaw allows unauthenticated attackers to take over affected systems. Oracle has…
-
ClickFix social engineering surges as top malware delivery method
The article discusses the rise of the ClickFix social engineering technique, which has become the preferred method for malware delivery among threat actors. Research from ReliaQuest highlights that ClickFix has transitioned from an emerging tactic in 2024 to…
Dark Reading -
Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters
The article discusses a critical security flaw in the unpatched Argo CD Repo-Server that allows attackers to potentially take control of Kubernetes clusters. It emphasizes the importance of addressing this vulnerability to prevent unauthorized access and…
The Hacker News -
19-Year-Old Scattered Spider Suspect Extradited to Face U.S. Hacking Charges
The article discusses the extradition of a 19-year-old suspect linked to the Scattered Spider hacking group, who faces charges in the U.S. related to cybercrime and ransomware activities. It highlights the increasing prevalence of cyber threats, particularly…
The Hacker NewsScattered Spider -
Microsoft Teams requires organizer OK for bots in meetings lobby
Microsoft has introduced a new Teams admin policy to enhance security regarding external bots in meetings. This policy allows organizations to manage and control bot participation by requiring explicit confirmation from meeting organizers before bots can…
SecurityWeek -
Hackers Use SEO Poisoned Sites to Drop AsyncRAT via ScreenConnect
The article discusses the exploitation of SEO-poisoned software sites to deploy AsyncRAT via ScreenConnect. It highlights how cybercriminals utilize popular software sites to lure users into downloading malicious software. Key points include the techniques…
The Hacker News -
Blogger abused to spread PureLogs Stealer via VEIL#DROP malware
The article discusses the VEIL#DROP malware chain utilizing the Blogger platform to deliver the PureLogs Stealer. It highlights the methods used by the malware to infiltrate systems, emphasizing recent trends in cybersecurity where such malware exploits…
The Hacker News -
NVIDIA patches 13 flaws, including local code exec in BlueField
NVIDIA has issued critical software patches addressing 13 newly disclosed vulnerabilities in its product lines, particularly affecting BlueField, ConnectX, and Megatron Bridge platforms. Some vulnerabilities, such as CVE-2025-23351, could allow local…
-
Kemp LoadMaster zero day RCE exploited PoC surfaces patch urged
The Kemp LoadMaster RCE vulnerability (CVE-2026-8037) was exploited starting June 29, 2026, coinciding with the release of proof-of-concept exploit code. This severe flaw allows unauthenticated attackers to execute commands as root, risking broader system…
-
NASA warns Boeing Starliner may miss 2025 certification target
NASA's inspector general has indicated that Boeing's Starliner crew capsule is likely to be delayed until next year for operational certification, which is nearly a decade behind its original 2017 target. This delay comes as the timeline for the ISS's…
Ars Technica -
Microsoft Earns Leader Spot in Cloud Runtime Security Ranking
The Microsoft blog post highlights the company's recognition as a leader in Frost & Sullivan’s 2026 Frost Radar for Cloud and Application Runtime Security. It emphasizes a shift in cloud security from mere visibility and compliance to an operational…
Microsoft -
Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDFs
The article discusses the emergence of the Ousaban banking Trojan, which is targeting users of Iberian banks through sophisticated phishing tactics involving fake PDF documents. The malware aims to steal sensitive banking information, highlighting the…
The Hacker News -
Adobe fixes seven ColdFusion and Campaign Classic CVSS 10.0 flaws
Adobe has released patches for seven vulnerabilities, each with a critical CVSS score of 10.0, affecting ColdFusion and Campaign Classic. These flaws could allow attackers to execute arbitrary code and gain unauthorized access to systems, emphasizing the…
The Hacker News -
AI hallucinations spawn phantom squatting domains for phishing
The article discusses a novel cybersecurity threat known as 'phantom squatting', where cybercriminals exploit large language models (LLMs) that generate fictitious web domains for legitimate brands. These domains can be registered by attackers to potentially…
Dark Reading -
Apple patches 37 WebKit kernel flaws, including sandbox escapes
In June 2026, Apple released a security update addressing 37 unique CVEs across iOS, iPadOS, macOS, and Safari, primarily targeting WebKit/WebRTC vulnerabilities. The majority (31 of 37) focus on crash/DoS bugs rather than code execution risks, with notable…
-
Cursor flaws enable prompt injection to break AI sandbox defence
The article discusses critical vulnerabilities in AI systems that allow prompt injection attacks to bypass security sandboxes and execute commands. Key points include the nature of the vulnerabilities, potential impacts such as unauthorized command…
The Hacker News -
Veil#Drop fileless malware uses Blogspot to drop PureLog Stealer
A fileless malware framework, dubbed Veil#Drop, has exploited Google's Blogspot to deploy the PureLog Stealer entirely in memory, enabling attackers to steal credentials without leaving conventional traces on disk. According to Securonix Threat Research, the…
Infosecurity -
Criminal IP Partners with OpenCTI to Enhance Threat Intelligence
The content discusses the integration of Criminal IP with OpenCTI, enhancing cyber threat intelligence by providing enriched context to IP addresses, domains, and URLs. This integration offers reputation scoring, vulnerability data, and behavioral signals,…
SecurityOnline -
Attackers Exploit Progress Kemp LoadMaster RCE Flaw, Urge Patches
The article highlights an active exploitation attempt against a vulnerability in Progress Kemp LoadMaster that allows unauthorized remote code execution (RCE). The flaw is being targeted, prompting urgency for users to apply security patches. It provides…
The Hacker News -
Azure CLI Targeted in LSHIY Password Spray Campaign Across 64 Orgs
A password spray attack against Microsoft Azure CLI environments has been detected, targeting 64 organizations with over 81 million login attempts and resulting in 78 compromised accounts within just two weeks. The attackers utilized common password…
Security Affairs -
Ousaban Trojan Targets Spain, Portugal Banks with Fake Tax PDFs
A banking trojan called Ousaban, previously targeting Brazil, has been adapted to attack banking customers in Spain and Portugal since May 2026. The malware employs phishing tactics through disguised PDFs, steganography, and geofencing techniques to evade…
Infosecurity -
StepSecurity Offers Free Maintained GitHub Actions for Repos
StepSecurity has announced that its Maintained Actions are now free for public repositories, offering secure, actively maintained alternatives to risky third-party GitHub Actions. This change aims to enhance security in CI/CD workflows across the open-source…
StepSecurity -
StepSecurity's Secure Registry Traces Malicious npm/PyPI Installs
The article discusses the new feature of StepSecurity's Secure Registry that allows users to trace npm and PyPI package installs back to the specific developer machine or CI pipeline responsible for pulling a compromised package. This capability arose after…
StepSecurity -
Early digital spotting halts cyber threats before major events
In her article, Olga Polishchuk discusses the importance of integrating threat intelligence and digital security in the planning of major events to mitigate cyber threats. She emphasizes that premeditated threats often manifest digitally before becoming…
Dark Reading -
AI Search Shift Spurs New Pay Per Use Model for Creators
The article discusses the evolving landscape of AI search and its impact on content creators. It highlights how traditional search models are being disrupted by AI answer engines that summarize content, leading to decreased traffic and revenue for creators.…
Cloudflare -
New AI bot defaults block Agent, Training crawlers on ad pages
The article discusses new AI traffic management options for website owners, reflecting on changes that have occurred since the initial declaration of 'Content Independence Day'. It introduces a more nuanced taxonomy of bots, classifying them into three main…
Cloudflare -
Cloudflare launches Monetization Gateway for stablecoin billing
Cloudflare has launched the Monetization Gateway, enabling customers to charge for digital assets like web pages and APIs through usage-based pricing. This platform integrates payment handling at the network edge, protecting origins from payment processing…
Cloudflare -
One Year On, AI Reshapes Internet Traffic and Publisher Revenue
The article discusses the evolution of the Internet one year after the declaration of Content Independence Day, emphasizing the rapid adoption of AI technologies and their impact on content consumption and business models. Key points include: 1. **Shift in…
Cloudflare -
AI powered ransomware hits Chromium browsers on Windows, Android
The article discusses the rise of AI-generated browser ransomware that exploits the Chromium API on both Windows and Android platforms. This form of ransomware employs AI to enhance its capabilities, making it more challenging to detect and mitigate. The…
The Hacker News -
AI Agents Tricked by BioShocking Attack to Reveal User Passwords
The article discusses a new attack technique known as "BioShocking," devised by researcher Roy Paz, which exploits AI agents by convincing them to abandon their safety protocols through fictional scenarios. This manipulation merges prompt injection with goal…
Malwarebytes -
Link11 launches AI driven DDoS protection with fast response
Link11 has launched its redesigned Layer 3/4 DDoS mitigation solution to address advanced cyber threats. The new system utilizes AI-driven detection and offers full IPv4 and IPv6 support. It can cope with complex attack patterns, reducing false positives and…
SecurityOnline -
Google Chrome Fixes 382 Bugs, Including Critical Sandbox Escape
In July 2026, Google released a significant update for Chrome, fixing 382 security vulnerabilities, including 15 rated as critical. The update was part of a broader trend following Microsoft’s large patch and addresses weaknesses that could allow attackers…
-
Awareness lags behind resilience, says 2026 cybersecurity report
The article discusses the findings of the 2026 Cybersecurity Assessment, highlighting the significant gap between awareness of cybersecurity threats and the actual resilience of organizations to counter these threats. Key points include: 1. The necessity for…
The Hacker News -
Adobe fixes ColdFusion Campaign Classic bugs, urges patch
Adobe has released security updates for ColdFusion and Campaign Classic addressing multiple critical vulnerabilities. The Campaign Classic update resolves CVE-2026-48286 (CVSS 10), allowing potential arbitrary code execution. ColdFusion updates address 11…
-
CISA warns BlueHammer flaw now used in ransomware attacks
CISA has confirmed that the vulnerability known as BlueHammer (CVE-2026-33825) is now being exploited in ransomware attacks, allowing attackers to gain SYSTEM privileges through Microsoft Defender. Originally a proof-of-concept, it has transitioned to active…
-
Citrix fixes critical NetScaler flaws after HTTP/2 Bomb alert
On October 3, 2023, Citrix announced critical security updates for its NetScaler ADC and NetScaler Gateway products addressing six vulnerabilities, including the severe HTTP/2 Bomb flaw. Notable issues include four high-severity vulnerabilities related to…
-
Anthropic Relaunches Claude Models with New Safety Measures
Anthropic has reintroduced its large language models (LLMs) Claude Mythos 5 and Claude Fable 5, with added security measures following a temporary suspension due to U.S. export controls. Both models are now available globally, but with enhancements to…
Infosecurity
