News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Wed 1 Jul· 78 articles
-
Android 17 tightens PIN attempt limits to thwart thief attacks
Google's Android engineering team has introduced a significant security update in Android 17, instituting stricter rate limits on how many PIN entry attempts a user can make. Previously, Android 16 allowed up to ten attempts in a minute and gradually…
SecurityOnline -
Microsoft to complete postquantum crypto shift by 2029
Microsoft is accelerating its transition to post-quantum cryptography with plans to complete this shift by 2029. This move is critical as quantum computing poses a significant threat to current encryption methods. The urgency is underscored by the need to…
The Hacker News -
RustDuck botnet shifts to Rust, evades detection, grows fast
The article discusses RustDuck, an emerging DDoS botnet that is evolving rapidly and migrating its codebase from C to Rust. Tracking began in February 2026, revealing that RustDuck targets various devices, including routers and cameras, exploiting known…
Security Affairs -
AI Powered Ransomware Exploits Chrome File Access on Android
The article discusses a new type of browser-native ransomware utilizing the File System Access API, which allows web applications to access local files with user permission. Key points include: 1. AI models can create novel attack techniques, demonstrated…
Check Point -
Attackers misuse ScreenConnect to spread AsyncRAT via fake sites
The article investigates a cyber attack using the legitimate remote access tool ScreenConnect, which was exploited to deploy the AsyncRAT remote access Trojan (RAT). The threat actors utilized spoofed software websites to distribute malicious installers,…
securelist.com -
Enterprises urged to scrutinise Frontier AI vendor claims
The article discusses the implications of Frontier AI on enterprise security, emphasizing two primary concerns: the ability of enterprises to manage vulnerabilities in their applications and the need for understanding product security impacts from vendors…
SecurityWeek -
Microsoft pushes postquantum crypto shift ahead of 2029 deadline
Microsoft is accelerating its transition to post-quantum cryptography (PQC) due to advancements in quantum research which suggest that quantum computers capable of breaking asymmetric encryption are imminent. The company plans to move critical products and…
Infosecurity -
US Lifts Export Ban on Anthropic’s Mythos and Fable AI Models
Anthropic AI has received authorization from the U.S. Department of Commerce to lift export restrictions on its AI models, Mythos and Fable, effective July 1. This follows a previous embargo imposed due to national security concerns regarding vulnerabilities…
SecurityOnline -
Apple Patches Dozens of Vulnerabilities Across iOS, macOS, and Safari
Apple has released security updates for iOS, iPadOS, macOS Tahoe, and Safari, which address 37 vulnerabilities, including 26 in WebKit. These updates could prevent potential exploitation through malicious websites that might compromise user data and system…
SecurityWeek -
UNC1151 Phishing Campaign Targets Belarus and Ukraine
The UNC1151 phishing campaign, allegedly directed by the Ghostwriter threat actor, targets political figures in Eastern Europe, particularly Belarusian politicians and Ukrainian web portals. The attacks involve spear-phishing emails that impersonate Google…
SecurityOnlineGhostwriter -
Researchers trick ChatGPT into producing graphic violent images
The article discusses a concerning incident where researchers from the AI security firm Mindgard were able to manipulate ChatGPT into generating graphic and violent images by altering a benign prompt. This exploit led to the production of disturbing imagery,…
Malwarebytes -
Aflac Japan breach leaks 4.4M customers' personal data
Aflac, a major US insurance company, announced a significant data breach affecting approximately 4.4 million customers in Japan. The breach occurred from June 15 to June 25, with unauthorized access to sensitive personal and financial information, including…
Infosecurity -
Dawnguard Raises $6.3 Million for Security Architecture Automation Platform
Dawnguard, a cybersecurity startup based in Amsterdam, has raised an additional $3.3 million in pre-seed funding, bringing its total to over $6.3 million. This investment, led by BNVT Capital along with Curiosity VC and eCAPITAL, will enhance product…
SecurityWeek -
Claude Code Telemetry Rollback: Anthropic Responds to Backdoor Allegations
The article discusses a critical vulnerability (CVE-2026-48558) linked to a hidden surveillance feature in Claude Code that specifically targets Chinese developers and AI corporations. This feature monitors system time zones and API endpoints, potentially…
-
Anthropic rolls out Claude Sonnet 5 AI to cut enterprise costs
The content discusses the launch of Anthropic's Claude Sonnet 5, a new generative AI model designed for Agentic AI systems. This model aims to offer enterprises cost-effective automation solutions amidst rising token consumption challenges associated with AI…
SecurityOnline -
GuardFall flaw exposes coding agents to shell injection attacks
A recent survey by Adversa AI has revealed a significant security vulnerability called GuardFall affecting 10 of the 11 popular open-source AI agents, which allows attackers to bypass command filters via shell injection. The flaw arises from a mismatch…
Security Affairs -
Operation DragonReturn hits Indian finance via fake tax emails
Operation DragonReturn is a cyber espionage campaign targeting Indian taxpayers and finance professionals, discovered in May 2026 by Seqrite Lab. Attackers use phishing emails impersonating the Income Tax Department to deliver malware via a fake tax…
SecurityOnline -
Huntress flags massive Microsoft 365 password spray via Azure CLI
Huntress has identified a significant password spray attack targeting Microsoft 365 environments, specifically the Azure CLI, which occurred between June 12 and June 21. The campaign involved over 81 million login attempts, leading to the compromise of 78…
SecurityWeek -
AI Generated Hallucinated Domains Fuel Phantom Squatting Phishing
The article discusses the emerging threat of "Phantom Squatting," which involves the use of AI-generated, hallucinated domain names for phishing and malware attacks. Cybercriminals exploit the capabilities of AI to create misleading domains that appear…
The Hacker News -
AI Skills on ClawHub Spread macOS Infostealers via Fraud
Palo Alto Networks' Unit 42 reported finding five malicious skills on the ClawHub marketplace for OpenClaw, an AI agent. These skills evaded detection to deliver macOS infostealers and facilitate financial fraud between February and May 2026. The skills were…
SecurityOnline -
Anthropic restores Claude Fable 5 as US export controls lifted
On July 1, 2026, Anthropic announced the restoration of its AI model, Claude Fable 5, following the lifting of U.S. export controls related to jailbreak vulnerabilities. This move is significant in enhancing the capabilities of AI in critical infrastructure…
The Hacker News -
Chrome 151 patches 382 flaws, 15 critical, as AI drives bug finds
Google released Chrome 151, addressing 382 vulnerabilities, primarily discovered in-house, with 15 deemed critical and 67 high severity. The vulnerabilities include user-after-free and out-of-bounds issues, potentially allowing remote code execution. Most…
SecurityWeek -
Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts
The article discusses a significant cybersecurity incident involving a password spray attack targeting Microsoft accounts via Azure CLI. In total, there were over 81 million attempts made on at least 78 accounts. The piece emphasizes the need for enhancing…
The Hacker News -
Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery
The article discusses the analysis of 3,000 live ClickFix payloads by a researcher, revealing the vulnerabilities of API-driven malware delivery. It highlights the increasing threat of such malware, providing essential insights into how it operates and…
The Hacker News -
Metamask Users Targeted by Phishing Email Demanding Secret Phrase
Xavier Mertens has reported a phishing email targeting Metamask, a popular cryptocurrency wallet. The campaign utilizes pressure tactics to persuade users to disclose their secret security phrase by falsely claiming that their wallets are at risk. The…
SANS ISC -
Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service
Citrix has released patches for six vulnerabilities in its NetScaler products, addressing issues that could lead to unauthorized file reading and denial-of-service attacks. These vulnerabilities have been classified as significant risks, and users are urged…
The Hacker News -
Google launches AI powered Gmail Live voice search in beta
The article discusses the introduction of a new feature called "Gmail Live," which utilizes AI to allow users to search their emails by voice. This feature debuted at the Google I/O 2026 developer conference and is currently in beta testing for select…
SecurityOnline -
Anthropic’s Claude Code spies on Chinese users, logs location
A recent discovery by a Reddit user revealed that Anthropic's Claude Code has a hidden surveillance system targeting Chinese users. This functionality, introduced in version 2.1.91, monitors user locations and proxies, with obfuscated code to avoid…
SecurityOnline -
Apache Tomcat fixes auth bypass CVE-2026-55957 in versions 7 to 11
On June 29, 2026, the Apache Tomcat project disclosed seven vulnerabilities, with the most critical being CVE-2026-55957, which allows attackers to bypass authentication. This affects Tomcat versions 7 to 11. The flaws pose significant risks as Tomcat is…
-
Google patches 382 Chrome flaws, urges immediate user updates
Google released a significant security update for Chrome on June 30, 2026, patching 382 vulnerabilities, including 15 critical issues. The update affects all major operating systems: Windows, Mac, and Linux. Key vulnerabilities are primarily use-after-free…
SecurityOnline -
Critical Incus Bug Lets Attackers Write Root Files via Images
The Incus team has released version 7.2.0 to patch six critical vulnerabilities (scoring 9.9 on the CVSS scale) that allow for file writes at the root level, potentially leading to command execution. These flaws, affecting all versions prior to v7.2.0,…
-
ISC Stormcast July 2026 green threat level and SANS resources
The ISC Stormcast for July 1st, 2026, is hosted by handler Xavier Mertens, with a threat level categorized as green. The page features links to previous diaries and classes taught by Dr. Johannes Ullrich at SANS. Additionally, resources related to cyber…
SANS ISC -
GeoVision fixes 10 flaws in license plate cameras after RCE risk
GeoVision disclosed 10 vulnerabilities affecting its GV-LPC2011 and GV-LPC2211 license plate cameras, all of which impact firmware V1.12 and earlier. These flaws are unauthenticated and can be exploited remotely, with four rated at 9.8 on the CVSS scale,…
SecurityOnline -
Fluentd fixes critical RCE bug CVE-2026-44024 in log collector
The Fluentd project has patched four significant security vulnerabilities in version 1.19.3, with the most critical being CVE-2026-44024, which allows for remote code execution (RCE) with a severity score of 9.8. The other vulnerabilities include server-side…
-
AI hallucinated domains fuel phantom squatting threats
The article discusses a threat identified by Unit 42 researchers called "phantom squatting," where large language models (LLMs) generate nonexistent web domains that adversaries then register to exploit. Key findings include: 1. **Phantom Squatting**: LLMs…
unit42.paloaltonetworks.com -
China linked hackers deploy TinyRCT against SE Asia critical infra
A China-linked cyber threat group, named CL-STA-1062, has shifted its focus from Taiwanese web-hosting attacks to targeting critical infrastructure in Southeast Asia, compromising at least ten organizations, including state-owned entities. They are using a…
Dark ReadingUAT-7237 -
ProFTPD flaw CVE-2026-35025 lets users bypass directory limits
The article discusses an active security exploit identified as CVE-2026-35025, which is a vulnerability in ProFTPD (version ≤ 1.3.9b and ≤ 1.3.10rc2). This flaw allows logged-in users to bypass access controls, specifically through the RNFR command, enabling…
-
Plone fixes critical RCE bug in Classic portlet, issues patches
Plone has patched three critical vulnerabilities across two add-on packages, with the most severe being a Remote Code Execution (RCE) flaw (CVE-2026-57149), scoring 9.9 on the CVSS scale. This vulnerability allows attackers to execute code within the Plone…
SecurityOnline
