News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Mon 6 Jul· 57 articles
-
Ousaban Trojan Hits Spain, Portugal With Fake Tax Doc Phishing
The Ousaban banking trojan targets banking customers in Spain and Portugal through a phishing campaign utilizing fake tax documents. It leverages geo-restriction techniques to ensure only users within the Iberian Peninsula are attacked. The malware delivery…
SecurityOnline -
TrojPix steals data via video cable leaks from air gapped PCs
The article discusses the TrojPix attack, which targets air-gapped systems by exploiting video cable emissions to leak sensitive data. This cybersecurity threat is significant as it can bypass conventional network defenses meant to protect isolated systems.…
The Hacker News -
SOCRadar spots WordPress zero day exploit for sale on dark web
The SOCRadar Dark Web Team has reported several significant security threats identified on underground forums. Key points include: 1. An alleged zero-day privilege escalation exploit for a WordPress plugin is up for sale, potentially impacting over 10,000…
SOCRadar -
Agentic ransomware JadePuffer driven by LLM hits Langflow flaw
Cloud security firm Sysdig reports the emergence of JadePuffer, the first fully agentic ransomware campaign, driven entirely by a large language model (LLM). This campaign exploited a vulnerability in a Langflow instance to automate various attack stages,…
Infosecurity -
CVE-2026-46242: Linux Epoll Flaw Grants Local Root Access
The article discusses a newly discovered Linux kernel vulnerability known as Bad Epoll (CVE-2026-46242). This flaw allows local attackers to gain full root access on Linux systems and Android devices by exploiting a use-after-free condition in the epoll…
-
Java based QuimaRAT malware threatens Windows, Linux and macOS
The page discusses the launch of QuimaRAT, a new Malware-as-a-Service (MaaS) that is Java-based and compatible with Windows, Linux, and macOS. It's categorized under malware and endpoint security, highlighting its usability across multiple platforms, which…
The Hacker News -
Iran linked TAG-182 Uses Fake Apps to Spy on Dissidents
### Summary of TAG-182 Threat Cluster **Threat Actor:** TAG-182, suspected to be linked to Iran. **Activity Type:** Cyber surveillance and distribution of MarkiRAT malware. **Targets:** Iranian citizens and dissidents globally. **Methodology:** Utilizes fake…
SecurityOnlineTAG-182 -
Opera GX flaw lets sites secretly install mods, risking user data
A recent security vulnerability in the Opera GX browser allows malicious websites to automatically install mods, potentially leading to data theft from users' visited pages. This issue highlights significant risks in web security, emphasizing the importance…
The Hacker News -
HiAnime Shut Down as Police Arrest Seven in Anti Piracy Raid
In March 2026, HiAnime, a major pirated anime streaming site, announced its closure amid speculations of copyright disputes and law enforcement pressure. Vietnamese police arrested seven individuals linked to HiAnime following a coordinated raid supported by…
SecurityOnline -
Weekly Security Roundup: Mac malware, fake Google pages, scams
The article "A Week in Security (June 29 – July 5)" from Malwarebytes Labs highlights key cybersecurity threats and news from that week. Key points include: 1. Multiple incidents of malware proliferation, including a verified ad spreading Mac malware and…
Malwarebytes -
SkillCloak Enables Malicious AI to Bypass Static Scanners
The article discusses the emergence of SkillCloak, a new technique that allows malicious AI agents to bypass static security scanners through self-extracting packing methods. It highlights the challenges posed by advanced AI capabilities in cybersecurity,…
The Hacker News -
PHP Flaw CVE-2026-12184 Lets Attackers Crash Servers via TLS
The article discusses two significant vulnerabilities in PHP: CVE-2026-12184 and CVE-2026-14355. CVE-2026-12184, with a CVSS score of 8.2, is a remote DoS flaw that can crash PHP-FPM on TLS handshake failures. CVE-2026-14355, a lower severity issue (CVSS…
-
IBM patches three critical WebSphere flaws, urges urgent fixes
This article discusses three critical security vulnerabilities affecting IBM WebSphere Application Server (versions 9.0 and 8.5) identified as CVE-2026-11712, CVE-2026-11708, and CVE-2026-11595. Both CVE-2026-11712 and CVE-2026-11708 are cross-site scripting…
-
Weekly Threat Intelligence: The July 2026 Breaches
The weekly threat intelligence report highlights significant cyber vulnerabilities, detailing 1,939 new threats detected from June 29 to July 5, 2026. Critical vulnerabilities were identified by CISA, including a severe authentication bypass in SimpleHelp…
-
FreeBSD Security Advisories Detail Critical Vulnerabilities
The FreeBSD Project has issued multiple security advisories detailing critical vulnerabilities in OpenZFS, libalias, TCP RACK, and POSIX shared memory. These flaws allow remote code execution and local privilege escalation, putting servers at serious risk.…
-
Windows Kerberos Flaw Enables SYSTEM Access Through Unicode Trick
CVE-2026-26128 is a significant security vulnerability affecting multiple versions of Microsoft Windows 10, allowing domain users to escalate privileges to SYSTEM via Kerberos reflection attacks. Despite the high risk, no confirmed exploitations have been…
-
ModSecurity patches WAF bypass flaws in version 3.0.16
The OWASP ModSecurity team has patched two vulnerabilities in ModSecurity version 3.0.16, identified as CVE-2026-52747 and CVE-2026-52761, which allow attackers to bypass Web Application Firewall (WAF) rules. CVE-2026-52747 relates to a multipart parser…
