News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Wed 8 Jul· 64 articles
-
Mexico's cybersecurity plan strained by upcoming World Cup 2026
Mexico's National Cybersecurity Plan faces its first major challenge with the ongoing FIFA World Cup 2026. Established by the Digital Transformation and Telecommunications Agency, the plan aims to enhance cybersecurity capabilities across the government. As…
Dark Reading -
Attacker Leverages AI to Breach AWS Cloud in 72 Hour Ransom Bid
A lone attacker orchestrated a rapid breach of a large AWS environment in just 72 hours using AI to exploit multiple cloud weaknesses and stolen credentials for financial extortion. Sygnia, a security firm, detailed how the attacker utilized AI workflows to…
Dark Reading -
Ubiquiti Inc UniFi Connect Application2 articles this day · SOCRadar first
Ubiquiti Fixes Severe UniFi OS Bugs, Including CVE-2026-50746 · Ubiquiti patches critical command injection flaw in UniFi Connect
-
Ubiquiti Fixes Severe UniFi OS Bugs, Including CVE-2026-50746
Ubiquiti has addressed seven critical vulnerabilities in its UniFi OS, including a significant flaw (CVE-2026-50746) that allows command injection attacks. Affected versions of the UniFi Connect Application include 3.4.16 and earlier. Other vulnerabilities…
-
Ubiquiti patches critical command injection flaw in UniFi Connect
Ubiquiti has released a security advisory (SAB-066) addressing multiple vulnerabilities in the UniFi ecosystem, including the critical CVE-2026-50746, a command injection vulnerability in the UniFi Connect Application. This vulnerability allows an attacker…
-
-
Introducing Secret Exfiltration Protection for GitHub Actions
StepSecurity has introduced a new feature to protect GitHub Actions from secret exfiltration attacks by blocking and detecting malicious workflows. Over recent years, several campaigns have exploited vulnerabilities in CI/CD pipelines to harvest sensitive…
StepSecurity -
Uniondale Union Free School District – Audit Follow-Up by New York State Comptroller (2023M-61-F)
In October 2023, NYS Comptroller Thomas DiNapoli released an IT audit on the Uniondale Union Free School District, highlighting significant deficiencies in managing non-student network user accounts. The audit revealed that 71% of non-student accounts were…
DataBreaches -
Linux flaws Januscape and GhostLock let users escalate to root
Two high-severity Linux vulnerabilities, CVE-2026-53359 and CVE-2026-43499, have been reported this week. The first vulnerability, named Januscape, affects KVM (Kernel-based Virtual Machine) on both AMD and Intel processors, allowing untrusted guest virtual…
-
Hacker Claims 35GB Accenture Source Code Leak, Data Up for Sale
A hacker, operating under the alias '888', has claimed to steal 35 GB of source code and sensitive data from Accenture, offering it for sale on a cybercrime forum. Accenture has acknowledged the breach but has not provided comprehensive details regarding the…
Security Affairs -
AI coding agents trigger endpoint security alerts prompting fixes
The article discusses the discovery that AI coding agents are inadvertently triggering endpoint security rules designed to detect malicious activities. This situation raises concerns about the interaction between AI systems and cybersecurity measures,…
The Hacker News -
Protecting Microsoft at AI speed: How SFI proactively hardens our cloud
Microsoft highlights the resilience of its cloud security through the Secure Future Initiative (SFI), integrating AI to proactively assess and enhance cloud infrastructures. The AI system evaluates services against rigorous security standards, identifying…
Microsoft -
SMBs hit by Vidar stealer and XMRig malvertising campaign
The article discusses a financially motivated cyberattack campaign utilizing the Vidar infostealer and XMRig cryptominer, primarily targeting small to midsize businesses (SMBs) through malvertising. Researchers from Palo Alto Networks' Unit 42 found that…
Dark Reading -
Accenture confirms source code leak after Azure DevOps hack claim
Accenture has confirmed a data breach involving the theft of internal source code, as claimed by a hacker on the forum PwnForums. The hacker reported stealing 35 GB of data, including Azure access keys, tokens, configuration files, and more. Access to the…
SecurityWeek -
UAT-78102 articles this day · Infosecurity first
China linked APT UAT7810 uses LongLeash backdoor on SOHO routers · China based UAT 7810 builds proxy network using custom malware
2 outlets-
China linked APT UAT7810 uses LongLeash backdoor on SOHO routers
A China-linked APT (UAT-7810) is enhancing its espionage efforts by building an operational relay box network, deploying new backdoors such as LongLeash, DogLeash, and JarLeash, which are used to exploit vulnerabilities in Ruckus routers. The APT has…
SecurityWeek -
China based UAT 7810 builds proxy network using custom malware
A China-linked hacking group identified as UAT-7810 has expanded its proxy network, utilizing newly discovered custom malware to enhance its operations. According to researchers from Cisco Talos, this advanced persistent threat (APT) group has built…
Infosecurity
-
-
JoomShaper SP Page Builder2 articles this day · SecurityOnline first
Foxit PDF Reader flaws expose users to arbitrary code execution · Network UPS Tools RCE Flaw Affects upsmon, With No Patch Yet
-
Foxit PDF Reader flaws expose users to arbitrary code execution
The content discusses critical vulnerabilities in Foxit PDF Reader and PDF Editor, particularly after the release of version 2026.1.2, which fixes 28 security flaws, with 20 potentially allowing arbitrary code execution when a user opens a malicious PDF. Key…
-
Network UPS Tools RCE Flaw Affects upsmon, With No Patch Yet
The page discusses critical cybersecurity vulnerabilities affecting various software, specifically listing four active exploits including CVE-2026-48908, CVE-2026-55255, CVE-2026-56290, and CVE-2026-48282. It highlights a particular remote code execution…
-
-
CareNow Faces Lawsuit Over Patient Data Shared With Google
A series of class action lawsuits have been filed against major healthcare companies for potentially exposing patients' personally identifiable information (PII) and protected health information (PHI). Notably, on June 11, three individuals (Jane Does)…
DataBreaches -
Android Spyware RedWing Hired via Telegram to Harvest Bank Logins
A new Android spyware named RedWing has been identified, being rented out via Telegram, allowing low-skilled attackers to hijack phones and steal banking credentials. Developed as a malware-as-a-service (MaaS), it features easy deployment through a Telegram…
Infosecurity -
Shwapno data leak exposes 4m customers, ransom ignored months
On August 19, 2025, hackers breached Shwapno’s database, stealing 410 GB of customer data, including personal details of 4 million customers, and demanded a ransom of $1.5 million. Shwapno did not inform customers for seven months and only took action after…
DataBreaches -
OpenSSH 10.4 fixes critical CVE-2026-60002 and other bugs
On July 6, OpenSSH 10.4 was released, addressing eight security vulnerabilities, with the most critical being CVE-2026-60002, a client-side use-after-free issue rated at 7.7. Other vulnerabilities involve risks during file transfers and weak server security…
-
HalluSquatting tricks AI coders into spreading botnet malware.
The article discusses a new cybersecurity threat termed 'HalluSquatting,' which can deceive AI coding assistants into installing botnet malware. This tactic takes advantage of the way these AI systems operate, potentially leading to significant security…
The Hacker News -
Ubiquiti issues urgent patches for UniFi Connect, Talk, Access
Ubiquiti has released critical patches for vulnerabilities across its UniFi product line, including UniFi Connect, Talk, Access, Protect, and OS. These patches address significant security flaws that could potentially expose networks to risks. The article…
The Hacker News -
Critical Ghost Cache Flaw Exposes Staff Accounts and Patch Now Available
Today, four active exploits were detected, including vulnerabilities in JoomShaper SP Page Builder, Langflow, Joomlack Page Builder, and Adobe ColdFusion. A critical cache poisoning vulnerability (CVE-2026-53943) was identified in Ghost (npm), affecting…
-
SecurityWeek Webinar Reveals Email Defence Gaps and AI Fixes
SecurityWeek is hosting a live webinar on July 8, 2026, focusing on the inadequacies of current email security strategies against evolving phishing tactics. The session aims to discuss the limitations of email defenses and how agentic AI can improve security…
SecurityWeek -
Critical pretix bugs allow session takeover, SSRF with key leak.
Today, four active exploits were detected, including vulnerabilities in JoomShaper and Adobe ColdFusion. Notably, pretix software has two critical vulnerabilities: CVE-2026-13602 involves session takeover, and CVE-2026-13603 concerns an SSRF with API key…
-
OpenMatter Joins Hashgraph Online to Set Secure AI Standards
OpenMatter Network has joined the Hashgraph Online (HOL) Partner Program to help establish standards for secure autonomous AI systems. This collaboration aims to address the emerging challenges posed by the deployment of AI agents across distributed systems,…
SecurityOnline -
Ghost Phishing Surge Evades Email Defences, Raises Breach Fears
The article discusses a new wave of 'ghost phishing' that is overwhelming traditional email security measures. This sophisticated technique allows attackers to send seemingly legitimate emails to victims by exploiting existing trust relationships, often…
The Hacker News -
Cloudflare rolls out Meerkat consensus for global control plane
Cloudflare introduces Meerkat, a new distributed consensus service designed to manage control-plane data across its 330+ global data centers. Unlike traditional consensus algorithms like Raft that rely on a leader, Meerkat uses the QuePaxa algorithm,…
Cloudflare -
SCMBANKER malware hits Mexican bank users with ClickFix scams
The article discusses SCMBANKER malware, which increasingly targets banking users in Mexico through deceptive lures via ClickFix. It highlights the evolution of cyber threats facilitated by AI, emphasizing the need for enhanced security measures. Key points…
The Hacker News -
IRIS C2 offers up to $7 million for zero‑day exploits
The article discusses the emergence of IRIS C2, a cybersecurity startup founded by notorious figures Jack Burkman and Jacob Wohl, both known for their involvement in fraudulent activities. IRIS C2, operating under Calvexa Group LLC, aims to acquire zero-day…
Krebs on Security -
Lone Hacker Uses AI to Breach AWS Cloud in Just 72 Hours
A recent report by Sygnia reveals how a lone threat actor used AI in a rapid cyber-attack on cloud infrastructure, completing tasks in 72 hours that typically take weeks. The attacker exploited security gaps in AWS, obtaining access keys and employing AI for…
Infosecurity -
APISIX JWT bug lets attackers bypass authentication, CVE-2026-39999
This report discusses a critical vulnerability in Apache APISIX, identified as CVE-2026-39999, which enables authentication bypass due to a JWT algorithm confusion flaw. The CVSS score is high at 9.1, indicating significant risk. The vulnerability affects…
-
Google Dialogflow CX Bug Allowed Attackers to Hijack AI Conversations
A vulnerability in Google Cloud's Dialogflow CX service allowed attackers to gain unauthorized control over conversational agents, manipulate dialogues, and exfiltrate sensitive information. The flaw, termed 'Rogue Agent', was linked to the use of 'Code…
SecurityWeek -
Your next car could be watching your face
The article discusses the new EU regulations mandating driver-monitoring technologies in all new cars sold in the EU, effective July 7, 2026, to reduce traffic incidents. This includes systems like Driver Drowsiness and Attention Warning (DDAW) and Advanced…
Malwarebytes -
GitHub 'Verified' Commits Can Be Rewritten Into New Hashes Without Breaking Signatures
The article discusses the implications of GitHub's 'verified' commits being potentially rewritten into new hash values without breaking their signatures. This issue raises concerns about the integrity and security of version control in software development.…
The Hacker News -
How verification steps can stop account takeover threats by 2026
The article discusses the evolving landscape of account takeover (ATO) prevention, emphasizing the crucial role of verification steps in cybersecurity strategies as we approach 2026. It highlights the need for organizations to strengthen verification…
The Hacker News -
GitHub Copilot blocks harmful chat but still suggests risky code
The article discusses how GitHub Copilot, an AI coding assistant, is programmed to refuse harmful requests in chat but may still output potentially dangerous code when asked. This raises concerns about the effectiveness of AI models in preventing misuse…
The Hacker News -
Four CVEs Emerge as Anthropic Extends Free Claude Fable 5 Access
The page details recent cyber vulnerabilities, including four CVE alerts. It also discusses the extension of free access to the Claude Fable 5 model for Anthropic subscribers until July 12, 2023, alongside usage limits and transitions to a paid credit system…
SecurityOnline -
RedWing Android malware on Telegram steals data via fake apps
The article discusses RedWing, a malware-as-a-service (MaaS) for Android that can be rented via Telegram, linked to Russian cybercriminals. It operates by utilizing phishing tactics to distribute malicious apps designed to look like legitimate app stores.…
Security Affairs -
Malvertising attack steals crypto data, deploys Vidar and XMRig
A new cyber-attack campaign has been identified that targets consumers and small to medium-sized businesses globally, using malicious methods to steal cryptocurrency data and mine Monero. First discovered by Unit 42 in April 2026, attackers use malvertising…
Infosecurity
