News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Thu 9 Jul· 67 articles
-
INTERPOL's First Light 2026 nets 5,800 arrests, $293m seized
INTERPOL's Operation First Light 2026, conducted from January 15 to April 30, 2026, resulted in 5,811 arrests and the interception of $293 million in illicit assets across 97 countries. The operation targeted social engineering scams and money laundering,…
Security Affairs -
Microsoft Malware Protection Engine5 articles this day · Security Affairs first
Patch for Windows Defender 0-day could allow attackers to fill hard disk · Microsoft patches Windows Defender zero day CVE-2026-50656
-
Patch for Windows Defender 0-day could allow attackers to fill hard disk
A Microsoft patch released on July 9, 2026, addresses a zero-day vulnerability in Windows Defender, tracked as CVE-2026-50656, which could allow attackers to gain administrative control over Windows 10 and 11 machines. The vulnerability became public due to…
-
Microsoft patches Windows Defender zero day CVE-2026-50656
Microsoft has addressed a significant zero-day vulnerability, called RoguePlanet, in Windows Defender, which was disclosed by a security researcher named Nightmare-Eclipse. The flaw, designated CVE-2026-50656, has a CVSS score of 7.8 and allows attackers to…
-
Microsoft patches zero day EoP flaw in Defender, CVE-2026-50656
Microsoft has released a security update to address a zero-day vulnerability named RoguePlanet, tracked as CVE-2026-50656, in Microsoft Defender. This Elevation of Privilege (EoP) vulnerability allows attackers to gain complete control over systems if they…
-
Microsoft patches privilege escalation flaw CVE-2026-50
Microsoft has released patches for a vulnerability in its Defender software called RoguePlanet, which was first publicly exploited by a researcher known as Nightmare Eclipse. This vulnerability, tracked as CVE-2026-50656, allows privilege escalation due to a…
-
Microsoft patches Defender bug CVE-2026-50656 after local exploit
Microsoft has addressed a critical vulnerability in its Defender software known as RoguePlanet (CVE-2026-50656), which allows local attackers to elevate privileges through the Malware Protection Engine. The flaw was rated 7.8 on the CVSS scale and originated…
-
-
Iran hackers hit medical device maker via unpatched flaws
The article discusses Iran's cyber threat landscape, emphasizing that organizations should not assume they are safe from attacks just because they don't operate critical infrastructure. Iranian-linked groups have been targeting various sectors by exploiting…
Dark Reading -
June 2026 sees credential harvesting kit hit Microsoft 365
The newsletter titled "Eighteen Newsletters and a Dozen Roses" by Daniel Schwalbe covers key cybersecurity developments investigated in June 2026. Highlights include: 1. **Investigations**: Analysis of a credential-harvesting kit targeting Microsoft 365,…
dti.domaintools.com -
Dormant GitHub Accounts Used to Map Corporate Targets
The article discusses how dormant GitHub accounts can facilitate cyber-attacks by allowing attackers to blend in while mapping corporate organizations. It highlights the risks associated with inactive accounts, including potential malicious activities and…
The Hacker News -
Hyadina2 articles this day · Dark Reading first
PoisonX signed driver fuels new GodDamn ransomware by Hyadina · Microsoft signed PoisonX driver fuels new GodDamn ransomware
2 outlets-
PoisonX signed driver fuels new GodDamn ransomware by Hyadina
The article discusses the emergence of a new ransomware family called GodDamn, identified by Symantec's Threat Hunter Team. This ransomware utilizes a signed kernel driver known as PoisonX, which allows it to disable security software effectively. The…
Security Affairs -
Microsoft signed PoisonX driver fuels new GodDamn ransomware
A new ransomware called 'GodDamn', operated by the group Hyadina, is utilizing a malicious kernel driver approved by Microsoft to disable security software. Hyadina, a ransomware-as-a-service operation, targets various American sectors including healthcare…
Dark Reading
-
-
GigaWiper malware mixes backdoor, wiper and fake ransomware
The article discusses the emergence of a new variant of malware called "GigaWiper," which functions as a Windows backdoor combined with disk-wiping capabilities, fake ransomware, and spyware. This malware is significant in the context of cyber espionage and…
The Hacker News -
npm 12 disables install scripts by default for supply chains
The article discusses the release of npm 12, which has disabled install scripts by default to enhance supply chain security. This change is aimed at mitigating risks associated with malicious scripts during package installations. It emphasizes the importance…
The Hacker News -
Injective npm supply chain attack leaks crypto wallet keys
On July 8, 2026, security breaches were reported involving 18 npm packages associated with Injective Labs' SDK, where attackers used a compromised developer account to introduce a backdoor. The malicious code, disguised as analytics, captured crypto wallet…
StepSecurity -
World Cup Crypto Betting Scams Rise: How to Spot Fake Tokens
The article discusses the emergence of scams related to crypto prediction and betting sites, particularly during the World Cup. Key points include various tactics used by these scams, such as pump-and-dump schemes, disappearing sites, and false free-to-play…
Malwarebytes -
Cloud bucket hijacks and Windows flaws spark new security push
The article provides a collection of cybersecurity news and resources, highlighting several prominent threats and security measures. Key points include: 1. **Threats Covered**: Issues like cloud bucket hijacking, Windows local privilege escalation (LPE)…
The Hacker News -
AssuranceAmerica breach exposes 6.9 million records via phishing
AssuranceAmerica, an insurance provider, confirmed a significant data breach that compromised up to 6.9 million individuals' personal data, specifically their driver's license numbers. The breach, which was discovered on March 17 and concluded on June 15,…
Malwarebytes -
QIZ Security Gets $17M to Strengthen Post Quantum Crypto Defenses
Israeli startup QIZ Security has raised $17 million in seed funding to enhance its cryptographic posture and post-quantum cryptography management platform. The round was led by Bessemer Venture Partners and Merlin Ventures, among others. The platform focuses…
SecurityWeek -
Roundcube fixes zero click XSS bug CVE-2026-54433 in new update
Roundcube has released versions 1.7.2 and 1.6.17 to patch six security flaws, including a significant zero-click XSS vulnerability tracked as CVE-2026-54433, which affects how plain-text emails are rendered. This vulnerability can allow attackers to execute…
-
Microsoft warns of Go based GigaWiper malware that wipes disks
The article discusses GigaWiper, a sophisticated malware identified by Microsoft Threat Intelligence in October 2025. GigaWiper is notable for its dual functionality as a backdoor and a destructive malware that includes multiple payloads like disk wiping and…
Microsoft -
Ukrainian Tax Firm Hit by Sandworm Warns Global Businesses
The article discusses the growing risk of cyberattacks on businesses due to the escalation of global conflicts, using the example of a Ukrainian tax software company, Intellect Services, which fell victim to Russia's Sandworm group through the NotPetya…
Dark ReadingSandworm -
UK launches AI driven Cyber Shield and Resilience Pledge
On July 7, 2026, the UK government announced two major initiatives aimed at enhancing the nation's cybersecurity: the Cyber Shield program and the Cyber Resilience Pledge. GCHQ Director Anne Keast-Butler emphasized the need for reimagining cybersecurity in…
SecurityWeek -
Vibe-Coded Malware Caught in Active Directory Attack
A recent report from Huntress reveals the use of AI-generated malware in a real cyber intrusion involving a PowerShell script aimed at mapping Active Directory environments. The malware, described as 'vibe-coded,' allows even less skilled attackers to create…
Infosecurity -
Palo Alto Networks Patches 13 Vulnerabilities
Palo Alto Networks has released advisories for over a dozen vulnerabilities in its products, including 13 specific to the firm and more than 500 patched flaws in Google’s Chromium. The most critical vulnerability, CVE-2026-0288, pertains to buffer overflows…
-
Prepare for quantum threats move to post quantum signatures now
The article discusses the urgency of transitioning to post-quantum signature algorithms due to the looming threat of quantum attacks on classical cryptography like RSA and ECC. It emphasizes that while quantum computers capable of breaking these algorithms…
Cloudflare -
Attackers Hijack AI Gateway to Mine Crypto via Amazon Bedrock EC2
The article discusses a cryptomining incident showcasing vulnerabilities associated with AI gateways, which serve as access points to AI models and cloud infrastructures. Researchers from Darktrace revealed that an attacker accessed an EC2 server hosting an…
Dark Reading -
AssuranceAmerica breach exposes nearly 7 million driver licences
AssuranceAmerica has confirmed a data breach affecting almost 7 million driver’s licenses after hackers accessed an employee's account on March 16, 2026. The breach, discovered on March 17, involved the theft of customer names, contact information, and…
Security Affairs -
Experts call for Zero Trust to stop fast evolving AI cyber attacks
The article discusses a recent webinar on defending against AI-driven cyberattacks, emphasizing the need for cybersecurity measures that keep up with the rapid pace of these threats. AI attacks evolve quickly, and it is crucial to implement robust security…
The Hacker News -
12 Million Impacted by Data Breach at Japanese Telco KDDI
KDDI, a major Japanese telecommunications company, confirmed that a June data breach affected over 12 million individuals. The breach, which occurred on June 17, involved unauthorized access to an email infrastructure used by five ISPs. A zero-day…
SecurityWeek -
CISOs Flag C Suite Blind Spot on Employee Driven Cyber Risk
A report by MetaCompliance indicates that 78% of CISOs believe C-level executives lack a full understanding of the cybersecurity risks posed by employee behaviors. Over 200 CISOs surveyed express concern that support for security awareness initiatives…
Infosecurity -
Critical OpenPLC v3 flaw lets attackers run code via file write
The ICS Advisory ICSA-26-190-01, released on July 9, 2026, addresses a critical vulnerability in OpenPLC v3. This vulnerability (CVE-2026-14480) allows authenticated attackers to write arbitrary files to the filesystem, which can escalate to native code…
-
Schneider Electric relays exposed via SNMP flaw CVE-2026-4832
The advisory highlights a vulnerability in Schneider Electric's Easergy MiCOM Px40 Series products, which are crucial for medium to extra-high voltage protection. The issue involves unauthorized exposure via the SNMP protocol affecting multiple versions of…
-
PowerChute bugs allow file overwrite and denial of service
The ICS Advisory for Schneider Electric PowerChute Serial Shutdown, released on July 9, 2026, identifies multiple vulnerabilities in the product versions up to 1.4. Exploiting these vulnerabilities can lead to serious issues, including file overwrites,…
CISA -
GhostLock Lets Attackers Break Out of Containers, Gain Root
Nebula Security identified and exploited a Linux kernel vulnerability tracked as CVE-2026-43499, named GhostLock, affecting all major Linux distributions since 2011. This use-after-free vulnerability, stemming from a cleanup function in the kernel, allows an…
-
Operation First Light 2026 nets 5,800 arrests, $300M seized
Operation First Light 2026, funded by China's Ministry of Public Security, resulted in over 5,800 arrests and nearly $300 million in intercepted illicit assets from cybercrime activities across 97 countries from January 15 to April 30, 2026. This…
Infosecurity -
GhostApproval flaw lets malicious repos hijack AI code assistants
The article discusses a significant security flaw known as 'GhostApproval' that affects six major AI coding assistants, allowing malicious repositories to exploit approval prompts, potentially leading to unauthorized access and remote code execution.…
Infosecurity -
AI Driven Threats Prompt Call for Stronger Cyber Defences
The article discusses the evolving landscape of cybersecurity, emphasizing the threats and challenges posed by AI technologies. Key points include the need for organizations to adopt comprehensive security measures, such as securing AI agents and AI-built…
The Hacker News -
GodDamn ransomware leverages PoisonX driver to bypass defences
The article discusses "GodDamn Ransomware" which employs the "PoisonX" driver to bypass endpoint defenses. This malware signifies an evolving threat in cybersecurity, using advanced methods to disable security mechanisms and increase its effectiveness. Key…
The Hacker News -
Teen arrested in Tokyo for ChatGPT powered attack on net cafe
An 18-year-old man was arrested in Tokyo for his alleged role in a cyberattack on the Kaikatsu Club internet cafe, using a program developed by a younger teen leveraging ChatGPT. The arrest was made by the Metropolitan Police Department for offenses…
DataBreaches -
Mount Royal University hit by ransomware, 10TB data stolen
Mount Royal University (MRU) in Alberta, Canada, suffered a ransomware attack that resulted in the theft and deletion of employee and student data. Discovered on June 17, the attack disrupted internal systems and online services. MRU announced that a…
SecurityWeek
