News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Thu 9 Jul· 67 articles
-
Microsoft Patches RoguePlanet Defender Zero-Day That Grants SYSTEM Access
Microsoft has released a patch for a critical zero-day vulnerability in its Defender software, identified as CVE-2026-50656, which could allow local attackers to gain SYSTEM privileges. This vulnerability is due to a race condition in the Microsoft Malware…
-
Meta AI Image Tool Uses Instagram Photos Without User Consent
Meta has introduced a new AI image generation model, Muse Image, which allows users to create images using the likeness of individuals from public Instagram accounts. Users must opt out of this feature by navigating to their Instagram settings, though…
Malwarebytes -
70+ Cyber Firms Back CREST AI Security Charter for Safer Defence
A new AI Security Charter has been launched, backed by over 70 cybersecurity firms, outlining nine principles for the responsible use of AI in cybersecurity. The principles focus on accountability, transparency, documentation, data handling, security, and…
Infosecurity -
Cybersecurity Firms Back New AI Charter for Safer Tech Practices
Over 70 cybersecurity organizations have endorsed a new AI Security Charter, launched by CREST, emphasizing responsible AI use in cybersecurity. The charter includes nine guiding principles focused on accountability, transparency, documentation, data…
Infosecurity -
Google to drop MV2 extensions, like uBlock Origin, by August 2026
Google is removing all Manifest V2 (MV2) browser extensions by August 31, 2026, including popular ad blockers like uBlock Origin. This change is part of Google's push towards Manifest V3 (MV3), aimed at improving security and reducing resource usage for…
SecurityOnline -
GhostApproval bug lets attackers trick AI developers via symlinks
A new security vulnerability named **GhostApproval** has been discovered by Wiz, affecting several leading AI coding assistants like Claude Code and Amazon Q Developer. This attack exploits a longstanding issue with symbolic link (symlink) following,…
SecurityWeek -
Microsoft patches RoguePlanet Defender flaw giving SYSTEM access
Microsoft has patched a critical vulnerability in its RoguePlanet Defender that could allow attackers to gain SYSTEM privileges. The issue highlights the ongoing cybersecurity challenges and the importance of maintaining updated defenses. This patch is part…
The Hacker News -
Fake 7Zip and WireVPN apps hijack devices for proxy network
The article discusses an operation named Lurking Lizard where fake applications, specifically a fraudulent 7-Zip utility and WireVPN, convert user devices into residential proxy nodes without consent. Infoblox's research reveals that the threat actor has…
Security Affairs -
Google adds AI powered Video Remix to Photos using Gemini Omni
Google has introduced a new AI video editing feature, Video Remix, in Google Photos, powered by the Gemini Omni model. This feature allows users to easily reshape and transform their videos using simple instructions and a library of templates, eliminating…
SecurityOnline -
European Organizations Have a Collaboration Security Confidence Gap
A recent survey indicates a significant confidence gap in the security of collaboration tools among European organizations. While 84% of IT professionals in the UK, France, and Germany express confidence in their collaboration environments, only 29% believe…
Dark Reading -
North Korea-Linked PolinRider Supply Chain Attack Expands Across Open Source
The PolinRider supply chain attack, attributed to suspected North Korean hackers linked to the Contagious Interview cluster, has been identified as an ongoing campaign impacting developers across platforms like npm, Packagist, and Chrome. Researchers have…
SecurityOnline -
Rise in malicious AI chatbots fuels new cyberattack threats
Cybercriminals are increasingly utilizing AI agents and chatbots to conduct cyber-attacks. A report by ESET analyzed 900,000 AI skills in public repositories, finding tens of thousands of suspicious and malicious instances. The report states that the rise of…
Infosecurity -
Google fixes 27 Chrome 150 bugs, two use after free flaws
Google released a Chrome 150 security update addressing 27 vulnerabilities, including two critical use-after-free flaws in the Ozone and Views components. This update patches 13 use-after-free defects, and highlights a trend where most vulnerabilities were…
SecurityWeek -
Meta's New AI Image Tool Lets Others Use Your Public Instagram Photos in AI Images
Meta has introduced a new AI image tool allowing users to include public Instagram photos in AI-generated images. This development raises privacy concerns as it leverages user-generated content without explicit consent. The tool is indicative of a growing…
The Hacker News -
KDDI breach leaks 12.2m user emails, 7.6m passwords
The KDDI data breach affected approximately 12.23 million users, with hackers stealing email addresses and around 7.61 million passwords. KDDI confirmed the breach on June 23 and updated the public on the incident on July 6. The hackers exploited…
SecurityOnline -
8Layers raises $2.9M to boost European identity security
Spanish startup 8Layers has secured a $1.1 million pre-seed extension round, raising a total of $2.9 million in initial funding. The funding, led by Criteria Venture Tech and Bankinter, comes as 8Layers launched its digital identity protection platform,…
SecurityWeek -
Attackers Trick AI Code Scanning Agents Into Running Malware
The article discusses the vulnerability of AI agents developed to detect malicious code, highlighting that they can be misled into executing the very threats they are programmed to identify. It examines the implications for cybersecurity, emphasizing the…
The Hacker News -
Unpatched Backdoor in Tenda Firmware Grants Admin Access to Devices
A security researcher has identified an undocumented backdoor in various Tenda firmware versions, allowing unauthorized administrative access to devices' web management interfaces. This vulnerability, tracked as CVE-2026-11405, affects Tenda routers,…
-
LineageOS Browser Flash Tool Makes ROM Install Easier
Today's cybersecurity update outlines four active exploits detected: 1) CVE-2026-48908 - JoomShaper SP Page Builder allows unrestricted upload of harmful files; 2) CVE-2026-55255 - Langflow has an authorization bypass vulnerability; 3) CVE-2026-56290 -…
-
GhostApproval symlink bug lets attackers hijack AI coding agents
The article discusses vulnerabilities related to GhostApproval symlink flaws that may allow malicious repositories to execute code within AI coding agents. This poses significant risks to cybersecurity, especially as organizations increasingly rely on AI…
The Hacker News -
Fake 7 Zip installers hijack PCs to run residential proxy malware
The article discusses the emergence of fake 7-Zip installers that exploit vulnerabilities by turning users' devices into residential proxy nodes. This malware facilitates unauthorized access and could potentially increase the risk of further cyber attacks.…
The Hacker News -
GitLab fixes critical XSS bug CVE-2026-6896 for developer roles
This document discusses a critical GitLab patch released on July 8, 2026, which addresses eight security vulnerabilities across various versions (19.1.2, 19.0.4, 18.11.7). The most severe vulnerability is a stored cross-site scripting (XSS) bug,…
-
Critical CVE‑2026‑0288 buffer overflow exposes Palo Alto firewalls
Four active critical exploits were detected today, including vulnerabilities in JoomShaper SP Page Builder, Langflow, Joomlack Page Builder, and Adobe ColdFusion. A significant focus is on CVE-2026-0288, a buffer overflow vulnerability in Palo Alto Networks'…
-
Guy Bruneau On Duty ISC Stormcast July 9 Shows Green Threat Level
The content details the handler on duty, which is Guy Bruneau, and notes the current threat level as green. It references the ISC Stormcast for July 9, 2026, and provides links to various resources such as classes taught by Dr. Johannes Ullrich, previous…
SANS ISC -
Google fixes 27 Chrome bugs, two critical use after free
Google has released a security update for Chrome, addressing 27 vulnerabilities, including two critical use-after-free bugs. These bugs affect memory management in the Ozone and Views components, allowing potential exploitation without user interaction. All…
SecurityOnline -
Belarus protest bot caught scanning honeypots with plea
The content discusses an unusual scanning bot identified in DShield logs, with requests containing the message "HELP ME ESCAPE FROM BELARUS PLEASE." This bot reportedly scans open HTTP and SSH ports, and attempts to brute force SSH logins with default…
SANS ISC -
Nayax Faces Unverified Claims of Massive Card Data Breach
Nayax is a fintech company based in Israel that offers cashless payment solutions for self-service machines and is listed on Tel Aviv and Nasdaq. Recently, Nayax detected unusual activity involving one of its subsidiaries, leading to an ongoing investigation…
DataBreachesThe Syndicate
