News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Fri 10 Jul· 69 articles
-
Gentlemen Ransomware Gang Hits 580 Victims, Targets Manufacturing
The article discusses the emergence and activities of The Gentlemen ransomware group, a Ransomware-as-a-Service (RaaS) operation active since 2025. It highlights their use of various programming languages to develop ransomware variants and their notable…
unit42.paloaltonetworks.comThe Gentlemen -
Zimbra patches critical XSS flaw after Google TAG discovery
Zimbra has released version 10.1.19 to address a critical stored XSS vulnerability in its Classic Web Client, which allows malicious emails to execute harmful code when opened. This vulnerability can lead to unauthorized access to mailbox information,…
Security Affairs -
Pro Iran hacktivists boost DDoS leak attacks amid US tensions
The report discusses the decentralized pro-Iran hacktivist ecosystem emerging in the context of U.S.-Iranian regional tensions. It highlights that this ecosystem comprises various loosely aligned groups, including jihadist cyber collectives and nationalist…
dti.domaintools.com313 Team -
AI Tool ScamBuster Lures Phishers to Expose Their Operations
The article discusses "ScamBuster," an open-source, AI-driven system designed to combat phishing scams by engaging with attackers using victim personas. Developed by Laurent Giovannoni, ScamBuster aims to collect data from scammers to identify their…
Dark Reading -
Jen Ellis MBE Champions Global Security Researcher Rights
Jen Ellis, recently awarded the Member of the Order of the British Empire (MBE), has made significant impacts in cybersecurity policy, particularly advocating for security researchers. Her journey began after witnessing her friend HD Moore face legal threats…
Dark Reading -
CISA KEV Flags iCagenda File Upload Flaw CVE-2026-48939
On 10 July 2026 the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2026‑48939 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw resides in iCagenda’s iCagenda product and is named the iCagenda Unrestricted Upload of File…
-
CISA KEV Catalog Highlights CVE-2026-56291 Flaw in Balbooa Forms
CISA has added CVE‑2026‑56291 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Balbooa Forms and is named the Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability. It allows an unauthenticated attacker to upload…
-
Malicious npm packages hit Injective Labs after GitHub breach
The article discusses a recent compromise of Injective Labs' GitHub, resulting in the deployment of malicious npm packages designed to steal wallet keys. This incident highlights vulnerabilities in the software supply chain and the continuous risks posed by…
The Hacker News -
Healthcare Ransomware Surge Hits UMC, Sparks 110% Spike
In the first half of 2026, cyberattacks on the healthcare sector increased by 14%. Notably, attacks on healthcare businesses surged by 110% compared to the same period last year. A ransomware attack on the University of Mississippi Medical Center caused…
Dark Reading -
URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat
Progress Software has issued an urgent recommendation for ShareFile customers to shut down their Storage Zone Controllers due to a critical security threat. Customers are being advised to take immediate action to prevent potential breaches. The announcement…
The Hacker News -
Microsoft SFI progress report highlights AI driven security gains
The July 2026 progress report on Microsoft's Secure Future Initiative (SFI) highlights advancements in cybersecurity driven by AI and the importance of proactive defense against evolving cyber threats. The report is structured around three themes: secure…
Microsoft -
CISA acts after AWS GovCloud keys leaked in contractor GitHub
The US Cybersecurity and Infrastructure Security Agency (CISA) addressed its internal incident response to exposed AWS GovCloud keys, which were found in a public GitHub repository owned by a contractor. No sensitive data was compromised, and CISA took…
Infosecurity -
Six U Boot flaws leave embedded devices open to boot time attacks
The article discusses six newly discovered vulnerabilities in U-Boot, a widely used bootloader for embedded devices. These security flaws could potentially allow malicious images to crash devices or execute unauthorized code during the boot process. The…
The Hacker News -
Microsoft warns of GigaWiper malware blending espionage and wipe
Microsoft has identified a new malware called GigaWiper, which combines espionage and destructive capabilities, marking a significant shift in cyber-attack strategies. This multi-purpose backdoor allows attackers to conduct espionage while also executing…
Infosecurity -
Armenian admits Ryuk role; QuimaRAT seen on dark web
SecurityWeek's cybersecurity news roundup covers key developments including the guilty plea of Armenian national Karen Vardanyan for involvement in Ryuk ransomware attacks, the emergence of the QuimaRAT remote access trojan on dark web forums, and Canada's…
SecurityWeek -
Laser flaw lets attackers reset Tangem wallet passwords
The article highlights a critical vulnerability in the Tangem wallet, where a laser attack can reset passwords on cards that cannot be patched. This issue poses a significant risk to users, as these types of hardware wallets rely on their security features…
The Hacker News -
Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws
The article discusses a recent study detailing an attack chain that exploits three OpenClaw vulnerabilities to access WhatsApp and then pivot to host systems. Conducted by a prominent security researcher, the investigation reveals specific techniques used in…
The Hacker News -
HalluSquatting Turns AI Hallucinations into Malware Delivery Tool
The article discusses the emerging risk of HalluSquatting, a technique where attackers exploit AI models' tendency to generate plausible yet incorrect resource names. This vulnerability allows AI agents to fetch malicious content instead of intended…
SOCRadar -
Apache Camel fixes SSRF, header injection and Keycloak auth bugs
The Apache Camel project has patched four high-severity vulnerabilities across multiple components, primarily allowing attackers to inject control headers and execute server-side request forgery (SSRF) attacks, alongside a critical authentication bypass in…
SecurityOnline -
Nine flaws found in ATM CryptoPro software spark security worries
A security researcher has uncovered nine vulnerabilities in CryptWare CryptoPro Secure Disk software used in ATMs and corporate security programs. The discovery raises questions about the software's effectiveness, particularly as it relates to a major ATM…
Dark Reading -
CVE-2026-47291 Flaw in Windows IIS Allows Kernel Code Execution
The Zero Day Initiative's report details CVE-2026-47291, a remote code execution vulnerability in the Windows HTTP.sys protocol stack, discovered by the TrendAI Research Team. The vulnerability arises from insufficient validation of incoming HTTP requests…
-
More Countries Jump on the Social Media Ban Wagon
The article discusses the increasing trend of countries implementing age restrictions and bans on social media for minors, primarily driven by concerns over mental health and safety. Countries like Australia, Canada, and the UK have introduced new laws to…
Dark Reading -
AI coding assistants hijacked to run hidden malicious code
Researchers have raised concerns about the security implications of AI tools like Anthropic's Claude Code and OpenAI's Codex, which are designed to automate vulnerability discovery and patch management. A report from the AI Now Institute highlights a…
Infosecurity -
Microsoft warns of new destructive Windows malware GigaWiper
The article discusses a new Windows malware called GigaWiper, identified by Microsoft. This modular backdoor, seen in cyber intrusions since October 2025, combines remote access capabilities with multiple destructive functions. Key features include various…
Malwarebytes -
Critical flaw in Gardyn IoT Hub lets attackers run code remotely
The Gardyn IoT Hub has three critical vulnerabilities (CVE-2026-13768, CVE-2026-55726, CVE-2026-54477) that can affect its smart gardening devices, with CVE-2026-13768 scoring 10.0 (critical) on the CVSS scale, enabling remote code execution via hard-coded…
-
New MODBEACON RAT exploits gRPC stealth for encrypted attacks
The article discusses a new Remote Access Trojan (RAT) named MODBEACON, which utilizes gRPC streaming to facilitate encrypted command and control (C2) traffic. This advanced technology allows malicious actors to bypass traditional detection methods by…
The Hacker News -
AI coding tools boost output but raise security and cost worries
The article discusses the intersection of AI coding tools and security risks. While AI tools, costing $19-$200/month/user, have been adopted by 91% of organizations, concerns over security vulnerabilities and hidden costs must be considered. Reports indicate…
Dark Reading -
New Ransomware Exploits Malicious Driver to Remove Cybersecurity Protections
The article discusses the emergence of the GodDamn ransomware, a variant of the Beast ransomware, which exploits Microsoft-signed malicious drivers to disable cybersecurity protections. First identified in May 2026, this ransomware is part of the Hyadina…
Infosecurity -
Cloudflare Adds Region Hints to Smart Tiered Cache to Cut Latency
The article discusses improvements to the Smart Tiered Cache at Cloudflare, specifically for public cloud regions. Launched in 2021, Smart Tiered Cache enhances cache efficiency by selecting the best data center based on real-time latency. However,…
Cloudflare -
Florida expert jailed 70 months for helping BlackCat ransomware
Angelo Martino, a cybersecurity expert in Florida, was sentenced to 70 months in prison for aiding a ransomware gang while acting as a ransomware negotiator. He pleaded guilty in April and is among three individuals charged for such activities; the other two…
SecurityWeekBlackCat -
Over 9,000 ransomware attacks; US leads, healthcare worst hit
Since 2018, there have been over 9,000 confirmed ransomware attacks globally, with roughly 1,400 to 1,550 reported annually since 2023. The U.S. accounts for about half of these incidents, followed by France, Germany, Japan, Canada, and the UK. Major…
Security AffairsLockBit -
Saudi MSSP market to double as top 10 providers named for 2026
The article discusses the top 10 Managed Security Service Providers (MSSPs) in Saudi Arabia for 2026, emphasizing the country's growing cybersecurity market with projected expansion from USD 4 billion in 2025 to USD 8.9 billion by 2030, driven by regulatory…
SOCRadar -
Chinese and Indian hackers breach Pakistani police for two years
New research from SentinelOne reveals that cyberespionage groups linked to China and India infiltrated Pakistani law enforcement networks, particularly targeting the Balochistan Police, over a two-year span from February 2024 to April 2026. The attacks,…
SecurityWeek -
XQUIC XRING flaw lets remote clients crash HTTP/3 servers
The article discusses a severe unpatched vulnerability in the XRING implementation of XQUIC that allows remote clients to crash HTTP/3 servers. Launched on July 10, 2026, it highlights the importance of quick mitigation by server operators to avoid potential…
The Hacker News -
Lumen scales asset tracking to 1.1M with exposure management
The article discusses how Lumen Technologies transitioned from managing 17,000 to 1.1 million assets by implementing a comprehensive exposure management strategy. Key points include the adoption of advanced tools for asset visibility and risk assessment,…
The Hacker News -
Hacker server exposed after WP-SHELLSTORM infects WordPress sites
The article discusses the exposure of a hacker server responsible for backdooring thousands of WordPress sites using the WP-SHELLSTORM malware. It highlights the significant rise in cybercrime and the vulnerabilities exploited in WordPress, urging website…
The Hacker News -
Top 10 Cyber Threat Exposure Management Platforms
The article discusses the top 10 Cyber Threat Exposure Management (CTEM) platforms, highlighting their roles in helping organizations manage their cyber exposure effectively. It explains that CTEM is a continuous program aimed at reducing vulnerabilities…
SOCRadar -
Vishing Attack Hits Microsoft 365 Users via Fake Passkey Logins
A new vishing campaign targeting Microsoft 365 users has been identified, described by Okta as employing voice calls that lead victims to counterfeit login pages prompting passkey registration. The campaign, tracked as O-UNC-066, has chiefly impacted sectors…
SecurityWeek -
Criminals Exploit Students in Mule Betting Scams to Launder Money
Mule betting scams involve criminals recruiting individuals to open online gambling accounts using their personal details, often without their knowledge. These accounts are then used to launder money, making the source of funds difficult to trace. Vulnerable…
Malwarebytes -
Study finds free Android VPN apps leak data and track users
The article discusses a study that examined 281 free Android VPN applications, revealing significant security issues including traffic leaks, unencrypted data transmission, and extensive user tracking. These vulnerabilities pose risks to user privacy and…
The Hacker News
