News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 10 so far |
Fri 10 Jul· 69 articles
-
Two Chrome updates in two days fix critical vulnerabilities
Google released two Chrome updates on July 8 and 9, 2026, addressing 27 security vulnerabilities, including two critical 'use-after-free' vulnerabilities. The updates are designated versions 150.0.7871.114/.115 for Windows and macOS, and 150.0.7871.114 for…
Malwarebytes -
Fake Entra passkey trick lets hackers breach Microsoft 365
The article discusses a cybersecurity incident where hackers exploited a fake Microsoft Entra passkey enrollment to gain unauthorized access to Microsoft 365 accounts. It highlights the techniques used by attackers in social engineering, emphasizing the need…
The Hacker News -
Fake Go Packages Power Malware Network Aimed at Crypto Users
Researchers identified 222 GitHub repositories involved in a malware operation through fake Go packages, known as "Muck and Load." This operation was initiated from a malicious Go module that masqueraded as a legitimate DNS scanning tool and led to the…
Security Affairs -
Microsoft boosts Windows patches with AI, CISA follows suit
Microsoft has announced an expected increase in the number of security updates for Windows, attributing this surge to the integration of AI in security analysis. By employing AI techniques, Microsoft aims to identify more zero-day vulnerabilities and enhance…
Infosecurity -
FastNetMon launches Netomics, a self‑hosted BGP tool for ISP
FastNetMon has launched Netomics, a self-hosted BGP routing intelligence platform designed for ISPs, cloud providers, IXPs, and large enterprises. It consolidates live routing data, RPKI validation, and historical data into a single on-premises application,…
SecurityOnline -
BlackCat3 articles this day · SecurityOnline first
Former ransomware negotiator jailed for aiding BlackCat gang · Ransomware negotiator jailed 70 months for BlackCat role
3 outlets-
Former ransomware negotiator jailed for aiding BlackCat gang
Former ransomware negotiator Angelo Martino has been sentenced to 70 months in prison for conspiring with the BlackCat ransomware gang. While representing victims in ransom negotiations, he shared confidential strategies and victim details with the…
Security Affairs -
Ransomware negotiator jailed 70 months for BlackCat role
A ransomware negotiator received a 70-month prison sentence for involvement in BlackCat attacks. The article discusses the increasing severity of cybercrime and the justice system's response. It highlights the impact of ransomware on businesses and the legal…
The Hacker News -
Ex ransomware negotiator jailed 70 months after aiding BlackCat
Angelo Martino, a former ransomware negotiator in Florida, has been sentenced to 70 months in prison for betraying his clients by leaking confidential details to the BlackCat ransomware group. Martino, who had been hired to aid victims of ransomware attacks,…
SecurityOnline
-
-
Microsoft rolls out WSL Containers for Docker free Linux on Win10
Microsoft has introduced WSL (Windows Subsystem for Linux) Containers, allowing users to run containers on Windows 10 without needing Docker Desktop. This feature works on Windows 10, even after mainstream support has ended, provided the system is at least…
SecurityOnline -
Microsoft warns of GigaWiper malware that wipes disks and spies
GigaWiper is a sophisticated malware identified by Microsoft that operates as a destructive backdoor and wiper, exhibiting multiple system-level sabotage capabilities. First observed in October 2025, it is built on Go and includes features for executing…
SecurityWeek -
Phishing email hides huge HTML padding to dodge AI scanners
The article discusses a phishing email that employs "comment stuffing" in an HTML attachment to evade AI-based detection tools. The email, disguised as a Microsoft Teams notification, exhibits several unusual characteristics, such as an empty envelope sender…
SANS ISC -
Ill Bloom exploit steals $3.1M from crypto wallets exposing flaws
The article discusses the 'Ill Bloom' vulnerability that has enabled attackers to drain $3.1 million from cryptocurrency wallets. This serious cybersecurity threat highlights vulnerabilities within cryptocurrency platforms, emphasizing the need for improved…
The Hacker News -
NHS warns staff of jail risk for illegal patient data access
The NHS has issued a warning to its staff regarding unauthorized access to patient data, emphasizing potential jail time for violators. Jim Mackey, head of the NHS, described such access as a significant breach of trust. This warning coincides with a…
Infosecurity -
CVE-2026-13753 exposes HP Deskjet 2800 WiFi Direct, SNMP data
A security vulnerability, tracked as CVE-2026-13753, has been identified in the HP Deskjet 2800 printer series, which exposes sensitive device configuration data due to missing authorization checks in the printer's API. This flaw allows unauthenticated…
-
HalluSquatting Exploits AI Hallucinations to Build Hidden Botnets
Researchers from Tel Aviv University, Technion, and Intuit have introduced 'HalluSquatting', a novel attack method exploiting AI assistants’ hallucination tendencies. Unlike traditional prompt injection attacks, HalluSquatting uses untargeted promptware to…
SecurityWeek -
Microsoft finds GigaWiper Go backdoor blends espionage and wipe
Microsoft has discovered GigaWiper, a new type of Go-based backdoor that merges functionalities from three existing malware families. This sophisticated malware incorporates espionage features, remote control, and various destructive wiping capabilities.…
Security Affairs -
Anthropic releases Reflect to monitor Claude AI usage
Anthropic introduced 'Reflect', a digital health and efficiency dashboard for its AI tool, Claude. Currently in beta, it is accessible to Free, Pro, and Max subscribers. The tool offers users insights into their AI usage patterns, encouraging healthier…
SecurityOnline -
Linux Kernel FUSE Flaw Lets Local Users Escalate to Root
CVE-2026-31694 is a critical vulnerability in the Linux kernel related to FUSE that allows local users to exploit a page cache overflow to gain root privileges. The issue has a CVSS score of 7.8 (high) and affects a range of recent Linux kernel versions. It…
-
Hackers flood GitHub with fake DNS tools to drop Windows spyware
Operation Muck and Load is a malware campaign utilizing over 200 GitHub repositories, which have been reported to deliver various Windows malware including spyware and trojan downloaders. The threat actor has created 222 lure repositories, misleadingly…
SecurityWeek -
Microsoft's AI system MDASH speeds up Windows flaw detection
Microsoft's new system, MDASH, integrates AI into Windows vulnerability management to enhance the identification and validation of software flaws. This proactive approach aims to accelerate discovery, improve validation processes, and speed up security…
SOCRadar -
PamStealer macOS Malware Poses as Maccy to Steal Passwords
PamStealer is a newly discovered macOS infostealer, identified by Jamf Threat Labs, which masquerades as a fake Maccy clipboard app. This Rust-based malware targets Apple Silicon Mac users and employs a two-stage infection process. The first stage uses an…
SecurityOnline -
Four GNU Guix flaws allow attackers gain root and corrupt files
The GNU Guix project revealed four vulnerabilities affecting its software components, allowing for remote privilege escalation and potential file corruption. The flaws primarily impact the 'guix substitute' helper and 'guix pull' functions. Key issues include…
SecurityOnline -
JADEPUFFER Marks the First AI-Driven Agentic Ransomware Attack
The article discusses the JADEPUFFER ransomware, identified as the first agentic ransomware operation, executed entirely by an AI agent without human intervention. The threat, assessed by Sysdig, targeted a production MySQL and Alibaba Nacos server,…
-
Meta’s Muse Spark 1.1 AI promises faster smarter agent workflows
Meta has introduced Muse Spark 1.1, an advanced AI model focused on improving intelligent agents and programming for complex multimodal tasks. Unlike its predecessors, it is not open-source, aligning with Meta's shift towards closed-source commercial models.…
SecurityOnline -
Google Introduces AI Labels for Ads on Search and YouTube
Google is enhancing transparency in digital advertising by introducing new AI transparency tools for Google Ads. This update aims to help users discern between authentic and AI-generated content on platforms like Google Search and YouTube. The 'My Ad Center'…
SecurityOnline -
Anthropic resets Claude Code quotas, adds fees after July 12
The article discusses recent developments in AI models from Claude Code and Codex. Anthropic reset quotas for premium subscribers, allowing access to the Claude Fable 5 model, while simultaneously making it less accessible due to new usage credit fees after…
SecurityOnline -
Cloudflare’s Drop Lets You Host Temporary Static Sites Instantly
Cloudflare has launched a new feature called Drop, which allows users to host static websites easily. Uploaded files expire after 60 minutes by default, making it suitable for temporary projects. Users can claim their sites to ensure permanent access. The…
SecurityOnline -
Django SQLi bug CVE-2026-1207 exploited, patch urged
CVE-2026-1207 is a high-severity SQL injection vulnerability in Django, with a CVSS score of 8.3. It affects versions >= 6.0a1, < 6.0.2, >= 5.2a1, < 5.2.11, and >= 4.2a1, < 4.2.28, specifically during RasterField lookups in PostGIS databases. The flaw has…
-
Jan Kopriva notes green threat level in ISC Stormcast July 10
The content details the handler on duty, Jan Kopriva, and indicates a threat level of green. It includes links to previous diaries and highlights the ISC Stormcast for July 10th, 2026. Additionally, there are references to discussions and various…
SANS ISC
