News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 10 so far |
Sat 11 Jul· 15 articles
-
CISA Flags iCagenda, Balbooa Forms Flaws; Urges Fix by July 2026
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added vulnerabilities in iCagenda and Balbooa Forms to its Known Exploited Vulnerabilities (KEV) catalog. These include CVE-2026-48939, which involves unrestricted file upload allowing for…
-
Compromised jscrambler npm package spreads Rust infostealer
A recent release of the jscrambler 8.14.0 npm package was compromised, resulting in the distribution of Rust-infostealer malware during installation. This incident highlights vulnerabilities in the software supply chain and emphasizes the importance of…
The Hacker News -
Hacker Groups Exploit Balochistan Police Portal in Espionage Bid
The article discusses a cyber espionage campaign where hackers exploited the Balochistan Police Portal as a tool for intelligence operations. The attack demonstrates a significant breach in cybersecurity, as it involved multiple hacker groups targeting…
The Hacker News -
UBoot flaws put routers, cameras at risk of early boot attacks
Binarly has identified six critical vulnerabilities in U-Boot, an open-source bootloader integral to many devices, including routers and smart cameras. These flaws range from allowing arbitrary code execution during boot image verification to causing…
Security Affairs -
Attackers Use Ghost GitHub Accounts to Map Organisations
The article reports on the misuse of the GitHub API by threat actors to systematically identify organizations, repositories, and user accounts, as observed in a recent Datadog report. The attackers are utilizing dormant 'ghost' accounts to send API traffic,…
SecurityWeek -
Malicious jscrambler npm update steals credentials, crypto data
On July 11, 2026, version 8.14.0 of the `jscrambler` npm package was released, containing a malicious preinstall hook that deploys a platform-specific native binary on Linux, Windows, and macOS. This version, used for JavaScript obfuscation and web-app…
StepSecurity -
Armenian national extradited over Ryuk ransomware, pleads guilty
An Armenian national, Karen Serobovich Vardanyan, was extradited from Ukraine to the U.S. and pleaded guilty to conspiracy and computer fraud related to Ryuk ransomware attacks. From November 2019 to April 2020, Vardanyan accessed numerous computer networks…
DataBreaches -
Former ransomware negotiator jailed 70 months for aiding BlackCat
Jon Brodkin reports that Angelo Martino, a former ransomware negotiator for DigitalMint, has been sentenced to 70 months in prison for colluding with BlackCat attackers. Martino provided inside information on victims' defense strategies to maximize ransom…
DataBreachesBlackCat -
Lawsuit claims TikTok exposed 2.4bn users' data in breach
California resident Sean Mortazi filed a class action lawsuit against TikTok Inc. on June 11, 2026, claiming a data breach that exposed personal data of over 2.4 billion users. The lawsuit, submitted to the U.S. District Court for the Central District of…
DataBreaches -
Dutch Police Tie Local Gang to Odido Massive Data Breach
Dutch police uncovered evidence indicating that local criminals may have been involved in a cyberattack on telecom provider Odido, which compromised the personal data of over 6 million customers. Authorities revealed that a Dutch-speaking impersonator,…
DataBreaches -
Wireshark 4.6.7 releases patch for 12 vulnerabilities and 16 bugs
The page reports the release of Wireshark version 4.6.7, which addresses 12 vulnerabilities and 16 bugs. The publication is by Didier Stevens, a senior handler at SANS, and it includes a link to detailed release notes. The threat level is noted as green.…
SANS ISC -
Critical Zimbra flaw lets hackers run code via malicious emails
The article discusses a critical vulnerability in Zimbra that could allow attackers to execute malicious code through crafted emails in user sessions. This flaw poses significant risks to email security and user data integrity. Additionally, the article…
The Hacker News -
Microsoft Tops CISA KEV List as Critical Flaws Surge in Q2 2026
In Q2 2026, 75 vulnerabilities were added to the CISA's Known Exploited Vulnerabilities (KEV) catalog, marking a 5.6% increase from the previous quarter. Notably, 21 of these vulnerabilities had a critical CVSS score of 9.0 or higher, indicating high…
SecurityOnline -
Balbooa Forms2 articles this day · SecurityOnline first
Apache IoTDB Fixes Path Traversal and Authentication Bypass Flaws (CVE-2026-24014) · Silver Fox uses SEO tricks to drop MODBEACON trojan via bugs
-
Apache IoTDB Fixes Path Traversal and Authentication Bypass Flaws (CVE-2026-24014)
Today, two active exploits were detected involving two vulnerabilities: CVE-2026-56291 and CVE-2026-48939, related to unrestricted file uploads in Balbooa Forms and iCagenda respectively. In addition, Apache IoTDB has three critical vulnerabilities…
-
Silver Fox uses SEO tricks to drop MODBEACON trojan via bugs
The content discusses the detection of active exploits linked to vulnerabilities in software, specifically 'CVE-2026-56291' related to Balbooa Forms and 'CVE-2026-48939' tied to iCagenda. A critical analysis from Qianxin's Red Raindrop Team reveals a hybrid…
-
