News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Mon 13 Jul· 72 articles
-
Microsoft Warns ShinyHunters Abuse OAuth to Hit SaaS Firms
Microsoft's recent blog details ongoing threats from ShinyHunters targeting SaaS organizations, particularly through OAuth abuse aimed at applications like Salesforce. Key intrusion paths include: 1. **Voice Phishing**: Attackers impersonate IT personnel to…
MicrosoftShinyHunters -
UK and EU sanction Russian hackers as NSA warns on router flaws
The UK and EU have jointly imposed sanctions on 24 Russian individuals and entities linked to cyberattacks and disinformation campaigns. This marks a significant collaboration to tackle Russia's cyber operations, especially those orchestrated by the Federal…
Dark ReadingFSB Center 16 -
VPN service favored by ransomware groups is sanctioned by US
The U.S. government sanctioned a VPN provider, 1VPNS, and its Ukrainian administrator, Dmytro Rashevskyi, for supporting ransomware gangs that target American municipalities, hospitals, schools, and businesses. The Treasury Department stated that 1VPNS…
DataBreaches -
Russian hackers exploit routers to target US critical sectors
The U.S. government warns that Russian state hackers are targeting home and small office routers to compromise them for malicious activities against sensitive sectors. Cybersecurity and Infrastructure Security Agency (CISA) indicates that these actors…
Ars Technica -
Lidl informs EU shoppers of breach at third party IT provider
Lidl informed online shop customers in Germany, Belgium, and the Netherlands about a data breach involving personal data stolen from a third-party IT service provider. The compromised data includes names, phone numbers, emails, dates of birth, and customer…
Security Affairs -
Zenith Bank faces arraignment July 21 for Makers Island data leak
The Federal High Court in Abuja has scheduled the arraignment of Zenith Bank Plc and three others for July 21, 2026, over allegations of illegally accessing and disclosing confidential financial records of Makers Island Company Limited. The defendants,…
DataBreaches -
'Yellow Teams' Are Defining the Future of AI Security
The article discusses the emergence of 'Yellow Teams' in cybersecurity, which are engineering teams focused on developing both defensive strategies and offensive tools for artificial intelligence (AI) within security contexts. These teams are crucial in…
Dark Reading -
Cisco IOS2 articles this day · CISA first
CISA Adds Cisco IOS CSRF Flaw CVE-2008-4128 to Exploit Catalog · CISA Adds Cisco IOS CVE-2008-4128 Flaw to KEV Catalog
-
CISA Adds Cisco IOS CSRF Flaw CVE-2008-4128 to Exploit Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Cisco IOS flaw, identified as CVE-2008-4128, to its Known Exploited Vulnerabilities catalog. This vulnerability affects Cisco IOS 12.4 on Cisco 871 Integrated Services Routers,…
-
CISA Adds Cisco IOS CVE-2008-4128 Flaw to KEV Catalog
CISA has added CVE‑2008‑4128 to its Known Exploited Vulnerabilities (KEV) catalogue, announcing the inclusion on 13 July 2026. The affected vendor is Cisco and the product is IOS. The vulnerability is tracked as the Cisco IOS Cross‑Site Request Forgery…
-
-
CrashStealer malware bypasses Gatekeeper via notarised dropper macOS
The article discusses the emergence of CrashStealer, a new macOS malware that utilizes a notarized dropper to bypass Gatekeeper checks, indicating that cybercriminals are increasingly developing sophisticated methods to evade security measures on Apple's…
The Hacker News -
Google and Microsoft Pull ModHeader Extension Over Data Collector
Google and Microsoft removed the ModHeader browser extension, which had 1.6 million installations due to a dormant data collector found in the code. Concerns about web security are increasing as malicious entities may exploit vulnerabilities in popular…
The Hacker News -
Microsoft Entra ID to Enforce Passkeys, Dropping SMS MFA by 2027
Microsoft Entra ID is transitioning to make passkeys the default authentication method, effective September 1, 2026, as a measure against phishing and credential theft, common in today's AI-driven threat environment. This change aims to phase out SMS and…
Microsoft -
GigaWiper malware mixes backdoor and wiper capabilities
The article discusses GigaWiper, a new modular malware that allows attackers to select different methods of destruction for targeted systems. It merges functionalities from various malware types, combining backdoor capabilities with destructive payloads like…
Dark Reading -
Open Directory Exposes Three Evilginx Phishing Operators
An open directory left misconfigured on a virtual server in Budapest has exposed sensitive tools and data of a phishing ecosystem involving three operators. The report by Lexfo details that an actor known as codemado is using Evilginx for attacks on…
Infosecurity -
Context Bombing Stops Prompt Injection Attacks, Cutting AI Risk
Prompt injections are malicious commands embedded by attackers into content, exploiting AI platforms to turn them against users. Researchers from Tracebit have found that using a technique called 'context bombing' can effectively disrupt AI hacking efforts.…
Ars Technica -
Weekly Roundup Covers ShareFile, Citrix Bleed 2 and AI Threats
The article provides a weekly recap of significant cybersecurity events, including threats from ShareFile, Citrix Bleed 2 ransomware, and the rise of AI-driven coding attacks. It emphasizes the evolving landscape of cyber threats and the urgent need for…
The Hacker News -
CISA Contractor Leaked AWS GovCloud Keys on GitHub for Six Months
The Cybersecurity and Infrastructure Security Agency (CISA) disclosed a significant data leak involving a contractor who published CISA credentials, including sensitive AWS GovCloud keys, on a public GitHub repository for six months. GitGuardian alerted CISA…
Krebs on Security -
Pakistani Police Systems Hit by Chinese and Indian Espionage
Two nation-state espionage campaigns linked to China and India have targeted a Pakistani police force, particularly the Balochistan Police, from February 2024 to April 2026. The attacks compromised sensitive assets like biometric records and criminal case…
Infosecurity -
Vidar Stealer Campaign Hits US and EU Consumers via Malvertising
A massive Vidar stealer campaign was uncovered in April 2026, distributing data theft and cryptocurrency mining tools primarily targeting consumers and small-to-medium businesses (SMBs) in the U.S. and EU. Attackers deploy oversized files and fake…
SecurityOnline -
How New Age Verification Laws Aim to Protect Kids Online
In the latest episode of the Lock and Code podcast, host David Ruiz discusses online safety for children with Anna Brading, an expert in cybersecurity and mother of three. The episode highlights the increasing legislative measures across various countries to…
Malwarebytes -
Former hacker GhostExodus fights child abuse with OSINT skills
Jesse McGraw, once a blackhat hacker known as GhostExodus, shares his journey from hacking for thrill-seeking to advocating for cybersecurity using open-source intelligence (OSINT). Growing up in a troubled environment, he found solace in hacking, believing…
SecurityWeek -
UNK_MassTraction Exploits Roundcube Webmail to Hit University Physics Departments
The UNK_MassTraction, a suspected China-aligned espionage group, has been exploiting vulnerabilities in Roundcube webmail to infiltrate physics and engineering departments at select US and Canadian universities since May 2026. The attacks, which have…
-
Criminal IP and Torq Integrate to Enhance AI Driven Threat Intel
Criminal IP has partnered with Torq to enhance threat intelligence for security operations. This integration allows Torq's AI SOC Platform to automatically enrich threat data, enabling faster and more efficient responses to security threats. Key features…
SecurityOnline -
New MemGhost attack plants false memories in AI via email
The article discusses a new cybersecurity threat called the MemGhost attack, which can implant persistent false memories in artificial intelligence (AI) agents through a single email. This technique poses significant risks for data integrity and presents…
The Hacker News -
Chinese Hackers Expand Spy Net via Ruckus, ASUS Router Malware
Cisco Talos is monitoring UAT-7810, a suspected Chinese hacking group that has been expanding its LapDogs ORB network through malware targeting unpatched edge devices, particularly Ruckus and ASUS routers. The group employs a growing toolkit including new…
SecurityOnlineUAT-7810 -
Ghostcommit attack hides malicious code in images to trick AI coders
The Ghostcommit attack demonstrates how AI coding assistants can be exploited by embedding malicious instructions in image files. Researchers from the ASSET Research Group revealed that attackers can hide commands within a PNG file referenced in a software…
Malwarebytes -
Hydro Québec patches Le Circuit Electrique flaws, CVE-2026-20744
Hydro-Québec disclosed three critical vulnerabilities in its Le Circuit Electrique charging station backend, with the most severe, CVE-2026-20744, rated at a CVSS score of 9.8. This flaw allows for privilege escalation and poses risks of denial-of-service…
-
Forg365 PhaaS Leverages Device Code Theft to Hijack Microsoft 365
The article discusses the Forg365 PhaaS (Phishing as a Service) which targets Microsoft 365 users through device code theft and Account in the Middle (AitM) session attacks. It emphasizes the importance of cybersecurity as attackers increasingly leverage AI…
The Hacker News -
Researchers warn of OAuth Client ID spoofing via Microsoft Entra ID
A novel OAuth Client ID spoofing technique is on the rise, targeting cloud environments, as revealed by Proofpoint's research. Attackers exploit Microsoft's Entra ID to spoof OAuth Client IDs to gain unauthorized access to accounts without registered IDs.…
Infosecurity -
Cloudflare launches Precursor for continuous bot detection
The article introduces Precursor, a new client-side verification system by Cloudflare designed to enhance bot detection by continuously collecting behavioral signals as users interact with web applications. Precursor complements existing tools like…
Cloudflare -
Fake Freeware Sites Spread AsyncRAT via SEO Poisoning and Hijack
The article discusses a significant malware campaign utilizing the AsyncRAT, orchestrated by unknown cybercriminals targeting individual and corporate networks. They employ SEO poisoning and fake freeware portals to deliver their malware, which includes…
SecurityOnline -
EU sanctions FSB linked hackers for 15 year cyberespionage
The European Union has imposed new sanctions on nine individuals and four entities linked to Russia's FSB due to a 15-year campaign of cyberespionage and sabotage. These sanctions target military intelligence officers, hackers, and companies involved in…
Security Affairs -
Cybersecurity M&A Roundup: 37 Deals Announced in June 2026
In June 2026, thirty-seven cybersecurity-related mergers and acquisitions (M&A) were announced. Key deals include: 1. **1Password acquires Apono** - For approximately $250M-$300M to enhance identity security. 2. **A10 Networks acquires TrojAI** - Details…
SecurityWeek -
Progress Software Warns of "External Security Threat" to ShareFile
Progress Software has reported a credible external security threat to its ShareFile Storage Zone Controllers, prompting the company to warn users and temporarily disable access to accounts. Although there have been no confirmed instances of unauthorized…
Infosecurity -
RabbitMQ Vulnerability Threatens Enterprise Systems
A significant vulnerability in RabbitMQ, tracked as CVE-2026-5721, poses a critical risk by allowing attackers to access the broker's OAuth secret without authentication. The flaw, revealed by cybersecurity firm Miggo, affects configurations where the…
-
Meta files patent for AI that constantly listens to emotions
Meta has filed a patent for an AI capable of continuously listening and tracking user emotions. The AI aims to enhance user interactions by adapting to emotional cues. Concerns about privacy and data security are significant, as perpetual listening raises…
The Hacker News -
EU and UK sanction Russia for FSB cyberattacks targeting Europe
The European Union and the United Kingdom have jointly imposed sanctions on Russia due to cyberattacks attributed to the Federal Security Service (FSB). This decision follows increasing warnings from Western officials about Russia's intensified hybrid…
DataBreachesFSB -
German ZEGO textile firm files insolvency after March cyberattack
ZEGO Textilveredelungszentrum GmbH has officially filed for insolvency following a severe cyberattack on March 29, 2026, which caused nearly six weeks of production downtime and significant financial strain. Despite their efforts to stabilize the company,…
DataBreaches -
ShareFile users told to halt Storage Zone Controllers over threat
Progress Software has alerted ShareFile customers using Storage Zone Controllers to shut down their servers due to a credible external security threat affecting their on-premises secure file-sharing software. ShareFile, which allows file hosting in its cloud…
DataBreaches -
AI and Human Analysts Team Up to Boost SOC Threat Response
The article discusses the integration of autonomous AI with security analysts in Security Operations Centers (SOCs). It emphasizes the effectiveness of combining rapid AI response capabilities with human judgment. Key points include: Enhanced speed and…
The Hacker News
