News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 14 Jul· 82 articles
-
Old Microsoft signed Linux UEFI shims expose Secure Boot flaw
The article discusses the security risks posed by 11 outdated Microsoft-signed Linux UEFI shims, which may allow attackers to bypass the Secure Boot process. As these vulnerabilities have not been updated for years, they pose significant threats to system…
The Hacker News -
Korean Dev Hit by £16.6m Anthropic Billing Error, Card Frozen
A developer named REMY received an erroneous billing email from Anthropic via Stripe, demanding $1.66 million, which he initially dismissed as phishing. Over time, he received additional emails claiming failed transactions, totaling $16.62 million. A bank…
SecurityOnline -
Broadcom patches Avi Load Balancer auth bypass CVE-2026-47865
Broadcom has addressed seven vulnerabilities in VMware Avi Load Balancer, with the most severe being CVE-2026-47865, rated CVSS 9.8, which allows unauthenticated network attackers to bypass authentication and reach the Avi Control plane. Other…
-
Meta's $50B data centre expansion fuels stock debate
Meta is significantly expanding its data center in Richland Parish, Louisiana, with a total investment exceeding $50 billion. This expansion aims to reach a 5GW computing capacity, positioning Meta as a leader in the AI infrastructure race. The investment…
SecurityOnline -
New macOS malware CrashStealer hijacks crash reports to steal data
A new macOS malware, named CrashStealer, is identified as posing a significant security threat by using Apple's legitimate crash-reporting component to deceive users into installing it. This infostealer captures sensitive data, including login credentials…
Infosecurity -
Study shows 85 crypto wallets leak addresses, track users
A study of 85 cryptocurrency wallet extensions has highlighted address leaks and cross-site tracking risks, raising concerns about user privacy and security. The research indicates that many popular wallet extensions fail to protect sensitive information,…
The Hacker News -
Pentera Uses AI to Turn Workflows Into Validation Engines
The article discusses how Pentera utilizes AI to transform security workflows into effective validation engines. It highlights the importance of leveraging AI in cybersecurity to enhance security measures and accelerate incident response time. Furthermore,…
The Hacker News -
OAuth spoof flaw lets hackers verify stolen Entra credentials
The article discusses a security vulnerability related to OAuth Client ID spoofing, which allows attackers to validate stolen Microsoft Entra credentials, posing significant risks to identity and access management systems. It highlights the increasing…
The Hacker News -
SAP_SE SAP NetWeaver Application Server ABAP2 articles this day · SecurityOnline first
SAP patches memory corruption flaw in NetWeaver after Patch Day · SAP July 2026 Patch Tackles NetWeaver Memory Corruption Bug
-
SAP patches memory corruption flaw in NetWeaver after Patch Day
SAP released 19 new and updated security notes on July 2026 security patch day, addressing critical vulnerabilities. The most significant flaw is CVE-2026-44747 (CVSS 9.9), a memory corruption issue in NetWeaver Application Server ABAP, allowing data access,…
-
SAP July 2026 Patch Tackles NetWeaver Memory Corruption Bug
The SAP Security Patch Day in July 2026 released 16 new security notes, with a significant fix for CVE-2026-44747, a memory corruption vulnerability in SAP NetWeaver AS ABAP (CVSS 9.9). Other critical vulnerabilities include CVE-2026-27690, affecting SAP…
-
-
Apple warns of FaceTime scams draining bank accounts and data
Apple warns users of scammers utilizing FaceTime to access personal information and empty bank accounts. Scammers impersonate trusted entities, applying social engineering tactics to induce users into sharing sensitive data or installing harmful software.…
Malwarebytes -
Russian APT exploits Cisco router SNMP flaw to hit vital sectors
Russian state-sponsored APT actors are targeting networking devices worldwide to compromise critical infrastructure, as reported by the US and allied countries. The attacks focus on poorly secured routers across sectors like communication, healthcare, and…
-
AI crafted PowerShell script aids AD recon on hacked server
The article discusses a recent incident where an attacker utilized AI to create a custom PowerShell script for Active Directory (AD) reconnaissance. The script, identified by Huntress, was found on a compromised Windows Server, and it was uniquely generated…
Security Affairs -
Lidl Alerts Customers on Third Party Data Breach in Europe
Lidl has issued a warning to customers in Germany, Belgium, and the Netherlands about a data breach involving personal information stolen from a third-party IT provider. The supermarket chain confirmed that affected data includes names, email addresses,…
Infosecurity -
Valarian raises $50m Series A to boost sovereign AI platform
Valarian, a UK-based sovereign infrastructure company, has secured $50 million in Series A funding, following an earlier $20 million in seed capital. The funding, led by New Enterprise Associates and other investors, will support the expansion of Valarian's…
SecurityWeek -
Ransomware negotiator jailed for leaking data to BlackCat
The article discusses a significant security breach involving Angelo Martino, a ransomware negotiator at DigitalMint, who betrayed clients by passing confidential information to the BlackCat ransomware gang. Over a seven-month period, from April to September…
MalwarebytesBlackCat -
Japan's taxi firm Nihon Kotsu hit by malware, services down
Nihon Kotsu, Japan's largest taxi operator, faced a malware attack on July 11, 2026, leading to the shutdown of its systems to mitigate damage. This disruption has rendered its online reservation and telephone dispatch services temporarily unavailable. The…
Security Affairs -
Malicious Jscrambler NPM update steals credentials, crypto keys
A supply chain attack has compromised multiple versions of Jscrambler's NPM package, involving the unauthorized publication of malicious code that executes harmful binaries during installation. The initial incident began on July 11, with malicious versions…
SecurityWeek -
Grok AI uploads full Git repos, sparking data privacy fears
The article discusses the recent behavior of the Grok AI tool, which has made headlines for uploading entire Git repositories to xAI storage rather than just the files it processes. This raises concerns regarding data privacy and security within artificial…
The Hacker News -
Malicious npm packages breach AsyncAPI CI/CD, drop IPFS malware
On July 14, 2026, three packages from the AsyncAPI generator monorepo were published to npm with a malicious obfuscated dropper that executes when the library is loaded. The attack was facilitated through the project's legitimate GitHub Actions release…
StepSecurity -
Five Charged in “Russian Coms” Fraud Platform Case
Five individuals from London have been charged in connection with a fraud platform known as "Russian Coms," which is linked to millions of scam calls. The charges include conspiracy to aid fraud and acquiring criminal property. The platform, operational…
Infosecurity -
Grok Build secretly uploads dev repos, privacy switch fails
The article discusses a significant privacy issue with Grok Build, a tool used by developers that was found to upload entire local repositories to cloud storage without explicit permission. Security researcher @Cereblab revealed that this behavior…
SecurityOnline -
US Sanctions Target VPN and Cryptor Seller Linked to Ransomware
The article discusses the recent U.S. sanctions against a VPN service and malware cryptor seller involved in facilitating ransomware attacks. This marks a significant step in the U.S. government's efforts to combat cybercrime, particularly in the ransomware…
The Hacker News -
Lurking Lizard spreads fake 7Zip malware to build proxy botnet
Lurking Lizard, a suspected Chinese cybercriminal group, is engaging in malicious activities such as malware distribution and botnet creation by tricking users into downloading fake software, like a trojanized version of the 7-Zip utility. This operation has…
SecurityOnlineLurking Lizard -
CrashStealer: New macOS Infostealer Uses Signed Apps to Evade Gatekeeper
CrashStealer is a new macOS infostealer identified by Jamf Threat Labs, first detected in May 2026 and observed in active deployment by July. The malware cleverly uses a signed application named Werkbit.app, which bypasses Apple's Gatekeeper security. Upon…
Security Affairs -
Canadian Cyber Zone strengthens Korea ties at Web Summit 2026
The Canadian Cyber Zone successfully participated in Web Summit Vancouver 2026, enhancing international collaboration, particularly with South Korea. Held from May 11-14, the event showcased Canadian cybersecurity firms, allowing them to network, display…
SecurityOnline -
CrowdStrike warns of 18 new prompt injection attacks on AI agents
CrowdStrike has identified 18 new methods of prompt injection attacks targeting AI agents through hidden instructions and delayed triggers. These attacks can lead to unauthorized data access and severe system damage. Techniques include Trigger-Activated Rule…
SecurityOnline -
148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet
The article discusses the emergence of 148 npm packages masquerading as student proxies that were found to turn browsers into a DDoS botnet. This incident highlights the vulnerabilities present within software dependencies commonly used in web development.…
The Hacker News -
Pentagon pauses CMMC Phase Two rollout for 60 day review
The Pentagon has suspended the implementation of the Cybersecurity Maturity Model Certification (CMMC) phase two requirements, originally scheduled for November, pending a 60-day review. This decision aims to simplify processes for contractors while…
SecurityWeek -
Microsoft probes Salesforce data theft by ShinyHunters gang
The article discusses a significant data theft incident involving Salesforce linked to the ShinyHunters hacker group, which occurred over the course of a year. It highlights the methods used by the hackers, the impact of the breach on user data, and…
The Hacker NewsShinyHunters -
Fake CAPTCHA trick drops SCMBANKER on Mexican banks and fintechs
Security analysts have detected a widespread banking fraud campaign by the threat group REF6045, targeting Mexican retail banks and fintechs. The operation involves deceptive web pages that utilize fake CAPTCHA challenges to trick victims into installing the…
SecurityOnlineREF6045 -
WinFsp Patches Two Privilege Escalation Flaws: CVE-2026-3006 and CVE-2026-7162 (CVSS 7.8)
A critical alert has been issued regarding vulnerabilities in WinFSP, specifically CVE-2026-3006 and CVE-2026-7162, which could allow local privilege escalation on Windows systems. CVE-2026-7162 has a CVSS score of 7.8, and CVE-2026-3006 has a score of 7.0.…
-
Windows 11 Insiders Get Faster Ad Free Search With New Dashboard
Microsoft has introduced a refined search experience for Windows 11 Insider Preview users aimed at enhancing speed, relevance, and usability. Key features include: 1. **Streamlined Dashboard**: Reduces visual clutter by removing trending queries and…
SecurityOnline -
Telegram's t.me Links Break as .ME Registry Puts Domain on Hold
Telegram's t.me domain is currently in a serverHold status, rendering all contact and content links that utilize this domain unresolvable. This issue impacts user interactions and link-sharing on the platform. In response, Telegram has activated the fallback…
SecurityOnline -
Grok Build uploads code to cloud, sparking privacy alarm
The article discusses a critical privacy issue with SpaceXAI's Grok Build, revealing that the tool has been uploading entire Git repositories, including sensitive code and credentials, to a Google Cloud storage without user consent. Following public…
SecurityOnline -
ISC Handler Reports Green Threat Level Amid New Stormcast Podcast
The content provides information related to the Internet Storm Center (ISC) where Manuel Humberto Santander Pelaez is the handler on duty. The current threat level is indicated as 'green,' suggesting a low level of threat.
SANS ISC -
Netwrix patches RCE bug in Password Secure before 26.6.100
Netwrix has addressed two critical vulnerabilities in their Password Secure software through update version 26.6.100. The most severe vulnerability allows authenticated attackers to execute remote code, rated 9.9 on the CVSS scale. Both flaws arise from…
SecurityOnline -
CVE-2026-6875: Critical ServiceNow Sandbox Escape Allows Unauthenticated Remote Code Execution
A critical vulnerability (CVE-2026-6875) has been identified in the ServiceNow AI Platform, with a CVSS score of 9.5. This flaw allows unauthenticated remote attackers to execute code if certain conditions are met, creating risks for sensitive workflow data…
-
Critical SSRF bug in @better-auth/sso plugin exposes accounts
A critical security vulnerability in the @better-auth/sso plugin, tracked as CVE-2026-53513, has been identified, scoring 9.6 on the CVSS scale. The flaw allows authenticated users to exploit server-side request forgery (SSRF) by accessing internal services…
-
AI Now Drives Live Cyber Attacks, Report Warns of New Threats
The AI Security Report 2026 highlights a significant shift in the cyber security landscape where AI has transitioned from being an assistive technology to becoming an active operator in cyber attacks. Key findings include: 1) AI's role in executing live…
Check Point
