News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Thu 16 Jul· 63 articles
-
ACR Stealer Uses ClickFix Lures to Steal Enterprise Credentials
Between late April and mid-June 2026, Microsoft Defender Experts identified an increase in ACR Stealer malware activity, utilizing ClickFix lures to compromise enterprise systems and steal sensitive information such as browser credentials and session tokens.…
Microsoft -
AI speeds attacks, but phishing still leads, Unit 42 study finds
The Unit 42 2026 Global Incident Response Report presents insights on how AI is being utilized by cyber attackers, highlighting four key trends in the threat landscape. It shows that while AI enhances efficiency in attacks—reducing the attack lifecycle to…
unit42.paloaltonetworks.com -
Agentic AI’s Data Access Sparks New Cybersecurity Mindset Shift
The article discusses the security risks posed by agentic artificial intelligence (AI), emphasizing a shift in mindset regarding cybersecurity approaches. It argues that while agentic systems can enhance efficiency across various sectors, they also create…
Dark Reading -
Instructure breach review delayed, lawsuits pile up
Jeff Piontek discusses the ongoing issues surrounding the Instructure data breach. Initially, the forensic review process took longer than anticipated, with the company still finalizing findings as of June. By early July, they began sharing data with…
DataBreaches -
1M+ Emails Use Hidden Text to Dupe AI Security Filters
Researchers at Barracuda Networks have identified that over 1 million phishing emails have used a technique called text salting to bypass both static and AI-driven email security filters. These emails employ hidden text to make social engineering attempts…
Dark Reading -
Sandworm uses CAPTCHAs to deliver FreakyPoll malware in Ukraine
The article reports that a prominent Russian hacking group, Sandworm, has adopted a new attack technique called Clickfix to compromise devices in Ukraine. Clickfix involves tricking users into entering malicious scripts through fake CAPTCHAs on compromised…
Ars TechnicaSandworm -
CISA adds FortiSandbox flaw CVE-2026-39808 to KEV catalogue
On 16 July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2026‑39808 to its Known Exploited Vulnerabilities (KEV) catalogue. The affected vendor is Fortinet and the product is FortiSandbox. The Fortinet FortiSandbox OS Command…
-
CISA KEV Catalogue Adds FortiSandbox Flaw CVE-2026-25089
CISA has added CVE‑2026‑25089 to its Known Exploited Vulnerabilities catalogue, affecting Fortinet’s FortiSandbox, FortiSandbox Cloud and FortiSandbox PaaS products. The vulnerability is an OS command injection flaw that permits an unauthenticated attacker…
-
Microsoft SharePoint2 articles this day · SecurityOnline first
CISA Adds Critical SharePoint Flaw CVE-2026-58644 to KEV · Red Hat OpenShift AI flaw lets attackers read local files
-
CISA Adds Critical SharePoint Flaw CVE-2026-58644 to KEV
CISA has added CVE-2026-58644 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Microsoft SharePoint and is named Microsoft SharePoint Deserialization of Untrusted Data Vulnerability. It allows an unauthenticated attacker to execute…
-
Red Hat OpenShift AI flaw lets attackers read local files
Three critical vulnerabilities have been identified: CVE-2026-58644 in Microsoft SharePoint, and two instances of CVE-2026-25089 affecting Fortinet FortiSandbox, which involve command injection risks. Notably, Red Hat has reported a critical flaw in Red Hat…
-
-
Scattered Spider4 articles this day · Infosecurity first
Scattered Spider duo sentenced 5.5 years for £29m TfL cyberattack · Scattered Spider duo jailed 5.5 years for £29m TfL cyberattack
4 outlets-
Scattered Spider duo sentenced 5.5 years for £29m TfL cyberattack
Two members of the Scattered Spider cybercrime group, Thalha Jubair (20) and Owen Flowers (18), have been sentenced to five and a half years in prison for their involvement in a 2024 cyberattack on Transport for London (TfL), which caused disruptions and…
Security Affairs -
Scattered Spider duo jailed 5.5 years for £29m TfL cyberattack
Two hackers from the group Scattered Spider were sentenced to 5.5 years each for their roles in a £29 million hack targeting Transport for London (TfL). Their illegal activities involved extensive cybercrime strategies, raising concerns about identity…
The Hacker News -
Scattered Spider pair jailed five years for £29m TfL hack
Two members of the Scattered Spider cybercrime group, Thalha Jubair (20) and Owen Flowers (18), were sentenced to five years and six months in prison in the UK after pleading guilty for their involvement in a 2024 cyberattack on Transport for London, which…
SecurityWeek -
Teen hackers jailed for Transport for London cyberattack
Two young men, Owen Flowers (18) and Thalha Jubair (20), were sentenced to five years and six months in prison for their cyber-attack on Transport for London (TfL), motivated by 'selfish bravado' rather than financial gain. They pled guilty to unauthorized…
Infosecurity
-
-
Italy's regulator fines WINDTRE €1.7m over breach affecting 365k
Italy's data protection authority fined WINDTRE €1.7 million due to severe data security issues that resulted in unauthorized breaches and exposure of personal information of over 365,000 customers. The breaches occurred after hackers impersonated support…
DataBreaches -
CVE-2026-14266 flaw lets execute code via malicious XZ files
The page outlines a critical security vulnerability in 7-Zip, identified as CVE-2026-14266, which can lead to remote code execution through crafted XZ-compressed data. Scored with a CVSS of 7.0, it requires user interaction to exploit, such as opening a…
-
Securing AI Agents: Why Least Privilege Access Is Now Essential
The article discusses the importance of implementing least privilege access for AI agents to mitigate identity and authorization risks. AI agents, which can automate complex tasks across systems without explicit human approval, pose significant security…
Microsoft -
Game Cheat Spyware and Chrome Sync Stalking Fuel Ransomware Surge
The latest cybersecurity news discusses a range of threats including game cheat spyware, ransomware attacks, and stalking via Chrome Sync. Key points include tips on securing AI agents, managing vulnerabilities in software, and ensuring better cybersecurity…
The Hacker News -
Legacy OT Systems Face DoS Risks as IT Convergence Grows
The article discusses the unique challenges and vulnerabilities in Operational Technology (OT) security compared to Information Technology (IT). It highlights the legacy nature of OT systems, which often lack modern security features, making them susceptible…
SecurityWeek -
Fortinet, SharePoint bugs exposed as Grok Build AI opens source
The article discusses three critical vulnerabilities detected, including two OS command injection vulnerabilities in Fortinet FortiSandbox and a deserialization vulnerability in Microsoft SharePoint. It also covers the recent release of the Grok Build AI…
SecurityOnline -
Fileless phishing attack hides Lua loader in bogus font files
A recent phishing campaign disguises a Lua-based malware loader as a TrueType font file (.ttf). This operation, identified by Fortinet's FortiGuard Labs, has been active since March 2026, utilizing fileless techniques to deploy various Remote Access Trojans…
Infosecurity -
SharePoint, FortiSandbox flaws raise Windows update confusion
The article discusses three active exploits detected today, specifically vulnerabilities in Microsoft SharePoint and Fortinet FortiSandbox. It also highlights the confusion surrounding Microsoft's Windows update terminology, particularly the distinctions…
SecurityOnline -
AI Speeds Up Patching as Vulnerability Exploit Times Drop
The article discusses the integration of AI, specifically large language models (LLMs), in vulnerability management. It highlights the decreasing mean time-to-exploit for vulnerabilities and provides operational guidelines for deploying AI safely in security…
Google Cloud -
Flock ALPR cameras spark privacy backlash amid misuse reports
The backlash against Flock automated license plate recognition (ALPR) systems is growing due to concerns over privacy and civil liberties. Flock Safety, which operates ALPR cameras, has faced criticism as reports emerge of misuse by law enforcement,…
Malwarebytes -
n8n vulnerability allows cross issuer account takeover
An identified vulnerability in n8n could allow attackers to log in as users from another issuer. This issue is crucial for organizations using the n8n platform as it risks unauthorized access and data breaches. Timely updates and patches are necessary to…
The Hacker News -
Single Prompt Enables ChatGPT to Execute Full Cyber-Attack Chain, Researchers Claim
Research from Cato Networks indicates that OpenAI's ChatGPT-5.5 can execute complete cyber-attacks using a single prompt, achieving domain-level access in under 40 minutes. This study involved testing the AI's capabilities in a simulated enterprise…
Infosecurity -
ClickLock Stealer macOS malware steals passwords via fake commands
A new macOS malware named ClickLock Stealer has been reported, utilizing social engineering to obtain user passwords. The malware exploits a command-pasting attack from compromised websites, employing a modular attack vector that includes credential theft…
Infosecurity -
APT Group Hijacks ViPNet Updates to Deploy Rust Backdoor
The report details a new APT attack utilizing the ViPNet update system, which began in May 2026. It identifies various malicious modules including HelloInjector (a loader), HelloProxy (a traffic proxy and loader), and HelloBackdoor (a Rust-based backdoor).…
securelist.com -
AI data centres face security gaps as growth outpaces protection
The article discusses the critical security concerns associated with the rapid growth of AI data centers, as outlined in a report by Lava Labs. It highlights that AI data centers differ significantly from traditional data centers, primarily serving…
SecurityWeek -
TELEPUZ Malware Spreads Via ClickFix, Steals Data on Victims
The article discusses the emergence of the TELEPUZ malware, which spreads via ClickFix. This malware is designed to steal data and execute commands on infected systems. Key points include the methods of propagation, its stealth mechanisms, and potential…
The Hacker News -
ClickLock Stealer Evades macOS Defenses, Infects 100+ Users
The article discusses a new macOS malware called ClickLock Stealer that targets users through social engineering tactics and process killing techniques to bypass macOS security protections. Detected by cybersecurity firm Group-IB, ClickLock Stealer has…
SecurityWeek -
New macOS Stealer ClickLock Forces Password Entry by Killing Apps
The article discusses a new macOS stealer named ClickLock that targets user passwords. It operates by killing applications every 210 milliseconds until the user enters their password, thereby exploiting its persistent attacks for credential theft. This piece…
The Hacker News -
GoSerpent RAT hits Southeast Asian govt with covert data theft
The article details the GoSerpent malware campaign, a sophisticated threat targeting government and diplomatic entities in Southeast Asia. It began in late 2025, involving a remote access Trojan (RAT) called GoSerpent, which has encrypted communications with…
securelist.com -
Rockwell bug permits DoS attacks using CVE-2026-9653
The advisory, ICSA-26-197-02, issued by CISA on July 16, 2026, addresses a critical vulnerability in Rockwell Automation's 1756-EN2, 1756-EN3, and 1756-ENBT devices. The vulnerability, identified as CVE-2026-9653, allows for denial-of-service attacks due to…
-
AutomationDirect Productivity Suite bugs risk memory corruption
The security advisory ICSA-26-197-04, released on July 16, 2026, by CISA, addresses multiple vulnerabilities in the AutomationDirect Productivity Suite (versions <=v4.6.2.2). Successful exploitation may lead to memory corruption, information disclosure,…
CISA -
CISA warns Rockwell PLC flaws may cause denial of service
The CISA advisory ICSA-26-197-06, released on July 16, 2026, highlights critical vulnerabilities in several models of Rockwell Automation's control systems, including CompactLogix and ControlLogix. Two key vulnerabilities (CVE-2025-12011 and CVE-2025-12012)…
-
Government Sites Hijacked for Cyber Attacks, Officials Warn
The article discusses the security risk posed by over 20 hijacked government websites which have been repurposed as channels for cyber attacks. This incident highlights the vulnerabilities in cybersecurity measures that can be exploited by hackers. The…
The Hacker News -
OAIC Finds Qantas Data Breach Unlikely to Violate Privacy Laws
Vlad Constantinescu reports that the Office of the Australian Information Commissioner (OAIC) found no evidence that Qantas breached privacy laws during the significant data breach in 2025, which compromised 5.67 million customer records. The breach occurred…
DataBreaches -
Teens jailed 5½ years for Transport for London hack spree
Thalha Jubair, 20, and Owen Flowers, 18, were sentenced to 5 years and 6 months in prison for hacking Transport for London at Woolwich Crown Court. Mr. Justice Turner criticized their actions as selfish bravado neglecting others' consequences. During the…
DataBreaches -
AI agents duped into obeying attackers via data injection flaw
A new agent data injection attack exploits AI agents, causing them to misclick or execute commands from attackers. This highlights vulnerabilities in AI security, emphasizing a need for increased protection against manipulation. Organizations are urged to…
The Hacker News
