News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Fri 17 Jul· 56 articles
-
WordPress REST API flaw lets attackers run code remotely
On July 17, 2026, a critical remote code execution vulnerability (CVE-2026-63030) was disclosed in WordPress Core, allowing unauthenticated attackers to exploit a weakness via the REST API. The vulnerability affects WordPress versions 6.9.0 to 6.9.4 and…
-
EY breach reveals tax data via third party ticket system
Ernst & Young (EY) announced a data breach involving a compromised third-party IT support ticket system, which contained client documents, including tax information. The breach was detected on April 23, 2026, and unauthorized access occurred between March 28…
Security Affairs -
WordPress wp2shell Flaw Lets Attackers Run Code Remotely
A new vulnerability in the WordPress core, named wp2shell, allows unauthenticated attackers to execute code remotely. This flaw highlights significant security risks associated with unpatched WordPress installations. Web security experts urge users to update…
The Hacker News -
OpenSSL HollowByte flaw freezes server memory via TLS requests
The content discusses a newly identified vulnerability in OpenSSL, termed the 'HollowByte flaw,' which can lead to server memory freeze when processing 11-byte TLS requests. The article emphasizes the importance of addressing this security risk to prevent…
The Hacker News -
Cloudflare Deploys WAF Rules to Block WordPress RCE and SQLi
Cloudflare has implemented new Web Application Firewall (WAF) protections for two critical WordPress vulnerabilities: a Remote Code Execution (RCE) vulnerability in the REST API and a related SQL Injection vulnerability. These vulnerabilities affect versions…
Cloudflare -
SonicWall CVE-2026-15409 flaw lets ransomware group hijack VPNs
A major ransomware group, Inc, has exploited two zero-day vulnerabilities in SonicWall's Secure Mobile Access (SMA) appliances—CVE-2026-15409 and CVE-2026-15410. These vulnerabilities allow unauthorized access and remote code execution, enabling threat…
-
Seven Malicious npm Packages Use Blockchain C2 to Deploy RAT
The article discusses the discovery of seven malicious npm packages that utilize blockchain command-and-control (C2) to deliver a Remote Access Trojan (RAT). It emphasizes the risks posed to the software supply chain and highlights the need for vigilance…
The Hacker News -
Attackers exploit Critical SharePoint RCE flaw CVE-2026-58644
On July 14, 2026, Microsoft disclosed a critical remote code execution (RCE) vulnerability (CVE-2026-58644) affecting on-premises SharePoint Server products, with a CVSS score of 9.8. An unauthenticated attacker can exploit this vulnerability due to…
-
Nichirei food giant hit by July cyberattack, logistics paralysed
Nichirei Corporation, one of Japan’s largest food companies, experienced a cyberattack on July 13, 2026, disrupting its logistics and operations. The company, known for its frozen food products, confirmed that server outages were due to this attack and has…
Security Affairs -
Florida man charged after fake Steam games stole crypto wallets
U.S. prosecutors charged Zyaire Wilkins, a 21-year-old Florida man, for uploading malware-infected fake video games to Steam, a popular gaming platform. The malware aimed to steal passwords and drain victims' crypto wallets. Wilkins, along with unnamed…
DataBreaches -
New NadMesh botnet hijacks AI services to steal cloud credentials
The article discusses the emergence of a new botnet named NadMesh, which targets exposed AI services to steal cloud keys and Kubernetes tokens, posing significant security risks to organizations. Security experts warn that as AI becomes more prevalent,…
The Hacker News -
AI authority laundering flaw lets attackers hijack agents
The article highlights the security risks associated with AI systems that interpret and execute commands without adequate oversight. A recent incident involving an autonomous AI agent demonstrated vulnerabilities related to 'authority laundering,' where…
Dark Reading -
GoldenEyeDog group steals DigiCert code signing certificates
The article discusses the GoldenEyeDog subgroup, which is linked to a breach involving DigiCert and the theft of code-signing certificates. It emphasizes the importance of malware and threat intelligence in cybersecurity, shedding light on the implications…
The Hacker NewsDragonBreath -
Mexican Cita Express scam exploits rush for state fast track
The article discusses the issue of scarcity scams, particularly focusing on the 'Mexican Cita Express' scam that targets citizens seeking expedited government services. As demand for limited government services rises, scammers exploit this by posing as…
dti.domaintools.com -
Microsoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacks
Microsoft's participation in Black Hat USA 2026 focuses on the evolving threat landscape where attackers exploit trust in software and AI systems. The keynote by David Weston addresses the need for security operations to adapt as offensive capabilities…
Microsoft -
GoldPickaxe Trojan Steals Biometrics, Logins via KuaiBo Phishing
The GoldPickaxe banking Trojan, attributed to the Chinese-speaking crime group GoldFactory, targets users of mobile banking and finance apps primarily in Southeast Asia. It spreads via phishing sites mimicking the KuaiBo streaming app. Once installed, it…
SecurityOnlineGoldFactory -
Ransomware attacks on government agencies up in 2026, study shows
A study by Comparitech reveals that government agencies are increasingly targeted by ransomware attacks, with one incident reported daily. In the first half of 2026, 187 government entities experienced such attacks, marking a 13% rise from the previous six…
InfosecurityQilin -
New North Korean campaign uses fake coding interviews to steal developer credentials
On July 17, 2026, Daniel Stepanic of Elastic Security Labs reported on a new cyber campaign attributed to North Korean (DPRK) hackers, known as Contagious Interview. The attackers deployed malicious code hidden within SVG images within seemingly benign…
elastic.co -
23andMe settles $18m breach case with 42 US state lawyers
23andMe has reached an $18 million settlement with 42 US attorneys general following a significant data breach in 2023, which resulted from poor password management rather than an internal breach. Over six million customers' data was compromised. As part of…
Infosecurity -
Dutch Telecom Breach Exposes Six Million Users' Data
The SecurityWeek news roundup highlights key cybersecurity developments from the past week, including: 1. **Odido Telecom Breach**: Dutch authorities suspect local cybercriminals in the recent data theft affecting 6 million users. 2. **Lidl Data Breach**: A…
SecurityWeek -
North Korean hackers use fake coding tests to spread OtterCookie
The article discusses North Korean hackers using fake coding tests to deliver malware called OtterCookie, concealed within SVG flag images. This form of malware poses risks during software development and highlights the growing threat of social engineering…
The Hacker News -
North Korean APT37 uses Dropbox phishing to deliver RokRAT malware
A recent report from Genians Security Center highlights a new malware campaign named Operation Capsule Vault, attributed to the North Korean APT37 group. The campaign involves using spear-phishing emails with links to Dropbox disguised as PDF materials for…
SecurityOnlineAPT37 -
CVE-2026-54523 (CVSS 9.6): Public PoC Exploit Enables Kyverno Privilege Escalation to Admin in Any Namespace
A critical vulnerability in Kyverno, identified as CVE-2026-54523 with a CVSS score of 9.6, has been disclosed, allowing namespace tenants to escalate privileges to admin across any namespace in Kubernetes clusters. This flaw affects versions 1.18.1 and…
-
Citrix Secure Access Vulnerability Lets Local Users Gain SYSTEM Privileges
The content discusses the detection of three active exploits today, focusing primarily on vulnerabilities related to Citrix Secure Access. Key vulnerabilities include CVE-2026-53565, which allows local privilege escalation for low-privileged users to gain…
-
White House launches Gold Eagle to counter AI driven flaws
The newly launched Gold Eagle initiative aims to enhance vulnerability coordination in the cybersecurity landscape in response to evolving AI threats. Announced by the White House, it seeks to facilitate faster detection and response to software…
Dark Reading -
Shark robot vacuums exposed to remote hijack via AWS flaw
The article discusses a significant security flaw in Shark's cloud-connected robot vacuums, specifically the RV2320EDUS model. A researcher found that a misconfigured AWS IoT policy allows a compromised vacuum to gain control over other devices in the same…
Malwarebytes -
How Human Error Fuels Ransomware and What AI Can Do About It
The content highlights a virtual event, the Cloud & Data Security Summit, and features an interview with Clint Bodungen, an industrial cybersecurity expert. The interview discusses failures in traditional governance, the evolution of cybersecurity, and the…
SecurityWeek -
Google Cloud rolls out AI powered agentic defence after Wiz deal
Google Cloud has launched an 'agentic defense' strategy following its acquisition of Wiz for $32 billion, focusing on automated threat detection and remediation to counteract AI-driven cyberattacks. This approach integrates advanced AI security agents within…
Dark Reading -
EU forces Google to open Android mic, cam, screen to rival AI
The article discusses the European Union's directive requiring Google to grant rival AI assistants access to Android's microphone, camera, and screen functionalities. This move aims to enhance competition among AI technologies while addressing concerns over…
The Hacker News -
Beacon Security bags $13M seed round to boost AI threat defence
Beacon Security raised $13 million in seed funding, led by Notable Capital, with participation from several other investors. The startup, founded by Israeli Defense Forces veterans, offers a security data platform aimed at enhancing threat detection and…
SecurityWeek -
Military AI push needs trusted data and Zero Trust security
The article discusses the urgent need for a trusted information infrastructure to keep pace with the military's race towards automation and autonomous technologies. It emphasizes challenges regarding cybersecurity, particularly in the context of artificial…
The Hacker News -
Pentagon halts CMMC third party audits citing scalability, cost
The Pentagon has temporarily suspended the mandatory third-party assessments for CMMC Phase 2 due to concerns about the scalability of the assessor ecosystem and high compliance costs affecting small and mid-sized defense contractors. The CMMC Reform Task…
SecurityWeek -
US REvil warrant leads to arrest of Russian tourist in Armenia
The article discusses the detention of a Russian tourist in Armenia based on a U.S. warrant connected to the notorious REvil hacking group. Lawyers for the detained individual argue that he is not the intended target of the warrant. The implications of this…
The Hacker NewsREvil -
Home users warned of Trojan code in fake GitHub repos
The article explains how to use GitHub safely, emphasizing its risks for home users who may encounter malicious code. GitHub, a platform primarily for developers to share code, is not regulated like an app store, resulting in potential security threats from…
Malwarebytes -
Siemens ROX II OT Switch Zero Day Flaw Lets Attackers Gain Root
The report discusses three critical zero-day vulnerabilities discovered in Siemens ROX II OT switches (CVE-2025-40948, CVE-2025-40947, CVE-2025-40949). These vulnerabilities form a chained exploit allowing attackers to achieve full privilege escalation and…
-
CISA Mandates Urgent Patch for Actively Exploited Critical Fortinet Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has mandated urgent patches for two critical vulnerabilities in Fortinet's FortiSandbox, identified as CVE-2026-39808 and CVE-2026-25089, both rated 9.1 on the CVSS scale. These vulnerabilities…
-
Russian hackers use fake Webex, Zoom installers to steal crypto
A new malware campaign attributed to Russian-speaking threat actor UAT-11795 has been discovered, targeting users in the U.S. and Europe since mid-2025. This operation involves the distribution of trojanized installers for widely-used software like Webex,…
Security AffairsUAT-11795 -
Nichirei resumes ops after cyberattack hit frozen food logistics
Nichirei, a leading Japanese frozen food producer, has reported that it is starting to restore operations affected by a cyberattack on July 13, which forced the company to disconnect its systems. The attack disrupted various services, including logistics and…
SecurityWeek -
Gentlemen Ransomware Surpasses Qilin After 300 Reported Attacks
The article discusses the rise of The Gentlemen ransomware group, which has recently surpassed the Qilin group to become the most prolific ransomware threat, with 300 attacks reported over three months. This shift was highlighted by a cybersecurity analysis…
InfosecurityThe Gentlemen -
ACR Stealer Leverages ClickFix to Steal Tokens and M365 Files
The article discusses the ACR Stealer malware that employs ClickFix lures to steal browser tokens and Microsoft 365 files. It highlights the growing cybersecurity threat posed by ACR Stealer, particularly its techniques for phishing and extracting sensitive…
The Hacker News
