News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Sun 19 Jul· 10 articles
-
Critical NGINX flaw crashes workers, allows remote code execution
The article discusses a critical vulnerability in NGINX that can cause worker crashes and potentially allow for remote code execution. It emphasizes the urgency of addressing this security issue, as it could be exploited by attackers to gain unauthorized…
The Hacker News -
SleeperGem attack compromises RubyGems, targets developer machines
The article discusses a coordinated supply chain attack named "SleeperGem", where malicious versions of three RubyGems packages—`git_credential_manager`, `Dendreo`, and `fastlane-plugin-run_tests_firebase_testlab`—were published to RubyGems.org. These…
StepSecurity -
Hikvision cameras probed via ISAPI status endpoint
The content discusses recent scans targeting Hikvision's Intelligent Security API (ISAPI) identified by Johannes Ullrich. Although Hikvision cameras have a history of vulnerabilities, a new scanning behavior was noted this weekend. The ISAPI, a REST-based…
SANS ISC -
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 106
The Security Affairs Malware Newsletter Round 106 features a collection of articles and research focusing on recent malware threats. Key highlights include: 1) 'CrashStealer' - a C++ infostealer disguised as a crash reporter for macOS. 2) 'Lucide Proxy' that…
Security Affairs -
UK courts sentence Scattered Spider duo for major cyberattack
The Security Affairs newsletter Round 586, authored by Pierluigi Paganini, highlights notable cybersecurity issues and updates from the past week. Key points include: OpenSSL fixed a memory exhaustion bug. A longstanding malware, Daxin, linked to China, was…
Security AffairsScattered Spider -
Zero day exploit targets SonicWall SMA 1000, installs malware
A zero-day exploit chain has been identified, targeting SonicWall SMA 1000 appliances, leading to the deployment of custom malware. The threat actor, referred to as UTA0533, exploited two vulnerabilities (CVE-2026-15409 and CVE-2026-15410) to gain root…
-
UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware
The article discusses a cyber threat involving the UAC-0145 group, which uses ClickFix CAPTCHAs to distribute malware targeting Ukrainian devices. The piece highlights the growing sophistication of malware techniques and the implications for cybersecurity.…
The Hacker News -
Abbott probes cyberattacks on cancer diagnostics and LabCentral
Abbott Laboratories is currently investigating two separate cyber incidents affecting its Cancer Diagnostics business and LabCentral portal. On July 16, Abbott reported unauthorized access in the Cancer Diagnostics sector, and the ShinyHunters hacking group…
DataBreachesShinyHunters -
Attackers use SonicWall SMA zero day to get root access
The article discusses the exploitation of zero-day vulnerabilities in SonicWall's SMA products, which allowed attackers to gain root access before a disclosure. It emphasizes the importance of securing network devices and software against such threats and…
The Hacker News -
Public PoC exploits hit critical WordPress CVEs, urging patches
The article discusses recently released public exploits targeting critical vulnerabilities in WordPress, specifically CVE-2026-63030 and CVE-2026-60137. These flaws allow remote code execution without authentication on default WordPress installations…
