News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Mon 20 Jul· 58 articles
-
'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover
The article discusses the recent exploitation of two critical vulnerabilities in WordPress, identified as CVE-2026-60137 and CVE-2026-63030, which allow unauthenticated remote code execution on millions of sites. Discovered using AI technology, these flaws…
-
Cloudflare rolls out Internal DNS for private networks
Cloudflare Internal DNS, now generally available, provides authoritative and recursive DNS services for private networks. This solution aims to simplify DNS management by consolidating public and private DNS on a single platform, reducing operational…
Cloudflare -
Ivanti Deploys AI to Uncover Hidden Flaws Like CVE-2026-10520
Ivanti is leveraging large language models (LLMs) to improve the identification and remediation of software vulnerabilities, a move prompted by the effectiveness of these models in the cybersecurity domain. Daniel Spicer, Ivanti's Chief Security Officer,…
-
AI workload drives UK CISOs to think about quitting
CISOs are experiencing increased job stress due to rapid AI adoption, with 26% considering leaving their positions. The complexity of managing AI governance and the heightened risk of personal liability related to cyber incidents are significant concerns.…
Dark Reading -
WordPress Core2 articles this day · Infosecurity first
WordPress core flaw CVE-2026-63030 lets attackers execute code · AI crafted WordPress exploit chain triggers urgent CVE patches
-
WordPress core flaw CVE-2026-63030 lets attackers execute code
The article discusses a critical SQL injection vulnerability in WordPress, designated CVE-2026-63030, named 'wp2shell', which allows unauthenticated remote code execution. Detected initially by Searchlight Cyber, this vulnerability is unique as it is found…
-
AI crafted WordPress exploit chain triggers urgent CVE patches
Security researchers at Searchlight Cyber have developed a complete exploit chain for two critical vulnerabilities in WordPress, utilizing OpenAI’s GPT-5.6 Sol Ultra. The vulnerabilities, identified as CVE-2026-63030 and CVE-2026-60137, affect multiple…
-
-
TFF Trap phishing campaign spreads Agent Tesla, Remcos filelessly
The article discusses a phishing campaign known as "The TFF Trap," which employs advanced evasion tactics to deliver remote access Trojans (RATs) such as Agent Tesla and Remcos. Attackers impersonate reputable companies, using fileless techniques and…
Dark Reading -
FakeGit spreads SmartLoader malware across 7,600 GitHub repos
A cybersecurity threat known as the FakeGit campaign has infected approximately 7,600 GitHub repositories, distributing SmartLoader malware. This malicious software utilizes sophisticated techniques to target software development environments, posing risks…
The Hacker News -
AI powered phishing kit exposed in WebDAV malware campaign
The article discusses the exposure of a server revealing an AI-driven phishing toolkit involved in a WebDAV malware campaign. The toolkit utilizes AI to enhance the effectiveness of phishing attacks, indicating a growing trend in cyber threats leveraging…
The Hacker News -
US DoJ seizes 1,000+ domains in World Cup 2026 piracy crackdown
The U.S. Department of Justice has seized over 1,000 internet domains involved in illegal streaming of the World Cup 2026, as part of Operation Offsides. Collaborating with law enforcement in Latin America and Europe, numerous additional sites have been…
SecurityOnlineLos Ciberinfiltrados -
Fake Odyssey movie downloads spread malware hours after release
The article discusses the emergence of piracy scams for Christopher Nolan's movie **The Odyssey** within hours of its release. Scammers employed tactics like fake browser warnings and disguised malware as movie downloads. The two main scams involved…
Malwarebytes -
CVE-2026-58443: Gitea Flaw (CVSS 9.6) Details and PoC Exploit Code Publicly Disclosed
A critical vulnerability in Gitea, CVE-2026-58443 (CVSS 9.6), allows public-only tokens to push commits to private repositories, breaching intended access restrictions. The flaw is present in all versions up to v1.26.4 and has been addressed in v1.27.0. No…
-
Cruciferra Crypter Powers Malware Evasion with Ghosting Tactics
The article discusses the Cruciferra crypter, a service used by various cyber-criminal groups to cloak malware and evade detection. It details the advanced techniques utilized by Cruciferra, including process ghosting and kernel driver abuse, which help…
InfosecurityTA4922 -
Neo raises $100M to launch AI security platform for enterprises
Neo, an American-Israeli cybersecurity startup, has secured $100 million in funding to launch a platform designed to control and secure AI software for enterprises. The funding comes from notable investors including Andreessen Horowitz and Bessemer Venture…
SecurityWeek -
HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050
The article discusses the HollowGraph malware, which has the ability to conceal command and control (C2) infrastructure as well as stolen files within Microsoft 365 events dated for the year 2050. This method of obfuscation enhances its stealth capabilities,…
The Hacker News -
Abbott probes cyber breach claims as hackers threaten data leak
Abbott Laboratories is investigating two separate cyber incidents involving its Cancer Diagnostics business and the externally hosted LabCentral portal, denying any operational disruptions or data exposure. The hacker groups ShinyHunters and ShadowByt3$…
MalwarebytesShinyHunters -
SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch
Recent vulnerabilities in SonicWall appliances, identified as CVE-2026-15409 and CVE-2026-15410, were exploited by threat actor UTA0533 prior to patch releases. These vulnerabilities allowed remote, unauthenticated attacks, compromising SMA1000 secure remote…
-
JadePuffer's ENCFORGE ransomware erases AI models via Langflow
JadePuffer, a ransomware campaign operated by a large language model, has returned with a new variant called ENCFORGE, specifically designed to destroy AI model artifacts. This campaign utilizes a targeted approach, impacting various file formats critical to…
InfosecurityJadePuffer -
Attackers exploit OAuth IDs to check Microsoft Entra accounts
Proofpoint has uncovered a technique called OAuth client ID spoofing, allowing attackers to enumerate Microsoft Entra ID accounts and validate credentials without a successful sign-in. This method exploits the handling of OAuth client IDs and involves the…
SecurityOnline -
UK to Ban Ransom Payments for Public Sector as Attacks Surge
The ransomware landscape is increasingly complex, with nearly half of targeted companies paying ransoms, as outlined by Sophos in 2025. The UK government is moving to prohibit ransom payments for public sector entities, reflecting rising concerns over…
Ars Technica -
Cybersecurity Key to Securing Events Like the World Cup
The article discusses the crucial role of cybersecurity in ensuring the safety and security of high-profile events, highlighting recent major celebrations like the World Cup and the U.S.'s 250th anniversary. Author Olga Polishchuk emphasizes that threats…
Dark Reading -
WordPress and SonicWall flaws fuel AI driven SharePoint attacks
The article discusses significant recent developments in cybersecurity, including vulnerabilities in WordPress and SonicWall, as well as new threats related to AI services and SharePoint. It highlights the emergence of AI as a powerful tool in cybersecurity,…
The Hacker News -
CVE-2026-58319 Exposes Doris Frontend to Unauthorised Access
The critical vulnerability CVE-2026-58319 affects Apache Doris version 2.1.0 due to improper authentication in the Frontend HTTP API, allowing unauthorized remote administrative operations. Currently, there is no confirmed exploitation in the wild. Users are…
-
Russia uses hacked IP cameras to monitor NATO weapons shipments
The Dutch intelligence services AIVD and MIVD have reported that Russian state actors are exploiting hacked IP cameras to gather military intelligence on NATO logistics and weapons deliveries to Ukraine. This ongoing operation, escalated since Russia's…
Security Affairs -
CVE-2026-56451: CVSS 10 Siemens Opcenter X Flaw Grants Full Unauthorized Access
Siemens has identified a critical authentication bypass vulnerability in Opcenter X, tracked as CVE-2026-56451, which has a maximum severity score of 10.0 on CVSS. The flaw affects all versions prior to V2604, allowing unauthenticated remote attackers to…
-
HollowByte bug lets attackers crash OpenSSL with 11-byte payload
A recently discovered vulnerability in OpenSSL, termed 'HollowByte', can allow attackers to cause denial of service (DoS) by exploiting a buffer pre-allocation flaw. This issue, uncovered by Okta's red team, can be triggered using an 11-byte malicious…
SecurityWeek -
New HollowGraph Malware Hijacks Microsoft 365 Calendars for Covert C2 Communications
A new malware named HollowGraph has been discovered, which exploits the Microsoft Graph API to transform compromised Microsoft 365 calendars into covert two-way command and control (C2) channels. Researchers from Group-IB identified this malware as part of a…
Infosecurity -
Russian spies hack NATO IP cameras to monitor military movements
The article reports on Russian intelligence operations that have hacked IP cameras across NATO states and Ukraine to monitor military logistics. This breach highlights vulnerabilities in Internet of Things (IoT) security and raises concerns about real-time…
The Hacker News -
New Site Tracks 100+ Cyber Breaches to Improve Reporting Accuracy
Richard Bird, a cybersecurity executive, has launched a website that tracks disclosed material cybersecurity breaches, providing a necessary resource for professionals and the public. The site features two ledgers: one based on mandatory SEC disclosures and…
SecurityWeek -
Navigate360 leak exposes 8.3 million tipster tips anonymity fears
In March 2026, Navigate360 experienced a breach that exposed 8.3 million anonymous tips from programs like Crime Stoppers, Safe2Tell, and SandyHookPromise. The company has faced criticism for its lack of transparency and failure to notify affected tipsters…
DataBreaches -
Why Exposure Management Matters More Than Your Security Stack
The article "Mythos Didn't Break Your Security Program. Your Exposure Window Could" discusses the importance of exposure management in cybersecurity. It suggests that organizations should shift their focus from reactive approaches to proactive exposure…
The Hacker News -
EY Warns Clients of Data Breach via Third Party Platform
Ernst & Young (EY) has notified clients of a data breach involving compromised personal and financial information due to a third-party service management platform. The breach occurred between March 28 and April 12 and was identified on April 23. EY is…
SecurityWeek -
Fake game installs spread RenPy Loader, dropping Amatera Stealer
The article discusses how fake game downloads are being used to distribute malware known as **RenPy Loader**, which subsequently delivers **Amatera Stealer**, an infostealer targeting sensitive information. RenPy Loader exploits the legitimate Ren’Py game…
Malwarebytes -
7zip XZ file flaw lets hackers run code via malicious archive
A critical vulnerability in 7-Zip, affecting its handling of XZ-compressed files, has been discovered, allowing for potential remote code execution if a user opens a malicious archive. This flaw, identified by researcher Landon Peng, exploits a heap-based…
Security Affairs -
Capital One launches AI security tool VulnHunter on GitHub
Capital One has open-sourced an AI-powered security tool called "VulnHunter" designed to identify and remediate software vulnerabilities. Unlike traditional vulnerability scanners, VulnHunter aims to reduce false positives and enhance developer workflows by…
SecurityWeek -
Critical NGINX Flaw CVE-2026-42533 Allows Remote Code Execution
The article discusses a critical vulnerability in NGINX, identified as CVE-2026-42533, which has a CVSS score of 9.2. F5 released patches to address this flaw that can allow unauthenticated attackers to execute remote code or cause server crashes through…
-
UK Police Urge Cybercrime Risk Orders After TfL Hack Sentencing
In the wake of a major cybercrime case involving the Transport for London (TfL) hack, police chiefs are advocating for Cybercrime Risk Orders (CCROs) as a means to enhance legal powers against cyber offenders. The case saw two young individuals sentenced…
Infosecurity -
Hugging Face breached by autonomous AI agent, exposing data
Hugging Face, a machine learning collaboration platform, recently experienced a data breach due to a cyberattack executed by an autonomous AI agent. The attack targeted its production infrastructure, exploiting vulnerabilities in a data-processing pipeline,…
SecurityWeek -
Malicious XZ archives can execute code via 7Zip flaw, patch urged
A newly discovered vulnerability in the 7-Zip file extraction tool can allow malicious XZ archive files to execute arbitrary code during the extraction process. This security risk has raised concerns regarding endpoint security, prompting users to update to…
The Hacker News -
Hacker Uses Google Gemini AI to Run Eight PC Dental Botnet
The article discusses a Russian-speaking hacker utilizing Google Gemini CLI to manage a botnet comprised of eight computers in dental clinics. It highlights the rise of AI in cybercrime, focusing on the vulnerability of healthcare systems to such attacks.…
The Hacker News
