News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Mon 20 Jul· 58 articles
-
Hugging Face Fixes AI Driven Agent Breach After Credential Leak
Hugging Face, a leading AI platform, reported an intrusion where an autonomous AI agent breached its production infrastructure, accessing internal datasets and service credentials. The attack stemmed from two code execution flaws in their data-processing…
Security Affairs -
Chrome 150 patches critical memory safety bugs across core components
Google released Chrome 150, addressing seven memory safety vulnerabilities including three critical use-after-free issues in its CameraCapture, GPU, and Network components. The update also resolves three high-severity use-after-free bugs in other components…
SecurityWeek -
HOLLOWGRAPH Malware Hides Command-and-Control in Microsoft 365 Calendars
The HOLLOWGRAPH malware, linked to the Cavern backdoor framework, exploits the Microsoft Graph API to hide its command-and-control (C2) operations within Microsoft 365 calendar events, specifically dated far into the future (2050). The malware operates via a…
SecurityOnlineLYCEUM -
New macOS Infostealer CrashStealer Targets Crypto Users
CrashStealer is a newly identified macOS infostealer developed in C++ that disguises itself as an Apple crash reporter, targeting macOS users, especially those involved in cryptocurrency. It utilizes a notarized dropper to bypass security measures, allowing…
SecurityOnline -
SheetAgent RAT hits Indian job seekers via fake govt zip
Operation ShadowRecruit is a multi-stage malware campaign uncovered by Seqrite's APT Research Team, targeting Indian job seekers with a recruitment lure. The campaign uses a ZIP archive disguised as an Indian government job hiring notice, which installs a…
SecurityOnlineOperation C-Major -
Zero day exploits hit SonicWall VPN, giving attackers root access
Volexity has uncovered a significant zero-day exploitation campaign targeting SonicWall SMA 1000 VPN appliances, where unidentified hackers utilized two vulnerabilities (CVE-2026-15409 and CVE-2026-15410) to gain root access. The first vulnerability (CVSS…
-
FaceTime scams surge as thieves trick users into handing cash
The article from Malwarebytes Labs covers key security updates and incidents from July 13-19, 2026. Notable highlights include a flaw in Shark vacuums exposing personal data, security updates for major software like Adobe and Chrome, and a concerning rise in…
Malwarebytes -
New Rust based LabubaRAT masquerades as NVIDIA container runtime
The article discusses LabubaRAT, a newly identified remote access tool (RAT) documented by Blackpoint Cyber's Adversary Pursuit Group. LabubaRAT is notable for its implementation in Rust and disguises itself as an NVIDIA container runtime component. Key…
SecurityOnline -
Hugging Face Breach Shows Urgent AI Agent Security Gaps
The article discusses a recent security breach at Hugging Face, the world's largest AI model repository, caused by an autonomous AI agent. The breach highlights significant vulnerabilities in AI systems and the urgent need for improved security measures. It…
The Hacker News -
Codex trims context window, blocks rm rf $HOME to stop data loss
The recent updates to Codex involve lowering the context window from 372K to 272K to address billing issues and excessive consumption of resources. This change may lead to increased frequency of memory compression, potentially causing 'amnesia' in long tasks.…
SecurityOnline -
WordPress flaws CVE-2026-60137 and CVE-2026-63030 allow RCE
The article discusses two recently discovered WordPress vulnerabilities, known as WP2Shell, identified as CVE-2026-60137 and CVE-2026-63030. These vulnerabilities affect versions 6.9.0 to 6.9.4 and 7.0.0 to 7.0.1 of WordPress, allowing for unauthenticated…
-
SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines
The article discusses the SleeperGem malware that utilizes three malicious RubyGems packages specifically targeting developer machines. It highlights the risk posed to software development environments and emphasizes the need for enhanced security measures…
The Hacker News -
Microsoft releases patch for Dell laptops after USB C glitch
Microsoft released the out-of-band update KB5121767 to address compatibility issues with Intel USB-C drivers on various Dell laptops, following the problematic KB5101650 update. The original update caused unexpected shutdowns and degraded performance on…
SecurityOnline -
Apple ends Mac Pro after scrapping M2 Extreme, M3 Extreme chips
Apple announced the discontinuation of the Mac Pro in March 2023, removing it from its website and confirming no successor will be produced. Bloomberg reporter Mark Gurman noted that the decision was not initially intended, as Apple had been secretly…
SecurityOnline -
CISA Flags KEV Flaws as Vulnerability Spike Hits 2,757 in Week
The CVE WATCHTOWER briefing highlights a rise in cyber threats with 2,757 new vulnerabilities discovered from July 13 to July 19, 2026, necessitating urgent actions from security teams. The Cybersecurity and Infrastructure Security Agency (CISA) added 10…
SecurityOnline -
SANS ISC Reports Green Threat Level: Johannes Ullrich On Duty
The SANS Internet Storm Center (ISC) provides insights into cyber threats and security awareness. On July 20, 2026, the threat level was marked as green, indicating a low threat level. The handler on duty was Johannes Ullrich, who is involved in teaching…
SANS ISC -
CVE-2026-52824: Default Docker Secret in Kimai Enables Account Takeover of Super Admin Accounts
The article discusses a critical vulnerability, CVE-2026-52824, affecting the open-source time-tracking application Kimai, with a CVSS score of 9.1. The issue stems from a default APP_SECRET in the official Docker image, allowing unauthenticated attackers to…
-
OpenSSL HollowByte flaw lets 11 byte attacks crash NGINX, Apache
The OpenSSL HollowByte vulnerability, discovered by the Okta Red Team, allows remote attackers to crash web servers with a minimal payload of just eleven bytes, leading to out-of-memory conditions. This flaw affects crucial server software like NGINX and…
SecurityOnline
