News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 21 Jul· 80 articles
-
UK Mulls Ransomware Payment Ban Amid Rising Sophistication
A report by Hannah Murphy highlights that nearly half of companies targeted by ransomware pay the ransom to recover their data, with the median ransom amount increasing. In response to this growing threat, some jurisdictions, like the UK, are moving to ban…
DataBreaches -
Ransomware incidents up 25% as 60+ new groups emerge
Ransomware activity has surged, with a marked 25% increase in incidents from April 2025 to March 2026, following the emergence of over 60 new groups in the landscape. Many organizations, especially smaller ones, are increasingly targeted due to visible…
Dark Reading -
Microsoft SharePoint2 articles this day · The Hacker News first
CVE-2026-50522: SharePoint Flaw Lets Site Owners Run Remote Code · SharePoint flaw CVE-2026-50522 under active attack after PoC leak
-
CVE-2026-50522: SharePoint Flaw Lets Site Owners Run Remote Code
A critical Microsoft SharePoint vulnerability, CVE-2026-50522, with a CVSS score of 9.8, is being actively exploited following the release of proof-of-concept (PoC) code. This deserialization flaw allows authenticated Site Owners to execute arbitrary code…
-
SharePoint flaw CVE-2026-50522 under active attack after PoC leak
The article addresses the critical security vulnerability in SharePoint identified as CVE-2026-50522, which is currently being exploited. A proof of concept (PoC) has been made public, escalating the urgency for organizations to patch this flaw to prevent…
-
-
LLMs falter in vulnerability prioritisation due to false positives
Large language models (LLMs) are facing significant challenges in effectively prioritizing vulnerabilities in application security. The high false-positive rates of these models, along with an inability to consider the context of scans, complicate the work…
Dark Reading -
Tidewater Telecom cyberattack cuts internet for 23 Maine towns
A cyberattack on Tidewater Telecom caused internet outages in 23 midcoastal towns in Maine, impacting local government services. Damariscotta, a town with about 2,300 residents, reported unreliable internet service, hindering town office operations reliant…
DataBreaches -
Apple patches Hide My Email flaw that leaked real addresses
The article discusses a recent fix by Apple for a bug in its 'Hide My Email' feature that exposed users' real email addresses in mail logs. Published on July 21, 2026, by Ravie Lakshmanan, the piece highlights the significance of addressing vulnerabilities…
The Hacker News -
Hacker 'Trim' Turns Public LLMs Into Automated Cybercrime Tool
A hacker known as "Trim" has transformed publicly available large language models (LLMs) into a commercial offensive cybercriminal tool after freely publishing jailbreaking techniques online. Trim's methods, outlined on a Russian-language forum, include six…
Dark Reading -
Zimbra patches critical SNMP command injection flaw in v10.1.20
Zimbra has released version 10.1.20, addressing nine security vulnerabilities, including a critical command injection flaw related to SNMP monitoring. This vulnerability allows arbitrary command execution on affected systems with SNMP notifications enabled.…
Security Affairs -
Trump signs order to secure defence supply chains amid fears
President Trump signed an executive order mandating the Department of War to map and secure defense supply chains, focusing on cybersecurity and domestic sourcing. Key provisions include: 1. Development of policies for defense contractors to track their…
SecurityWeek -
Cisco unveils Antares, a low cost AI tool for spotting code flaws
Cisco has launched Antares, a small language model (SLM) designed for identifying vulnerabilities in codebases more efficiently than existing models. Antares comes in two versions and is aimed at organizations with limited budgets, such as universities and…
SecurityWeek -
Pwn2Own Ireland 2026 adds AI, smart home and printer categories
The Pwn2Own Ireland 2026 event, scheduled for October 6-9, 2026, in Cork, will feature several new target categories. Registration is open until October 1, 2026, with a cap of 80 participants based on past bounty earnings. New categories include Mobile…
thezdi.com -
SolarWinds Patches Three Critical Serv-U Vulnerabilities Enabling RCE
SolarWinds addressed three critical vulnerabilities in their Serv-U software on July 21, 2026, which can lead to privilege escalation and remote code execution (RCE). These vulnerabilities are rated 9.1 on the critical scale and require existing privileges…
-
snap-confine Flaw CVE-2026-8933 Lets Any User Get Root on Ubuntu
CVE-2026-8933 is a privilege escalation flaw in the snap-confine component of Ubuntu Desktop systems (versions 26.04, 25.10, and 24.04) that allows any local user to gain root access. Discovered by Qualys, the vulnerability stems from a change in how…
-
WordPress Core2 articles this day · CISA first
CISA warns of active exploits in WordPress, Langflow, DDWRT · CISA Warns of Critical WordPress Flaw CVE‑2026-63030 in KEV
-
CISA warns of active exploits in WordPress, Langflow, DDWRT
On July 21, 2026, CISA added four exploited vulnerabilities to its KEV catalog, highlighting critical flaws in WordPress, Langflow, and an older DD-WRT router bug. These vulnerabilities can be actively exploited, necessitating immediate action from federal…
-
CISA Warns of Critical WordPress Flaw CVE‑2026-63030 in KEV
CISA has added CVE‑2026-63030 to its Known Exploited Vulnerabilities catalogue. The entry concerns WordPress Core and describes an interpretation conflict vulnerability that could enable an attacker to perform SQL injection and achieve remote code execution,…
-
-
Qilin Ransomware Exploits CVE-2026-0257 in Palo Alto VPN
The Qilin ransomware group is exploiting a critical vulnerability (CVE-2026-0257) in Palo Alto Networks' PAN-OS that allows attackers to bypass VPN authentication on GlobalProtect portals and gateways. This vulnerability was patched by Palo Alto on May 13,…
-
AWS Kiro flaw lets hackers rewrite settings and run code
The article discusses a significant security flaw in AWS Kiro that allows malicious web pages to alter its configuration and execute code. This vulnerability raises concerns about the safety of cloud services and highlights the need for improved security…
The Hacker News -
CISA warns of critical Langflow RCE flaw CVE-2026-0770
CISA has added CVE-2026-0770 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Langflow’s Langflow product and is described as the Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability. In one sentence, the…
-
CISA flags critical WordPress SQLi flaw in KEV, urges patch
CISA has added CVE‑2026-60137 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects the WordPress Core product and is described as a SQL injection vulnerability that can be chained with CVE‑2026-63030 to permit an unauthenticated attacker…
-
Google launches Gemini 3.5 Flash AI to catch software flaws
Google has announced the release of Gemini 3.5 Flash Cyber AI, an advanced tool designed to identify and remediate software vulnerabilities using artificial intelligence. This development reflects a significant advancement in software security, leveraging…
The Hacker News -
TELEPUZ Malware Spreads Through ClickFix and VIDAR Attacks
The TELEPUZ malware, tracked by Elastic Security Labs, employs a ClickFix social engineering attack to infect Windows users. Initially, victims are lured to a compromised webpage which prompts them to execute a shell command that retrieves the VIDAR loader,…
SecurityOnline -
wp2shell WordPress flaw lets attackers steal visitor data
The article discusses the wp2shell vulnerabilities in WordPress, highlighting the dangers posed to visitors of compromised sites. Hacked sites can facilitate scams, malware delivery, and credential theft, as attackers can gain full control without needing…
Malwarebytes -
Cloudflare’s R2 goes GA globally with zero egress fees
Cloudflare's R2 is now generally available, offering developers cost-effective object storage without egress fees. Launched in open beta in May 2022, R2 attracted over 12,000 developers with diverse use cases. Key features include S3 compatibility for easy…
Cloudflare -
ASUS Patches Router and PC Software Flaws, Including a CVSS 9.5 Command Execution Bug
ASUS has released five security advisories addressing seven vulnerabilities affecting router firmware, MyASUS driver components, Aura Wallpaper, and GameSDK. The critical vulnerability, CVE-2026-13385 (CVSS 9.5), allows machine-in-the-middle attackers to…
-
Qilin2 articles this day · Infosecurity first
Qilin ransomware exploits PAN-OS auth bypass to breach networks · Black Kite Report Finds 146 Ransomware Groups Active in 2026
2 outlets-
Qilin ransomware exploits PAN-OS auth bypass to breach networks
The article discusses a recent ransomware attack attributed to Qilin hackers, who exploited a vulnerability in PAN-OS, specifically an authentication bypass, to gain initial access to networks. The cyberattack highlights the evolving tactics of ransomware…
The Hacker News -
Black Kite Report Finds 146 Ransomware Groups Active in 2026
The report titled "Black Kite Ransomware Report 2026" reveals a rapid emergence of ransomware groups, with 146 groups active as of June 2026, up from 105 the previous year. It notes that 61 new groups have appeared in 2026 alone, averaging over one new group…
Infosecurity
-
-
Russian hacker sells AI tool bypassing Claude safety filters
A Russian-speaking cybercriminal, known as 'Trim', transitioned from sharing a jailbreak tutorial on a Russian forum to selling a commercial AI pentest platform called 'AI Pentest Checker' within three months. This platform utilizes techniques outlined in his…
InfosecurityTrim -
How Windows, Apple and Browsers Detect WiFi Captive Portals
The article by Johannes Ullrich discusses the detection of captive portals encountered when connecting to public WiFi networks. It explains that captive portals are splashes screens requiring user acknowledgment or login, which modern browsers and operating…
SANS ISC -
Windows privilege escape bug CVE-2026-42980 patched by Microsoft
CVE-2026-42980 is a high-severity privilege escalation vulnerability in Microsoft Windows, affecting several versions of Windows 10. Assigned a CVSS score of 7.8, it allows low-privileged users to gain SYSTEM level access due to an integer underflow in the…
-
Over 12% of Military Apps Contain Foreign Code Raising Data Risks
A study found that over 12% of mobile apps targeted at US military personnel contain code from companies in China, Russia, or other foreign nations, raising data security concerns. Researchers examined over 220 apps, revealing that many incorporate…
Ars Technica -
Zimbra patches critical SNMP command injection and four XSS flaws
The article discusses Zimbra's recent patch that addresses a critical SNMP command injection vulnerability and four cross-site scripting (XSS) vulnerabilities. The update aims to enhance email security by mitigating risks associated with unauthorized code…
The Hacker News -
Apache fixes three SQLi bugs in Fineract core banking software
Apache has fixed three SQL injection vulnerabilities in the open-source core banking platform Fineract, identified as CVE-2026-57821, CVE-2026-56287, and CVE-2026-35152. Each of these flaws exploits unvalidated query parameters and requires an authenticated…
-
Zimbra fixes SNMP command injection and XSS bugs in 10.1.20
Zimbra released Collaboration Suite 10.1.20 on July 20, 2026, addressing critical vulnerabilities, including a high-severity SNMP command injection flaw and multiple XSS bugs. These vulnerabilities pose risks to email and collaboration servers, especially…
SecurityOnline -
Hackers Hijack Printers and BitLocker in New Extortion Scheme
The article examines a new extortion scheme involving cybercriminals exploiting vulnerabilities in corporate printers and the BitLocker encryption system to demand ransoms from organizations. It details two incidents: one in Colombia where attackers…
securelist.com -
Anthropic AI models beat OpenAI in code security, study shows
AI-generated code typically introduces an average of 15 vulnerabilities per codebase, largely influenced by the choice of development framework rather than the AI model itself. The AI Trust Index, created by Secure Code Warrior with RMIT University, assessed…
Dark Reading -
World Cup 2026 Alters Global Internet Traffic, Cloudflare Reports
The 2026 World Cup showcased its unique capacity to unite global audiences, reshaping online engagement patterns. Cloudflare analyzed traffic data, noting significant deviations during match times compared to normal activity baselines established by a month…
Cloudflare -
South Korea Foreign Ministry hit by diplomatic data breach
A significant cyberattack on South Korea's Foreign Ministry has led to the compromise of the personal data of nearly all diplomatic personnel. The breach of the Korea National Diplomatic Academy's data system, which occurred between April and May of the…
DataBreaches -
NY DFS Fines Swedbank $50 Million for Panama Papers Cover up
In 2016, the Panama Papers leak exposed significant compliance failures by financial institutions, including Swedbank. Following the leak, the New York Department of Financial Services (DFS) conducted investigations and issued two information requests to…
DataBreaches -
AI music platform Suno leaks 55 million emails and payment data
In November 2025, the AI music generation tool Suno suffered a significant data breach that wasn't reported until July 2026. The breach affected over 55 million unique email addresses and included phone numbers for those who signed up using them.…
DataBreaches
