News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Thu 23 Jul· 67 articles
-
Raspberry Pi Unveils Touch Display 2 for Pi 5 Home Projects
The Raspberry Pi has launched the Touch Display 2, a ten-inch touchscreen with a resolution of 1200x1920 pixels and support for ten simultaneous touch points. Priced at $80, it simplifies device assembly by drawing power directly from the Raspberry Pi,…
SecurityOnline -
Texas Firm Upbound Suffers $13M Fraud Lease Scheme
Texas-based Upbound Group, Inc. reported a data breach due to cyber incidents resulting in $13 million in fraudulent contract losses, particularly affecting its Acima segment. Hackers accessed non-sensitive customer information, which was allegedly used to…
SecurityWeek -
Dolphin X malware leverages AI to hunt high value Windows users
The article discusses a new malware known as Dolphin X, which is a Windows infostealer and remote access trojan that employs AI to prioritize attack targets. This malware can steal sensitive data from over 300 applications, including cryptocurrency wallets…
Infosecurity -
Dolphin X Stealer Hits Developers with AI Driven Credential Theft
This report discusses the critical alert related to the Dolphin X stealer tool, a malware sold on cybercrime forums. Key points include: 1. **Threat Overview**: Dolphin X offers credential stealing and remote access capabilities, targeting primarily Windows…
SecurityOnline -
Google Rolls Out Selfie Video Recovery for Locked Out Accounts
Google has introduced a new recovery option for users locked out of their accounts, allowing them to use a selfie video for verification. This feature aims to enhance account accessibility and security, particularly for those who may not have access to…
The Hacker News -
Assaf Keren named Meta's new CISO as Guy Rosen steps down
Assaf Keren has been appointed as the new Chief Information Security Officer (CISO) of Meta, succeeding Guy Rosen who held the position since 2022. Keren brings extensive experience from his previous roles as SVP and CSO at Qualtrics and CISO at PayPal. He…
SecurityWeek -
Check Point SmartConsole4 articles this day · SecurityOnline first
Check Point Zero Day CVE-2026-16232 Exploited for Auth Bypass · Check Point fixes critical SmartConsole auth bypass exploited now
-
Check Point Zero Day CVE-2026-16232 Exploited for Auth Bypass
Check Point has discovered a critical zero-day vulnerability (CVE-2026-16232) in its Security Management and Multi-Domain Management products, which has been exploited in the wild. This vulnerability allows attackers to bypass authentication and gain…
-
Check Point fixes critical SmartConsole auth bypass exploited now
Check Point has issued security updates to address a critical authentication bypass vulnerability (CVE-2026-16232) in SmartConsole, which is currently under active exploitation. This flaw allows unauthenticated remote attackers to gain full administrative…
-
GitHub Actions Abused to Steal Credentials from PHP Packages
The content reports on a critical cybersecurity alert concerning two active exploits: CVE-2026-16232 and CVE-2026-50522. Researchers uncovered a campaign involving GitHub Actions abuse, which facilitated credential theft and exploitation of cPanel and WHM…
-
Two Active BIND Exploits Highlighted as Nine Flaws Patched
The page highlights the detection of two active exploits (CVE-2026-16232 and CVE-2026-50522) and summarizes a total of nine vulnerabilities related to BIND, a popular DNS server. The vulnerabilities have been categorized by severity, with seven classified as…
-
-
Google’s Nuvem cable upgrades transatlantic routes via Bermuda
The Nuvem subsea cable, financed and controlled by Google, links Myrtle Beach, South Carolina, to Sines, Portugal, via Bermuda and the Azores, spanning 6,900 kilometers with a capacity of 384 Tbps. This project enhances internet connectivity between the US…
SecurityOnline -
Apple fixes Hide My Email leak after second patch attempt
The article discusses a recently patched vulnerability in Apple's 'Hide My Email' feature, which was initially discovered by researcher Tyler Murphy in June 2025. This flaw allowed attackers to access users' real email addresses despite the feature's intent…
SecurityOnline -
GitHub introduces fixed bug bounty rewards and elite VIP programme
GitHub has announced significant changes to its bug bounty program, transitioning from a flexible payment structure to fixed compensation based on severity assessments. This change aims to reduce compensation disparities and administrative overhead. The new…
SecurityOnline -
Critical nine year old RefluxFS bug grants root on default RHEL
A critical vulnerability in the RefluXFS Linux file system, present for nine years, allows local users to gain root access on default Red Hat Enterprise Linux (RHEL) installations. Discovered on July 23, 2026, this flaw poses significant security risks and…
The Hacker News -
Fake GST Refund Emails Spread Remcos RAT to Indian Firms
A recent GST phishing campaign has been identified targeting Indian businesses, using fake tax refund emails to distribute Remcos RAT malware. Attackers disguise malicious emails as official communication, leading victims to open infected attachments. The…
SecurityOnline -
Proofpoint survey finds AI is boosting ransomware attacks
A recent survey by Proofpoint reveals that 65% of organizations affected by ransomware believe AI has enhanced attack effectiveness. AI tools help cybercriminals create more genuine phishing emails and impersonation attacks, complicating detection. Common…
Infosecurity -
Google eases iPhone to Android data transfer with eSIM support
Google has enhanced its iOS to Android migration tool, making it easier for users to transfer data from an iPhone to an Android device. The new tool now supports a broader range of data categories, including Google account credentials, saved passwords, Wi-Fi…
SecurityOnline -
HelloNet APT campaign hijacks ViPNet updates to hit Russian firms
A recent cybersecurity report by Kaspersky describes the ongoing HelloNet campaign, linked to a suspected Chinese-speaking APT group, which targets large Russian organizations across various sectors, including government and industry. Active since May 2026,…
SecurityOnline -
Lampion Trojan Hits Portugal, Uses Fake Banking Overlays to Steal
The article discusses the resurgence of the 'Lampion' banking Trojan in Portugal, which originates from Brazil. This malware exploits the shared language between Brazilian hackers and Portuguese victims, making Portuguese businesses particularly vulnerable.…
Dark Reading -
Check Point patches critical SmartConsole flaw after exploits
Check Point has released a patch for a critical vulnerability in its SmartConsole that allowed unauthorized users to gain full administrative access. The flaw, initially exploited in the wild, posed significant risks to network security. Organizations using…
The Hacker News -
DoNot APT targets Bangladesh military with spear phishing RTF lure
**Summary of the Cyberattack on Bangladesh Military by DoNot APT**: A live cyber-espionage operation by the DoNot APT group (APT-C-35), suspected to be India-aligned, targets the Bangladesh military using spear-phishing techniques. **Key Points**: **Attack…
SecurityOnlineDoNot APT -
US warns of Iranian hackers targeting Siemens, Schneider PLCs
The US government updated its cybersecurity advisory on Iranian-linked cyberattacks targeting industrial control systems (ICS) made by companies such as Siemens, Schneider Electric, and Rockwell Automation. Initially released in April, the advisory…
SecurityWeekCyber Av3ngers -
Johannes Ullrich hosts ISC Stormcast, threat level stays green
The ISC Stormcast for July 23rd, 2026, is presented by handler Johannes Ullrich. The current threat level is green. Listeners can engage more deeply through various resources, including podcasts, discussions, and SANS classes taught by Ullrich. Additional…
SANS ISC -
600K Sites at Risk: Ninja Forms Stored XSS Flaw CVE-2026-65048 Hits CVSS 9.3
The content discusses critical vulnerabilities in the Ninja Forms WordPress plugin identified as CVE-2026-65048, CVE-2026-65049, CVE-2026-65050, and CVE-2026-65052, affecting over 600,000 sites. The notably severe CVE-2026-65048 is an unauthenticated stored…
-
Nichirei ransomware hit halts KFC flow, flags Japan supply risk
A cyberattack on Nichirei, a Japanese frozen-food supplier, disrupted its operations, leading to food shortages affecting major customers like Kentucky Fried Chicken. The attack, attributed to the Russia-linked ransomware group RansomHouse, caused…
Dark ReadingRansomHouse -
Ransomware Breach Exposes Kootenai County Residents' Data
Kootenai County has notified residents of a potential data breach following a ransomware attack detected on its computer network on March 30, 2026. The county took immediate measures to secure the network and engaged cybersecurity consultants to investigate…
DataBreaches -
Sumner County schools postpone term after network data breach
The Sumner County school district in Middle Tennessee is delaying the start of the school year due to a data breach in its computer network. School officials discovered the breach and have postponed the opening of new student registration from July 22 to…
DataBreaches
