News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Fri 24 Jul· 63 articles
-
Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry
On July 24, 2026, Swati Khandelwal reported on the use of an AI agent named Hermione in a post-exploitation scenario at the Thai Finance Ministry. The hack demonstrates the potential risks associated with AI technologies, underscoring the need for security…
The Hacker News -
Golden Chicken malware returns with four new implant families
The article discusses the resurgence of the Golden Chicken malware operation, highlighting the introduction of four new malware families and modular implants. This analysis is rooted in threat intelligence and browser security, emphasizing the evolving…
The Hacker News -
Google expands Gemini Spark AI to Pro, Ultra tiers worldwide
Google has expanded access to its Gemini Spark AI assistant, which debuted at Google I/O 2026. The service is available to subscribers of the Google AI Pro tier in the U.S. and the Google AI Ultra tier worldwide, though some regions, including the EU and UK,…
SecurityOnline -
UAC-00992 articles this day · The Hacker News first
Ukraine Hit by Fake Notepad++ Plugin in UAC-0099 Phishing Attack · Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in Espionage Attack
2 outlets-
Ukraine Hit by Fake Notepad++ Plugin in UAC-0099 Phishing Attack
UAC-0099, a Russia-aligned threat actor, is targeting Ukrainian organizations by delivering malware through a fraudulent Notepad++ plugin as part of a phishing campaign. The attack begins with a phishing email containing a disguised image link that leads to…
Security Affairs -
Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in Espionage Attack
The article discusses the emergence of a fake Notepad++ plugin used to deliver the MATCHBOIL.V2 malware, as part of UAC-0099 cyber espionage attacks. It highlights the increasing sophistication of cyber threats, particularly in relation to AI-driven tools…
The Hacker News
-
-
EU fines Google €890m for abusing search and Play Store
The European Commission has fined Google €890 million for breaching the Digital Markets Act by abusing its dominant position in search and the Play Store. The investigation revealed that Google manipulated search results to favor its services over…
SecurityOnline -
Ransomware Attacks Targeting Universities on the Rise
Ransomware attacks on universities have drastically increased, with a rise of 8% in the first half of 2026 compared to the previous six months. Key factors include significant assaults by The Gentlemen ransomware group, which targeted educational…
InfosecurityThe Gentlemen -
Businesses Adopt AI Fast, But Consumers Lack Trust, Survey Finds
The article discusses the 'AI Trust Paradox,' highlighting a significant gap between the rapid adoption of artificial intelligence (AI) by businesses and the lingering distrust among consumers. While 93% of companies plan to implement AI, only 23% of…
Security Affairs -
US agencies warn Laundry Bear exploits CVE-2025-66376 in Zimbra
US agencies including CISA, NSA, and FBI have issued a warning about the Russian-linked APT group Laundry Bear, which is exploiting a patched vulnerability (CVE-2025-66376) in Zimbra servers to steal email accounts from unpatched systems. This zero-click…
-
Financial Firm Hit by ClickFix, DenoRAT and NightshadeC2
A recent cyberattack targeting a financial institution employed a ClickFix social engineering tactic, which was disrupted by eSentire's Threat Response Unit in June 2026. The attack utilized the TAG-150 threat actor's methods to deploy DenoRAT and…
SecurityOnlineGrayBravo -
NodeBB patches eight AI found flaws that risk admin chat exposure
On July 24, 2026, it was reported that NodeBB patched eight vulnerabilities identified by artificial intelligence, which had the potential to expose administrative access and private chats. These flaws underscore significant security concerns in web…
The Hacker News -
North Korean group uses fake coding tests to spread SVG malware
A recent report from Elastic Security Labs details a new cyber threat known as the 'Contagious Interview' campaign, linked to a North Korean group. The campaign targets software developers, offering fake job opportunities that contain trojanized coding…
SecurityOnline -
Multilingual AI Gaps Pose Security Risks Across Europe
The article addresses the security vulnerabilities in AI systems due to their handling of multiple languages, particularly in Europe. Despite AI models being capable of processing many languages, their performance and safety can vary widely, often favoring…
Dark Reading -
Kimi K3 Agents Find Redis Zero-Day, Trigger RCE Exploit
Researchers have reported that Kimi K3 agents have discovered zero-day vulnerabilities in Redis, leading to the creation of a remote code execution (RCE) exploit. This highlights a critical area in database security, emphasizing the need for vigilance and…
The Hacker News -
ACR Stealer Targets Enterprises with ClickFix and MSHTA Lures
The content discusses the rise of ACR Stealer, a malware family designed to steal browser credentials and other sensitive data. Notably, Microsoft reported an increase in ACR Stealer activity targeting enterprise Windows environments between late April and…
SecurityOnline -
Origin Energy confirms breach exposing customers' personal data
Australia's Origin Energy Limited has confirmed a data breach affecting potentially millions of customers, with unauthorized access to personal information including names, addresses, and partial financial details. The investigation was launched on July 22,…
SecurityWeek -
LG monitor McAfee ads draw rebuke, promise popup removal
The content discusses a critical issue regarding LG monitors, which have been observed to display unsolicited desktop advertisements promoting McAfee antivirus software without user consent. Users connecting these monitors to Windows PCs found that LG's…
SecurityOnline -
ADAudit Plus Flaw CVE-2026-6516 Allows Unauthenticated Remote Code Execution at CVSS 10
A critical vulnerability in ManageEngine ADAudit Plus, tracked as CVE-2026-6516, allows unauthenticated remote code execution due to weaknesses in the product's Agent APIs. An authentication bypass and a path traversal flaw enable attackers to execute code…
-
Heap overflow bug in Knot Resolver lets attackers run code
The article discusses a critical vulnerability (CVE-2026-16232) in Knot Resolver, which is an open-source caching recursive resolver used by large ISPs. The vulnerability involves improper authentication and allows remote code execution (RCE) due to a heap…
-
Logto flaws enable account takeover and MFA bypass
The content discusses six critical vulnerabilities identified in the Logto identity platform by CERT/CC, particularly affecting authentication processes such as SSO and MFA. Key points include: **CVE Overview:** Two critical CVEs are specifically…
SecurityOnline -
Chinese Man Indicted for Gift Card Fraud Targeting Apple
A federal grand jury indicted Jinbin Ren, a 38-year-old Chinese national, for allegedly leading a wire fraud conspiracy involving stolen gift cards that were used to acquire Apple electronics, which were then sent to China. The group is said to have operated…
SecurityOnline -
Google fixes Chrome memory bugs that may allow sandbox escape
On July 23, 2026, Google released a significant security update for Chrome (version 150.0.7871.186/.187), addressing four high-severity memory vulnerabilities, including use-after-free and out-of-bounds write bugs that could lead to potential sandbox escapes…
-
Storm Center’s Johannes Ullrich on Duty, Threat Level Green
The content provides information about the Internet Storm Center (ISC), specifically highlighting Dr. Johannes Ullrich as the handler on duty with a green threat level. It contains links to various resources including classes he teaches, podcasts, diary…
SANS ISC
