CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 9–13 on weekend days.

Show as table
Articles published per day
DayArticles published
Sun 11 Oct9
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Today, Sun 25 Oct12 so far
Exploited only
17 articles

Sat 25 Jul· 17 articles

  1. Iranian Hackers Breach US Water, Energy PLCs, Disable Alarms

    US federal agencies have issued a warning about Iranian-linked actors targeting internet-exposed water and energy control systems in the US. The advisory from CISA, FBI, NSA, and the Department of Energy indicates that these actors are gaining access to…

    Security Affairs
  2. Malvertisers split malware into chunks, reassembling it in browser

    The article discusses a new method of malvertising that sends malware in segments to users' browsers, which then reconstructs the executable. This innovative approach poses significant challenges to traditional cybersecurity measures, as it exploits…

    The Hacker News
  3. Origin Energy breach exposes data of two million customers

    Origin Energy, a major Australian energy provider, has reported a data breach affecting approximately 2 million customers. The breach was attributed to a hacker known as 'John Doe,' who claimed to have accessed the company's customer systems and stole…

    Security Affairs
  4. Lawmakers Vote to Extend CISA Cyber Threat Sharing Law to 2027

    Lawmakers voted to extend the Cybersecurity Information Sharing Act of 2015 (CISA) for another decade, tying the reauthorization to the 2027 national defense authorization act, which passed the House of Representatives with a vote of 216-212. The extension…

    DataBreaches
  5. Northern Sydney Nurse Charged With Patient Data Theft

    A male registered nurse from northern Sydney has been charged with unauthorized access and downloading of patient data. The investigation began following a report received by police on July 22, leading to a search of the suspect's home where multiple…

    DataBreaches
  6. Pope backed Click To Pray app leaks user data for months

    The 'Click To Pray' app, endorsed by the Pope and used by over 719,000 people, has been found to have a significant security vulnerability that has exposed user names and email addresses for months. Ethical hacker BobDaHacker reported the issue to the Pope’s…

    DataBreaches
  7. Unpatched Fastjson flaw lets attackers run code remotely

    The article discusses a critical vulnerability in Fastjson 1.x, which allows remote code execution (RCE) and is currently being exploited without any available patch. It highlights the urgency for users to secure their applications and check for potential…

    The Hacker News
  8. CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking

    The article discusses how a recent study by CTM360 highlights the evolution of insurance phishing into real-time account hijacking, particularly in the realm of cybercrime. It notes that traditional email phishing tactics have advanced, enabling fraudsters…

    The Hacker News
  9. Cl0p exploits PTC Windchill flaw for unauthenticated RCE

    The article discusses a recent vulnerability in PTC Windchill and FlexPLM software that allows unauthenticated remote code execution (RCE). It reports that Cl0p ransomware affiliates are targeting these internet-exposed applications to exploit the…

    The Hacker NewsCl0p
  10. DevMan Launches RaaS Portal to Streamline Ransomware Attacks

    The article discusses the launch of the DevMan RaaS portal which centralizes ransomware management, focusing on payload creation, victim handling, and affiliate payouts. This tool aims to streamline operations for cybercriminal affiliates by providing an…

    The Hacker News
  11. GitLab flaw enables logged in users to run commands as Git user

    A recent article published on July 25, 2026, by Swati Khandelwal discusses a security vulnerability in GitLab that allows authenticated users to execute commands as the Git user, raising significant concerns in application security.

    The Hacker News
  12. Arena Simulation bugs allow arbitrary code execution, now patched

    Rockwell Automation has addressed four high-severity vulnerabilities (CVE-2026-8085, CVE-2026-8312, CVE-2026-8313, CVE-2026-8314) in its Arena Simulation software, which can lead to arbitrary code execution on affected systems. These vulnerabilities arise…

    SecurityWeekCVE-2026-8085CVE-2026-8085
  13. Meta rolls out Seller app to boost Facebook Marketplace commerce

    Meta has launched the Seller app for Facebook Marketplace, marking its tenth anniversary. The app provides professional-grade tools for sellers, integrating features like AI-driven listing generation, inventory management, and performance analytics into a…

    SecurityOnline
  14. Tech Giants Back Open Source AI Amid US China Policy Tensions

    A coalition of 25 tech firms, including NVIDIA, Microsoft, and Meta, signed an open letter defending open-source AI models amid increasing tensions between the US and China regarding AI innovation. The letter urges US policymakers to avoid restrictive…

    SecurityOnline
  15. Meta launches Facebook Verified badge via face scan selfie video

    Meta has introduced a new Facebook Verified badge to combat fake accounts on its platform. This free badge allows users to verify their identity by recording a short face-scan selfie video, which is then compared to their profile photo. Key requirements for…

    SecurityOnline
  16. Claude Opus 5 debuts, halving cost and boosting performance

    Anthropic's Claude Opus 5 has been launched as a significant upgrade to the Opus line, claiming to nearly match its strongest model, Fable 5, but at half the operational cost. The new model boasts enhanced performance in knowledge work and coding, with…

    SecurityOnline
  17. Urgent FastJson RCE flaw CVE-2026-16723 hits finance and health

    The content discusses a critical vulnerability in the FastJson library identified as CVE-2026-16723, which has a CVSS score of 9.0. This Remote Code Execution (RCE) vulnerability affects versions 1.2.68 to 1.2.83 and is actively exploited across various…

    SecurityOnlineCVE-2026-16723CVE-2026-16723

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device