News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Mon 27 Jul· 71 articles
-
Herefordshire council worker sentenced for accessing 490 records
Geoffrey Smith, a 31-year-old council worker from Herefordshire, unlawfully accessed approximately 490 personal records over four days, downloading 94 documents that included sensitive information about family members and known individuals. His actions were…
DataBreaches -
Beelzebub raises €3m seed to grow AI cyber defence platform
Beelzebub, an AI-native cybersecurity company based in Milan, has raised €3 million (approximately $3.4 million) in seed funding led by United Ventures, totaling $3.8 million since its founding in 2025. The company has developed a platform that utilizes red-…
SecurityWeek -
Lookout warns WolfSSL flaw threatens over a billion mobiles
Mobile devices pose significant security challenges as they operate beyond organizational security perimeters, often housing vulnerable components within applications. Lookout's CEO highlighted the WolfSSL vulnerability, prevalent on over a billion devices,…
SecurityWeek -
Cruciferra Crypter Employs BYOVD and Process Ghosting to Hide
The article discusses the Cruciferra Crypter, a malware tool that employs techniques such as Bring Your Own Vulnerable Driver (BYOVD) and process ghosting to evade detection within Windows systems. The focus is on the strategies used by modern malware to…
The Hacker News -
WiFi attacks steal Microsoft 365 logins via DNS spoofing
A cybersecurity alert highlights ongoing attacks where threat actors compromise public Wi-Fi gateways to target traveling corporate employees' Microsoft 365 accounts. The attackers employ DNS poisoning to redirect users to fraudulent sites for credential…
SecurityWeekAPT28 -
Wearable Tech Data Leaks Spark Calls for Stronger App Security
The article discusses the cybersecurity risks associated with wearable technologies, emphasizing the complexity of their ecosystem, which includes devices, companion apps, and cloud services. Key points include the extensive risk posed by companion apps,…
SOCRadar -
Spring Boot Heapdump Endpoint Exposes API Keys via Default Creds
The article by Johannes Ullrich discusses Java Spring Boot's '/actuator/heapdump' endpoint used to gather application debug information, noting its potential to expose sensitive data such as API keys and database passwords. The author observes unusual…
SANS ISC -
Anthropic launches Claude Opus 5 AI to find software bugs
Anthropic has launched Claude Opus 5, a more affordable alternative to its high-end Fable 5 AI model. Opus 5 is particularly effective at identifying software vulnerabilities, nearly matching the capabilities of Mythos 5 but falling short in exploit…
SecurityWeek -
Ransomware groups turn off EDR, use AI in attacks, report says
A recent report by Halcyon reveals that ransomware groups are increasingly employing techniques to shut down endpoint detection and response (EDR) tools before initiating attacks, now a common practice among the most proactive ransomware groups. In Q2 2026,…
Infosecurity -
DentaQuest data breach exposes millions after ShinyHunters leak
DentaQuest, a dental benefits administrator, has notified millions of individuals that their personal and dental health information may have been compromised in a data breach discovered on May 20, 2023. Investigations revealed unauthorized access from May 17…
SecurityWeekShinyHunters -
TELESHIM uses Telegram for C2 on Middle Eastern govt
The article discusses the use of Telegram by the cyber threat group 'TELESHIM' for command and control operations targeting Middle Eastern governments. It highlights vulnerabilities in execution through common communication platforms, stressing the need for…
The Hacker NewsTELESHIM -
PoC Released for Severe vBulletin RCE Flaw CVE-2026-61511
A public proof-of-concept has been released for CVE-2026-61511, a pre-authentication Remote Code Execution (RCE) vulnerability in vBulletin, allowing unauthenticated attackers to execute PHP on servers via a math-parsing flaw. The vulnerability affects…
-
TELESHIM Malware Targets Middle East Governments Through Telegram
Zscaler ThreatLabz revealed the TELESHIM malware, which targets government entities in the Middle East using Telegram for command and control. The attackers employ DLL side-loading techniques, hiding malicious payloads within legitimate software. The malware…
SecurityOnline -
GitHub introduces 3 day Dependabot cooldown to stop risky updates
GitHub has implemented a 3-day cooldown for its Dependabot service to help users avoid the adoption of vulnerable packages in their software supply chains. This measure aims to enhance security by preventing the rapid use of potentially harmful dependencies.…
The Hacker News -
Dark Web Leaks Expose Millions of Health, Military Records
The SOCRadar Dark Web Team has uncovered a series of alleged data breaches involving various sectors, including healthcare and military. Key findings include: 1. **Transtreme/HealthNet-CMC/Aetna-CA Data Breach**: Claims of exposure involving 1.16 million…
SOCRadar -
RenPy Loader malware hides in fake game installers
The RenPy Loader is a malware threat that disguises itself within fake game and software installers. It operates through a multi-stage infection chain, ultimately delivering the Amatera Stealer which targets sensitive information including passwords and…
SecurityOnline -
OpenAI Agent Breach and TikTok Scams Highlight July Cyber Threats
This article summarizes key cybersecurity events from July 20 to July 26, 2026. Highlights include various scams such as TikTok resin art fraud and a Call of Duty Mobile scam aimed at stealing player accounts. Security issues faced by major entities like…
Malwarebytes -
AI Enhanced APT42 Spear Phishing Targets Defence, Nuclear Sectors
APT42, an Iranian-linked group also known as TA453, has enhanced its TAMECAT backdoor using AI for spear-phishing targeting notable figures in defense, government, and the nuclear sector. Their techniques include social engineering through believable…
SecurityOnlineAPT42 -
Publishers Sue Google Over AI Overviews Cutting Search Traffic
The decline in organic search traffic for digital publishers is primarily attributed to Google's AI Overviews, which scrape original content and provide AI-generated summaries directly in search results. This trend has prompted major media entities like…
SecurityOnline -
LockBit5 and Qilin Lead Ransomware Attacks Against Italian Organizations
A report has linked 148 ransomware attacks to Italian organizations in the first half of 2026, with manufacturing being the most affected sector. Approximately 25 claims were reported per month, leading to the exfiltration of over 13,400 GB of data, though…
Security AffairsLockBit5 -
Samsung One UI 9 locks device after 13 failed passcode attempts
Samsung's One UI 9 introduces stricter lockscreens security measures, discontinuing unlimited unlock attempts. After 13 consecutive incorrect passcode entries, the device becomes permanently locked, requiring a factory reset that leads to total data loss if…
SecurityOnline -
PEAR Ransomware Breach Hits MCBS, Exposing 1.2 Million
Atlanta-based medical business management company MCBS experienced a significant data breach affecting over 1.2 million individuals after being hacked in September 2025. The breach involved access to personal information, including names, addresses, SSNs,…
SecurityWeekPEAR -
Claude AI shared links indexed by Google exposed private user data
This article discusses a misconfiguration issue with Claude AI that led to shared conversation links being indexed by Google, exposing sensitive user data. Despite users believing shared links were private, search engines were able to crawl and index these…
SecurityOnline -
Microsoft speeds up Windows 11 file deletion for fragmented data
Microsoft's recent update, Windows 11 Build 26300.8935, optimizes the deletion of large fragmented files, reducing the time required for this process. This update rolled out on July 20, 2023, but will be gradual, so not all users will notice the change…
SecurityOnline -
Intel will reintroduce Hyper Threading in 2028 Coral Rapids Xeon
Intel plans to reintroduce Hyper-Threading in its upcoming Coral Rapids Xeon server CPUs, which are expected to launch in 2028. During a recent earnings call, CEO Lip-Bu Tan highlighted strategies to regain market share in CPU markets lost to competitors…
SecurityOnline -
EU accuses TikTok of breaking DSA over child privacy lapses
The EU has accused TikTok of violating the Digital Services Act (DSA) by failing to protect the privacy of underage users. Key issues include allowing minors to have public accounts, which exposes their content to anyone online, and promoting videos of 16-…
SecurityOnline -
Qualcomm to Raise Chip Prices 10% From September 2026
Qualcomm is set to raise prices across its silicon portfolio by at least 10% starting September 1, 2026, due to increasing supplier costs. This increase affects a wide range of products including mobile processors, wearable tech, and IoT hardware. The…
SecurityOnline -
ISC Threat Level Stays Green as SANS Shares New Resources
The content features a post from Johannes Ullrich regarding the ISC's threat level, which is currently green. It promotes various resources offered by SANS, including a podcast for July 27, 2026, and links to classes that Ullrich is teaching. Users are…
SANS ISC -
UK firms must patch now as CISA flags six active exploits
The weekly threat intelligence briefing from July 20-26, 2026, highlights a severe increase in cybersecurity vulnerabilities, with 2,887 new vulnerabilities reported, including 407 classified as critical. Six actively exploited CVEs were flagged by CISA,…
-
Windows WalletService flaw CVE-2026-49176 lets users get SYSTEM
CVE-2026-49176 is a critical elevation of privilege vulnerability in Windows WalletService that allows standard users to gain SYSTEM rights. The flaw, rated with a CVSS score of 7.8, affects multiple versions of Windows 10, including 1607 and later. It…
-
Cruciferra Crypter Fuels Malware Attacks on Finance, Health
The Cruciferra crypter service, identified by Proofpoint, is an advanced malware-packing tool that allows multiple cybercriminal organizations to conceal and deliver malware, primarily remote access trojans (RATs) and infostealers. The service targets…
SecurityOnline
