News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Thu 30 Jul· 77 articles
-
Researchers Expose Flying Eagle Criminal Ecosystem Behind Fake Chinese Police App
Researchers have uncovered a vast cybercrime ecosystem linked to a fake Chinese police app, using the Flying Eagle Android RAT framework. The investigation revealed 170 active servers and two Telegram channels distributing modified versions of the malware.…
Security Affairs -
CISA urges utilities to secure PLCs after Minnesota attack
The Cybersecurity and Infrastructure Security Agency (CISA) is urging water and wastewater system operators to secure operational technology against cyber threats, especially targeting programmable logic controllers (PLCs). This call follows a coordinated…
SecurityWeek -
Minnesota Water Utility Attacks Expose Sector's Cyber-Risks
A coordinated cyberattack attributed to an Iran-backed group targeted over 30 community water systems in Minnesota, shocking stakeholders and emphasizing vulnerabilities in U.S. critical infrastructure. The attacks, which disrupted automated systems…
Dark Reading -
Bank of America to acquire UK cybersecurity firm MDSec Consulting
Bank of America has announced its plan to acquire UK-based information security consultancy MDSec Consulting Limited, aiming to close the transaction in Q4 2026 pending regulatory approvals. MDSec, headquartered in England with approximately 65 cybersecurity…
SecurityWeek -
Russian hackers use Exchange XSS bug to plant OWAReaper
Russian state hackers, identified as TA488, are exploiting a critical vulnerability (CVE-2026-42897) in Microsoft's Exchange Server, allowing them to gain unauthorized access to unpatched networks. This vulnerability, described as a cross-site-scripting…
-
AI harness bugs open supply chain paths for agent exploits
The article discusses the security vulnerabilities associated with AI harnesses, which are software frameworks that support AI models like those from major companies such as Google and OpenAI. According to researchers from Novee Security, trust issues…
Dark Reading -
Over 700 sites hijacked for brand impersonation phishing
The article discusses the rising trend of brand impersonation as a primary initial access vector for cyber attacks, highlighting tactics such as fake websites and apps used to deliver malware. Examples include over 700 websites, including those of…
Security Affairs -
Okta acquires Permiso Security to boost identity threat detection
Okta has signed an agreement to acquire Permiso Security, a cloud-native identity security platform focusing on threat detection across various identities in multi-cloud environments. This acquisition enhances Okta's capabilities in identity threat detection…
SecurityWeek -
North Korea linked macOS malvertising spreads crypto stealer
The article discusses a cyber threat involving macOS malvertising linked to North Korea, which delivers crypto-stealing malware through fake updates. It highlights the tactics employed by cybercriminals to deceive users into installing malicious software…
The Hacker News -
Hackers Deploy AI Tools to Launch Faster Cyber Attacks
Resecurity's analysis highlights that cybercriminals are increasingly utilizing autonomous AI offensive security agents, such as T3MP3ST, Strix, and PentestGPT, to lower the barriers for vulnerability identification and exploitation. This growth in AI's role…
Security Affairs -
Cheap Android TV Boxes Found Running Massive Ad Fraud Network
Security experts are warning about generic TV boxes, like the H96, that often facilitate ad fraud and rent out users' internet connections without consent. Researcher Pedro Falé from Bitsight TRACE uncovered a vast ad fraud network linked to these devices,…
Krebs on Security -
Former employee accessed files, shared with kin, suit filed
A civil lawsuit has been filed against Sarah Gross, West Virginia University Medical Corporation, and Charleston Area Medical Center by plaintiffs M.B., D.B., and their minor child A.B., along with A.D., for unauthorized access to their medical records. The…
DataBreaches -
Critical Ruby on Rails Bug Exposes Files via Image Upload
On July 29, 2026, the Ruby on Rails project acknowledged CVE-2026-66066, a critical vulnerability tied to Active Storage image processing with the libvips library, rated with a CVSSv4 score of 9.5. This flaw allows unauthenticated attackers to read files…
-
Malwarebytes for Windows arrives on Microsoft Store
Malwarebytes for Windows is now available on the Microsoft Store, providing users with a trusted way to download the complete application without compromises. This version includes same features and protection as downloaded versions from the website,…
Malwarebytes -
Microsoft July 2026 update adds AI security, passkeys default
The July 2026 update from Microsoft highlights key advancements in their security offerings, emphasizing AI-driven improvements across various platforms. Among the updates, Project Perception introduces a multi-agent system enhancing security operations…
Microsoft -
Simpler AI Vendor Checks Urged to Replace Complex Questionnaires
The article emphasizes the inadequacy of current AI vendor assessment questionnaires, which are often overly complex and fail to effectively measure actual compliance and risk. It suggests that a simpler, more standardized approach—similar to the surgical…
SecurityWeek -
Hugging Face breach sees AI agent exploit dataset flaw via RCE
The July 2026 Hugging Face breach involved an intrusion by an autonomous AI agent, leading to credential harvesting and lateral movement across clusters. Key stages of the attack involved exploiting untrusted dataset content in a processing worker through a…
elastic.co -
Anthropic's Claude Mythos AI raises exploit fears
The article discusses the emergence of Anthropic's Claude Mythos, a new AI model touted for its ability to discover and exploit critical software vulnerabilities. Experts evaluate the potential risks associated with its capabilities, including the threat of…
Dark Reading -
AI Hacks Surge as Chrome Hits 370 Flaws, SonicWall Targeted
The article titled "ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories" covers various cybersecurity threats and incidents. Key points include the rising use of AI in hacking techniques, the discovery of 370…
The Hacker News -
Attackers abuse Linux PAM to hide crypto‑miner in memory
A recent report from Group-IB reveals that a cryptomining operation has exploited Linux PAM to evade detection by security operations centers. The attackers abandoned root access to masquerade as low-privileged users, effectively creating a 'forensic…
Infosecurity -
Operation Silent Vector targets INC ransomware with bounty
Crime Stoppers International has launched a new program called Operation Silent Vector, targeting the INC Ransomware group. This initiative seeks tips to help arrest cybercriminals associated with INC Ransomware, which has disrupted essential services like…
DataBreachesInc Ransom -
MongoDB patches critical flaw amid 27 new security vulnerabilities
MongoDB disclosed 27 vulnerabilities across MongoDB Server and Compass, with most being denial-of-service (DoS) bugs, and several allowing access-control bypass or information disclosure. The vulnerabilities include 1 critical (9.2), 19 high, and 7 medium…
-
DataBahn raises $40M Series B to boost AI driven data automation
DataBahn, a Texas-based company founded in 2023, has raised $40 million in a Series B funding round, totaling $59 million in funding. The company specializes in automating data integration and management, aimed at reducing costs. Its solutions enhance data…
SecurityWeek -
Open source supply chain attacks rise as AI fuels new threats
The article from the Google Threat Intelligence Group discusses the rising threat of software supply chain compromises, particularly through open-source packages, as evidenced by notable incidents in 2025 and early 2026. It emphasizes the need for…
Google Cloud -
Apple July 2026 Patch Fixes 210 Flaws Including ImageIO Bug
The July 2026 Apple Security Update Review presents a significant increase in vulnerabilities, with Apple releasing 210 unique CVEs compared to 37 in the previous month. Major components affected include iOS/iPadOS 26.6, various macOS versions, tvOS,…
-
FTC sues health tech firm Hims & Hers over data shared with Meta
The FTC and the states of Utah and California have filed a lawsuit against Hims & Hers, a telehealth provider, for allegedly failing to protect health data privacy. The suit claims the company shared sensitive health information with third-party ad platforms…
Malwarebytes -
Azure Cosmos DB bug leaks master key, gives full DB access
The article discusses a significant security flaw found in Azure Cosmos DB that exposed a platform-wide key, allowing unauthorized access to any database within the system. This vulnerability raises major concerns about cloud security and data protection for…
The Hacker News -
CVE-2026-42530: NGINX HTTP/3 flaw allows remote code execution
The content discusses a critical vulnerability identified as CVE-2026-42530 affecting the F5 NGINX Open Source HTTP/3 module, rated 9.2 on the CVSS scale. This vulnerability, which allows remote code execution via a use-after-free flaw in QPACK header…
-
Cantina raises $8M to launch community powered vuln platform
Cantina, a cybersecurity startup based in New York, has exited stealth mode with $8 million in new funding, bringing its total to $16.5 million. The funding round was led by Framework Ventures. Cantina has developed an autonomous vulnerability management…
SecurityWeek -
cdnjs fully migrated to Cloudflare's Developer Platform
As of June 23, 2026, cdnjs operates solely on Cloudflare's Developer Platform, showcasing its evolution to meet platform challenges. Cdnjs, a widely used CDN for JavaScript and CSS, serves about 9 billion requests daily, with a 98.6% cache hit rate and a…
Cloudflare -
Sysadmins report AI misses automation targets, adoption climbs
A recent report by Action1 reveals that AI and automation have not met the expectations of system administrators (sysadmins) regarding their impact on IT and security workflows. A survey of over 1,000 sysadmins indicated a significant gap between predicted…
Infosecurity -
Discern Security secures $13M funding to boost security platform
Discern Security has raised $13 million in a Series A funding round, increasing its total funding to $16 million. Led by Forgepoint Capital, with participation from other investors, the company, founded in 2023 in California, offers a proactive security…
SecurityWeek -
Text in Word docs triggers self spreading AI worm via Copilot
A security researcher revealed a method to exploit Microsoft Copilot for Word by embedding a self-propagating AI worm through hidden text in documents. This AI worm can spread without the use of macros, leveraging normal document-sharing processes. The…
Malwarebytes -
Microsoft Copilot Word flaw lets hidden prompts spread AI worm
A security researcher has revealed that Microsoft Copilot for Word can be exploited to spread a self-propagating "AI worm" through hidden prompt injections in documents. The attack enables a malicious JSON prompt to be embedded as white text in Word files.…
Malwarebytes -
Analog Devices says files exfiltrated in June 2026 breach
Analog Devices (ADI), a major semiconductor company, reported a data breach due to unauthorized access detected on June 23, 2026. The company activated its incident response protocols and engaged cybersecurity experts. Certain files were exfiltrated, but the…
Security AffairsExfilSquad -
Onyx Security secures £113m Series B to boost AI safety platform
Onyx Security has secured $113 million in Series B funding, led by Bessemer Venture Partners, bringing its total funding to $153 million. The funding will enhance its AI security platform, valued at approximately $640 million. Onyx offers a centralized…
SecurityWeek -
AI powered dangling DNS takeovers expose UK firms to espionage
The article discusses the emerging threat of 'dangling DNS takeover', where cybercriminals exploit outdated DNS records pointing to deleted resources to take control of subdomains. Security firm Silent Push explored this using AI, which improved the…
SecurityWeek -
Phishers Hijack Outlook via Fake Teams Alerts Targeting 120 Firms
A phishing campaign has targeted corporate Outlook, SharePoint, and OneDrive accounts by exploiting Microsoft's legitimate authentication system. The attackers impersonated Microsoft Teams alerts and utilized OAuth URLs to mislead users into granting access…
Infosecurity -
Microsoft Copilot for Word flaw exposes hidden prompts
The article discusses a vulnerability in Microsoft Copilot for Word, which can inadvertently copy hidden prompts into new documents. This raises concerns about security risks associated with AI-generated content, highlighting the need for better controls and…
The Hacker News -
Networks become AI’s frontline defence against cyber threats
The article discusses how the network is evolving into the primary control plane for AI security in the context of cybersecurity. It emphasizes the importance of integrating AI with existing security frameworks to effectively manage risks associated with AI…
The Hacker News
