News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Thu 30 Jul· 77 articles
-
OSF Healthcare fined $552k over Xing Team ransomware breach
In June 2021, a ransomware attack by the relatively unknown Xing Team affected OSF Healthcare, with reports highlighting OSF's inadequate response. A statement issued in October revealed further delays in their incident response. The U.S. Department of…
DataBreachesXing Team -
KT faces £37.6m fine after femtocell hack leaks 16,600 records
KT has been fined over 53.9 billion won (approximately $37.6 million) due to a personal data breach and unauthorized micropayment damages resulting from illegal exploitation of femtocells. The Personal Information Protection Commission (PIPC) has ordered KT…
DataBreaches -
Analog Devices breach sparks extortion claims, no leak evidence
Analog Devices, Inc., a Massachusetts semiconductor company, reported a data breach following unauthorized access detected on June 23. An investigation revealed that hackers stole files, but the type of information compromised has not been disclosed. The…
SecurityWeekExfilSquad -
OctLurk and SilkLurk Backdoors Hit Central Asian Govt Agencies
The content discusses the emergence of two new backdoors, OctLurk and SilkLurk, targeting government organizations in Central Asia. These backdoors primarily focus on espionage activities, and the victims include institutions from various sectors such as…
securelist.com -
Patch now: critical VMware vCenter remote code flaws
On July 29, 2026, Broadcom disclosed two critical vulnerabilities in VMware vCenter Server, CVE-2026-59309 and CVE-2026-59310, both with a CVSSv3.1 score of 9.8. CVE-2026-59309 represents an authentication bypass that allows unauthorized access to the…
-
Hackers exploit AnySign4PC flaw via compromised Korean sites
Hackers are exploiting vulnerabilities in AnySign4PC through compromised Korean websites to install backdoors without user consent. This incident raises concerns about web security and the need for enhanced protective measures against such exploits.
The Hacker News -
SilverFox uses three driver BYOVD with ValleyRAT on Japan maker
The article discusses a recent cyber threat involving a group named SilverFox targeting a Japanese manufacturer. It outlines the use of a sophisticated three-driver Bring Your Own Vulnerable Driver (BYOVD) attack combined with ValleyRAT malware to infiltrate…
The Hacker NewsVoid Arachne -
FCC Bans New Foreign Robots, Inverters Over Espionage Fears
The FCC has expanded its Covered List to include new foreign-produced advanced robotic devices and power inverters, restricting their import, marketing, and sale in the U.S. Existing authorized devices can still receive software and firmware updates until…
Security Affairs -
Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks
Unit 42 has uncovered an AI-driven autonomous hacking campaign by a Chinese-speaking actor who utilized AI models for cyberattacks. The actor used various tools, including the DeepSeek framework operating via the Hermes Agent, to target infrastructure…
-
Critical Ruflo Flaw Lets Attackers Spawn Rogue AI Swarms
A significant vulnerability (CVE-2026-59726) has been discovered in the open-source AI orchestration platform, Ruflo, which could allow unauthenticated attackers to execute commands within the container. Ruflo, known for its ability to manage multiple AI…
-
Nearly One Fifth of Data Center OT Exposed via Single Network Hop
Research by Claroty reveals that nearly 20% of cyber-physical systems in major data centers are easily accessible to attackers via one network connection. Despite only 0.4% of the infrastructure assets being directly internet-exposed, around 18% are one step…
SecurityWeek -
Google fixes 370 Chrome bugs, seven critical use after free flaws
Google's Chrome security team has released patches for 370 vulnerabilities in Chrome version 151, including seven critical ones. These issues include 'use after free' vulnerabilities and insufficient validation of untrusted input in components like…
Infosecurity -
Cisco Secure Firewall Management Center (FMC)2 articles this day · SecurityWeek first
CISA warns attackers exploit Cisco firewall flaw CVE-2026-20316 · Cisco patches zero day flaw in Secure FMC after July attacks
-
CISA warns attackers exploit Cisco firewall flaw CVE-2026-20316
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a vulnerability in Cisco Secure Firewall Management Center (FMC) Software, identified as CVE-2026-20316 with a CVSS score of 5.3, to its Known Exploited Vulnerabilities catalog. This…
-
Cisco patches zero day flaw in Secure FMC after July attacks
Cisco has announced patches for a high-severity zero-day vulnerability (CVE-2026-20316) in its Secure Firewall Management Center (FMC), which allows attackers to exploit default credentials to access sensitive data. This vulnerability has been actively…
-
-
NCSC urges vendors to improve network device forensics
The UK’s National Cyber Security Centre (NCSC) is urging device manufacturers to enhance 'forensic observability' in network devices to aid incident response teams in collecting post-compromise evidence. This approach emphasizes the need for built-in…
Infosecurity -
US and Allies Revise SBOM Guidance to Boost Supply Chain Security
The US government and 13 allied nations have updated their guidance on the minimum elements of a software bill of materials (SBOM), focusing on enhancing software supply chain security and transparency. This guidance serves as a foundational tool for…
SecurityWeek -
eSIM Plus and Nicegram Share Belarus-Linked Codebase, Analysis Finds
A recent analysis by the Mysterium VPN Research Team reveals that the apps eSIM Plus and Nicegram, marketed as Lithuanian products, share a codebase linked to Belarus. The investigation uncovered that eSIM Plus is cryptographically signed by a Belarusian…
Security Affairs -
CVE-2026-66373: Redis RCE Proof-of-Concept Publicly Disclosed
A critical vulnerability has been identified in Redis, known as CVE-2026-66373, which involves a Remote Code Execution (RCE) risk stemming from a double-free bug in the RESTORE command. This flaw allows an authenticated attacker to potentially corrupt memory…
-
Toy Ghouls' GenieLocker ransomware hits Russian firms via VPN
The article discusses the GenieLocker ransomware, attributed to the Toy Ghouls group, which has been active since March 2026. GenieLocker targets Windows, Linux, and ESXi systems, marking a shift for Toy Ghouls away from third-party ransomware. The…
securelist.comToy Ghouls -
Chrome 151 fixes 370 flaws, seven critical use after free bugs
Google released Chrome 151, addressing 370 vulnerabilities, including seven critical-severity bugs involving use-after-free issues and input validation flaws. The update fixes 71 high-severity defects, including various types of vulnerabilities like race…
SecurityWeek -
Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation
Russian hackers are exploiting a vulnerability in Microsoft Outlook Web Access (OWA) to maintain access to mailboxes even after victims rotate their credentials. This poses a significant threat to organizations as the attackers can keep their foothold…
The Hacker News -
FCC bans foreign robots and inverters over cybersecurity concerns
The article discusses the FCC's decision to block new foreign-produced robots and power inverters due to cybersecurity risks. The regulation aims to protect national security by preventing potential vulnerabilities introduced through foreign technology in…
The Hacker News -
Hackers use hotel WiFi to redirect staff to fake Microsoft pages
A recent report by ReliaQuest details a cyber attack where intruders compromised hotel and conference center Wi-Fi gateways to poison DNS and redirect traffic to fraudulent Microsoft pages, targeting corporate employees. Initial access likely occurred via…
SecurityOnline -
North Korean Hackers Exploit Fake Zoom Calls to Steal Crypto Data
A recent report by JUMPSEC highlights an active phishing campaign by the North Korean BlueNoroff group, targeting cryptocurrency staff through fake Zoom and Teams meetings. The attack relies on hijacked Telegram accounts to send genuine-looking invites,…
SecurityOnlineLazarus Group -
North Korea's Sapphire Sleet hijacks npm packages via Amazon links
The article discusses a recent cybersecurity threat involving an npm hijack linked to North Korea's Sapphire Sleet group. It outlines how malicious actors exploited vulnerabilities in Amazon links and npm packages, potentially impacting a wide range of…
The Hacker NewsSTARDUST CHOLLIMA -
Cisco Firepower FMC bug leaks data via static credentials
The article discusses a critical vulnerability in Cisco's Firepower Management Center (FMC) that is being actively exploited. Static credentials may expose sensitive data, presenting significant risks to network security. The urgency of addressing this…
The Hacker News -
OpenAI tests 'Sign in with ChatGPT' on Airtable, GitLab, Notion
OpenAI is pilot testing a new "Sign in with ChatGPT" authentication feature that allows users to log in across partner platforms using their ChatGPT credentials. This method shares minimal user data (name, email, profile picture) and does not allow…
SecurityOnline -
Google hints at Pixel 11 event with new camera light ring
Google has announced its upcoming hardware launch event for the Pixel 11 series, set for August 12. The teaser video highlights a new spinning, circular light indicator next to the camera, sparking various hypotheses about its function: it could indicate…
SecurityOnline -
GitLab patches critical flaw CVE-2026-6267 allowing data access
GitLab has released version 19.2.1, addressing 13 security vulnerabilities. The most critical is CVE-2026-6267, rated 8.5 for high severity, which allows unauthorized data access. No confirmed exploitation has been reported. Other notable vulnerabilities…
-
Critical Rails flaw exposes files, risks RCE via CVE-2026-66066
A critical vulnerability in Ruby on Rails Active Storage, tracked as CVE-2026-66066, has been identified, allowing unauthenticated attackers to read arbitrary files, potentially leading to remote code execution. Rated 9.5 on the CVSS scale, this flaw arises…
-
Google Patches 370 Chrome Flaws, Including Seven Critical
Google has released a significant security update for Chrome (version 151.0.7922.71/.72 for Windows and Mac, 151.0.7922.71 for Linux), addressing 370 vulnerabilities including seven classified as critical. Users are urged to apply the update due to the…
SecurityOnline -
ISC Stormcast July 30 2026: Green Threat Level, Resources Shared
The ISC Stormcast for Thursday, July 30th, 2026, is handled by Guy Bruneau, with a current threat level of green. Listeners can access previous diaries and learn about classes taught by Dr. Johannes Ullrich through provided links. Additional resources…
SANS ISC -
Google adds fn key shortcut to macOS Gemini AI app
Google has upgraded its Gemini application for macOS, allowing users to summon the app by long-pressing the 'fn' key. This update enhances user interaction with AI, enabling features such as voice transcription, document summarization, email drafting, and…
SecurityOnline -
N26 Users Targeted by Vishing Scam Using Copybara Android RAT
A recent report by D3Lab highlights a fraud campaign targeting N26 banking customers in Italy, employing a vishing attack that begins with a fraudulent phone call. The scam utilizes a Copybara Android RAT, which is delivered through a fake support…
SecurityOnline -
Southeast Asian cybercrime now a global industry costing $100bn annually
Southeast Asian cybercriminal syndicates have transformed into a significant global force, transitioning from regional crime to industrial-scale operations. With an estimated cost of $88 billion to $114 billion in 2025 for Southeast Asian economies, the…
Dark Reading -
SSH bot probes honeypot for crypto mining before attack
The content is a guest diary entry by Adam Cann, detailing an SSH bot that conducts reconnaissance on a target before deploying a cryptocurrency miner. The bot connects to an SSH honeypot, logs in quickly, surveys hardware specifications (like CPU…
SANS ISC -
Chinese cybercrime service fuels new mobile banking malware surge
The article discusses the emergence of a sophisticated mobile malware-as-a-service (MaaS) called "Flying Eagle," originating from China. Chinese cybercriminals are leveraging this service to build malware that targets financial applications, leading to…
Dark Reading
