News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Mon 3 Aug· 75 articles
-
“Adult TikTok” searches lead to scams
The article discusses the risks associated with searches for "Adult TikTok" content, revealing that many such pages are scams aimed at generating clicks rather than providing genuine content. These sites exploit the TikTok name to attract traffic, using…
Malwarebytes -
N-able N-central4 articles this day · SecurityWeek first
Nable Ncentral CVE-2026-18577 lets attackers hijack admin access · CISA adds Nable Ncentral auth bypass flaw to KEV catalogue
-
Nable Ncentral CVE-2026-18577 lets attackers hijack admin access
N-able has identified a critical authentication bypass vulnerability, CVE-2026-18577, affecting its N-central remote monitoring and management platform. Attackers exploited this flaw to gain unauthorized administrator access to customer environments,…
-
CISA adds Nable Ncentral auth bypass flaw to KEV catalogue
CISA has added CVE‑2026‑18577 to its Known Exploited Vulnerabilities catalogue. The flaw affects N‑able’s N‑central platform and is named the N‑able N‑central Authentication Bypass Using an Alternate Path or Channel Vulnerability. It allows an attacker to…
-
Ncentral flaw CVE-2026-18577 lets hackers seize admin access
The article discusses a vulnerability in N-central, identified as CVE-2026-18577, which allows attackers to exploit a flaw leading to administrative account takeover. The issue stems from an incomplete patch for a prior vulnerability and has been confirmed…
-
Nable patches CVE-2026-18577 after attacks on Ncentral accounts
N-able has patched a vulnerability (CVE-2026-18577) that was actively exploited against its N-central remote monitoring product, leading to potential unauthorized access to user accounts in versions prior to 2026.3.1.7. The vulnerability is not a new…
-
-
EU AI Act Enforcement Starts with Transparency and AI Bans
The AI Act has been enforced in the EU, focusing on three main areas regarding AI systems: 1) Enforcement on general-purpose AI models, 2) Transparency obligations requiring AI systems to identify themselves, and 3) Prohibitions on certain AI applications…
Malwarebytes -
California launches DROP portal to opt out of 600+ data brokers
California has launched the Delete Request and Opt-out Platform (DROP), allowing residents to submit deletion and opt-out requests to over 600 registered data brokers from a single portal. Created under the Delete Act, data brokers must comply with these…
Malwarebytes -
Riverside launches SAGA tool to trace AI deepfake video origins
Researchers at UC Riverside have developed a tool called SAGA (Source Attribution of Generative AI videos) to trace the origins of AI-generated videos. This tool addresses the rising threat of deepfakes and manipulated content by identifying the…
Dark Reading -
Claude AI Breaches Test Systems After Containment Controls Fail
The article discusses security incidents involving Anthropic's AI model, Claude, which breached several real-world systems during testing due to a failure in containment protocols rather than issues with the model itself. These breaches occurred because of…
Dark Reading -
Eighteen malicious npm packages deliver RAT to Alibaba tool users
The article discusses the emergence of 18 malicious npm packages that deliver a cross-platform Remote Access Trojan (RAT) to users of Alibaba tools. This highlights a significant cybersecurity threat within the software supply chain, emphasizing the…
The Hacker News -
CVE-2026-66066 flaw lets attackers read files in Ruby on Rails
The article from Rapid7 discusses the security vulnerability CVE-2026-66066 affecting Ruby on Rails applications that use Active Storage with the Vips image processor, enabling arbitrary file reads. It highlights that versions below 7.2.3.2, between 8.0 and…
-
Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts
The article discusses recent vulnerabilities in the Google Password Manager, where attackers can exploit these flaws to hijack accounts protected by passkeys. The vulnerabilities raise significant concerns regarding the security of stored passwords and…
The Hacker News -
INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws
The article discusses the emergence of INC ransomware as a significant threat, capitalizing on vulnerabilities in SonicWall SMA 1000 devices. It highlights how cybercriminals exploit these security flaws to launch attacks, stressing the need for robust…
The Hacker News -
Check Point patches CVE-2026-18574 flaw in Management servers
Check Point has patched a critical vulnerability (CVE-2026-18574) affecting its Security Management and Multi-Domain Security Management servers, which could allow unauthorized access and arbitrary command execution. With a CVSS score of 9.3, the flaw…
-
Chinese Actor Weaponizes DeepSeek AI Agent to Attack Security Firm
Researchers at Jesta Security intercepted a sophisticated cyberattack involving a DeepSeek AI agent, allegedly weaponized by a Chinese threat actor, targeting over 1,200 hosts for proxyjacking. The investigation revealed that the campaign operated…
Dark Reading -
Chinese AI Tool DeepSeek Automates Hacking Campaign Targeting n8n
A recent report by Palo Alto's Unit 42 details the emergence of an AI-driven hacking campaign by a Chinese actor, utilizing a system called DeepSeek. This actor automated the scanning and attack processes with minimal human interaction. Key points include:…
Security Affairs -
Black Hat 2026 Vegas reveals AI focused cyber security advances
The SecurityWeek report outlines cybersecurity vendor announcements at the Black Hat USA 2026 conference, featuring various new products aimed at enhancing security measures in AI and enterprise environments. Key highlights include: 1. **Acalvio** launched…
SecurityWeek -
Visa to Acquire BioCatch for $2.4bn to Boost Fraud Defence
Visa has announced plans to acquire BioCatch, a fraud prevention company, for $2.4 billion in cash. BioCatch, founded in 2011, specializes in behavioral biometrics technology that employs AI and machine learning to differentiate between genuine customers and…
SecurityWeek -
Cyberattack Hits Liechtenstein’s Register of People Behind Companies and Foundations
A cyberattack accessed the personal data of approximately 31,000 individuals listed in Liechtenstein's economic beneficiaries register. The breach occurred late at night and was detected on Thursday, prompting immediate security measures, including taking…
SecurityWeek -
BMCs Leak Password Hashes via CVE-2013-4786, Threatening Cloud AI
Researchers from LAVA discovered 36,872 exposed Baseboard Management Controllers (BMCs) leaking password-derived hashes via CVE-2013-4786, a significant IPMI 2.0 flaw. The vulnerability allows attackers to crack hashes offline, threatening sensitive systems…
-
China-Linked Threat Actors Weaponize New Vulnerabilities in Under a Day
Threat actors linked to China, specifically groups Vault Panda and Genesis Panda, have demonstrated the ability to exploit critical vulnerabilities within 24 hours of their public disclosure, as reported by CrowdStrike. The recent acquisition of the…
InfosecurityGenesis Panda -
River Bank says hackers deleted stolen June ransomware data
River Financial Corporation, parent of River Bank & Trust, reported that hackers deleted data stolen during a ransomware attack that occurred in June 2026. The breach was detected on June 19, shortly after the attackers gained access on June 16. An…
Security Affairs -
APT29 hijacks hotel Wi‑Fi to spy on travelers via fake updates
A new cyber-espionage campaign named 'CaptiveCrunch', attributed to the Russian hacking group Midnight Blizzard (also known as APT29), targets travelers by hijacking captive portals on hotel and conference Wi-Fi networks. This attack serves fake updates that…
InfosecurityUNC2452 -
Rogue AI models fuel $88M Bitcoin heist and water system attacks
The article provides a weekly recap of significant cybersecurity events, including the emergence of rogue AI models, an $88 million Bitcoin theft, attacks on water systems, and vulnerabilities related to DNS hijacks. It highlights the increasing…
The Hacker News -
CISO fatigue spikes as authority fails to match accountability
The article by Dirk Schrader highlights the issue of CISO fatigue, driven by a lack of authority to match heightened accountability. Key points include: 1. **High Stress Levels**: Only 2% of cybersecurity professionals report no job stress; 68% find their…
Dark Reading -
SICK InspectorP6xx Flaw CVE-2026-11841 Could Lead to Full Device Compromise
The SICK InspectorP6xx machine-vision sensors have a critical remote-access vulnerability identified as CVE-2026-11841, which has a CVSS score of 9.4. This flaw allows unauthenticated attackers on the network to access internal files, potentially…
-
River Financial deletes data after ransomware breach, faces suits
River Financial Corporation confirmed that data stolen during a ransomware attack on June 16, which was revealed three days later, was deleted after engaging with the attackers. The bank's investigation identified ransomware deployment across its servers and…
SecurityWeek -
Brazilian schools hit by ransomware as LockBit builder leaks
The article discusses cyber incidents targeting Brazilian educational institutions, highlighting the vulnerability of these organizations to cyberattacks due to inadequate security measures for managing sensitive data. Key findings reveal that most attacks…
securelist.comLockBit -
Horizon3 raises $250M Series E, pushing valuation to $2B
Horizon3 has secured $250 million in a Series E funding round, increasing its valuation from $650 million to $2 billion within a year. Co-led by NightDragon and NEA, the funding reflects investor confidence in Horizon3's strong market performance and growth…
SecurityWeek -
Cloudflare releases @computer toolkit for scalable AI agents
Cloudflare has introduced an early preview of the `@cloudflare/computer` package, designed to enhance the development of capable agents by providing an efficient runtime environment. Unlike traditional containerization that has limitations in scalability,…
Cloudflare -
Cloudflare Workers RPC Enables JavaScript to Call Python Functions
The article discusses the enhancements made to Cloudflare Workers RPC, allowing cross-communication between JavaScript and Python Workers. Initially, Workers RPC enabled seamless method calls within the same language, but recent developments allow this…
Cloudflare -
Cloudflare Workers gain gRPC support for real time voice AI apps
The Cloudflare blog post introduces new capabilities for Cloudflare Workers to support gRPC applications, enhancing low-latency communication for real-time applications, particularly in voice AI. Key announcements include: 1. **connect(socket)**: A new…
Cloudflare -
Cloudflare launches Billable Usage API for cost monitoring
Cloudflare has introduced a new Billable Usage API that allows users to monitor their account's usage and costs by product and service period through a single endpoint. This API is designed for automation, detailing costs associated with various Cloudflare…
Cloudflare -
Cloudflare Accelerates AI Inference Using Quantised KV Cache
Cloudflare's Workers AI enables efficient inference for advanced AI models using GPUs across their data centers. Key techniques discussed include: 1) **Quantizing the KV Cache** - Reducing the cache size from 16-bit to 8-bit improves memory usage, allowing…
Cloudflare -
Apple patches CUPS flaw CVE‑2026‑39875 enabling root access
Apple has addressed a significant privilege escalation vulnerability in macOS, tracked as CVE-2026-39875, allowing malicious applications to gain root access by exploiting flaws in the CUPS system. The researcher Dallas Dubs has shared detailed technical…
-
Fake Roblox Xeno cheats spread Java stealer via Discord forums
The article discusses a malware campaign that uses fake Xeno Roblox cheats to deliver a powerful Java stealer via Discord and gaming forums. The malware disguises itself as a legitimate tool, employing a multi-stage infection process that mimics real Xeno…
bitdefender.com -
Seoul Facilities Corp criticised for 5,000 won breach payout
Seoul Facilities Corp. faces criticism for its inadequate response to a personal data breach affecting 4.62 million users. The company proposed a compensation of 5,000 won (approximately $3.50 USD) per affected individual, which has been deemed insufficient…
DataBreaches -
UK Police Data Leak Exposes Officers' Emails to Phishing Risk
The Police National Legal Database (PNLD) in the UK confirmed a significant data breach that exposed the names and email addresses of police officers and justice staff, increasing their vulnerability to phishing attacks. The breach, which affected a public…
Security Affairs -
ExfilSquad Exposes 100k Police Records via UK Government Portals
A hack has resulted in the leak of full names and contact details of over 100,000 police officers and staff on the dark web, involving the Ministry of Defence, Home Office, National Crime Agency, and Crown Prosecution Service. This follows another breach…
DataBreachesExfilSquad -
Liechtenstein cyberattack hits owners register, 31k data stolen
Liechtenstein has experienced a significant cyberattack resulting in the theft of data belonging to 31,000 individuals, according to a government announcement. The attack targeted the register of beneficial owners, which contains details about the owners of…
DataBreaches
