News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 13 so far |
Tue 4 Aug· 84 articles
-
npm supply chain worm spreads via preinstall hook, affecting 400+
Microsoft Threat Intelligence has identified a large-scale npm supply chain attack affecting over 400 packages from various publishers, deploying a self-propagating worm called Mini Shai-Hulud. This malware executes via an npm preinstall hook, allowing it to…
Microsoft -
Apple Fights UK Demand to Access Encrypted iCloud Data
The UK Home Office has ordered Apple to grant access to encrypted iCloud data specifically for British users. This process involves a Technical Capability Notice that would require Apple to create technical measures allowing law enforcement access to…
Malwarebytes -
Hackers Exploit SharePoint Flaw, Breach Swiss Government Accounts
The Swiss Federal Office for Information Technology and Communications (FOITT) reported that hackers exploited vulnerabilities in Microsoft SharePoint to compromise approximately 200 accounts. This incident was detected on July 28, 2026, and confirmed on…
Security Affairs -
Criminals Abuse ScreenConnect Using Fake Zoom and Adobe Updates
The Smoke#Screen cyberattack campaign leverages the legitimate ScreenConnect RMM tool through various social engineering tactics. Cybercriminals utilize lures related to Zoom and Adobe updates, business documents, and system maintenance to install…
Dark Reading -
Microsoft rolls out AI Zero Trust tools to safeguard development
Microsoft has expanded its Zero Trust for AI strategy to address the security challenges posed by AI adoption in organizations. This includes the introduction of a new AI-focused Zero Trust Assessment tool and the addition of a DevSecOps pillar in the Zero…
Microsoft -
Defender's device isolation halts ransomware in 128 seconds
The Microsoft Defender's new device isolation feature effectively disrupts multi-stage ransomware attacks, as demonstrated in a case where an attack was halted within 128 seconds at QNET. By automatically isolating compromised endpoints, Defender prevents…
Microsoft -
Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens
The article discusses how a new phishing technique known as Greatness PhaaS utilizes device code phishing to evade multi-factor authentication (MFA) and steal user tokens. This sophisticated method targets authentication processes to facilitate unauthorized…
The Hacker News -
CISA Flags IBM Langflow CVE-2026-9198 Code Injection in KEV List
On 4 August 2026 the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2026‑9198 to its Known Exploited Vulnerabilities (KEV) catalogue. The entry concerns IBM’s Langflow platform and is titled the IBM Langflow Code Injection Vulnerability.…
-
CISA Adds Apache Tomcat Flaw CVE-2026-34486 to KEV Catalog
CISA has added CVE-2026-34486 to its Known Exploited Vulnerabilities catalogue. Affected vendor: Apache, product: Tomcat. Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. The flaw…
-
CISA logs CVE-2026-18556 auth bypass flaw in KEV catalog
CISA has added CVE‑2026‑18556 to its Known Exploited Vulnerabilities catalogue. The entry concerns N‑able’s N‑central product and covers the N‑able N‑central Authentication Bypass Using an Alternate Path or Channel Vulnerability. This flaw lets an attacker…
-
Black Hat 2026 Highlights AI Focussed Tools Amid Cyber Threats
The 2026 Black Hat conference in Las Vegas features numerous cybersecurity product announcements from various companies. Key launches include: Astelia's AI exposure management capabilities for vulnerability remediation, AvePoint's continuous data sensitivity…
SecurityWeek -
Airlock Digital rolls out Agentic AI governance at Black Hat 2026
Airlock Digital has announced the release of Agentic AI Control & Governance at Black Hat USA 2026, enhancing its preventative endpoint security solution. This new feature offers visibility into the behavior of trusted AI agents and manages their operational…
SecurityOnline -
AI Workflow Adoption Outpaces Security, Raising Data Leak Fears
Organizations are leveraging AI to streamline workflows, often without proper security oversight. Traditional security measures like CASB and DLP don't adequately address AI risks, as threats arise from prompts rather than app access alone. AI interactions…
SecurityWeek -
Veeam ONE CVE-2026-64633 Enables Unauthenticated Remote Code Execution at CVSS 10.0
The website encountered a critical error. For troubleshooting guidance, users can refer to the WordPress documentation link provided.
SecurityOnline -
Utah Staff Thwart Hack Targeting Oilfield Wastewater Safety Controls
A critical infrastructure attack occurred at Sage Water Resources in Utah, where workers prevented malicious changes to an automated controller at an oilfield wastewater disposal site. The intrusion, reported to have taken place on March 15, involved…
DataBreaches -
Orlando man jailed over five years for nationwide wallet fraud scheme
Ivory Joe Pruitt, a 61-year-old from Orlando, was sentenced to 63 months in prison for conspiracy to commit wire fraud, and ordered to pay $137,392.74 in restitution. From August 2022 to May 2024, Pruitt and co-conspirators executed a nationwide scheme…
DataBreaches -
Mallory launches AI platform to speed threat response
Mallory, an AI-native Threat and Exposure Management platform, has launched a unified architecture to enhance security teams' capabilities. This architecture includes a context graph that combines attack surface, threat, and vulnerability data; an…
SecurityOnline -
Tech Giants Skip MFA, Spur Surge in Fraudulent Account Sales
The article discusses the ongoing issue of account farming and illegitimate account sales across various digital platforms. Despite the risks posed by fraudulent accounts, major tech companies often overlook strict security measures like multi-factor…
dti.domaintools.com -
Xlight FTP Server bug CVE-2026-67192 allows remote code execution
A recent report highlights three critical vulnerabilities in the Xlight FTP Server (CVE-2026-67191, CVE-2026-67192, and CVE-2026-67193) that allow for remote code execution and impact versions prior to 3.9.5. The most severe vulnerability, CVE-2026-67192, is…
-
Oligo Security Secures $60M to Expand Runtime Protection Globally
Oligo Security, a runtime security company, has secured $60 million in funding, raising its total funding to $140 million. The investment round featured several contributors, including Ballistic Ventures and Lightspeed Venture Partners. Founded in 2022 in…
SecurityWeek -
CISO Conversation: Russ Kirby – Passion Is the Antidote to Burnout
Russ Kirby, the current CISO at Ping Identity, shares insights into his journey in cybersecurity, emphasizing his natural affinity for the field and his leadership style. His career progressed through key positions at Creditsafe and ForgeRock, driven by a…
SecurityWeek -
Scammers use fake voting links to hijack WhatsApp accounts
A new WhatsApp scam is exploiting the linked devices feature to hijack accounts by tricking users into voting for friends in online contests. Victims receive messages from compromised contacts that seem legitimate but redirect them to a fake WhatsApp setup…
Infosecurity -
npm Supply Chain Attack Hijacks Keyv, Spreads Shai-Hulud Malware
A recent npm supply chain attack has exploited a vulnerability in the Keyv package, resulting in the deployment of the Shai-Hulud malware. The attack, linked to compromised GitHub maintainer accounts, targeted npm and JavaScript developers through poisoned…
SecurityOnline -
Terraform MCP Server Flaw CVE-2026-16498 Scores CVSS 10.0
HashiCorp has addressed three critical vulnerabilities in its Terraform MCP Server, with the most severe flaw (CVE-2026-16498) receiving a maximum CVSS score of 10.0. These vulnerabilities can expose Terraform tokens in multi-user setups, potentially…
-
Compromised Email AI Enables Stealthy CEO Fraud, Barracuda Warns
A recent study by Barracuda Networks highlights the risks of compromised email accounts leveraging built-in AI assistants. Once an account is hacked, attackers can use the AI chatbot to perform actions undetected, such as creating rules to delete trace…
SecurityWeek -
INC Ransomware abuses CVE-2026-15409 in SonicWall, calls victims
INC Ransomware is exploiting vulnerabilities in SonicWall SMA 1000 as part of its extortion tactics, utilizing phone calls and emails to pressure victims. The research from Resecurity indicates that these methods have been particularly aggressive since…
-
Zenity raises $125m Series C to strengthen AI agent security
Zenity, an AI security and governance company, has successfully raised $125 million in a Series C funding round, bringing its total funding to $180 million. This round was led by Norwest and supported by investors like SoftBank Vision Fund 2 and Intel…
SecurityWeek -
Apache Traffic Server patches 38 flaws, urges immediate upgrade
The Apache Software Foundation addressed 38 vulnerabilities in the Apache Traffic Server in recent updates (versions 9.2.15 and 10.1.4). The vulnerabilities include issues such as request smuggling, access-control bypass, and memory-safety flaws. While none…
SecurityOnline -
New npm worm tied to Keyv compromises hundreds of packages
The article reports on the discovery of a new npm worm linked to the Keyv package, which has compromised hundreds of npm packages. This malicious code includes hooks for the Claude code and Visual Studio Code, posing significant risks in supply chain…
The Hacker News -
Attackers Split Tasks Across Sessions to Evade AI Safety Controls
Cybercriminals are successfully bypassing AI safety controls by splitting malicious activities across multiple sessions and files, according to research by Cisco Talos. This fragmentation prevents individual tasks from being flagged as harmful. Methods…
Infosecurity -
Fake Adobe and Zoom Updates Used to Deploy ScreenConnect Malware
The article discusses a cybersecurity threat where fake updates for Adobe and Zoom are being used to install ScreenConnect, which allows persistent remote access for attackers. This highlights the importance of verifying software updates, as malicious links…
The Hacker News -
Public Exploit Code Released for CVE-2026-50343, a Windows InstallService Flaw That Grants SYSTEM Privileges
A critical vulnerability, CVE-2026-50343, in Windows allows unprivileged users to escalate privileges to SYSTEM level without needing admin rights, effectively enabling them to execute code within a privileged environment. The vulnerability stems from flaws…
-
Linux Kernel Flaw CVE-2026-53264 Lets Users Gain Root Access
A new Linux kernel vulnerability, CVE-2026-53264, allows local users to run arbitrary code and escalate to root access due to a use-after-free issue in the net/sched packet scheduler. The CVSS score is rated at 7.8 (High). The flaw can be exploited by…
-
Palo Alto's AI NOVA Finds Over 14,000 Hidden Open Source Flaws
The article discusses the transformative impact of Frontier AI on cybersecurity, especially in the area of vulnerability discovery. Palo Alto Networks' vulnerability research team developed an autonomous system called NOVA that analyzed 3,915 open-source…
unit42.paloaltonetworks.com -
AI meeting app tl;dv leak exposes government and corporate calls
A significant security vulnerability has been discovered in the AI meeting assistant tl;dv that allows hackers to access users' conference call information. The app, which is used by over two million people including government agencies and large…
Dark Reading -
Cloudflare adds agent tracing for deeper AI observability
The article outlines the advancements in deploying and managing hosted agents on Cloudflare, emphasizing observability as a key feature. Cloudflare introduces 'agent tracing', which provides detailed insights into agent behavior and performance,…
Cloudflare -
Cloudflare adds auto OpenTelemetry tracing to local Worker dev
The article announces the implementation of automatic OpenTelemetry traces in Cloudflare's local development tools (`wrangler dev` and `vite dev`). This enhancement enables coding agents to capture and query traces and logs for local Worker invocations…
Cloudflare -
How we built a software factory to drive Astro’s GitHub issue count to zero
The article discusses the implementation of an automated issue triage system within the Astro open-source repository managed by Cloudflare. This system addresses the growing problem of open-source maintainers burning out due to a surge in bug reports and…
Cloudflare -
AI Agents Drive Shift from SDLC to New Agent Development Lifecycle
The article discusses the evolution of software development from the traditional Software Development Lifecycle (SDLC) to a proposed new approach called the Agent Development Lifecycle (ADLC). It highlights how AI has accelerated the implementation phase,…
Cloudflare -
Cloudflare Wallets let AI agents pay for APIs using stablecoins
Cloudflare has introduced Cloudflare Wallets to facilitate easier integration of AI agents with APIs, overcoming previous hurdles like complex logins, lack of payment methods, and API key generation. This service allows users to claim a unique wallet handle…
Cloudflare -
Run CI/CD for millions of repos — on your platform, on Cloudflare
The Cloudflare blog post discusses improvements to its continuous integration (CI) and deployment workflows, highlighting several key features: 1) **Code Storage and Artifacts**: Introduces versioned code storage that can scale to millions of repositories.…
Cloudflare -
Cloudflare Codex AI blocks 16k merges after 250k alerts
The blog post discusses the implementation of the Cloudflare Codex, a standardized set of engineering guidelines designed to streamline developer processes and enforce best practices across various projects. Over the past four months, an AI code reviewer…
Cloudflare
