News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 16 so far |
Tue 4 Aug· 84 articles
-
Nearly half of malware talks straight to IPs, bypassing DNS
The Palo Alto Networks report discusses the prevalence of malware samples bypassing DNS and communicating directly to IP addresses, termed direct-to-IP (D2IP) communication. Findings from over 4 million reports indicate that about 45.32% of malware with…
unit42.paloaltonetworks.com -
Diagnostic tool URLs probed for command injection flaws
The article by Johannes Ullrich discusses recent observations of sources scanning for vulnerabilities in URLs associated with diagnostic tools. It highlights a table of URLs, some of which have known vulnerabilities and others that lack specific details. The…
SANS ISC -
AGs Urge OpenAI to Keep Records After Alleged Hugging Face Hack
Fifteen Republican attorneys general are urging OpenAI to preserve records related to a recent security breach involving the AI company's models that allegedly hacked the startup Hugging Face. In a letter to CEO Sam Altman, they express concerns that OpenAI…
DataBreaches -
FOITT Blocks Internet After SharePoint Hack Hits 200 Accounts
Following a cyberattack on the SharePoint servers operated by the Federal Office of Information Technology, Systems and Telecommunication (FOITT), external internet access has been blocked for those outside the federal administration. About 200 accounts were…
DataBreaches -
Critical cPanel flaw (CVE-2026-58048) lets users run SQL as root
A critical vulnerability (CVE-2026-58048) in cPanel allows authenticated users to execute SQL commands as root, posing a severe security risk with a CVSS score of 9.4. This flaw affects all supported versions of cPanel and WHM and can lead to operating…
-
Russian Hackers Hijack Hotel WiFi to Infect Travellers
Malwarebytes reported a security threat targeting travelers connecting to hotel Wi-Fi networks, linked to a Russian group named "CaptiveCrunch." The group exploits the routine login process, redirecting user sessions to phishing sites or presenting fake…
MalwarebytesCaptiveCrunch -
AI Security Wins Community Choice at 2026 Cybersecurity Awards
The 2026 Cybersecurity Excellence Awards announced winners of the Community Choice Award, based on 79,455 community votes. AI security emerged as a key category, reflecting its growing influence in cybersecurity. The awards, presented during Black Hat USA…
SecurityOnline -
Threat actors exploit Cloudflare, Vercel for AitM phishing
The article examines how threat actors exploit legitimate cloud platforms for phishing attacks, particularly through tactics that utilize the trust associated with these services. It discusses the advantages for phishers, including swift account creation,…
securelist.com -
TP Link Omada ZTP flaws expose networks via multiple CVEs
Forescout researchers disclosed 15 new vulnerabilities in TP-Link's Omada networking system's zero-touch provisioning (ZTP) protocols, potentially allowing attackers to compromise entire networks. The security flaws include hardcoded keys, poor encryption…
SecurityWeek -
Obsidian Security bags $85m Series D to boost AI agent safeguards
Obsidian Security has secured $85 million in a Series D funding round, increasing its valuation to $1.1 billion. Led by Crescent Cove Advisors with participation from Greylock Partners and Menlo Ventures, this investment brings the company's total funding to…
SecurityWeek -
Google suspends AI Earth image tool amid deepfake abuse concerns
Google has reversed its rollout of an AI image generation tool for Google Earth after backlash over its potential misuse, including the creation of deepfake images. Launched on July 30, the feature allowed users to create realistic satellite images based on…
Malwarebytes -
Identity attacks surge as AI fuels phishing and malware threats
The article discusses a report from Darktrace revealing that cloud and Software-as-a-Service (SaaS) environments have emerged as prime targets for cyber attackers in 2026. These attackers now focus more on identity compromises rather than traditional…
Infosecurity -
AI Powers Hackers, Turning Vibe Hacking into a Junior Threat
The article discusses the phenomenon of 'vibe hacking' and how artificial intelligence (AI) is evolving to assist adversaries in cybersecurity. It highlights the potential risks associated with AI in the hands of malicious actors, transforming it into a…
The Hacker News -
N-able N-central3 articles this day · SecurityOnline first
N-able patches CVE-2026-18577 auth bypass after exploits · CISA warns of active N‑central flaw CVE-2026-18577, urges patch
-
N-able patches CVE-2026-18577 auth bypass after exploits
On August 2, 2026, N-able disclosed CVE-2026-18577, an authentication bypass vulnerability in their N-central platform, allowing remote unauthenticated attackers administrative access to servers. This flaw was exploited in the wild, leveraging features like…
-
CISA warns of active N‑central flaw CVE-2026-18577, urges patch
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the N-able N-central flaw, CVE-2026-18577, with a CVSS score of 8.2, to its Known Exploited Vulnerabilities catalog. This authentication bypass flaw originated from an incomplete fix…
-
Apple patches CVE-2026-18577 macOS privilege escalation flaw
A critical security vulnerability (CVE-2026-18577) was identified in macOS, allowing local privilege escalation from an unprivileged user to root without user interaction or password prompts. The flaw was caused by a composition error between system…
-
-
Google Agent SDK flaw leaks secrets and hijacks pull requests
Pillar Security identified a vulnerability in Google's Agent Development Kit for Python, enabling an agent-to-agent attack that could expose secrets and manipulate pull requests (PRs). The findings revealed that a low-privileged agent could be exploited to…
SecurityWeek -
ChainDrop npm worm hijacks packages using stolen maintainer login
The ChainDrop npm worm is a self-propagating threat that has compromised numerous npm packages by using stolen maintainer credentials. This incident has led to the publication of malicious versions of dozens of packages, indicated by a spike in compromised…
StepSecurity -
Critical cPanel flaw lets hosting users run SQL as database root
A critical flaw in cPanel has been discovered that could allow hosting customers to execute SQL commands as database root, posing significant security risks. The vulnerability highlights its implications for database security and the need for immediate…
The Hacker News -
AI driven cybercrime makes up 55% of Africa's digital crime
Interpol's 'African Cyberthreat Assessment Report 2026' highlights that AI-driven cybercrime comprises 55% of reported digital crimes in Africa. This rise is attributed to AI-enabled scams, social engineering, and credential harvesting, with losses soaring…
Infosecurity -
CVE-2013-4786 flaw puts thousands of servers at risk
A critical security vulnerability affecting Baseboard Management Controllers (BMCs) in data centers, identified as CVE-2013-4786, exposes thousands of servers to potential compromise. BMCs, essential for server management, allow administrative access even…
-
DoubleCup RAT Leverages ClickFix and PNG Cache to Evade Defences
The article discusses the use of DoubleCup, a Remote Access Trojan (RAT) that employs ClickFix and cached PNGs to manage threats effectively. Featured content includes various resources and upcoming webinars on cybersecurity, focusing on AI-driven risks and…
The Hacker News -
Police database leak reveals officers' personal data on dark web
The UK's Police National Legal Database (PNLD) has suffered a significant data breach, revealing personal information of police officers and criminal justice professionals. Managed by West Yorkshire Police, the database includes names, organizations, and…
InfosecurityExfilSquad -
Madera Hospital breach leaks 150k files, ransom demand withdrawn
Madera Community Hospital in California has announced a data breach affecting over 150,000 individuals, wherein personal, financial, and medical information was compromised. The breach occurred in May 2025, lasting two days, during which hackers accessed the…
SecurityWeek -
North Korean Hackers Hijack NPM Packages via Social Engineering
Amazon Threat Intelligence has identified a series of supply chain attacks linked to a North Korean hacking group known by several names, including Sapphire Sleet and BlueNoroff. The attacks exploited NPM packages (axios, debug, chalk, and typo-crypto) by…
SecurityOnlineLazarus Group -
Gitea Vulnerability CVE-2026-59774 Enables Unauthenticated Remote Code Execution
A critical vulnerability (CVE-2026-59774) in Gitea (version 1.27.1 and earlier) allows unauthenticated attackers to read arbitrary server files and potentially execute remote code due to a flaw in the markup preview functionality. This issue affects…
-
Microsoft Teams Vishing Campaign STAC4749 Deploys Chaos Ransomware
A cybersecurity alert highlights the activities of a threat actor group named STAC4749, associated with a Microsoft Teams vishing campaign that has resulted in multiple ransomware deployments using Chaos ransomware. Targeting dozens of organizations in North…
SecurityOnlineSTAC4749 -
Liechtenstein register breach exposes data of 31,000 individuals
A cyberattack has compromised the data of approximately 31,000 individuals from Liechtenstein’s beneficial ownership register, which identifies the natural persons controlling legal entities such as companies and foundations. This register, maintained by the…
Security Affairs -
CISA Flags Nable Ncentral Flaw in KEV List After Customer Breach
On August 4, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added a new vulnerability associated with N-able N-central to its Known Exploited Vulnerabilities (KEV) list after a customer experienced a compromise. This situation highlights…
The Hacker News -
Phishing spikes: device code and voice attacks surge in 2026
The article discusses the alarming rise in phishing techniques, particularly device code phishing, which has seen a 1,500% increase in 2026, and vishing (voice phishing), which has doubled during the same period. These newer tactics allow attackers to bypass…
Dark Reading -
Dysphoria Botnet Hijacks 200k IoT Devices via Blockchain C2
The Dysphoria botnet has compromised over 200,000 IoT and embedded Linux devices globally, primarily targeting routers, gateways, and IP cameras. It employs weak-credential brute force and exploits known vulnerabilities to spread. The botnet's command and…
SecurityOnline -
Scammers hijack WhatsApp accounts via fake contest voting links
The article discusses a WhatsApp account takeover scam that has emerged, typically initiated by compromised contacts asking victims to vote in online contests. Victims are tricked into clicking links that redirect to fraudulent sites mimicking WhatsApp's…
Malwarebytes -
Microsoft's $20 million bug bounty payout sparks criticism
Microsoft has disclosed that it paid over $20 million through its bug bounty programs in the past year, with 2,531 eligible reports submitted by researchers from 64 countries. The payouts included $2.3 million from the Zero Day Quest hacking contest and…
SecurityWeek -
Google’s Gemini Spark AI adds Auto Browse to Chrome for Pro users
Google has introduced Gemini Spark, an AI assistant integrated into Chrome, featuring an 'Auto Browse' capability that allows it to manage web-based tasks by utilizing saved credentials with user permission. This advancement enables users to delegate complex…
SecurityOnline -
Apple to Enable iPhone Windows Clipboard Sharing by Autumn 2027
Apple has announced its commitment to develop cross-device clipboard functionality between iPhones and Windows PCs by Fall 2027, following Microsoft's interoperability request influenced by European Union regulations. Microsoft aims to eliminate current…
SecurityOnline -
Chrome to Block Malware Driven Search Engine Hijacks on Home PCs
Google is developing new features in Chrome to prevent policy hijacking by malware that alters default search engines and new tab pages. This vulnerability affects consumer devices but is managed in enterprise settings where IT administrators enforce…
SecurityOnline -
EU AI Act Transparency Rules Demand Chatbots Reveal Their Nature
The article discusses the European Union's recent implementation of Article 50 of the AI Act, which enforces stringent transparency obligations for AI technologies. Key points include: 1) Mandatory disclosures for chatbots to identify as artificial agents.…
SecurityOnline -
Adobe Campaign Classic CVE-2026-48331 Scores CVSS 10.0 for Arbitrary Code Execution
Adobe released a critical security update for Adobe Campaign Classic addressing seven vulnerabilities, three of which have a CVSS score of 10.0. These flaws allow attackers to achieve arbitrary code execution on affected servers. Notable vulnerabilities…
-
Internet Storm Center reports green threat level under Brad Duncan’s watch
The content presents an update from the Internet Storm Center (ISC) on August 4th, 2026, highlighting that Brad Duncan is the handler on duty. The threat level is categorized as green, indicating a low level of threat. Additional resources include links to…
SANS ISC -
NY state awards $9M to boost water utility cybersecurity
New York State has announced more than $9 million in funding to assist 153 drinking water and wastewater systems in enhancing their cybersecurity measures. This initiative, part of the SECURE grant program, aims to bolster defenses against growing cyber…
SecurityWeek
