News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 17 so far |
Fri 7 Aug· 66 articles
-
UK Firms Fear US Cloud 'Kill Switch' Could Disrupt Services
A survey conducted by Proton among 1,500 businesses in the UK, France, and Germany reveals significant concern about a potential US government-imposed 'kill switch' for cloud services. Nearly 74% of respondents expressed concern that such a switch could…
DataBreaches -
Identity weaknesses behind 90% of breaches, SOC leaders must act
The article "Inside the Modern SOC: The Identity Front Door" discusses the increasing prevalence of identity-based attacks in cybersecurity. Key points include: **Identity Vulnerabilities**: Identity weaknesses contributed to nearly 90% of incidents reviewed…
unit42.paloaltonetworks.com -
Order Express fined $250,000 by NY DFS for cybersecurity failings
On August 5, 2026, the New York State Department of Financial Services (NYS DFS) announced that Order Express, Inc. will pay a $250,000 penalty for failing to comply with cybersecurity regulations (23 NYCRR Part 500). The investigation revealed deficiencies…
DataBreaches -
AI Chatbots Lure LoL Players to Discord with Fake Flirty Chats
The article discusses the rise of AI chatbots infiltrating the League of Legends gaming community through unsolicited friend requests. Players report bots sending flirty messages shortly after games, often leading to a conversation that transitions to…
Malwarebytes -
New Mexico court orders Meta to pay £942 million for child harms
A New Mexico court has ordered Meta to pay $942 million due to the harm caused to children on its platforms, Facebook and Instagram. The ruling combines a civil penalty of $375 million and a $567 million fund to address damage related to mental health risks…
Malwarebytes -
Bugtraq Mailing List Returns at DEF CON 34, Calls for Moderators
On August 7, 2026, at DEF CON 34, security researcher Jonathan Brossard announced the revival of the original Bugtraq mailing list, first established in 1993. Bugtraq has been a crucial platform for discussing cybersecurity vulnerabilities and solutions,…
SecurityOnline -
Coweta City suffers ransomware attack Aug 5, key services stay up
The City of Coweta is dealing with a ransomware attack that occurred system-wide on August 5. They immediately engaged their IT provider and cybersecurity experts to secure their systems and initiate recovery. Although the attack impacted all city computers…
DataBreaches -
CISA Adds Critical LoadMaster Command Injection Flaw to KEV List
CISA has added CVE‑2026‑8037 to its Known Exploited Vulnerabilities catalogue. The entry concerns Progress LoadMaster, specifically the “Progress LoadMaster Command Injection Vulnerability” affecting the LoadMaster appliance. The flaw permits an…
-
800 Malicious npm Packages Found Spreading RATs and Info Stealers
A recent cybersecurity report highlights the discovery of nearly 800 malicious npm packages that deliver Remote Access Trojans (RATs) and information stealers. These packages pose significant risks across platforms, targeting unsuspecting developers who use…
The Hacker News -
ClickFix malware targets macOS users to steal crypto
The article discusses a new cybersecurity threat, known as ClickFix attacks, which are targeting macOS users with a stealer malware designed to drain cryptocurrency wallets. The attacks leverage social engineering tactics to deceive users into installing the…
The Hacker News -
UNC66713 articles this day · SecurityWeek first
UNC6671 vishing scams use personal phones to breach SaaS accounts · UNC6671 hackers pose as IT support to steal MFA from 200 firms.
3 outlets-
UNC6671 vishing scams use personal phones to breach SaaS accounts
The article discusses UNC6671 vishing attacks that target personal phones to compromise SaaS data. It highlights the increase in social engineering tactics where attackers impersonate trusted entities to deceive victims into disclosing sensitive information.…
The Hacker News -
UNC6671 hackers pose as IT support to steal MFA from 200 firms.
A hacking campaign led by the group UNC6671 is impersonating IT support to steal multi-factor authentication (MFA) credentials from over 200 firms, including major financial organizations like Blackstone and CME Group. Attackers create a sense of urgency by…
Security Affairs -
Vishing gang rebrands, hits firms with $10M Bitcoin ransom
UNC6671, a vishing extortion group, has rebranded from 'BlackFile' to multiple new names and continues to conduct sophisticated voice phishing attacks targeting organizations in North America, Australia, and the UK. The group has utilized…
SecurityWeek
-
-
Boston Children's Hospital tied to N.Korea hack, denies breach
Boston Children's Hospital has been named among several organizations affected by a North Korean hacking operation, according to security researcher Vangelis Stykas. However, the hospital claims that its systems were not breached, attributing the issue to a…
DataBreaches -
WordPress XSS2Shell bug lets hackers hijack servers via login
Researchers identified a new vulnerability in WordPress, termed XSS2Shell, that allows attackers to execute remote code and potentially take over servers. This flaw is initiated through a manipulation of the login page error message, exploiting how WordPress…
Security Affairs -
AI patches fix flaws only 46% of the time, study shows
A recent study by 1Password reveals that AI-generated patches for vulnerabilities are effective only about 46% of the time, often leading to new issues rather than resolving the original flaws. This study, which examined 6,080 patches produced by two AI…
Dark Reading -
macOS Coding Agents Create Hidden Tunnels, Evading Detection
The article discusses suspicious activity on macOS endpoints caused by coding agents like Claude Code and Cursor, which can create challenges for detection engineers. Key points include: Trusted coding agents can open reverse tunnels and install LaunchAgents…
elastic.co -
Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)
Rapid7's analysis reveals a critical unauthenticated remote code execution vulnerability (CVE-2026-63077) in JetBrains TeamCity, disclosed on July 27, 2026. An attacker can exploit this vulnerability over HTTP or HTTPS, allowing them to execute commands with…
-
OpenAI Halts Cambodian Scam Ring Abusing ChatGPT for Fraud
SecurityWeek's weekly roundup discusses significant cybersecurity news, including: 1. **OpenAI's Action Against Scams**: OpenAI halted a Cambodian scam network exploiting ChatGPT for various scams. 2. **Amgen Data Breach**: Unauthorized access to Amgen's…
SecurityWeek -
CryptoJS decade long RNG flaw puts wallets on 14 chains at risk
A critical vulnerability in the CryptoJS library's random number generator has led to predictable wallet seed phrases, risking funds across 14 blockchains. Exploitation has been confirmed as of May 27, 2026, requiring users who generated wallets with…
SecurityOnline -
Court Services Victoria breach leaks hearing data on dark web
Victorian court users' personal information, including names, emails, and job titles, has been compromised and posted on the dark web, prompting a police investigation. The breach, confirmed by Court Services Victoria (CSV), involves sensitive data from…
DataBreaches -
What Canvas learned from a massive cyberattack
Instructure, the company behind the learning management system Canvas, experienced a significant data breach due to vulnerabilities in third-party vendor security, a growing concern in higher education. While the institution's cautious approach to technology…
DataBreaches -
Unlimited Technology Systems Data Breach Affects 3.8 Million Patients
The HIPAA Journal reported on a significant data breach at Unlimited Technology Systems, a healthcare provider, which occurred between October 10-15, 2025, and was discovered on October 19, 2025. The breach is confirmed as the largest healthcare data breach…
DataBreaches -
WSO2 Flaws Enable Account Takeover Via JWT Bypass, Patch Urged
WSO2 has revealed four critical vulnerabilities across its API and identity products, with significant risks of account takeovers. The highest severity flaw, CVE-2026-5430, has a CVSS score of 10 due to JWT authentication bypass, allowing attackers to…
-
Cloudflare's Precursor Uses Behaviour Analysis to Score Bot Risk
The article discusses the complexities of bot and human interactions on the Internet, emphasizing the need for website owners to assess traffic based on behaviors rather than static checks. It introduces key concepts like 'Trust' and 'Risk', describing how…
Cloudflare -
Cloudflare merges AI Gateway and Workers AI for easier access
Cloudflare's AI Gateway and Workers AI are converging into a unified system, enabling users to access various AI models through a single control interface. This transformation allows for streamlined observability, logging, billing, and security. Key features…
Cloudflare -
Introducing Radar Researcher: An AI tool for exploring Internet data in plain language
Cloudflare introduced Radar Researcher, a new tool within Cloudflare Radar that allows users to access and analyze Internet traffic data more easily. Launched during Agents Week, it enables users to pose questions in plain language and receive immediate…
Cloudflare -
Cloudflare rolls out community program for developers worldwide
Cloudflare has launched an improved community program to support and empower developers in building a better internet. The program features two main tracks: Cloudflare Ambassadors, who promote Cloudflare within their communities, and Cloudflare Community…
Cloudflare -
Critical WordPress XSS flaw lets attackers run remote code
A new vulnerability in WordPress has been identified, exposing pre-authentication cross-site scripting (XSS) that could allow PHP code execution. Security experts are urging users to patch their systems immediately to prevent potential exploitation. The…
The Hacker News -
Organisations Urged to Secure AI Code Amid Compliance Risks
The article "Growing Up The Hard Way" discusses security compliance and software security challenges faced by organizations. It emphasizes the importance of effective AI governance amid increasing reliance on AI technologies. Key points include the necessity…
The Hacker News -
Meta ordered to pay $567m for harming children in NM
Meta has been ordered to pay $567 million by a New Mexico state judge for harming children through its platforms, bringing the total penalties in the case to $942 million. The judge labeled Meta a 'public nuisance' due to its contribution to mental health…
Security Affairs -
Critical 18 Year Old Linux SCTP Flaw Lets Local Users Gain Root
The article discusses a critical vulnerability in the Linux SCTP (Stream Control Transmission Protocol) that has been present for 18 years, allowing local users to potentially gain root access and escape security containers. This flaw poses significant risks…
The Hacker News -
Beacon CRM breach exposes data of 1,500 UK charities
A cyber incident involving the CRM provider Beacon has potentially affected around 1500 UK charities, particularly those in healthcare and victim support sectors. Unauthorized access to personal data, including names, email addresses, telephone numbers, and…
Infosecurity -
Microsoft 365 Users Face AitM Phishing Aimed at Payroll Emails
A recent report highlights a sophisticated Microsoft 365 phishing scheme characterized by Account-Into-Account (AitM) attacks. These attacks target organizations to hijack email accounts, specifically for accessing payroll and finance-related communications.…
The Hacker News -
Tails 7.10.1 patches CVE-2026-645
Tails 7.10.1 was released on August 5, 2026, addressing two critical vulnerabilities: CVE-2026-64560 in the Linux kernel and security flaws in the expat XML library. The Linux kernel flaw allows privilege escalation through a use-after-free bug, which could…
-
Hidden backdoor in Zbtlink routers gives attackers root access.
Researchers from VulnCheck have discovered a hidden backdoor in 20 router models produced by Shenzhen Zhibotong Electronics (Zbtlink). This backdoor allows remote servers to execute commands with root access, posing a significant security risk. The flaw is a…
Security Affairs -
AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day
An article from The Hacker News discusses advancements in web security, particularly focusing on an AI-assisted HTTP terminator that has discovered new HTTP desynchronization techniques and an Apache zero-day vulnerability. The piece emphasizes the…
The Hacker News -
Bendix Brake ECU Update Fixes Flaws, No CVE Issued
The National Motor Freight Traffic Association (NMFTA) revealed at the Black Hat USA 2026 conference that a 2024 safety recall for Bendix’s EC80 heavy-truck brake controller also addressed crucial cybersecurity vulnerabilities. The EC80 electronic control…
SecurityWeek -
Google Links BlackFile Rebrand to 'Redact' Amid Vishing Surge
The article discusses the rebranding of the BlackFile extortion group to 'Redact' as reported by Google Threat Intelligence Group (GTIG). The rebrand occurred following the claimed hijacking of the original BlackFile brand by an exiled affiliate, which led to…
InfosecurityBlackFile -
NatJack exploits NAT table weaknesses to hijack TCP sessions
The article discusses the emergence of new NatJack attacks that exploit vulnerabilities in Network Address Translation (NAT) tables to hijack TCP sessions and spoof DNS. It highlights the potential security risks associated with these attacks, emphasizing…
The Hacker News
