News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 48 so far |
Tue 11 Aug· 74 articles
-
CVE-2026-27912 flaw lets hackers reset any Windows AD password
CVE-2026-27912, known as ResetNightmare, is a high-severity vulnerability in the Windows Kerberos Change Password protocol allowing attackers to reset any Active Directory account password without knowing the old password, potentially granting SYSTEM…
-
SAP patches critical CVE-2026-58231 in Commerce Cloud, 28 notes
SAP's August 2026 Patch Day, released on August 11, includes 28 security notes, with the critical flaw CVE-2026-58231 scoring a CVSS 10.0, highlighting improper authorization in SAP Commerce Cloud. Other significant vulnerabilities include remote code…
-
Young Brits Face Rising AI Scams, Trust Erodes Online
The article discusses the complex relationship young people have with AI, highlighting how they extensively use it for tasks ranging from education to shopping, while simultaneously feeling its negative impacts on trust and safety online. Statistics reveal…
Malwarebytes -
Malicious SIM cards expose IoT modems to remote code execution
The article discusses vulnerabilities in cellular IoT devices due to malicious SIM cards that can execute attacker code within the modems. This represents a significant security concern for IoT ecosystems, wherein an attacker can potentially take control of…
The Hacker News -
Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo
Mozilla has revoked the signing key for Firefox and Thunderbird on Linux after it was discovered in a private repository, raising concerns about software supply chain security. This action is part of a broader effort to enhance cryptography protocols and…
The Hacker News -
Corma Secures $60M to Build Defensive AI for Cyber Threats
Corma, founded in 2025 and headquartered in Tel Aviv and San Francisco, has raised $60 million in seed funding for a new AI foundation model focused on defensive cybersecurity. Supported by Sequoia Capital, Khosla Ventures, and Coatue, Corma's technology…
SecurityWeek -
Kaspersky uncovers Head Mare APT exploiting TrueConf video flaws
In July 2026, Kaspersky reported a new attack by the Head Mare group, deemed an Advanced Persistent Threat (APT) due to their sophisticated techniques. The attackers exploited multiple vulnerabilities in the TrueConf video conferencing server, bypassing…
securelist.comHead Mare -
Suisan City Declares Emergency as Malware Knocks Out 911 Service
Suisan City, California is currently dealing with a cyber incident following a malware attack that led to the declaration of a state of emergency. The attack, which occurred on August 7, affected critical services including 911 call routing and forced the…
Infosecurity -
Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers
The article discusses a research project where a fake cryptocurrency startup was created to explore insider threats and cyber espionage, specifically involving suspected North Korean IT professionals. The researchers aimed to investigate how such entities…
The Hacker News -
Here's why the new Pass-ta-key attack is mostly a nothingburger
A recent study introduced a supposed new attack method named Pass-ta-key, targeting passkeys in Google Password Manager on Windows. This attack highlights that passkeys, contrary to common belief, are not exclusively stored in secure hardware (TPM) but can…
Ars Technica -
OpenAI Rolls Out GPT-5.6-Cyber for Security Tasks via Daybreak
OpenAI has launched GPT-5.6-Cyber, a large language model designed for cybersecurity tasks, alongside an updated two-tier security access program named Daybreak. The two tiers include Daybreak Blue for defensive tasks and Daybreak Red for advanced…
Infosecurity -
AI Sidebar extension returns, diverting updates to affiliate links
A Chrome extension named 'AI Sidebar with DeepSeek, ChatGPT, Claude and more', previously removed for stealing conversations, has resurfaced on the Chrome Web Store. Initially flagged for scraping content and sending it to external domains, the extension,…
SecurityWeek -
Windows 11 USB Auto Install Flaw Lets Attackers Hijack Systems
The article discusses a new vulnerability discovered by researchers that exploits the USB auto-install feature in Windows 11, allowing a full system takeover. This security flaw poses a significant risk to enterprise environments, emphasizing the need for…
The Hacker News -
Ceva Logistics Reports European Data Breach in Eight Warehouses
Ceva Logistics, a major global logistics company, has experienced a data breach affecting its European operations, primarily impacting eight warehouses. The breach potentially compromised sensitive customer information, including names, addresses, phone…
Infosecurity -
Malicious MCP server hijacks AI coding agents to steal secrets
The article discusses the risks associated with malicious MCP servers that can manipulate AI coding agents to exfiltrate sensitive information. Key points include how these servers exploit the capabilities of AI to divide coding instructions, creating…
The Hacker News -
CAV3RN Espionage Tool Uses DNS, Google Apps Script Against Israel
Project CAV3RN is a sophisticated modular espionage framework targeting Israeli entities, characterized by its evolving architecture and command-and-control (C2) capabilities. Key components include a multi-transport C2 module that utilizes DNS responses to…
securelist.com -
New Kimwolf v7 Botnet Hits Android TV Boxes with Stealth DDoS
The article discusses Kimwolf v7, a new version of the Kimwolf botnet, which targets Android devices, particularly TV boxes and IoT systems. This version enhances its DDoS attack capabilities using HTTP/2 traffic that mimics legitimate browsing, complicating…
unit42.paloaltonetworks.com -
Marcus Hutchins: From WannaCry Hero to the FBI Target
Marcus Hutchins, born in Ascot, England, gained fame as a cybersecurity expert after discovering a 'kill switch' for the WannaCry ransomware in 2017 while working as a cyber threat analyst in Los Angeles. Despite his heroic act, he was arrested by the FBI…
SecurityWeek -
OpenAI launches GPT 5.6 Cyber model for advanced security tasks
OpenAI has launched a new cybersecurity-focused AI model, GPT-5.6-Cyber, alongside an expansion of its Daybreak Cyber Partner program. This model is tailored for advanced cybersecurity tasks, boasting a significantly lower refusal rate for sensitive dual-use…
SecurityWeek -
Gunra Ransomware Exploits Fortinet, Schneider Weaknesses
The article discusses the emergence of Gunra Ransomware, which exploits vulnerabilities in Fortinet and Schneider Electric systems to infiltrate networks. This shows a growing trend of ransomware targeting critical infrastructure and highlights the ongoing…
The Hacker NewsGunra -
Fake TikTok Shops impersonate real app to steal user data
The article warns readers about fake TikTok Shops that are designed to resemble the legitimate e-commerce feature within the TikTok app. These clone sites often replicate TikTok's design, color schemes, and trust signals, leading to potential scams where…
Malwarebytes -
OpenAI suspends Astra AI testing over autonomous exploit concerns
OpenAI has temporarily halted internal testing of its Astra model due to significant cybersecurity concerns. The company's assessment revealed advancements in its coding capabilities that could identify and develop exploits for critical systems without human…
Infosecurity -
Fake brand sites trick users into installing remote access tool
A campaign is using fake websites mimicking popular brands like CNN, Avast, and Stremio to deceive users into downloading a legitimate remote-management tool, O&O Syspectr, which allows attackers remote access to victims' PCs. These lookalike sites strongly…
Malwarebytes -
USB Plug and Play exploit grants SYSTEM access on Windows
Researchers revealed a security vulnerability in Windows Plug and Play (PnP) systems at DEF CON 34, demonstrating that plugging in a USB device can lead to privilege escalation to SYSTEM without needing administrator rights or a logged-in user. Their attack,…
SecurityOnline -
Only Half of UK Manufacturers Have a Cyber Incident Response Plan
We couldn't load analysis for this article. Use the referenced report link below.
Infosecurity -
Fake AI Tools Malware Targets Developers Through GitHub
We couldn't load analysis for this article. Use the referenced report link below.
SecurityOnline -
Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine
On August 11, 2026, Swati Khandelwal reported that hackers breached a Polish power plant's controls through a private cellular network, successfully shutting down a turbine. This attack highlights vulnerabilities in critical infrastructure and the increasing…
The Hacker News -
DOUBLECUP: New ClickFix Loader Drops CountLoader and DeviceManager RAT
We couldn't load analysis for this article. Use the referenced report link below.
SecurityOnline -
Mozilla replaces Firefox GPG key after accidental GitHub leak
Mozilla has issued a new GPG signing subkey for Firefox and Thunderbird after the previous key was accidentally exposed in a GitHub repository. This exposure posed a risk of supply chain attacks, allowing malicious actors to create valid signatures on…
SecurityWeek -
BdThemes Supply Chain Hack Lets Attackers Hijack WordPress Sites
The article discusses a supply chain attack involving BdThemes, where malicious code was inserted into JSON files, allowing unauthorized access to WordPress sites as rogue administrators. This vulnerability affects websites using the compromised themes and…
The Hacker News -
Johannes Ullrich Heads Cybersecurity with Green Threat Level
The content discusses the current status of cybersecurity, as indicated by the threat level (green) and features Dr. Johannes Ullrich as the handler on duty. It provides links to his teaching profile at SANS, previous diary entries, and various resources…
SANS ISC -
Critical Wazuh Flaws Allow Root Access via Cluster Key
The article discusses three critical vulnerabilities in the Wazuh manager, each with a CVSS score of 9.1, affecting versions 4.0.0 and later. These vulnerabilities exploit the cluster protocol, allowing attackers with access to the shared Fernet key to…
-
Critical Rancher Flaw Lets Users Hijack Kubernetes Clusters
A critical security flaw in SUSE Rancher, tracked as CVE-2026-44945 with a CVSS score of 9.1, allows low-privileged users to escalate privileges and gain full control of the platform through a cross-cluster impersonation vulnerability. The issue affects…
