News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 48 so far |
Wed 12 Aug· 65 articles
-
GitLab issues patch for 13 flaws, including high risk XSS
GitLab released a patch on August 12, 2026, addressing 13 security flaws in versions 19.2.2, 19.1.4, and 19.0.6. The most critical issues are high-severity cross-site scripting bugs, with CVSS scores of 8.7. There have been no confirmed exploits for these…
SecurityOnline -
LiteLLM supply chain breach exposes Microsoft, Amazon, Cisco credentials
A massive supply-chain attack on LiteLLM has resulted in the exposure of terabytes of sensitive credentials belonging to major organizations like Microsoft, Amazon, and Cisco. This breach was revealed by security firms CloudSEK and Hudson Rock and affected…
Ars TechnicaTeamPCP -
City Forum attack targets Salesforce guest access for data theft
The 'City-Forum' campaign has been targeting Salesforce and ServiceNow from March 2025, employing a custom toolset to exploit overly permissive guest access for data theft across various sectors, including finance and telecommunications. Researchers from…
Dark Reading -
CEVA Logistics attack disrupts eight EU warehouses, data leaked
CEVA Logistics experienced a cyberattack on July 29, disrupting operations at eight warehouses in Europe and halting shipments. The company informed customers on August 1 of the shipment delays related to the attack, which has not been linked to a known…
Security Affairs -
China linked hackers use AI swarm to breach Taiwan govt network
The article discusses a cyberattack attributed to China-linked hackers who utilized eight AI agents to autonomously breach Taiwan's government network. This operation, documented by Israeli cybersecurity firm Dream, marked a significant advancement in cyber…
Security Affairs -
Lazarus Group Exploits Windows Zero Day, Installs Backdoor
The article reports that the Lazarus group has exploited a Windows zero-day vulnerability to gain SYSTEM access and deploy a backdoor. The ongoing cyber espionage activities highlight the need for organizations to strengthen their security measures against…
The Hacker NewsLazarus Group -
Privacy chief urges naming staff behind health record breaches
The province’s Privacy Commissioner has recommended that public bodies disclose the names of individuals involved in privacy breaches to those affected. This suggestion follows an incident where an employee of NL Health Services accessed someone else's…
DataBreaches -
Walmart’s purple teaming boosts security teamwork and retention
Walmart has transformed its cybersecurity approach by co-locating its red and blue teams to foster collaboration and trust through a 'purple teaming' model. This initiative, led by Jason O'Dell, aims to create a learning environment where both offensive and…
Dark Reading -
Joseph Topping launches Cyber Incident Registry on DysruptionHub
Joseph Topping has introduced a new resource on DysruptionHub, the Cyber Incident Registry, designed to track and analyze cyber disruptions over time. This registry provides detailed incident profiles that include public information on the nature of the…
DataBreaches -
SharePoint Auth Bypass Flaw CVE-2026-55040 Under Active Attack
A recently patched SharePoint vulnerability, CVE-2026-55040, is being actively exploited following the release of a proof-of-concept exploit. This vulnerability allows attackers to bypass authentication and potentially access or modify files without…
-
Zoom patches critical annotation flaws after Zoomsday discovery
Research has uncovered three critical vulnerabilities in Zoom, dubbed "Zoomsday," that could allow one participant to attack another during meetings via malicious data. These flaws, tracked as CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415, impact…
-
New WindRelay malware steals NFC data in fake bank calls
A new malware strain, WindRelay, is being used in conjunction with the SpyNote remote access trojan (RAT) in a fraud scheme, where criminals impersonate bank employees to manipulate victims during a phone call. The fraudster instructs the victim to install…
Infosecurity -
Linux process accounting is a hidden gem for system monitoring
The article by Johannes Ullrich on Linux Kernel Process Accounting outlines the importance and functionality of this kernel feature that tracks process activities. It emphasizes that process accounting is not enabled by default on Linux systems and provides…
SANS ISC -
Dell VSI flaw CVE-2026-67261 lets attackers run code remotely
The page reports on critical security vulnerabilities related to the Dell Virtual Storage Integrator (VSI) for VMware vSphere Client. Two significant flaws were identified: CVE-2026-67261, which allows unauthenticated remote code execution with a CVSS score…
-
Over 700 Chrome VPN Extensions Route Traffic via Risky Proxies
The article by Ravie Lakshmanan discusses a significant security issue affecting 737 VPN extensions for Chrome, which have been found to route user traffic through proxies potentially compromising user privacy. The investigation highlights the need for users…
The Hacker News -
Ransomware hits Colombia Justice Ministry before transition
On August 2, 2026, Colombia's Ministry of Justice suffered a ransomware attack that impacted public services related to drug monitoring and legal processes, occurring just before a presidential transition. The national CERT had recently warned of increased…
Dark Reading -
MS Patch Tuesday patches 421 flaws, Lazarus zero day exploited
The August 2026 Patch Tuesday from Microsoft addresses 421 vulnerabilities, including three critical zero-days and 62 rated as critical. Notably, a flaw exploited by the Lazarus group allows SYSTEM privileges. Key updates include a public Windows privilege…
-
Zoom screen share flaw lets attackers hijack devices during calls
Researchers from A Security disclosed vulnerabilities in Zoom that could allow attackers to hijack devices through screen sharing. The vulnerabilities, discovered using AI, affect all operating systems Zoom supports: Windows, macOS, Linux, iOS, and Android.…
Ars Technica -
Microsoft Windows Ancillary Function Driver for WinSock2 articles this day · SecurityWeek first
Lazarus Used Post-Quantum Key Exchange to Deliver Zero-Day · Lazarus uses fake job offers to exploit Windows CVE-2026-68820
-
Lazarus Used Post-Quantum Key Exchange to Deliver Zero-Day
The Lazarus Group, linked to North Korea, executed a new malware campaign utilizing a post-quantum key exchange to negotiate its command channel and deploy a Windows zero-day exploit against defense and aerospace firms in Europe and India. The exploitation…
-
Lazarus uses fake job offers to exploit Windows CVE-2026-68820
North Korean hackers, attributed to the Lazarus Group, are exploiting a newly patched Windows zero-day vulnerability (CVE-2026-68820) to infiltrate systems, targeting the defense sector through fake job offers. This campaign, part of 'Operation Dream Job,'…
-
-
Mindgard Secures $30M Series A to Expand AI Security Platform
AI security startup Mindgard has raised $30 million in a Series A funding round, bringing its total funding to approximately $42 million. The investment was led by Album VC, with contributions from Karma Ventures and other existing investors. Established in…
SecurityWeek -
Critical Nuxt DevTools flaw lets hackers run code on dev machines
A critical vulnerability in Nuxt DevTools (CVE-2026-71319) allows attackers to execute arbitrary commands on developer machines, with a CVSS score of 9.6. This issue affects versions prior to 3.3.1 and is primarily relevant during development mode. The…
-
Gunra ransomware exploits Fortinet flaws, targets government
Gunra ransomware is exploiting two vulnerabilities in Fortinet products to target critical infrastructure and government entities, as highlighted in a joint advisory from US and South Korean agencies. This ransomware-as-a-service (RaaS) is capable of…
InfosecurityGunra -
City-Forum attacks Salesforce guest API, hits telecoms and banks
The City-Forum campaign targets Salesforce and ServiceNow using a custom toolset aimed at telecoms, banks, and public-sector portals. Researchers note it's the first in-the-wild exploitation of Salesforce's UI-API guest surface. Attacks occur through…
SecurityWeek -
WhatsApp Unveils New Scam Alert Feature
WhatsApp has launched a beta feature called Scam Alert that employs an on-device machine learning model to identify suspicious messages from non-contacts. The model functions within the bounds of end-to-end encryption, analyzing incoming messages without…
SecurityWeek -
CVE-2026-61515: Unauthenticated Command Injection in Puwell IP Cameras, PoC Exploit Code Publicly Disclosed
Three critical vulnerabilities were detected today: CVE-2026-20349 (Cisco Secure Firewall), CVE-2026-68820 (Microsoft Windows), and CVE-2026-72898 (Metabase). Additionally, two serious vulnerabilities in Puwell IP cameras, CVE-2026-61514 and CVE-2026-61515,…
-
Walmart Cybersecurity Shift: Trust, Innovation Under Jason O'Dell
The article discusses how Walmart has transformed its cybersecurity operations under the leadership of Jason O'Dell, who emphasizes trust and innovation. Key points include a shift from fear-based approaches to proactive strategies that prioritize business…
Dark Reading -
NIST calls for public input on AI driven NVD modernization
The U.S. National Institute for Standards and Technology (NIST) is seeking public input on modernizing its National Vulnerability Database (NVD) to enhance automation and AI integration. An RFI invites stakeholders to share insights on opportunities and…
Infosecurity -
Cloudflare sees 519% rise in >1 Tbps DDoS attacks in H1 2026
Cloudflare's report highlights significant trends in DDoS attacks during the first half of 2026, revealing a 519% increase in attacks exceeding 1 Tbps. Key points include: 1. A surge in network-layer attacks, with 935 mitigated attacks over 1 Tbps. 2. A…
DataBreaches -
AI API flaw lets weak models read AI reasoning, experts warn
The article discusses a vulnerability in the APIs of major AI companies like OpenAI, Anthropic, and Google. This flaw allows less sophisticated AI models to decode the reasoning of more advanced models, posing significant security risks. It emphasizes the…
The Hacker News -
A serious incident occurred at MyDr, a Polish healthcare system provider
MyDr, a major provider of Electronic Medical Records in Poland, is currently investigating a significant security breach. Hackers claim to have accessed data pertaining to over 18 million individuals, including 18,814,422 unique PESEL numbers linked to…
DataBreaches -
Firms boost security using AI validation and zero trust tactics
The article from The Hacker News discusses the recovery and strengthening of enterprise defenses against cybersecurity threats, emphasizing the importance of validation and attack simulation. It highlights recent advancements in cybersecurity strategies such…
The Hacker News -
Ceva Logistics Operations Disrupted by Cyberattack
Ceva Logistics, a major shipping and logistics company, experienced a cyberattack on July 29, disrupting operations across eight European warehouses. The company informed affected customers on August 1 that shipments from these locations are halted. Notable…
SecurityWeek -
Control Which Package Registries Your CI Jobs and Developer Machines Use
The article discusses the importance of controlling package registries for CI jobs and developer machines to enhance security. It introduces two StepSecurity controls aimed at blocking public registries and ensuring that software installations occur from…
StepSecurity -
Adobe patches critical ColdFusion, Campaign Classic flaws
Adobe has released patches for three critical vulnerabilities identified in ColdFusion and Campaign Classic, each with a CVSS score of 10.0, highlighting significant security risks. Organizations using these products are urged to update immediately to…
The Hacker News -
Intel, AMD patch 80+ flaws, address privilege escalation risks
Intel and AMD have announced security patches addressing over 80 vulnerabilities in their products. Intel released 42 advisories covering 72 vulnerabilities, fixing several high-severity issues related to privilege escalation and denial-of-service (DoS) in…
SecurityWeek -
Supply chain breach hits LiteLLM, exposing secrets at Nvidia, AWS
The LiteLLM supply chain attack impacted over 2,500 organizations and 434,000 CI/CD pipelines, following a compromise of Aqua Security's Trivy vulnerability scanner. Hackers exploited compromised versions of LiteLLM, a Python library pushed to PyPI, which…
SecurityWeek -
Sandworm hits Polish power plant via private APN, brief outage
Russian-linked hackers targeted a Polish power plant's operational technology (OT) network through a private Access Point Name (APN) during a cyber campaign in December 2025, as reported by Poland's Cybersecurity Incident Response Team (CERT.PL). This…
InfosecuritySandworm -
VMware vCenter flaw lets hackers maintain persistent access
Attackers are exploiting a vulnerability in VMware vCenter to maintain persistent remote access. This vulnerability poses a significant risk as it allows unauthorized users to infiltrate networks, leading to potential data breaches. Cybersecurity experts…
The Hacker News -
Kimwolf v7 Botnet Leverages Ethereum, Chrome for DDoS
The article discusses the newly discovered Kimwolf v7 botnet, identified by Palo Alto Networks on February 3, 2026. This version significantly enhances the DDoS attack capabilities targeting Android TV boxes and introduces sophisticated techniques for…
Security Affairs
