News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 59 so far |
Fri 14 Aug· 37 articles
-
VINclarity Reveals Alleged Reputation Fraud Across Search and AI
The website has encountered a critical error. Users are directed to learn more about troubleshooting WordPress through the provided link.
SecurityOnline -
Standard Chartered CISO on AI, skills and banking security future
The article features an interview with Cezary Piekarski, the Chief Information Security Officer (CISO) of Standard Chartered, discussing the evolving role of CISOs in addressing cybersecurity challenges within the financial sector. Piekarski emphasizes the…
Dark Reading -
Apple patches CVE-2026-65400 macOS flaw after crypto miner attacks
Dutch officials have reported that CVE-2026-65400, a severe macOS vulnerability, is being actively exploited, allowing attackers to gain full control of Macs by executing malicious code. This vulnerability is linked to the macOS screen sharing feature and…
-
NIST Asks for Public Feedback on AI in Vulnerability Database
The National Institute of Standards and Technology (NIST) is addressing the rising volumes of software vulnerabilities, exacerbated by AI-driven research and scanning. An RFI has been issued to seek public feedback on integrating AI into the management of…
Dark Reading -
Apple warns users of mercenary spyware targeting journalists
Apple has issued warnings to hundreds of users across 110 countries regarding potential targeted attacks from mercenary spyware, which threatens individuals due to their roles or activities. The alerts, part of a program established in 2021, notify users…
Security Affairs -
Scottish government employee data exposed via contractor breach
A data breach affecting the Scottish government's Crown Office and Procurator Fiscal Service (COPFS)has resulted from a contractor's leak of personal information of government employees. The breach was linked to an online data maturity assessment facilitated…
Dark Reading -
French Tax Authority Confirms Breach After Identity Misuse
France's tax authority confirmed a data breach in which hackers accessed the Directorate General of Public Finances (DGFiP), extracting data from individuals and businesses. The breach, detected in late June, occurred after an attacker misused someone's…
DataBreachesZeroBytes -
ExfilSquad leaks 27M records via misconfigured Power Pages
Researchers have confirmed that the ExfilSquad data extortion group has exfiltrated sensitive data from at least 13 organizations across various sectors, including government and education, with experts validating the group's claims about their access.…
InfosecurityExfilSquad -
Boards Must Act Now to Tackle Hidden Technology Risks
The article discusses why boards often underestimate technology risks and outlines the critical need for awareness and proactive management. Key points include that many essential technology investments do not yield immediate visible returns, making them…
Dark Reading -
Cloudflare introduces MCP traffic inspection for AI agents
Cloudflare has announced new capabilities for its Model Context Protocol (MCP) to enhance security around AI agents. Traditional human-controlled resource permissions are at risk due to the rapid decision-making ability of AI agents, which can lead to…
Cloudflare -
Cloudflare Workers enforce Access authentication on apps
The Cloudflare blog post discusses new features to enhance application security using Cloudflare Workers. Key points include: 1. **Employee Application Deployment:** Employees can now easily build applications, but this poses a risk of exposing internal…
Cloudflare -
New botnet Evooo1Bot hijacks edge devices with Mirai tricks
A new Linux botnet named 'Evooo1Bot,' derived from the Mirai malware, has been identified exploiting various vulnerabilities in edge devices. Discovered by Yi Ping (Cara) Lin from Fortinet, the botnet targets known weaknesses in devices from manufacturers…
Infosecurity -
Apple adds lock screen alerts for mercenary spyware attacks
Apple has enhanced its threat-notification system, now alerting users directly on their iPhone's Lock Screen and in Settings if targeted by mercenary spyware. This initiative aims to ensure such critical warnings are harder to overlook, complementing…
Malwarebytes -
NHS admits patient data leaked via unencrypted hospital pagers
The NHS acknowledged a data breach involving the transmission of patients' personal information over unencrypted pager devices. An investigation revealed that sensitive medical data for transplant patients, including names, birthdates, and organ details, was…
DataBreaches -
Cyera's Oasis Security Buy is All About AI Agent Control
Cyera plans to acquire Oasis Security for approximately $1 billion to enhance its data security platform by integrating non-human identity (NHI) and AI agent management into a single control plane. This move reflects a broader trend where companies are…
Dark Reading -
Meta rolls out Scam Alert beta for WhatsApp to spot scam messages
Meta has introduced a new beta feature called Scam Alert for WhatsApp, which utilizes an on-device machine-learning model to detect potential scam messages from non-contacts. Given the rising threats of impersonation, fake jobs, and various scams via…
Malwarebytes -
FBI investigates North Korean IT worker breach of US agency
This week's cybersecurity news roundup highlights several significant stories affecting the evolving cyber threat landscape. Key points include criticism of the Pentagon's $821 million contract to Accenture for an AI platform, an FBI investigation into a…
SecurityWeek -
TeamPCP compromises LiteLLM through poisoned Trivy scanner
The LiteLLM supply chain attack, attributed to TeamPCP, affected over 2,500 organizations, primarily due to a compromised version of Aqua Security’s Trivy scanner. The attack propagated through multiple packages and repositories, exploiting a malicious…
SecurityWeekTeamPCP -
DecryptAds Reveals Hidden Ad Trackers and Malvertising Threats
DecryptAds is a new free service designed to enhance transparency in adtech by scraping publicly available ad data, helping users understand who tracks them online. It processes files such as ads.txt, app-ads.txt, and buyers.json/sellers.json to reveal…
Krebs on Security -
Google Cloud details post quantum crypto roadmap for 2029
Google Cloud has released an updated roadmap for transitioning to post-quantum cryptography (PQC), aiming for full readiness by 2029. Key areas of focus include mitigating Store Now Decrypt Later (SNDL) risks, enhancing digital signatures against forgery,…
SecurityWeek -
AmnesiaStealer macOS Infostealer Spreads Via Fake GitHub ClickFix
A new macOS infostealer named AmnesiaStealer is being disseminated through ClickFix social engineering attacks, warning users of its sophisticated data theft capabilities. This Rust-based malware targets user credentials, browser data, and live sessions,…
Infosecurity -
ShinyHunters2 articles this day · SecurityWeek first
RingCentral breach by ShinyHunters exposes 1.6 million records · Trezor breach leaks 14,000 customers' data via ShipMonk
1 outlet-
RingCentral breach by ShinyHunters exposes 1.6 million records
On July, the popular business communications platform RingCentral suffered a data breach, allegedly involving the theft of personal information of approximately 1.6 million individuals by the extortion group ShinyHunters. The breach resulted from a social…
SecurityWeek -
Trezor breach leaks 14,000 customers' data via ShipMonk
The hardware crypto wallet provider Trezor reported a data breach affecting nearly 14,000 customers, which involved personal information being compromised through its third-party shipping provider, ShipMonk, rather than Trezor's own systems. The affected…
SecurityWeek
-
-
UK Charity CRM Beacon Hit by Data Breach After AWS Key Compromise
UK-based CRM provider Beacon reported a data breach affecting over 1,000 charities, with potential exposure of personal supporter information. Malicious activity was first observed on July 27, 2026, utilizing a compromised AWS access key. While attackers…
SecurityWeek -
HoneyMyte APT's CoolClient backdoor gains kernel stealth driver
The article discusses the CoolClient backdoor attributed to the HoneyMyte APT group, which has evolved to include a kernel-mode driver enhancing its stealth and operational capabilities. Initially documented in 2022, the malware has been used in…
securelist.comMUSTANG PANDA -
AmnesiaStealer macOS malware spreads via fake GitHub pages
AmnesiaStealer is a new macOS infostealer developed in Rust that targets users via counterfeit GitHub pages, utilizing a technique called ClickFix. The malware operates in three stages: it downloads and launches a payload, harvests sensitive information from…
Security Affairs -
Chess.com leak exposes 7.3 million user profiles via scraping
A recent leak exposed 7.3 million Chess.com user profiles, attributed to large-scale data scraping rather than a server breach. The leaked file, a 15.5 GB compressed archive, included various user data fields such as usernames, emails, real names, countries,…
Security Affairs -
Critical RCE flaw in Phoenix Contact PLCnext firmware, patch urged
Phoenix Contact disclosed three vulnerabilities in PLCnext firmware on August 12, 2026, including a critical flaw (CVE-2025-41769) resulting in unauthenticated buffer overflow with a CVSS score of 9.8, allowing remote code execution. Other vulnerabilities…
-
Chinese hack for hire Jewelbug blends espionage with crypto fraud
Security researchers from Broadcom's Threat Hunter Team have identified the threat group Jewelbug, associated with Chinese cyber espionage, as a hack-for-hire entity involved in cryptocurrency fraud. Their report reveals that Jewelbug operates on shared…
InfosecurityREF7707 -
Trump lets private firms launch cyber strikes on crime gangs
On August 13, 2026, President Trump signed a national security memorandum authorizing vetted private cybersecurity firms to conduct government-sanctioned offensive cyber operations targeting transnational criminal networks. This program, overseen by the…
Security Affairs -
CISA warns of Gunra ransomware targeting critical infrastructure.
The website has encountered a critical error. For assistance in resolving this issue, users can refer to the WordPress documentation on troubleshooting.
SecurityOnline -
GeoServer zero day SQL flaw lets attackers run code remotely
Threat actors are exploiting an unpatched zero-day vulnerability in GeoServer, identified as an SQL injection issue that may allow remote code execution. Disclosed by researcher q1uf3ng, the vulnerability affects the jsonArrayContains function, which…
SecurityWeek -
AmnesiaStealer targets macOS via fake GitHub, hijacks browsers
A multi-stage malware known as AmnesiaStealer has been discovered targeting macOS users via a fake GitHub download page. This information stealer employs a three-stage infection chain involving a shell script that executes the payload to harvest user data…
SecurityWeek -
CVE-2026-68067 (CVSS 9.8): Mira Monitor Flaw Lets Attackers Control User Accounts
The CISA has disclosed eight vulnerabilities in the Mira Hormone Monitor and its Android app, with the most severe being CVE-2026-68067, which has a critical CVSS score of 9.8. This vulnerability allows remote attackers to control user accounts by bypassing…
-
ISC Stormcast August 2026: Green Threat, Ullrich Classes Featured
The ISC Stormcast for August 14th, 2026, is handled by Guy Bruneau. The current threat level is indicated as green. The page includes links for further information about classes taught by Dr. Johannes Ullrich, as well as various resources related to cyber…
SANS ISC -
TP-Link Patches 5 Flaws in ISP-Managed Routers and Mesh Devices
TP-Link disclosed five vulnerabilities affecting ISP-managed networking devices, including routers and mesh systems. The major issues include authentication bypass and command injection, with CVSS scores reaching up to 8.7. None of these vulnerabilities have…
-
Linux Kernel RDMA Bug Allows Local Users to Gain Root
A recent security advisory reveals a local privilege escalation vulnerability in the Linux kernel RDMA/rxe driver, identified as CVE-2026-64582. A researcher has published proof-of-concept exploit code for this flaw, which stems from a use-after-free issue…
