News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 53 so far |
Mon 17 Aug· 64 articles
-
Researchers demo AF_PACKET race condition granting Linux root
A researcher has released a proof-of-concept exploit targeting a race condition in the Linux AF_PACKET subsystem, which allows local privilege escalation from a normal user to root. The flaw resides in a core networking path and remains unaddressed with any…
SecurityOnline -
Apple fixes macOS Screen Sharing bug exploited for crypto mining
Threat actors are exploiting a newly patched macOS vulnerability, CVE-2026-65400, which enables remote access to systems via Screen Sharing without valid credentials. This high-severity flaw allows hackers to gain root access and deploy cryptominers. Apple…
-
Judge sanctions litigant for AI prompt injection in court filing
A recent court case in Connecticut highlighted the misuse of AI prompting in legal filings. A litigant injected hidden instructions into a court document, attempting to manipulate AI systems to influence a ruling in his favor. The judge labeled this as…
Security Affairs -
SAP Commerce Cloud flaw lets attackers run code after patch delay
Hackers are exploiting a critical vulnerability in SAP Commerce Cloud (CVE-2026-58231), identified shortly after its public disclosure. This vulnerability, which has a CVSS score of 10 due to insufficient authorization checks, enables arbitrary code…
-
Stripe to acquire AI hub OpenRouter for over $7 billion
Stripe has agreed to acquire AI startup OpenRouter for over $7 billion, following OpenRouter's recent $113 million Series B funding round. OpenRouter is recognized as the largest AI API intermediary hub globally, offering robust features like intelligent…
SecurityOnline -
Head Mare Uses TrueConf Zero Days to Drop PhantomCore Backdoor
The content discusses a cyber attack attributed to the Head Mare group targeting TrueConf video conferencing servers, discovered by Kaspersky in July 2026. The attackers exploited two previously unknown vulnerabilities to gain control over unpatched servers.…
SecurityOnlineHead Mare -
McDonald’s employee data allegedly leaked, 1.7M records at risk
A data seller has allegedly claimed to have stolen 1.7 million records of McDonald’s employees from its Azure database. An analysis of an 8,000-row sample from the supposed leak confirms its authenticity, demonstrating details consistent with legitimate…
Security Affairs -
China linked hackers exploit VMware flaw to drop Babuk ransomware
The article discusses a recent security incident involving a suspected China-nexus actor exploiting a vulnerability in VMware vCenter to deploy Babuk-derived ransomware. It highlights the increasing sophistication of cyber threats, particularly in relation…
The Hacker News -
Kimwolf Botnet Targets Android TV Boxes via Open ADB, Boosts DDoS
The Kimwolf botnet malware, identified by Palo Alto Networks, targets Android TV boxes and set-top boxes, utilizing unauthenticated Android Debug Bridge (ADB) through residential proxies for distribution. It significantly enhances DDoS capabilities,…
SecurityOnline -
Infostealers Harvest 1.7 Billion Credentials in Six Months
Security researchers have reported a significant increase in the prevalence of infostealer malware, with 7.4 million devices infected in the first half of 2026, leading to the harvesting of 1.7 billion credentials. Notable variants include Vidar, StealC, and…
Infosecurity -
SonicWall VPN Gap Lets Akira Ransomware Try Safe Mode Evasion
The article discusses an Akira ransomware attack that utilized Safe Mode to circumvent Endpoint Detection and Response (EDR) systems. The attackers accessed a company's system via a Multi-Factor Authentication (MFA)-less SonicWall VPN, disabled security…
Security AffairsStorm-1567 -
Apple rolls out iPhone alerts for mercenary spyware attacks
The article from Malwarebytes Labs summarizes cybersecurity news from August 10 to August 16, 2026. Key highlights include: 1. **Mercenary Spyware:** Apple has introduced iPhone alerts for users targeted by mercenary spyware. 2. **WhatsApp Updates:** A new…
Malwarebytes -
TheHatman sells Azure tenant data from McDonald's, TCS, Vodafone
A threat actor identified as 'TheHatman' is selling data allegedly stolen from Azure tenants of multiple Fortune 500 companies, including McDonald's, TCS, and Vodafone. The leaked data, which includes millions of records, was reportedly exfiltrated using…
SecurityWeekTheHatman -
Kaspersky reveals Project CAV3RN, a stealthy DNS espionage tool
Project CAV3RN is a cyber espionage operation targeting organizations in Israel, tracked by Kaspersky Labs. Key capabilities include DNS-based command selection and the use of Google Apps Script relays. The framework utilizes a local DLL broker to load and…
SecurityOnline -
SpaceX Buys Cursor for $60B, Unveils Grok 4.6 Model
SpaceX has acquired the AI coding startup Cursor for $60 billion, integrating its team into SpaceX's AI division. This acquisition, formalized on August 14, follows a strategic alliance for model training announced in April. Cursor's access to SpaceX's…
SecurityOnline -
Qualcomm Snapdragon C Targets $300 Windows Laptops to Rival MacBook Neo
Qualcomm launched the Snapdragon C computing platform at COMPUTEX 2026, designed for entry-level Windows laptops targeting students, families, and small businesses. Acer's Aspire Go 15 is the first model utilizing this platform, aimed at the $300 market…
SecurityOnline -
Google lets users strip visible AI watermarks, keep trace tags
Google has announced a policy change allowing users to manually remove visible watermarks from media generated by its AI models, while still maintaining mandatory invisible tracking technologies like SynthID and C2PA metadata. This feature will be rolled out…
SecurityOnline -
watchTowr publishes exploit for Citrix NetScaler RCE CVE-2026-8452
Researchers at watchTowr have published an exploit for the Citrix NetScaler RCE vulnerability, CVE-2026-8452, allowing unauthenticated attackers to execute code as root. This vulnerability, rated CVSS 9.8, affects several versions of NetScaler ADC and…
-
Microsoft rolls out customisable context menu for Windows 11
Microsoft is developing a customizable right-click context menu for Windows 11, which will streamline user experience by addressing cluttered options. The new design allows users to collapse app-specific entries, primarily for Microsoft apps like Terminal…
SecurityOnline -
Anthropic unveils covert watermark for Claude to meet EU AI rules
Anthropic has disclosed the mechanics of its text watermarking system in compliance with the EU AI Act. Unlike traditional watermarks, Claude uses a covert statistical algorithm, integrated within the text without any visible symbols or quality degradation.…
SecurityOnline -
Google must ease third party app store access after court order
Google has begun hosting third-party app marketplaces like Aptoide on its Play Store, marking a significant shift towards an open ecosystem amidst ongoing antitrust scrutiny. However, Judge James Donato criticized the company for creating unnecessary…
SecurityOnline -
Critical Metabase SQLi flaw lets attackers seize full admin control
The weekly threat intelligence report for mid-August 2026 highlights the discovery of 3,976 new vulnerabilities, emphasizing the need for immediate patching to protect enterprise systems. Key vulnerabilities include a critical SQL injection in Metabase…
-
ISC Stormcast For Monday, August 17th, 2026 https://isc.sans.edu/podcastdetail/10054, (Mon, Aug 17th)
The content is an update from the Internet Storm Center, indicating that Didier Stevens is the handler on duty, with a current threat level categorized as green. It mentions a podcast episode dated August 17th, 2026, hosted by Dr. Johannes Ullrich. Links are…
SANS ISC -
DeadLock Ransomware Infects 80 Firms Using Blockchain Chat
The DeadLock ransomware is recognized as a severe double extortion threat, employing a blend of modern file encryption and decentralized blockchain technologies. Microsoft Threat Intelligence reports that this malware has targeted over 80 organizations…
SecurityOnline
