News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 32 so far |
Tue 18 Aug· 80 articles
-
GitLab flaw (CVE-2026-19478) lets attackers delete projects
A critical security flaw in GitLab (CVE-2026-19478) allows remote attackers to manipulate or delete projects and user data without authentication. This code-injection vulnerability affects various self-managed versions of GitLab and carries a CVSS score of…
-
Clop ransomware gang claims data theft from Shell, GE and 40 firms
The Russian-speaking extortion group Clop has claimed responsibility for data theft from over 40 companies, including major firms like Shell and General Electric. Clop is known for exploiting unpatched software vulnerabilities for ransom, although the…
DataBreachesClop -
Medusa ransomware tallies hundreds of new victims, says updated advisory on group’s tactics
The ransomware-as-a-service group Medusa has recently updated its tactics and has reportedly added hundreds of victims in over a year, according to a new U.S. government advisory. They are utilizing access brokers, who are compensated between $100 to $1…
DataBreachesMedusa -
CoSnitch flaw lets hackers trick Copilot into leaking data
The 'CoSnitch' attack discovered by Varonis Threat Labs reveals a technique to manipulate Microsoft Copilot into exposing its own security vulnerabilities. Researchers were able to socially engineer a Copilot instance to disclose critical information about…
Dark Reading -
CISA flags macOS Screen Sharing bug CVE-2026-65400 as exploited
CISA has added CVE‑2026‑65400 to its Known Exploited Vulnerabilities catalogue. The entry concerns Apple’s macOS and is titled “Apple macOS Improper Authentication Vulnerability”. In one sentence, the flaw lets an attacker on the same network authenticate to…
-
CISA Urges Patching of Microsoft SharePoint Flaw CVE-2026-55040
CISA has added CVE-2026-55040 to its Known Exploited Vulnerabilities catalogue, affecting Microsoft SharePoint. The entry covers the Microsoft SharePoint Weak Authentication Vulnerability, which allows an unauthenticated attacker to bypass a security feature…
-
CISA flags VMware vCenter path traversal bug in KEV catalog.
CISA has added CVE‑2026‑59310 to its Known Exploited Vulnerabilities catalogue, affecting Broadcom’s VMware vCenter product. The vulnerability, named the Broadcom VMware vCenter Path Traversal Vulnerability, allows an attacker with network access to vCenter…
-
CISA Flags Microsoft IKE Flaw CVE-2026-33824 in KEV Catalog
CISA has added CVE-2026-33824 to its Known Exploited Vulnerabilities catalogue. The entry concerns Microsoft’s Internet Key Exchange (IKE) Service Extensions and covers the Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability,…
-
Docuseries 'Declassified' reveals CISOs' cybersecurity struggles
The article discusses a new docuseries titled "Declassified," which features stories from chief information security officers (CISOs) about their experiences in the cybersecurity field. Launched by Danielle Lewan and Clint Howard II through their studio, Red…
Dark Reading -
Heights Finance Breach Exposes 1.2 Million Customers' Data
Heights Finance experienced a data breach affecting over 1.2 million customers due to unauthorized access to a third-party cloud platform on May 7, 2026. The compromised data includes personal and financial information, but internal systems were not…
Security Affairs -
Copilot AI flaws expose data risk across linked Microsoft apps
The article discusses vulnerabilities in Microsoft's AI assistant, Copilot, which could allow unauthorized data access from connected applications. It highlights the potential risks associated with AI tools, particularly in cybersecurity. The content…
The Hacker News -
MLflow SSRF flaw exposes cloud credentials, spurring action
The article discusses a critical security vulnerability in MLflow that allows attackers to exploit a Server-Side Request Forgery (SSRF) flaw to steal cloud credentials and sensitive information. It emphasizes the growing concern over such vulnerabilities in…
The Hacker News -
MacSync Stealer hits macOS using rotating payload infrastructure
The article discusses the MacSync Stealer, a macOS information thief that utilizes a rotating infrastructure for payload delivery and data exfiltration. Microsoft Defender Experts analyzed behavioral patterns associated with the malware, identifying over 30…
Microsoft -
Project noRecognition Shows Patterns Fooling Surveillance Cameras
The article discusses Project noRecognition, initiated by cybersecurity researcher Bill Swearingen, which aims to develop patterns that can fool surveillance cameras and their detection algorithms. After testing over 31 million patterns, the project has…
Security Affairs -
Ransom Busters2 articles this day · Dark Reading first
Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000 · Ransom Busters poses as recovery service to scam victims
2 outlets-
Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000
The article reveals that a group named Ransom Busters claims to have successfully hacked into ransomware servers and is now demanding ransom payments from victims, reportedly up to $60,000. This situation underscores the evolving nature of cybercrime, where…
The Hacker News -
Ransom Busters poses as recovery service to scam victims
A ransomware affiliate known as 'Ransom Busters' is approaching victims of cyberattacks, falsely presenting itself as a recovery service while intending to divert ransom payments. This group claims to have infiltrated criminal organizations and offers to…
Dark Reading
-
-
YouTube to count views from first frame, dropping watch minimum
YouTube is changing how it calculates video view counts starting August 24, 2025. Views will now be counted as soon as a user initiates playback and the first frame renders, eliminating the need for a minimum watch duration. This aligns the view count…
SecurityOnline -
Wiz AI finds Snowflake connector flaw missed by GitHub security
Researchers from Wiz, a part of Google Cloud, identified a critical script injection vulnerability in a public GitHub repository for Snowflake's connector. This vulnerability, which went unnoticed by GitHub's Advanced Security, allows unauthenticated users…
Infosecurity -
macOS Tahoe 26.7 Code Reveals Unreleased Apple Devices
The article discusses a recent leak from macOS Tahoe 26.7 that reveals Apple's upcoming hardware roadmap. Key points include: 1) A split release strategy for the iPhone 18 series, with high-end models debuting in September and standard models in Spring 2027.…
SecurityOnline -
RFC 9234 Introduces BGP Roles, OTC to Thwart Route Leaks
The article discusses route leaks in the Border Gateway Protocol (BGP), explaining that these occur when routes are announced outside their intended scope. To address this, RFC 9234 introduces a new protocol capability called 'BGP Role' to simplify route…
Cloudflare -
AI Driven Threats Spur SecurityWeek to Host Expert Webinar
SecurityWeek is hosting a live webinar titled 'Rethinking Cyber Defense for AI-Speed Attacks' on August 18, 2026, featuring industry experts discussing the impact of artificial intelligence on cybersecurity. The conversation will explore the challenges faced…
SecurityWeek -
AI boom fuels surge in critical software flaws, study warns
A recent report by Sonatype reveals that enterprise applications now exhibit 4.31 times more critical and high-severity vulnerabilities due to the rapid acceleration of AI-driven software development practices. The analysis of four years of development data…
Infosecurity -
Apple fixes another image-processing flaw that could allow code execution
Apple has issued security updates for over two dozen vulnerabilities affecting iPhone, iPad, and macOS Tahoe, including a critical image parsing flaw (CVE-2026-65346) that allows for potential code execution through malicious images. This update, which…
-
From Self-Taught Hacker in Argentina to CISO of AI Security Firm
Nico Waisman's career in cybersecurity began in Argentina where he self-taught hacking skills during a rebellious youth. He joined Immunity in 2003 as a security researcher, progressing to VP of Latin America, and learned leadership through forming teams of…
SecurityWeek -
NASA’s AMMOS Toolkit bug lets hackers send commands to spacecraft
A serious vulnerability has been discovered in NASA's open-source AMMOS Instrument Toolkit (AIT)-GUI, allowing unauthenticated attackers to issue commands to spacecraft and execute scripts. This flaw, tracked as GHSA-p9r8-2q67-fp86 and given a CVSS rating of…
Infosecurity -
DLink patches 15 critical router flaws in newest firmware
D-Link has addressed 15 critical vulnerabilities in its DWR-M961 router, primarily stemming from command injection and buffer overflow issues within the router's web management tools. The vulnerabilities impact firmware versions prior to…
SecurityOnline -
Google’s AVDH harnesses AI to uncover 100+ vulnerabilities fast
### Overview The article discusses the increasing risk of adversarial AI misuse in cybersecurity and presents the Agentic Vulnerability Discovery Harness (AVDH), a system designed to enhance the identification and remediation of vulnerabilities within…
Google Cloud -
Attackers Can Exploit Linux Kernel Flaw CVE-2026-68138 for Root
A critical security alert has been issued regarding CVE-2026-68138, a privilege escalation vulnerability in the Linux kernel that allows local users to escalate their privileges to root. The vulnerability is due to a race condition in the traffic-control…
-
MongoDB patches 32 flaws, including critical CVE-2026-19001
The critical alert discusses 32 disclosed security vulnerabilities in MongoDB, including the severe CVE-2026-19001, which has a CVSS score of 9.5 and allows for arbitrary code execution. None of the vulnerabilities are currently confirmed as actively…
-
Kimi Work Client Uploads Session Records Alongside Feedback Logs
A recently identified issue in the Kimi Work desktop client (v3.1.5) by RuntimeWire highlights a privacy concern when users submit feedback. The application inadvertently uploads the five most recently updated agent session records alongside diagnostic logs…
SecurityOnline -
Hacked WordPress Sites Fuel StopAndProtect Malware Campaign
The report discusses the StopAndProtect operation, which utilizes a network of hacked WordPress sites to distribute malware, engage in data theft, and implement ransomware. Key findings include extensive operational security failures leading to the exposure…
Check Point -
Apache HttpClient bug lets attackers hijack traffic, update urged
The article discusses two critical vulnerabilities found in the Apache HttpClient library. The more severe flaw, CVE-2026-71290, has a CVSS score of 9.1, allowing attackers to intercept and modify traffic by disabling hostname verification on the async…
-
Microsoft 365 Copilot flaw exposes passwords via malicious links
Researchers from Varonis demonstrated a critical vulnerability in Microsoft 365 Copilot Enterprise, allowing it to exfiltrate user data like passwords without user consent. By iteratively questioning Copilot, they discovered an undocumented parameter,…
Ars Technica -
Rapid7 Warns AI Driven Flaws Surge, Patching Falls Short
Rapid7's report highlights critical trends in cybersecurity, emphasizing the inadequacy of traditional patching methods amidst growing AI-driven vulnerabilities. Key points include: a significant increase in disclosed vulnerabilities (from 4,268 to 8,539) in…
SecurityWeek -
AI Mind Viruses Spread Through Persistent Files, Experts Warn
The article discusses the concept of "AI mind viruses," highlighting the potential for such detrimental prompts to spread between artificial intelligence agents through persistent files. It emphasizes the security risks associated with AI development,…
The Hacker News -
TWINLOOT Targets SharePoint, Teams to Steal Credentials
The article discusses the cyber attack known as TWINLOOT, which targets Microsoft SharePoint and Teams to steal user credentials and infiltrate networks. This attack exemplifies the evolving threat landscape in cybersecurity, highlighting the need for…
The Hacker News -
MLflow SSRF flaw CVE-2026-64849 exposes internal services
A critical security vulnerability (CVE-2026-64849) has been identified in MLflow's default tracking server that allows unauthenticated full-read server-side request forgery (SSRF) via its webhook feature, enabling attackers to access internal services. The…
-
Xpander secures $7.5m seed funding to boost AI agent management
AI enablement platform Xpander has secured $7.5 million in seed funding led by Pico Venture Partners, with contributions from Emerge Ventures, Samsung Next, and Seedil. Founded by former AWS engineers, Xpander helps organizations adopt and manage AI agents…
SecurityWeek -
Fortinet acquires Virtue AI to enhance AI security for enterprises
Fortinet announced the acquisition of Virtue AI, which specializes in AI security with an enterprise platform that provides automated testing, real-time protection, and compliance oversight for AI systems. Virtue AI's technology includes automated…
SecurityWeek -
Typosquatted RubyGems packages aim to steal browser, crypto data
The article discusses the emergence of 16 typosquatted RubyGems packages that are designed to steal browser credentials and cryptocurrency wallets. These malicious packages exploit typographical errors in popular software names to trick users into…
The Hacker News
