News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 23 so far |
Wed 19 Aug· 76 articles
-
Airlock Digital Secures IRAP Endorsement for Government Apps
Airlock Digital has completed an independent Information Security Registered Assessors Program (IRAP) assessment at the PROTECTED classification level, endorsed by the Australian Signals Directorate (ASD). This assessment verifies the company's security…
SecurityOnline -
Kriminal AI raises alarms over cybercrime enabled hacking tools
The article discusses the launch of the 'Kriminal' AI platform, which raises concerns regarding its potential misuse by cybercriminals despite the company's prohibition against illegal activities. Advertised as a limitless tool, Kriminal allows users to…
Dark Reading -
CISA Adds CVE-2026-64849 to Known Exploited Vulnerabilities Catalogue
CISA has added CVE-2026-64849 to its Known Exploited Vulnerabilities catalogue. The entry concerns the MLflow server, a product of MLflow, and is titled “MLflow Server‑Side Request Forgery Vulnerability”. The flaw allows an attacker to send crafted requests…
-
Spectre flaw lets attackers steal JWTs from Cloudflare Workers
The article discusses a recent security vulnerability involving Cloudflare Workers, where a Spectre attack was able to leak JSON Web Tokens (JWTs) at a rate of 12 bits per second from co-located workers. It emphasizes the importance of awareness regarding…
The Hacker News -
Fake game sites push Download Studio via deceptive links
The article discusses 41 deceptive download sites that impersonate popular video games and Windows software, tricking users into downloading Download Studio instead. These sites display real links when hovered over but redirect to affiliate links when…
Malwarebytes -
OpenAI Halts Frontier RL Training to Bolster AI Safety Defences
OpenAI has paused its Frontier RL training to enhance defenses against unsafe AI behaviors, addressing concerns about the potential misuse of AI technologies. The latest updates emphasize the necessity for robust cybersecurity measures as AI evolves and…
The Hacker News -
Inside Operation CameraSwarm: How One Actor Took Over 14,000 Dahua Cameras
Operation CameraSwarm involved the compromise of over 14,000 Dahua cameras in Ukraine and Russia between June 17 and July 22, 2026. The attack was traced back to an exposed server containing tools used by the attacker, including a brute-force engine and a…
Security Affairs -
Microsoft tops Frost Radar 2026 as CWPP visionary leader
Microsoft has been recognized as a leader in the Frost Radar for Cloud Workload Protection Platforms (CWPP) for 2026 by Frost & Sullivan. The report highlights Microsoft's innovative solutions in security, particularly through its Microsoft Defender for…
Microsoft -
SilkParasite APT deploys AI crafted RATs in Central Asia
The article discusses a spear-phishing campaign by a China-linked APT group known as SilkParasite, targeting Central Asian government organizations with various Remote Access Trojans (RATs). Researchers from Bitdefender Labs identified the campaign, which…
Dark ReadingSilkParasite -
NetScaler ADC2 articles this day · SecurityOnline first
CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway · Citrix patches critical NetScaler auth bypass flaw CVE-2026-19490
-
CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
On August 19, 2026, a security advisory was released for CVE-2026-19490, a critical authentication bypass vulnerability in Citrix NetScaler ADC and NetScaler Gateway with a CVSS v4.0 score of 9.3. This vulnerability allows unauthenticated attackers remote…
-
Citrix patches critical NetScaler auth bypass flaw CVE-2026-19490
The article discusses the detection of four active exploits impacting various systems, particularly highlighting the critical NetScaler authentication bypass vulnerability (CVE-2026-19490) patched by Citrix, which has a CVSS score of 9.3. Additionally, it…
-
-
Cloudflare Strengthens Workers Defence Against Remote Spectre Leak
In 2021, Cloudflare developed a defense against remote Spectre attacks called Dynamic Process Isolation (DyPrIs), which separates malicious scripts into different processes. Recent assessments showed that despite improvements, a remote Spectre attack could…
Cloudflare -
Linux Foundation launches Akrites to shield open source from AI threats
The Linux Foundation is set to launch Akrites, a platform designed to address vulnerabilities in critical open-source software amid rising AI-enabled cyber threats. Expected to go live in September, Akrites, supported by major industry players like OpenAI…
Infosecurity -
How Android sideloading works and why you should stay cautious
The article discusses sideloading on Android, explaining what it is, the risks involved, and how to sideload apps more safely. Sideloading allows users to install apps from outside the Google Play Store, providing flexibility but also exposing users to…
Malwarebytes -
MaaS Campaign Uses ClickFix ErrTraffic Cruciferra to Steal Data
A recent malware-as-a-service (MaaS) campaign has combined ClickFix social engineering with the ErrTraffic delivery service and Cruciferra loader. This coordination allows cybercriminals to distribute malware effectively while circumventing endpoint…
Infosecurity -
US agencies warn AI crafted exploits target Siemens S7 PLCs
U.S. agencies warn of a significant cyber threat targeting Siemens S7 Series PLCs, utilizing AI-generated exploit scripts. The actors, unnamed, conduct reconnaissance and exploit poorly secured internet-exposed devices. The advisory from NSA, CISA, FBI, DOE,…
SecurityOnline -
Amazon tightens cloud metadata defence after widespread SSRF scan
The article discusses the cloud metadata service accessible via the IP address 169.254.169.254, which allows virtual machines to retrieve machine-specific information. While some data retrieved is benign, the service can expose sensitive credentials if…
SANS ISC -
Prison for data analyst who tried to extort $2.5 million from his employer
Cameron Curry, a former data analyst at Brightly Software, was sentenced to 24 months in federal prison for attempting to extort his employer after learning his contract would not be renewed. He faced six counts of transmitting interstate communications with…
DataBreaches -
CVE-2026-8715 in HashiCorp Vault enables file reads on Kubernetes
A critical vulnerability tracked as CVE-2026-8715 has been disclosed in HashiCorp's Vault Secrets Operator, scoring 9.6 on the CVSS scale. This flaw could allow for privilege escalation within Kubernetes by enabling arbitrary file reading and credential…
-
Grandoreiro Trojan Returns in Mexico via DLL Sideloading Trick
The article discusses the resurgence of the Grandoreiro banking trojan in Mexico, where it has been linked to DLL sideloading via legitimate software, specifically the Duplicate Files Finder application. Observations indicate that 40% of the malware's…
Infosecurity -
Red Hat fixes Kubernetes bug that gives cluster-admin rights
Four critical vulnerabilities were detected in various software products, with Red Hat disclosing three major flaws in its Kubernetes management system. The most severe, CVE-2026-66792, has a CVSS score of 9.9 and allows a privileged user to escalate their…
-
CodeSecCon Draws 1,500 Experts to Strengthen Software Security
CodeSecCon is a virtual event aimed at enhancing software security, attracting over 1,500 attendees including developers and cybersecurity professionals. The event focuses on best practices for secure application development, minimizing software…
SecurityWeek -
Microsoft Internet Key Exchange (IKE) Service Extensions3 articles this day · SecurityOnline first
Google patches Android ContactsProvider2 SQLi high severity bug · Urgent Patches Address Flaws in Microsoft, Apple, IBM Db2
-
Google patches Android ContactsProvider2 SQLi high severity bug
The report details four critical vulnerabilities detected today, including CVE-2026-33824, CVE-2026-59310, CVE-2026-55040, and CVE-2026-65400, affecting various services such as Microsoft and Apple. Additionally, it highlights CVE-2026-0075, an Android…
-
Urgent Patches Address Flaws in Microsoft, Apple, IBM Db2
The content reports on four critical vulnerabilities detected today, including CVE-2026-33824, CVE-2026-59310, CVE-2026-55040, and CVE-2026-65400, affecting Microsoft and Apple products. Specifically for IBM Db2 Mirror, 18 vulnerabilities were patched, with…
-
Telegram seeks .gram domain as critical zero day exploits surge
Telegram has applied to ICANN for the .gram top-level domain, which would allow every user to have a personal domain linked to their account name (e.g., landian.gram). If approved, Telegram would manage the domain directly, avoiding reliance on traditional…
-
-
Silent Librarian2 articles this day · SecurityWeek first
DOJ indicts 17 Iranians over Mabna Institute campus hack spree · US indicts Iran's Mabna Institute for massive academic data theft
2 outlets-
DOJ indicts 17 Iranians over Mabna Institute campus hack spree
The Department of Justice (DOJ) has unsealed an indictment against 17 Iranian nationals for conducting a cyber theft campaign on behalf of Iran's Islamic Revolutionary Guard Corps (IRGC). The indictment, consisting of 14 counts, implicates members of the…
DataBreaches -
US indicts Iran's Mabna Institute for massive academic data theft
The US has indicted 17 members of the Iran-based Mabna Institute for hacking activities targeting over 300 organizations worldwide, including 144 universities in the US. Founded in 2013, the institute aimed to steal scientific resources for the Iranian…
SecurityWeek
-
-
New SilkParasite RATs Threaten Central Asian Government Networks
The article discusses the SilkParasite espionage campaign targeting Central Asian governments through the deployment of five new Remote Access Trojans (RATs). It highlights concerns about the sophistication and urgency of these cyber attacks, stressing the…
The Hacker News -
Former Ping Identity and CyberArk Executives Join AppViewX to Scale Machine and Agent Identity Security
AppViewX has appointed Mike Durso as Chief Revenue Officer and Clarence Hinton to its Board of Directors to enhance its machine and agent identity security business. These appointments aim to support AppViewX's growth, moving from traditional identity…
SecurityOnline -
Commvault fixes critical bugs allowing remote server takeover
Commvault disclosed three critical vulnerabilities (CVE-2026-13737, CVE-2026-13738, CVE-2026-13739) affecting its data protection software, enabling remote attackers to bypass authorization checks and forge server requests. These vulnerabilities have a high…
-
GuidePoint GRIT Exposes Ransom Busters as Ransomware Affiliate
The GuidePoint Research and Intelligence Team (GRIT) has investigated 'Ransom Busters,' a third-party entity that contacted ransomware victims with offers of recovery help. This behavior is concerning as it suggests prior knowledge of the incidents before…
DataBreaches -
StopAndProtect malware hits 2,000 hacked WordPress sites worldwide
A server error by cybercriminals has revealed a global malware scheme called StopAndProtect, which utilized nearly 2,000 compromised WordPress sites to infect computers, steal files, and deploy ransomware. Check Point Research noted the ransomware component…
DataBreaches -
Prevalent AI Raises $22M to Expand Data Fabric Security Platform
Prevalent AI, a London-based company specializing in AI-powered data fabric solutions for cybersecurity, has secured $22 million in growth funding from Integrity Growth Partners. Founded in 2017, the company focuses on converting fragmented enterprise data…
SecurityWeek -
OpenAI Boosts AI Safeguards After Hugging Face Security Incident
OpenAI has strengthened its AI safeguards following an incident involving Hugging Face. The company announced stricter security measures, including workload sandboxing and network isolation. They paused some AI projects, particularly the Astra model, to…
Infosecurity -
14,500 Dahua Devices Compromised in Credential and P2P Attacks
The article discusses a significant cybersecurity breach involving over 14,500 Dahua devices. Hackers exploited credential attacks, authentication bypasses, and peer-to-peer methods to compromise these devices. The growing prevalence of such attacks…
The Hacker News -
AI Powered Phishing 3.0 Fuels Agent Versus Agent Arms Race
The content discusses the evolving nature of phishing attacks, labelled as "Phishing 3.0", highlighting that the battle has shifted from traditional methods to an 'Agent Versus Agent' scenario where AI plays a pivotal role. Key points include the increasing…
The Hacker News -
StopAndProtect Campaign Hijacks 2,000 WordPress Sites for Malware
The article discusses the ongoing issue of cybersecurity threats, specifically highlighting a campaign called "StopAndProtect," which utilizes nearly 2,000 compromised WordPress sites to distribute malware and steal sensitive data. Key points include the…
The Hacker News -
Cl0p Ransomware Group Names Over 40 Victims of PTC Windchill Campaign
The Cl0p ransomware group has targeted over 40 organizations using a vulnerability (CVE-2026-12569) in PTC's Windchill and FlexPLM platforms. The flaw allows remote, unauthenticated code execution, and its exploitation was first reported in June 2026. Cl0p…
-
Patches Needed for macOS, SharePoint, vCenter and IKE Flaws
The article outlines the active exploitation of critical vulnerabilities in macOS, SharePoint, vCenter, and Microsoft IKE. It highlights the urgency for organizations to address these flaws as they may expose systems to ransomware attacks and other cyber…
The Hacker News -
Scammers Use Fake Crypto Wallet Checkers to Steal Funds
Scammers are exploiting fake crypto wallet-checking sites that falsely claim to assess wallets for suspicious activity. Instead of performing legitimate checks, these sites aim to trick users into connecting their wallets and approving unauthorized…
Malwarebytes
