News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 17 so far |
Sun 23 Aug· 15 articles
-
Team PCP breach exposes 78k secrets in open source supply chain
The report titled "The State of Open Source Supply Chain Attacks" by Varun Sharma outlines a significant surge in supply chain attacks, documenting 56 incidents over a 12-month period. It emphasizes that these attacks involved actual malicious compromises,…
StepSecurityTeamPCP -
Security Affairs Flags Akira Ransomware, New Linux Botnet Threats
The Security Affairs Malware Newsletter Round 111, published by Pierluigi Paganini on August 23, 2026, highlights a selection of significant articles and research pertaining to malware developments globally. Key topics covered include: the resurgence of…
Security Affairs -
ShinyHunters claim ReliaQuest hack, then delete tweet amid denial
ReliaQuest, a cybersecurity firm, reported on ShinyHunters' recent activities, specifically a new campaign targeting their organization. On August 17, they tweeted about tracking ShinyHunters, but deleted the tweet after a response that mocked the situation.…
DataBreachesShinyHunters -
GitLab fixes CVE-2026-19478 flaw allowing attacker deletion
GitLab has addressed a critical vulnerability, CVE-2026-19478, allowing unauthenticated attackers to delete public projects and user data. This flaw has a CVSS score of 9.4 and has been actively exploited in the wild, with proof-of-concept (PoC) code…
-
LinkedIn AI Slop Reduction: A Necessary Course Correction
LinkedIn, facing an influx of low-quality AI-generated content, implemented a user-reporting mechanism called the "seems like AI slop" button to combat the issue. This initiative has seen over one million clicks, resulting in a 40% reduction in views for…
SecurityOnline -
Take-Two Subpoenas Microsoft and Discord Over GTA VI “Cyberleek” Leaks
Take-Two Interactive, the parent company of Rockstar Games, is taking legal action against Microsoft and Discord following a major leak of in-game footage from the highly anticipated Grand Theft Auto VI, set for release in November. The company has filed…
SecurityOnline -
Apple Music will label AI generated tracks as Made With AI
Apple Music is set to introduce a 'Made With AI' label to help users identify tracks with substantial generative AI involvement, in response to a surge of AI-generated music flooding streaming platforms. This label will be mandatory for record labels and…
SecurityOnline -
AliExpress hides audio scripts that hijack Bluetooth headphones
A researcher uncovered a hidden feature on the AliExpress website where audio fingerprinting scripts operate without user knowledge. This issue started when their Bluetooth headphones disconnected due to the AliExpress homepage loading. Upon investigation,…
SecurityOnline -
OpenAI macOS ChatGPT update lets AI read and send iMessages
OpenAI has released an update for its macOS desktop application that integrates ChatGPT with Apple Messages, allowing the AI to autonomously manage iMessage and SMS communications. This requires significant system access and high privileges, raising privacy…
SecurityOnline -
TikTok settles $400m DOJ case on kids' privacy violations
TikTok and its parent company, ByteDance, have reached a $400 million settlement with the U.S. Department of Justice over allegations of violations of the Children's Online Privacy Protection Act (COPPA). The lawsuit, originating in 2024, accused TikTok of…
SecurityOnline -
Iranian hackers disrupt UK power plant, causing four day outage
Iranian hackers successfully shut down a UK power plant for four days, marking an unprecedented event in cyberattacks against UK energy infrastructure, coinciding with similar attacks on water facilities across 12 US states. British officials have not…
Security Affairs -
ToxicPanda malware upgrade hits 16 countries amid NASA, Cisco flaw
The Security Affairs newsletter Round 591 discusses recent developments in cybersecurity and highlights significant articles concerning malware, hacking, and intelligence. Key issues include the upgrade of ToxicPanda malware affecting 16 countries, various…
Security Affairs -
Cryptographic Context Injection Enables Silent AI Chat Data Theft
Adversa AI has introduced a new attack method called Cryptographic Context Injection, which allows hackers to steal chat histories from AI systems like xAI's Grok and Google's Gemini without any user interaction. This technique involves sending encrypted…
Security Affairs -
EverShop vulnerability lets attackers seize accounts via UUID
A critical security vulnerability has been identified in the EverShop software, allowing for unauthenticated account takeovers, tracked as CVE-2026-72843. This flaw has a CVSS score of 9.3. The vulnerability affects versions prior to 2.2.1, allowing…
-
Manic Android malware hijacks Zimbra to steal data in Europe
The content discusses a critical security alert regarding the Manic Android malware, which has been detected as capable of OS command injection through the Zimbra Collaboration Suite (ZCS). This malware targets users in Ukraine, Russia, and Europe and…
SecurityOnline
