News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 16 so far |
Mon 24 Aug· 68 articles
-
CISA Adds Oracle HTTP Server Flaw CVE-2026-21962 to KEV Catalog
CISA has added CVE‑2026‑21962 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Oracle HTTP Server and Oracle Weblogic Server Proxy Plug‑in and is named the Oracle HTTP Server and Oracle Weblogic Server Proxy Plug‑in Improper Access…
-
Exploited Zimbra Flaw Highlights Shrinking Window to Patch
CISA has set a three-day deadline for federal agencies to address a significant security flaw in the Zimbra communications suite, identified as CVE-2026-73570. This vulnerability allows potential attackers to execute unauthorized code remotely, threatening…
-
WordlistLoader weaponises common words to sneak Amatera onto PCs
The article discusses a new malware loader called WordlistLoader that utilizes ordinary English words to hide malicious code, specifically targeting the Amatera infostealer. This malware prepares the victim's environment and reconstructs hidden code,…
Dark Reading -
Asheville Clinics Report 2025 Breach Exposing Patient Data
On July 31, several facilities in Asheville, NC, notified residents of a data breach caused by a threat actor who accessed their systems from November 25-28, 2025, acquiring files from a trusted vendor, which remains unnamed. The compromised data included…
DataBreaches -
AliExpress’ inaudible sound trick disrupts Bluetooth headset
AliExpress has been found using an outdated fingerprinting technique that involves sending inaudible sounds to browsers, impacting users' experience with Bluetooth headphones. Researcher Matthew Callaghan discovered this while investigating odd audio…
Ars Technica -
Cloudflare's Blog Gets Faster After Switching to New EmDash CMS
Cloudflare recently redesigned its blog and migrated to a new CMS called EmDash. This migration included significant performance improvements and a modern interface aligned with Cloudflare's visual identity. Key highlights include: 1. **Customer Zero**:…
Cloudflare -
Mass court rules data breach plaintiffs need concrete harm to sue
Christopher R. Deubert discusses recent legal guidance regarding data breach claims in the United States, particularly in Massachusetts. In 2021, the U.S. Supreme Court determined that the mere risk of future harm does not qualify as a concrete harm for…
DataBreaches -
Fake Minecraft clients spread Weedhack malware via SEO tricks
The article discusses the spread of Weedhack malware through fake Minecraft clients and SEO poisoning techniques. It highlights the risks associated with downloading malicious software disguised as legitimate applications and emphasizes the importance of…
The Hacker News -
ShinyHunters2 articles this day · DataBreaches first
ReliaQuest blocks ShinyHunters phishing, confirms no data breach · ReliaQuest refutes ShinyHunters leak, says fake login was used
2 outlets-
ReliaQuest blocks ShinyHunters phishing, confirms no data breach
ReliaQuest, a cybersecurity firm, confirmed that it was targeted in a limited-impact social engineering attack by the hacker group ShinyHunters. The attack involved a phishing campaign using a fake domain that led to an unauthorized access incident at…
SecurityWeek -
ReliaQuest refutes ShinyHunters leak, says fake login was used
DataBreaches reported that ShinyHunters listed ReliaQuest on their leak site without solid evidence, only sharing screenshots of a user account. In a blog response, ReliaQuest clarified that a threat actor created a fake single sign-on page to phish an…
DataBreaches
-
-
Fake GTA VI Downloads Embed Malware Awaiting November Release
Cybercriminals are exploiting the hype surrounding GTA VI by circulating fake downloads that contain malware. A purported 113GB file, claimed to be a playable version of the game, was found to be mostly empty data with only a 50KB virus embedded. Researchers…
Security Affairs -
Fake GTA 6 demo sites trick users into downloading info stealer
The article discusses the emergence of fake websites posing as Rockstar Games to exploit the hype surrounding the upcoming release of Grand Theft Auto VI (GTA 6). Cybercriminals have created convincing sites offering a supposed demo of the game, which…
Malwarebytes -
Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Rapid7's analysis of CVE-2026-63520 highlights a significant remote code execution (RCE) vulnerability in Microsoft SharePoint. This flaw, disclosed on August 11, 2026, allows an authenticated attacker to execute arbitrary code with the privileges of the…
-
TCG Issues New Guidance on Quantum Safe TPM Certification
The Trusted Computing Group (TCG) has released new guidance to help organizations verify the quantum-safety of trusted platform modules (TPMs). This comes as concerns rise around safeguarding systems against quantum-enabled attacks. The guidance includes a…
Infosecurity -
NIST warns of 23 multi cloud security challenges, seeks input
The NIST has issued a warning regarding unique cybersecurity risks in multi-cloud environments, stressing the challenges organizations face in maintaining consistent security across various cloud service providers (CSPs). Key points include difficulties in…
Infosecurity -
CVE-2026-19874: Metal Gear Online 3 RCE Flaw
The article discusses a critical remote code execution (RCE) vulnerability (CVE-2026-19874) in Konami's Metal Gear Online 3, allowing attackers to gain control of client systems through a heap-based buffer overflow linked to the game's Steam matchmaking…
-
Expel Finds SynkLoader Malware Using Fake Windows Lock Screen
The article details the emergence of a sophisticated malware family called SynkLoader, which employs advanced techniques to infiltrate corporate systems as a precursor to potential ransomware attacks. Discovered by researchers at Expel, SynkLoader utilizes a…
Dark Reading -
Fake Codex macOS lures via Google Sites to deliver hidden malware
A fake Codex download campaign has exploited sponsored search results and Google Sites to deliver macOS malware, tricking users into executing it. Researchers from Cato Networks found that the campaign redirected users from queries like 'codex macos…
Infosecurity -
Fake SysScan Security Scan Pushes Users to Uninstall Antivirus
A new wave of scams involves fake Microsoft security scans claiming to check antivirus software effectiveness. These sites, branded as **SysScan**, falsely assert that third-party antivirus software is unsupported by Windows, urging victims to uninstall…
Malwarebytes -
What Happens to Your Digital Afterlife After Death?
In this episode of Malwarebytes' Lock and Code podcast, host David Ruiz interviews Tamara Kneese, exploring the implications of data's afterlife following a person's death. The conversation highlights the evolving digital landscape where online accounts and…
Malwarebytes -
ToxicPanda 2.0 expands to 349 finance apps via Android debug
The latest update on the ToxicPanda banking Trojan reveals an evolution into a more sophisticated threat targeting both individual users and enterprise systems. ToxicPanda 2.0 introduces 167 new remote commands, expanding its target from 16 banking…
Dark Reading -
AI driven PLC attacks rise amid GitLab breaches, Stripe key leaks
The article discusses recent developments in cybersecurity, focusing on threats linked to AI, such as AI-powered PLC attacks, GitLab breaches, and the leakage of Stripe keys. It highlights the increasing cost of phishing and resources for improving AI…
The Hacker News -
AliExpress Tracks Users via Silent Audio Fingerprinting
AliExpress has been reported for using silent audio to fingerprint visitors' browsers, a method that allows tracking without relying on cookies. This technique involves generating inaudible sound signals and analyzing how different devices and browsers…
Malwarebytes -
CVE-2026-75616: TP-Link Archer C20 Command Injection Risks Full Device Compromise
TP-Link has addressed a critical command injection vulnerability in the Archer C20 v6 router, identified as CVE-2026-75616, which has a CVSS score of 8.5. The flaw allows authenticated administrators to execute arbitrary commands, leading to potential full…
-
CISOs Urged to Tie Security Wins to Business Growth and Trust
The article discusses the challenges faced by Chief Information Security Officers (CISOs) in communicating the value of security measures to executive boards. It highlights that while CISOs' expertise is in technical skills and compliance, boards prioritize…
SecurityWeek -
AI speeds bug detection, but patches lag, widening the gap
The article discusses the increasing speed of discovering vulnerabilities in cybersecurity, thanks to advanced AI technology, which has significantly reduced the time needed to identify flaws from weeks to hours. However, the remediation process has not kept…
Dark Reading -
ToxicPanda 2.0 can take over your Android phone and banking apps
ToxicPanda 2.0 is a newly discovered Android banking Trojan and remote-access tool capable of taking over devices and stealing banking credentials. It significantly expands its targeting capabilities and employs tactics such as phishing and abusing Android's…
Malwarebytes -
IBM fixes critical Power Systems flaws enabling full control
IBM has patched two critical vulnerabilities in Power Systems Firmware, CVE-2026-16687 and CVE-2026-16835, both rated 9.6 on the CVSS scale. These flaws allow unauthenticated attackers to gain full control of managed systems, posing a significant risk to…
-
Doubloon Dredger uses malicious PDFs to steal Notion tokens
A financial threat actor, identified as 'Doubloon Dredger,' has been exploiting free Notion accounts and malicious PDFs to harvest authentication tokens from organizations. The campaign, uncovered by Sublime's Threat Intelligence team, involves fake accounts…
InfosecurityDoubloon Dredger -
PostgreSQL Issues Fix for Critical CVE-2026-14669 Remote Code Bug
PostgreSQL addressed a critical vulnerability (CVE-2026-14669) identified as a heap overflow in the to_char() function, allowing for potential remote code execution (RCE). The vulnerability, which has a CVSS score of 8.8, affects various versions before…
-
Dutch DPA fines Uber €825m for automated driver suspensions
The Dutch Data Protection Authority has fined Uber nearly $1 billion for violating the EU's General Data Protection Regulation (GDPR) by using automated software to suspend driver accounts without human oversight. The fine amounts to 825 million euros ($964…
SecurityWeek -
New Amatera malware uses ClickFix to steal Windows passwords
The article discusses the delivery of a new malware, Amatera, via WordlistLoader, which exploits ClickFix to phish for Windows passwords. It highlights the increasing sophistication of cyber threats and the need for improved endpoint security to combat such…
The Hacker News -
Apollo Global Management Hit by Social Engineering Data Breach
Apollo Global Management has reported a data breach resulting from a social engineering attack, which exposed sensitive personal information such as names, contact details, and Social Security Numbers (SSNs) between July 6 and 10. An investigation is…
DataBreaches -
Spring patches 91 bugs, fixing critical LDAP flaw CVE-2026-59270
Broadcom's Spring application development framework has released updates addressing 91 vulnerabilities, including a critical one (CVE-2026-59270) that allows potential unauthorized access through its embedded LDAP server. The vulnerabilities, which number…
-
Firms must secure AI driven development amid rapid code shipments
The article discusses a recent webinar on managing AI-related security risks as organizations increasingly ship more code at faster rates (10-50 times quicker). It emphasizes the importance of maintaining security control amid this rapid development. Key…
The Hacker News -
Keycloak flaw lets attackers reset passwords and hijack accounts
A critical security flaw in Keycloak allows unauthenticated attackers to reset passwords and take over accounts, posing significant risks to identity security. The article emphasizes swift updates and patches to prevent unauthorized access, highlighting the…
The Hacker News -
QUICAgent fuels cyber espionage on Myanmar government systems
The article discusses 'Operation QUICSILVER,' a cyber espionage initiative targeting the Myanmar government and IT sectors using a malware known as QUICAgent. It highlights the significance of this operation in the context of increasing cyber threats and…
The Hacker News -
PavinLoader malware spreads via ClickFix and fake download scams
The article "Tracking PavinLoader across ClickFix and fake download campaigns" details the operations of the PavinLoader malware across various malicious campaigns, including ClickFix and fake software downloads. Key points include: 1. **PavinLoader** is a…
Malwarebytes -
Only 5% of AI Users Cause Most Security Threats, Study Shows
The article discusses the significant security risks posed by a small percentage (5%) of AI users, highlighting that this group can disproportionately impact organizational security. It emphasizes the importance of addressing the vulnerabilities associated…
The Hacker News -
TP Link patches three flaws in TL MR6400 routers, urges update
TP-Link has released patches for three high-severity vulnerabilities in the TL-MR6400 router (version 7 hardware), which could allow remote code execution or denial of service. Users are urged to update to firmware version 1.9.0 Build 260714 immediately. The…
