News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 17 so far |
Mon 24 Aug· 68 articles
-
Venezuelan sentenced to 8 years for $3.5M ATM jackpotting scheme
Juan Manuel Gouveia-Aguilera, a 27-year-old Venezuelan national, was sentenced to 8 years in prison for his involvement in an ATM jackpotting scheme that caused over $3.5 million in losses. This sentence is reportedly the longest federal term for such…
SecurityWeek -
Apollo breach exposes SSNs after social engineering attack
Apollo Global Management has reported a data breach resulting from a social engineering attack that exposed sensitive personal information, including names, contact details, and Social Security Numbers (SSNs). The breach occurred between July 6 and 10, 2026,…
SecurityWeekBlackFile -
Time to Weaponise Vulnerabilities Could Fall to Four Hours by 2026
The article discusses the rapid evolution of cybersecurity threats due to advancements in AI, highlighting that the time taken to weaponize vulnerabilities is projected to decrease from a range of months to just 4 hours by 2026. It outlines several…
SecurityWeek -
British power plant shut down for four days by Iranian hackers
In July 2026, Iranian-linked hackers successfully shut down a British power plant for four days, a situation made public when it was reported by the Telegraph on August 22, 2026. This incident highlighted vulnerabilities in cybersecurity, raising concerns…
SecurityWeek -
TikTok settles $400m children's privacy lawsuit with US DOJ
TikTok has settled a $400 million lawsuit with the U.S. Department of Justice (DOJ) concerning violations of children's privacy laws. The settlement includes an immediate payment of $300 million and an additional $100 million contingent upon vacating a…
SecurityWeek -
Iran linked hackers hit UK power plant, raising CNI fears
The article reports on a serious cyber attack carried out by Iranian hackers that disrupted a UK power plant for several days. Experts express alarm over the vulnerabilities in the UK’s critical national infrastructure (CNI), emphasizing that if such an…
Infosecurity -
Slovakia warns Russian Croatian speedcam poses cybersecurity risk
Slovakia's National Security Authority (NBÚ) has issued a warning regarding vulnerabilities in road speed cameras, identifying them as significant cyber threats. The alert stems from concerns that these devices, which collect vehicle data and have potential…
Security Affairs -
AI powered UAT 10147 boosts server attacks with EDR bypass
The article discusses the cybercrime threat UAT-10147, which utilizes AI to scale server attacks and employs techniques like EDR bypass and Linux rootkit deployment. It emphasizes the rapid advancement of AI in cyber attacks, suggesting that security…
The Hacker NewsUAT-10147 -
Over 9,300 Active AWS Keys Leaked, Many With Full Admin Rights
Security researchers at Truffle Security have identified over 9,300 leaked AWS keys still active, many of which include full admin rights. These keys were found across various public datasets and repositories, with a significant number remaining in use…
Infosecurity -
WordlistLoader Uses Fake CAPTCHA to Drop Amatera Stealer
The article discusses the discovery of a new malware loader named WordlistLoader used to deliver the Amatera Stealer (also known as ACR Stealer). This malware targets Windows users through compromised websites utilizing a deceptive ClearFake fake-CAPTCHA…
SecurityOnline -
Microsoft tests memory sharing for CPU, GPU, NPU in Windows 11
Microsoft is developing a new memory management feature for Windows 11 focused on devices with shared memory architectures, allowing CPUs, GPUs, and NPUs to share memory resources for improved efficiency. This unified memory architecture, already utilized in…
SecurityOnline -
CVE-2026-74480: Linux kernel bridge flaw grants local root
CVE-2026-74480 is a critical privilege escalation vulnerability found in the Linux kernel's network bridge module, with a CVSS score of 9.8. Discovered by Nebula Security, this use-after-free bug allows local attackers to escalate privileges to root.…
-
CVE-2026-63077 lets attackers hijack JetBrains TeamCity servers
The page discusses a critical vulnerability (CVE-2026-63077) in JetBrains TeamCity that allows unauthenticated remote code execution. Attackers are actively exploiting this flaw, confirmed by Australia's ACSC. The CVE has a CVSS score of 9.8, marking it as…
-
TikTok agrees £400m settlement for child data privacy violations
TikTok has agreed to pay $400 million to settle claims related to violations of child privacy laws by collecting data from users under 13. The U.S. Department of Justice announced this lawsuit settlement, part of a case initiated in 2024 by the DOJ and FTC,…
Security Affairs -
Malware DOUBLECUP exploits PNG file to sneak PowerShell payload
The article discusses a new malware identified as DOUBLECUP, which employs a PNG file for its payload. Although initially intriguing for its use of steganography, the author, Didier Stevens, notes that the malware does not actually conceal its PowerShell…
SANS ISC -
Fake CAPTCHA trick spreads ransomware via hacked WordPress sites
The StopAndProtect malware campaign, exposed by Check Point Research, exploits hacked WordPress sites to spread ransomware and steal data. The operation uses a fake CAPTCHA lure to distribute a PowerShell script, which downloads malicious payloads. It…
SecurityOnline -
Anthropic expands AI security with new Claude models and fund
Anthropic has announced an expansion of its cybersecurity offerings, enhancing access to its AI models through various initiatives. Key developments include the broad availability of the Claude Fable 5 model, which focuses on defensive applications while…
SecurityWeek -
iAuthFlow v2 bypasses password resets with permanent passkeys
iAuthFlow v2 is a sophisticated phishing toolkit analyzed by Abnormal Security researchers, sold for $10,000 in a Russian-language cybercrime forum. It exploits a phished Google login to create a permanent passkey that survives password resets, allowing…
Security Affairs -
Expired 'Zombie' Visa Cards and CareCloud Breach Spark Cyber Fear
The article discusses security trends and notable events in the week of August 17 to August 23, 2026, as reported by Malwarebytes Labs. Key points include: 1) Expired Visa credit cards (Zombie Cards) can be used for purchases. 2) A significant data breach at…
Malwarebytes -
Rust backdoor C2Looper uses GitHub for ransomware linked attacks
Zscaler ThreatLabz identified a new Rust-based backdoor named C2Looper in July 2026, which is linked to ransomware activity through a ClickFix delivery chain. The malware operates by using GitHub for command-and-control (C2) operations, making it less…
SecurityOnline -
Windows 11 update causes game crashes due to RGB drivers
In August 2023, numerous users reported issues with game crashes on Windows 11 (versions 24H2 and 25H2) after an update. Microsoft found that these problems, including distorted visuals, game stuttering, and system reboots, are linked to RGB lighting device…
SecurityOnline -
Microsoft rolls out OneDrive folder exclusions for admins August
Microsoft is set to launch a new OneDrive folder exclusions feature starting mid-August, allowing IT administrators to exclude specific paths on developer workstations from automatic cloud backups. This update is aimed at optimizing storage by preventing the…
SecurityOnline -
CVE-2026-52912 Flaw in Linux Kernel nf_queue Allows Local Root
CVE-2026-52912 is a high-severity use-after-free vulnerability located in the Linux kernel's netfilter nf_queue code, rated with a CVSS score of 7.8. Discovered by Nebula Security, the flaw allows local attackers to escalate privileges to root using publicly…
-
Claude Fable 5 sees low reasoning effort despite high settings
The Claude Fable 5 model has reportedly experienced a decline in intelligence as users noted low self-reported reasoning effort scores despite high configuration settings. Although developers set the reasoning to high, the model only acknowledged a score of…
SecurityOnline -
Windows 11 adds PowerToys mouse locator for easier cursor finding
Microsoft is integrating the mouse pointer indicator from PowerToys into Windows 11, allowing users to easily locate their cursor via a keyboard shortcut. This feature is especially helpful for those with high-resolution monitors and improves accessibility…
SecurityOnline -
ISC Stormcast August 2026 shows green threat, SANS courses
The ISC Stormcast for August 24th, 2026, is hosted by Rob VandenBrink. The current threat level is indicated as green. Listeners can click to access more information regarding Dr. Johannes Ullrich’s courses for SANS. The page provides links to various…
SANS ISC -
OpenAI backs new California AI law after model escape
OpenAI has transitioned from opposing to endorsing stricter AI regulations in California, specifically supporting the SB 53 legislation aimed at enhancing security for Frontier AI Models. They advocate for immediate legislative revisions to incorporate more…
SecurityOnline -
CISA adds nine zero days amid surge in cloud and ML flaws
The CVE Weekly Report for August 17-23, 2026, reveals a significant increase in cyber threats, cataloging 3,179 new security vulnerabilities, particularly targeting cloud infrastructures and machine learning systems. Key highlights include the addition of…
SecurityOnline
