News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 13 so far |
Tue 25 Aug· 70 articles
-
CISA's KEV Catalog Adds Gitea Flaw, Urges Prompt Patching
CISA has added CVE‑2026‑60004 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Gitea, the self‑hosted Git service, and is named the Gitea Code Injection Vulnerability. It allows an attacker who already has write access to a repository…
-
Attackers trick AI email summaries with hidden prompt injections
Recent research from Forcepoint X-Labs reveals how attackers can manipulate AI email summarizers with hidden prompts within emails, leading to the generation of false summaries. This vulnerability arises from AI's struggle to differentiate between data and…
Dark Reading -
JPS Health Network restores services after two week cyber outage
Patients at JPS Health Network in Fort Worth, Texas are experiencing ongoing issues following a nearly two-week network outage that began on August 3 due to suspicious activity. During this outage, despite the hospital and clinics remaining open, online…
DataBreaches -
T Mobile Faces Billion Dollar Risk Over WA Breach Notice Ruling
The article discusses a significant court ruling involving T-Mobile and its failure to comply with Washington's data breach notification laws following a 2021 security incident that exposed 76 million records, including Social Security numbers. The ruling…
DataBreaches -
NVIDIA NemoClaw flaw lets hackers hijack local AI via browser
The article discusses a security vulnerability in NVIDIA's NemoClaw tool, which allows attackers to gain unauthenticated access to a local model server via the Ollama API. Researchers from Cyera identified that the configuration issue in NemoClaw exposes the…
Dark Reading -
US Sanctions Iranian Hackers Over Infrastructure Breaches
On August 25, 2026, the U.S. government imposed sanctions on Iranian hackers connected to significant breaches of critical infrastructure. This initiative emphasizes the ongoing threats posed by cybercriminals targeting vital systems. Recent articles and…
The Hacker News -
Norway Hit by Third DDoS Attack on Digital Government Services
Norway's digital government infrastructure was hit by a third DDoS attack on August 24, disrupting services without evidence of data compromise. The attack targeted the Norwegian Digitalisation Agency (Digdir) and its service provider Vivicta, significantly…
Security Affairs -
Uber fined €825m by Dutch watchdog over automated driver bans
Uber has been fined €825 million by the Dutch Data Protection Authority for violating GDPR regulations by using automated systems to suspend drivers' accounts without human oversight. The fine, which is the largest privacy fine imposed on Uber, stems from…
Security Affairs -
Critical SAML plugin bugs let attackers hijack WordPress admin
Two critical authentication bypass vulnerabilities (CVE-2026-61979 and CVE-2026-15981) in the miniOrange SAML 2.0 Single Sign-On WordPress plugin have been actively exploited, both rated CVSS 9.8. These flaws allow unauthenticated attackers to forge SAML…
Security Affairs -
Utah cracks down on EdTech privacy after BYU data misuse study
Research by BYU highlights that many EdTech vendors fail to uphold student privacy obligations, leading to new legislation in Utah aimed at enhancing privacy protections. An investigation revealed that a significant portion of EdTech companies with privacy…
DataBreaches -
Kaltura HTML5 Player flaw lets attackers read files, run code
A critical alert has been issued regarding two unpatched vulnerabilities in the Kaltura HTML5 Player Library. These vulnerabilities, identified in the mwEmbedLoader.php endpoint, can allow unauthenticated attackers to read local files and execute arbitrary…
SecurityOnline -
Linux Foundation backs TRACE standard for verifiable AI evidence
The Linux Foundation has announced its governance of TRACE (Trust, Runtime Attestation and Compliance Evidence), a new open specification for generating verifiable evidence regarding AI operations. This specification, developed by OPAQUE alongside AMD,…
SecurityWeek -
As Exploit Windows Shrink, Patching Alone No Longer Suffices
The article discusses the evolving challenges in cybersecurity, specifically how traditional vulnerability management processes are becoming inadequate in modern environments where vulnerabilities can be exploited rapidly. It highlights that the time…
azure.microsoft.com -
OpenSSL patches nine flaws, fixes QUIC and CMS DoS bugs
OpenSSL released a security update on August 25, 2026, addressing nine vulnerabilities, primarily related to denial of service (DoS). Two vulnerabilities are classified as Moderate, with the remainder being Low severity. The update affects versions 4.0, 3.6,…
-
Malware leak reveals SNA interrogation secrets in Syria
In May 2023, an infostealer infected the Military Police Investigation Section of the Turkish-backed Syrian National Army in northern Syria, compromising sensitive information. The malware extracted passwords, cookies, and interrogation records, including…
DataBreaches -
CVE-2026-19632 bug in TranslatePress threatens WordPress sites
A critical security vulnerability (CVE-2026-19632) in the TranslatePress plugin affects versions up to 3.3.1, allowing unauthorized attackers to steal an administrator's password reset link and gain full control of the site. This flaw has a CVSS score of 9.8…
-
Health systems warn of fake MyChart Medicare Kit phishing scams
Numerous health systems in the U.S. have issued alerts warning patients about phishing scams that aim to steal passwords for Epic Systems' MyChart patient portal. These scams involve emails claiming to offer a 'MyChart Medicare Kit' as a reward, which is…
DataBreaches -
Attackers Use Hostnames to Bypass SSRF Defences on Cloud Metadata
The article by Johannes Ullrich discusses how attackers can obfuscate IP addresses by using hostnames instead. It highlights the risks associated with Server Side Request Forgery (SSRF) vulnerabilities, specifically referencing attempts to exploit the cloud…
SANS ISC -
Seoul hospital breaks law by skipping cyber incident reports
Seoul National University Hospital has not filed any cybersecurity disclosures for several years due to its classification as a public institution, despite being required to by law. The hospital has faced significant data breaches, including a major North…
DataBreaches -
SMBs Struggle as Cybersecurity Costs Soar Past Budget Limits
The article discusses the looming affordability crisis in cybersecurity, particularly affecting small to medium-sized businesses (SMBs). As breach costs soar to an average of $4.99 million, SMBs face substantial vulnerabilities due to budget constraints,…
Dark Reading -
ZeroTokens phishing platform enables live session hijacking
The ZeroTokens phishing platform enables real-time attacks by providing operators with live visibility into victim sessions, allowing them to adjust prompts and collect sensitive information such as login credentials and financial data. Abnormal AI's…
Infosecurity -
Critical SharePoint RCE and Auth Bypass Flaws Actively Exploited
A critical SharePoint remote code execution (RCE) vulnerability has been identified as CVE-2026-63520, alongside an authentication bypass flaw (CVE-2026-55040). Both vulnerabilities have been exploited in the wild, posing a significant threat to…
-
Alice Secures £140m Funding to Bolster AI Security Defences
Alice, an AI trust and security company, has raised $140 million to improve defenses against vulnerabilities in AI systems. This funding brings its total to $280 million, aimed at enhancing its AI platform, expanding its research team, and scaling…
SecurityWeek -
Webpage attack could poison NVIDIA NemoClaw AI models locally
The article discusses a potential security vulnerability where a malicious webpage could poison local AI models, particularly those built using NVIDIA's NemoClaw framework. It elaborates on how such attacks can compromise AI's integrity by modifying its…
The Hacker News -
Darktrace reports attackers exploit trust over malware in 2026
Darktrace's 2026 mid-year threat update emphasizes the evolving landscape of cybersecurity, highlighting that attackers are increasingly exploiting trust rather than bypassing security controls. Key threats include identity compromise, supply-chain attacks,…
darktrace.com -
WordPress admin takeover via MiniOrange SAML SSO flaw
Threat actors are targeting WordPress websites by exploiting two recent vulnerabilities in the MiniOrange SAML 2.0 Single Sign-On (SSO) plugin, identified as CVE-2026-61979 and CVE-2026-15981. These critical vulnerabilities enable authentication bypass,…
-
WhatsApp adds passkeys to stop phishing on iOS/Android
WhatsApp has introduced multiple passkeys for phishing-resistant sign-ins on its iOS and Android platforms, enhancing authentication security for users. This move aims to strengthen protection against phishing attacks, which have become increasingly costly…
The Hacker News -
Windows Defender BTR.sys driver flaw lets bypass EDR protections
A recent report by Check Point Research reveals a vulnerability in the Windows Defender Boot-Time Removal driver (BTR.sys), which can be exploited to bypass Endpoint Detection and Response (EDR) and Antivirus (AV) protections. The research highlights how…
SecurityOnline -
WhatsApp rolls out passkey upgrades, AI scam alerts and caller ID
WhatsApp has introduced new security features aimed at enhancing user account protection, including support for multiple passkeys, an upgraded two-step verification process that allows for longer passwords with special characters, and a caller context…
SecurityWeek -
Fake recruiter phishing steals corporate logins via mobile scams
Fake recruiter scams are increasingly targeting corporate credentials on mobile devices. Researchers from Zimperium's zLabs identified these scams using full-screen fake login pages and pre-qualification checks to weed out personal email domains, thereby…
Infosecurity -
SecurityWeek Teams With MTSI For Hands On Cyber Attack Course
SecurityWeek is offering a hands-on training course called Cyber Attack Methods (CAM) at the ICS Cybersecurity Conference in Nashville from October 6-8, 2026. The course aims to provide participants with practical knowledge about how attacks on…
SecurityWeek -
Linux Kernel Flaw CVE-2026-52923 Lets Attackers Gain Root
A critical security vulnerability, CVE-2026-52923, has been disclosed for the Linux kernel, allowing local attackers to potentially escalate privileges to root. The flaw has a CVSS score of 7.8 and affects multiple Linux distributions, including Red Hat…
-
Marimo Notebook flaw lets attackers run code before cell execution
The content discusses a vulnerability found in Marimo Notebook that allows malicious commands to run before cells execute in edit mode, emphasizing the implications for AI security. It features related articles and resources on AI attacks, governance of AI…
The Hacker News -
CISA Report Shows How Two Red Team Exams Reveal Critical SOC Gaps
The CISA cybersecurity advisory titled "A Tale of Two SOCs: Insights From Two Red Team Assessments" (August 25, 2026) outlines lessons learned from simultaneous red team assessments of two organizations, highlighting diverse defensive outcomes. Key points…
CISA -
Attackers Use Phishing to Bypass MFA, Compromise 4,500 Companies
The article discusses a significant surge in phishing attacks, specifically focusing on the Mirage2FA technique that has impacted 4,500 companies across the US and EU by exploiting Microsoft 365 login flows. The increase in such phishing schemes poses a…
The Hacker News -
24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages
The article discusses a recent finding where 24 npm packages are abusing unpkg mirrors to host fraudulent Cloudflare CAPTCHA pages, highlighting a significant phishing threat in the cybersecurity landscape. Published by Ravie Lakshmanan on August 25, 2026,…
The Hacker News -
Grok and Gemini hit by new Cryptographic Context Injection attack
The article discusses a newly discovered prompt injection attack, termed "Cryptographic Context Injection," which exploits AI assistants like Grok and Gemini. This attack involves hiding malicious instructions within encrypted data, tricking the AI into…
Malwarebytes -
E4del and Pinhole RATs Hijack FTP Banners for Covert Commands
The article discusses the emergence of E4del and PINHOLE RATs, which exploit FTP banners to act as dead drops for malware commands. It covers the implications of this finding in terms of cybersecurity threats presented by malware and social engineering…
The Hacker News -
First Car Head Unit Malware Found, Tied to BadBox Botnet
Kaspersky researchers have discovered the first malware specifically targeting car head units, linked to the BadBox botnet. The malware exploits a vulnerability in software update systems of an Android-based infotainment system from the Chinese company…
SecurityWeekBadBox -
Frontier AI: Vulnerability Management's Systemic Revolution
The article discusses the transformative role of Frontier AI in vulnerability management within cybersecurity. It emphasizes how AI can enhance the speed and effectiveness of identifying and mitigating vulnerabilities, changing the landscape of threat…
The Hacker News
