News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Wed 26 Aug· 77 articles
-
NVIDIA issues patches for UFM and DGX Spark after CVE-2026-24170
NVIDIA has issued critical security updates to address multiple vulnerabilities in its Unified Fabric Manager (UFM) Enterprise and DGX Spark systems. The vulnerabilities, including CVE-2026-24170 with a CVSS score of 8.8, pose significant risks for…
-
CISA adds Microsoft SQL flaw to Known Exploited Vulnerabilities list
CISA has added CVE‑2019‑1068 to its Known Exploited Vulnerabilities catalogue. The flaw affects Microsoft SQL Server and is named the Microsoft SQL Server Remote Code Execution Vulnerability. In brief, the vulnerability allows an attacker to execute…
-
CISA Red Team Shows Gaps in Critical Infrastructure Detection
CISA's recent assessments revealed that two critical infrastructure organizations were fully compromised by a red team operation. The assessments showed stark differences in detection and response: Organization A failed to detect the breach, while…
Security Affairs -
CISA Adds Citrix NetScaler Flaw CVE-2026-8452 to Exploit List
CISA has added CVE‑2026‑8452 to its Known Exploited Vulnerabilities catalogue. The entry concerns Citrix NetScaler ADC and NetScaler Gateway, which contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could…
-
CISA adds CVE-2022-0995 Linux kernel flaw to KEV catalogue
On 26 August 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2022‑0995 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects the Linux kernel, the core component of the Linux operating system. Named the Linux…
-
CVE-2015-5287 Flaw in Red Hat ABRT Enables Privilege Escalation
CISA has added CVE‑2015‑5287 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Red Hat’s Automatic Bug Reporting Tool (ABRT) and is named the Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability. It allows a…
-
CISA KEV Catalogue Spotlights Red Hat libuser Flaw CVE-2015-3246
CISA has added CVE-2015-3246 to the Known Exploited Vulnerabilities catalogue. The flaw affects Red Hat’s Libuser library and is known as the Red Hat Libuser Race Condition Vulnerability. It allows authenticated local users to corrupt the /etc/passwd file,…
-
CISA KEV Flags Ajax.NET Deserialization Flaw as Exploited
CISA has added CVE‑2021‑23758 to its Known Exploited Vulnerabilities catalogue, affecting the Ajax.NET Professional product from Ajax.NET Professional. The vulnerability, named Ajax.NET Professional Deserialization of Untrusted Data Vulnerability, allows…
-
NSA hosts reunion for former TAO hackers amid transparency push
The National Security Agency (NSA) is hosting a unique reunion for alumni of its secretive hacking unit, Tailored Access Operations (TAO), at Fort Meade, Maryland. This event marks the unit’s recent rebranding and is aimed at re-engaging former members. The…
DataBreaches -
Dark Caracal Deploys GoCaracal Malware with Blockchain Backed C2
Dark Caracal, a Lebanon-linked cyber-espionage group, has introduced a new malware framework named GoCaracal, enhancing its abilities to steal data and maintain access to compromised targets. Discovered by Arctic Wolf during an investigation in Venezuela,…
Dark ReadingDark Caracal -
North Korean IT Imposters Use VPNs and Fake IDs to Breach Firms
The article discusses the increasing sophistication of North Korean operatives posing as IT workers to infiltrate organizations. Research from Huntress identifies various red flags indicating such fraud, including the unusual use of VPNs and proxies, as well…
Dark Reading -
JarService malware hijacks car head units through update flaw
The article discusses a new Android malware targeting car head unit systems, allowing threat actors to exploit legitimate update functions to spread infections. Named JarService, this malware was discovered by Kaspersky researchers who noted it lacks a user…
Dark ReadingMoYu Group -
QTFY3 articles this day · The Hacker News first
FBI Seizes China linked QScan, QTRouter Hacking Platforms · Chinese hackers exploited QScan, QTRouter to hit US agencies
3 outlets-
FBI Seizes China linked QScan, QTRouter Hacking Platforms
The FBI and U.S. Department of Justice have seized two Chinese-linked hacking platforms, QScan and QTRouter, which were used to target critical U.S. infrastructure. These platforms are attributed to a group named QTFY, operating through a China-based…
Security Affairs -
Chinese hackers exploited QScan, QTRouter to hit US agencies
The U.S. Department of Justice reported that Chinese government hackers have utilized tools named 'QScan' and 'QTRouter' since 2018 to infiltrate multiple federal agencies including the Federal Reserve, Department of Energy, DOJ, U.S. Senate, and NASA.…
DataBreaches -
FBI Shuts Down China Linked QTFY Spy Network Targeting US Data
The FBI has disrupted a China-linked QTFY infrastructure that was utilized for stealing sensitive data from U.S. organizations. This operation is highlighted within the broader context of cyber espionage and the importance of cybersecurity for critical…
The Hacker News
-
-
When AI infrastructure becomes the target: Securing gateways and control points
The article discusses the security implications of AI infrastructure becoming central control points in enterprise systems, highlighting the increased targeting by attackers. Microsoft observed active exploitation of three AI workloads: LiteLLM, RAGFlow, and…
Microsoft -
Entra ID Admin Overload Raises Risk of Accidental Data Changes
The article by Rob VandenBrink emphasizes the importance of monitoring admin rights within an Entra ID directory. It highlights the risks associated with having too many administrators, including the potential for accidental changes or deletions by users who…
SANS ISC -
Nimbus Manticore adds TWOSTROKE backdoor and SSH tunneller
The article discusses the addition of new capabilities to the Nimbus Manticore tool, which now includes a TWOSTROKE-like backdoor and an SSH tunneler. This expansion provides enhanced functionalities for cyber espionage activities. The author emphasizes the…
The Hacker NewsUNC1549 -
AI Speeds Up Malware Development, Not Its Success Rate: Analysis
Palo Alto Networks' Unit 42 analyzed 405 AI-related malware samples, finding that 97% remained in controlled environments and not deployed on live systems. Only 12 samples were detected on endpoints, all triggering security alerts. The samples fell into…
SecurityWeek -
Tortoiseshell Hackers Add New Backdoor Aimed at Defence Sector
An Iranian-linked cyber espionage group known as Tortoiseshell has expanded its malware capabilities, introducing a new backdoor and reverse SSH tunneling utility aimed at defense, aerospace, and military sectors primarily in the Middle East and US. Recent…
InfosecurityTortoiseshell -
Attackers abuse DocuSign alerts to hijack Microsoft 365 accounts
The article discusses the NovaCookies campaign, which exploits legitimate DocuSign notifications to compromise Microsoft 365 accounts. This phishing tactic is part of a growing trend in identity security threats. The piece emphasizes the importance of…
The Hacker News -
Interpol's Operation Jackal IV nets 58 arrests across 22 nations
Interpol's Operation Jackal IV, conducted between November 2025 and June 2026, has identified 263 cybercrime suspects and resulted in 58 arrests across 22 countries. The operation primarily targeted West African organized crime groups involved in financial…
Infosecurity -
DireWolf ransomware hits US healthcare, threatens kidney registry
DireWolf, a ransomware group that emerged in May 2025, has targeted over 100 U.S. healthcare entities, including the National Kidney Registry. They utilize double-extortion tactics by encrypting files and demanding payment for decryption. They have claimed…
DataBreachesDireWolf -
Chrome patches 327 flaws, fixing critical ANGLE and V8 bugs
Google Chrome has released an update for its desktop browser addressing 327 security vulnerabilities, including ten critical ones. The updated version is 152.0.7977.64/.65 for Windows and Mac, and 152.0.7977.64 for Linux. Users are encouraged to manually…
-
CISA Red Team breaches two critical infrastructure firms unnoticed
The content discusses a recent incident where the CISA Red Team successfully compromised two critical infrastructure organizations, highlighting significant security gaps since one of the targets detected nothing during the breach. The article emphasizes the…
The Hacker News -
GitLab Updates Fix Arbitrary Command Execution Vulnerability
GitLab has released urgent security patches (versions 19.3.1, 19.2.5, and 19.1.7) to address several critical vulnerabilities, particularly CVE-2026-18252. This flaw, scoring 8.7 on the CVSS scale, allows authenticated users with developer permissions to…
-
Enterprises face risk as 80% of AI tools run without IT oversight
A recent report by AI security vendor Reco reveals that 80% of AI tools used in large enterprises operate without IT oversight, increasing operational risks for organizations. The study highlighted that SMBs have approximately 414 unsanctioned AI tools per…
Infosecurity -
FreeBSD patches eight kernel flaws, including CVE-2026-58090
The FreeBSD Project announced six security advisories on August 25, 2026, addressing eight vulnerabilities within the kernel and ppp, primarily related to local privilege escalation and potential root access. Key vulnerabilities include use-after-free issues…
-
Autism Services Saskatoon breach exposes 2,000+ records
A data breach at Autism Services of Saskatoon resulted in the theft of personal information from over 2,000 individuals. Discovered on March 20, 2025, the organization swiftly isolated affected systems and terminated network access, but sensitive information…
DataBreaches -
Adobe, Nvidia fix critical flaws in Substance, NemoClaw and AI
Adobe and Nvidia have released patches for numerous security vulnerabilities in their products, including critical flaws. Nvidia addressed 18 vulnerabilities in its NemoClaw and OpenShell products, with two being of critical severity that could lead to code…
SecurityWeek -
Popular school apps may be sharing student data with advertisers
A two-year investigation in Utah revealed that many EdTech apps used in schools collect and share student data in ways that contradict their privacy agreements. The study assessed 100 apps and found that 52% collected unauthorized student data and 61% shared…
Malwarebytes -
Cyber insurance claim costs rise sharply despite fewer claims
The average cost of cyber insurance claims in the US increased significantly in 2025, despite a decrease in the volume of claims, as reported by Chubb's 2026 Cyber Claims Report. Middle-market firms saw a 22% rise in claim costs, while large companies…
Infosecurity -
CISA report warns basic flaws still fuel most cyber breaches
The CISA Vulnerability Review for fiscal years 2024 and 2025 provides insights into common software vulnerabilities and offers practical steps for organizations to enhance their cybersecurity posture. It emphasizes that many compromises are due to basic…
CISA -
Kaltura mwEmbed unpatched flaws allow file read, code execution
The article discusses the unpatched flaws in Kaltura mwEmbed, which could potentially allow remote attackers to read files and execute code on vulnerable systems. It emphasizes the significance of addressing these vulnerabilities promptly to prevent security…
The Hacker News -
AI reshapes SOCs, turning alert backlogs into proactive hunting
The article discusses advancements in Security Operations Centers (SOC) focusing on the integration of artificial intelligence (AI) to enhance threat detection and response. It emphasizes the shift from traditional backlog management to an AI-powered…
The Hacker News -
NovaCookies phishing service steals M365 sessions, bypasses MFA
A new phishing service, 'NovaCookies', is being used to steal authenticated Microsoft 365 sessions for $320 a month. This adversary-in-the-middle (AitM) service allows attackers to bypass multifactor authentication (MFA) and offers a turnkey solution that…
Dark Reading -
CISA Reports Cyberattacks Hit Over 100 US Water Systems in July
The Cybersecurity and Infrastructure Security Agency (CISA) reported that over 100 internet-exposed water systems were targeted in cyberattacks in July 2026, primarily using programmable logic controllers (PLCs) linked to a cellular modem. At least 12…
SecurityWeek -
UniFi CVE-2026-77537 (CVSS 10.0): Command Injection Flaws Hit 22 Ubiquiti Products
Ubiquiti's Security Advisory Bulletin 067 (August 26, 2026) addresses 22 vulnerabilities in its UniFi product line, with three critical flaws (CVSS 10.0) allowing command injection. Notable CVEs include CVE-2026-77537, CVE-2026-77550, and CVE-2026-77554, all…
-
MFA Alone Isn't Enough: Firms Must Verify Identity After Login
Multi-factor authentication (MFA) has become a crucial aspect of cybersecurity, protecting about 70% of enterprise workforce users. However, organizations often mistakenly treat successful MFA as an indication of a verified identity. Attackers increasingly…
SecurityWeek -
NVIDIA patches CVE-2026-65093 escape flaw in NemoClaw OpenShell
NVIDIA has released a software update for its NemoClaw and OpenShell products, addressing 20 vulnerabilities, including two critical flaws with a CVSS score of 9.9. The most severe bug, CVE-2026-65093, allows for code execution through a sandbox escape,…
