News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Mon 31 Aug· 67 articles
-
ValleyRAT backdoor hides in adware, uses DLL sideloading to spy
The article discusses the ValleyRAT backdoor, which is disguised as adware and distributed through a malicious installer. It highlights how attackers exploit adware to deliver sophisticated malware under the guise of legitimate applications. Key points…
securelist.com -
Anthropic warns infostealer malware hijacks Claude user sessions
The article discusses a security warning from Anthropic regarding infostealer malware that can hijack active login sessions of Claude users from infected devices. The malware doesn't exploit a vulnerability in Claude itself but emphasizes the risk of…
SOCRadar -
Infostealer malware steals Claude sessions, empties paid accounts
Infostealer malware is hijacking active sessions of Anthropic's Claude, allowing attackers to access accounts and drain paid subscriptions without needing passwords. Anthropic is revoking access and refunding unauthorized charges as a precaution. Users are…
Security Affairs -
Judge Rules Pentagon's Anthropic Supply Chain Ban Illegal
A federal judge has ruled in favor of AI company Anthropic against the Pentagon, stating the government's designation of Anthropic as a supply chain risk was illegal. The dispute originated from accusations by government officials that Anthropic's technology…
SecurityWeek -
Fire Ant2 articles this day · SecurityOnline first
Fire Ant hackers exploit Cisco router flaws to steal credentials · Fire Ant Threat Actor Targets Trusted Infrastructure
2 outlets-
Fire Ant hackers exploit Cisco router flaws to steal credentials
The article discusses a cyber espionage incident linked to a group known as Fire Ant, reportedly connected to China. This group is exploiting vulnerabilities in Cisco routers to steal sensitive credentials and disrupt security logs. The report highlights…
The Hacker News -
Fire Ant Threat Actor Targets Trusted Infrastructure
The Fire Ant threat actor, linked to suspected espionage activities from a China-nexus group, significantly enhanced its operations in 2026 by targeting trusted infrastructure, including edge routers and TACACS servers. Notably, they breached Cisco IOS XR…
SecurityOnline
-
-
Critical PaperCut zero day lets hackers bypass auth and run code
A newly discovered PaperCut vulnerability, tracked as CVE-2026-82078 and CVE-2026-81578, presents a critical risk due to active exploitation. This zero-day exploit allows attackers to bypass authentication and execute malicious SQL for remote code execution.…
-
Berlin Refuses Ransom Payments After Rhysida Steals 5.7TB of Data
Berlin has reaffirmed it will not pay a ransom to the Rhysida ransomware group, which hacked its network in August, stealing over 5.7 terabytes of sensitive data, including personal information of 12,000 individuals. The breach affected multiple Senate…
SecurityWeekRhysida -
Nightmare Eclipse unveils HardBreacher exploit on Kaspersky
An independent researcher known as Nightmare Eclipse has unveiled an experimental exploit called HardBreacher, targeting Kaspersky Endpoint Security. This exploit exposes a zero-day vulnerability, allowing unprivileged users to bypass Windows privilege…
SecurityOnline -
UAT 10147 uses SPECTRE implant to hit IIS, Linux servers
The UAT-10147 cybercrime group, suspected to be Chinese-speaking, employs the SPECTRE cross-platform implant for malware deployment on IIS and Linux servers. The implant effectively uses advanced EDR bypass techniques, including Bring Your Own Vulnerable…
SecurityOnlineUAT-10147 -
US DOJ corrects claim, says agencies targeted in Chinese hacks
The article details a correction from the U.S. Department of Justice regarding previous claims about Chinese hacking activities. It clarifies that U.S. agencies were targets of cyberattacks rather than victims, highlighting concerns in cyber espionage and…
The Hacker News -
California exempts open source OS from age checks, helping Linux
The California State Assembly passed Amendment AB 1856 to the Digital Age Assurance Act, which exempts open-source operating systems from mandatory age verification regulations. This change alleviates burdens on major Linux distributions and their volunteer…
SecurityOnline -
False Defender Off Alerts Plague Windows 10, 11 Users
Microsoft Defender Antivirus users may experience repeated notifications falsely indicating that the antivirus has been turned off, despite its active status. This issue affects various Windows versions, including Windows 10 and 11, and persists even after…
SecurityOnline -
GiveWP plugin RCE bug lets attackers run code, patched 4.16.7.2
A critical vulnerability in the GiveWP plugin for WordPress, tracked as CVE-2026-82222, allows unauthenticated attackers to execute commands on affected servers. The flaw, present in versions up to 4.16.7.1, was reported by researcher Udin Chan and fixed in…
-
AI bots choke Linux kernel Git server, wasting CPU and dodging bans
Konstantin Ryabitsev, head of IT infrastructure at the Linux Foundation, reports that AI web crawlers are straining the server resources of git.kernel.org significantly. Out of approximately 6 million daily requests for Git commits, about 66% are rejected by…
SecurityOnline -
Microsoft adds permanent opt out for Windows 11 OneDrive prompts
Windows 11 users have been annoyed by persistent full-screen pop-ups prompting them to back up files to OneDrive and set Microsoft Edge as the default browser. Previously, users could only temporarily dismiss these prompts, leading to widespread frustration.…
SecurityOnline -
ToxicPanda 2.0 Android Trojan Steals Banking Data via Fake Updates
The ToxicPanda 2.0 banking Trojan is a malicious malware targeting Android users across 349 financial applications in 16 countries. It uses deceptive overlays to steal login credentials, employing techniques like Accessibility Service abuse to gain…
SecurityOnline -
WhatsApp boosts security as teen limits tighten on social apps
During the week from August 24 to August 30, 2026, Malwarebytes Labs reported various security issues and updates including new security features in WhatsApp, the implications of an AI agent swarm incident at Hugging Face, privacy concerns with popular apps,…
Malwarebytes -
PaperCut rolls out second patch following zero day RCE attacks
PaperCut Software has released a second emergency patch for vulnerabilities in its NG and MF print management solutions, which were exploited by attackers to achieve remote code execution. Initial reports mentioned one vulnerability, but two zero-days…
-
Kimsuky Spear Phishing Abuses Remote Control Tools
Kimsuky, a suspected North Korea-linked threat actor, is conducting spear phishing campaigns targeting policy, diplomatic, and academic organizations in South Korea and Japan. These campaigns involve malicious shortcut files that deploy backdoor scripts to…
SecurityOnlineKimsuky -
JetBrains breach leaks AWS keys via unpatched TeamCity flaw
A severe security breach at JetBrains affected its Cadence server, enabling attackers to exploit an unpatched vulnerability (CVE-2026-63077) in TeamCity. From August 8 to August 24, 2026, the attackers accessed sensitive cloud infrastructure, personal user…
-
UK NCSC warns of rising cyber threats to industrial systems
The UK's National Cyber Security Centre (NCSC) warns of increasing cyberattacks on industrial systems, specifically targeting Operational Technology (OT), such as Programmable Logic Controllers (PLCs) and Human-Machine Interfaces (HMIs). These attacks can…
SecurityOnline -
Windows 11 update causes black screens and cursor glitches
Microsoft released an optional non-security update (KB5120998) for Windows 11 versions 24H2 and 25H2, which has caused users to experience various bugs, including black screens and cursor glitches. Users reported disappearing desktop wallpapers, while their…
SecurityOnline -
ISC Stormcast Goes Green: New SANS Classes and Resources Launched
The content provides information about the ISC Stormcast for August 31st, 2026, led by handler Didier Stevens. The current threat level is green. It includes links to various resources such as classes taught by Dr. Johannes Ullrich for SANS, podcasts, and…
SANS ISC -
Weekly CVE Report: 11 Exploited Flaws Added to KEV
The week of August 24 to August 30, 2026, saw 2,488 new vulnerabilities logged, with 286 rated as Critical and 795 as High severity. Among them, 18 flaws scored a CVSS of 10.0, particularly impacting cloud-native and AI tools, as well as web applications,…
-
High-Severity Composer Flaw Enables Command Execution
Composer, a widely used PHP package manager, patched two critical security vulnerabilities on August 27, 2026. The first vulnerability (CVE-2026-59944) allows malicious packages to escape their directory, while the second allows arbitrary command execution…
-
Rust Based npm Typosquatting Malware Steals Crypto via WSL
A new npm typosquatting malware campaign, identified in August 2026, targets Windows software developers using Windows Subsystem for Linux (WSL). This Rust-based malware is delivered through 40 typosquatted npm packages that imitate popular JavaScript…
SecurityOnline
