News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 2 Sep· 76 articles
-
Malicious Virtualizor Update Served via BGP Hijacking
Softaculous', a web hosting application provider, experienced a BGP hijacking attack from August 28 to 30, 2026, which rerouted traffic to attacker-controlled servers. This attack led to a delivery of malicious software updates for its Virtualizor users. The…
SecurityWeek -
How to Secure Enterprise AI: From Adoption to Incident Readiness
The article discusses how to secure enterprise artificial intelligence systems, focusing on the importance of proactive security measures from the adoption stage to incident readiness. Key points include understanding AI vulnerabilities, implementing robust…
The Hacker News -
Google Chrome2 articles this day · SecurityOnline first
Two critical Chrome flaws put users at risk on malicious websites · Critical Google Chrome Vulnerabilities Patched in New Update
-
Two critical Chrome flaws put users at risk on malicious websites
The article discusses two critical vulnerabilities in the Chrome browser that pose risks to users visiting malicious websites. Google has rolled out an update (version 152.0.7977.75/.76 for Windows and Mac; 152.0.7977.75 for Linux) to address 26 security…
-
Critical Google Chrome Vulnerabilities Patched in New Update
A critical alert has been issued regarding recent vulnerabilities in Google Chrome, with version 152.0.7977.75 addressing 26 security flaws. Key vulnerabilities include CVE-2026-84353, which allows memory corruption and code execution. Users are urged to…
-
-
Well-executed BGP hijattack uses hijacked IPs to infect real networks
Hackers executed a supply-chain attack by hijacking IP space used for updating cloud-management software, compromising networks of hosting providers and data centers. The attack exploited routing security weaknesses at Hetzner Online and failed validation of…
Ars Technica -
Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain
Attackers are exploiting two zero-day vulnerabilities in SonicWall SMA 1000 devices, potentially enabling an exploit chain. These vulnerabilities compromise network security, emphasizing the need for immediate patching and vigilance. Organizations are…
The Hacker News -
Nutex Health Says Patient Data Stolen, Hackers Threaten Leak
Nutex Health, a US healthcare provider, reported that a threat actor has stolen sensitive patient data and threatened to publish it online. The company disclosed the breach in a filing with the SEC, stating that an unauthorized party accessed various…
Infosecurity -
OpenAI’s Astra Becomes First Model to Cross Critical Cybersecurity Threshold
OpenAI's new model, Astra, has achieved a 'Critical' cybersecurity capability status, being the first model classified under this level in their Preparedness Framework. Astra can autonomously detect and exploit zero-day vulnerabilities and execute…
SecurityWeek -
Iran-linked APT Mirage Kitten Uses Fake Job Tests to Spread Malware
Iran-linked APT group Mirage Kitten is using fake LinkedIn coding tests to distribute two new malware families, NodeRabbit and PollCat. These malware strains are hidden in coding challenges sent to job seekers, with instructions to avoid AI tools that might…
Security Affairs -
Gaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO weapon
The article titled 'Gaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO weapon' reports on a cybercrime campaign targeted at Brazil, led by a group dubbed 'Gambling Goblin'. This group, linked to a previously known…
Check Point -
Dark web site puts 153 million driver’s licenses and millions more IDs up for sale
A dark web site named Nexus has reportedly put up for sale an immense database containing scans of 153 million driver's licenses, along with 10 million ID cards, 3 million travel documents, and 579,000 medical cards. These revelations follow a breach related…
Malwarebytes -
An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation
The article discusses a cyber attack investigated by Unit 42, where a human threat actor utilized frontier AI to autonomously breach an enterprise network during a ransomware attack. The attack achieved significant operational efficiency, compressing…
unit42.paloaltonetworks.com -
Your AI chats could be used in court
The article discusses the increasing trend of AI chatbot conversations being used as court evidence. Despite users sharing sensitive information with AI systems like ChatGPT, these chats lack legal privilege compared to conversations with professionals like…
Malwarebytes -
GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends
The article discusses the resolution of an unauthenticated remote code execution (RCE) vulnerability in GeoNetwork, which affects government geoportal backends. The fix addresses a critical security flaw that could have been exploited by attackers. It…
The Hacker News -
Chrome and Firefox Updates Patch Dozens of Vulnerabilities
On Tuesday, Google and Mozilla announced updates to their browsers, Chrome and Firefox, addressing numerous vulnerabilities. Chrome's latest update includes patches for 26 bugs, with two being critical-severity issues related to use-after-free…
SecurityWeek -
Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands
The article discusses the extradition of a Russian hacker who faces charges related to an Excel malware campaign that infected thousands of computers. The charges highlight the ongoing issues with cybercrime and the increasing sophistication of malware,…
The Hacker News -
SonicWall SMA1000 Appliances2 articles this day · SecurityWeek first
Hackers Chain Two New SonicWall Zero-Day Vulnerabilities · SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks
-
Hackers Chain Two New SonicWall Zero-Day Vulnerabilities
SonicWall has issued a security advisory regarding two newly discovered zero-day vulnerabilities impacting their SMA1000 appliances, specifically models 6210, 7210, and 8200v. The critical vulnerability, CVE-2026-83548, is a pre-authentication server-side…
-
SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks
SonicWall has reported two critical zero-day vulnerabilities affecting its SMA1000 series secure remote access gateway and SSL-VPN appliances. The vulnerabilities, CVE-2026-83548 (CVSS score 10) and CVE-2026-83549 (CVSS score 7.8), have been actively…
-
-
23-Year-Old Sality P2P Botnet Disrupted
The Sality peer-to-peer (P2P) botnet, operational for 23 years, has been disrupted through a coordinated international law enforcement effort involving CrowdStrike and several countries. Originally emerging in 2003, Sality was infamous for distributing…
SecurityWeek -
FulcrumSec Claims Responsibility for Manchester Airport Group Breach
FulcrumSec claimed responsibility for a significant data breach of the Manchester Airports Group, releasing nearly 550GB of personal data belonging to customers. They accessed sensitive information via exposed admin keys on the airports' websites, making it…
Infosecurity -
PaperCut NG/MF3 articles this day · SecurityOnline first
Malicious Browser Extensions Drain Crypto Wallets · HOOKEDGE Malware: BlueDelta Hits EU Diplomatic Targets
-
Malicious Browser Extensions Drain Crypto Wallets
The content provides an alert about critical vulnerabilities in certain PaperCut NG/MF versions (CVE-2026-82078 and CVE-2026-81578). It highlights a campaign named 'Superior', which involves 19 malicious browser extensions targeting cryptocurrency users to…
-
HOOKEDGE Malware: BlueDelta Hits EU Diplomatic Targets
The report highlights critical cyber exploits tied to the BlueDelta group, associated with Russian state-sponsored espionage. Two main vulnerabilities in PaperCut NG/MF were identified: CVE-2026-82078, an unsafe reflection vulnerability, and CVE-2026-81578,…
-
Darwin-VM Enables Apple Silicon Security Research
A recent alert highlights two active exploits related to PaperCut NG/MF vulnerabilities, labeled CVE-2026-82078 and CVE-2026-81578. Additionally, the article discusses the open-source Darwin-VM project by developer JPRX, designed to run genuine iOS and macOS…
-
-
Hackers Target Langflow in CVE-2026-0768 Attacks
Hackers are exploiting a critical vulnerability in the Langflow platform, identified as CVE-2026-0768, which allows unauthenticated attackers to remotely execute arbitrary Python code. This flaw, with a CVSS score of 9.8, affects all Langflow versions up to…
-
Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another
This article discusses the use of the AI tool Claude by researchers to transfer a pre-authentication remote code execution (RCE) exploit from one model of Programmable Logic Controller (PLC) to another. It highlights the increasing relevance of AI in…
The Hacker News -
Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials
The article discusses a critical vulnerability in Switchvox that allows attackers to deploy reverse shells without needing credentials, posing significant security risks to network systems. It highlights the urgency for organizations to apply patches to…
The Hacker News -
Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads
Authorities have successfully leveraged Sality's P2P network against itself, disrupting its ability to disseminate new malware payloads. This action is a significant step in combating cybercrime and malware distribution on the internet.
The Hacker News -
PackClient RAT: New C2 Framework Sold on Telegram
A recent security alert has identified a new remote access trojan (RAT) called PackClient, linked to the Chinese-speaking threat actor TA4922. This malware is being distributed through tax-themed phishing emails targeting organizations mainly in China and…
SecurityOnline -
CVE-2026-80047: Hugging Face Transformers Library Vulnerability
A critical vulnerability in the Hugging Face Transformers library (CVE-2026-80047) allows unauthorized code to be written to local disks without user consent. This affects library versions 4.49.0 through 5.8.1, enabling attackers to cache malicious code when…
-
Amatera Password Stealer Abuses Service Workers and Smart Contracts
The article discusses a critical cybersecurity alert regarding the Amatera password stealer, which exploits hundreds of compromised WordPress websites to distribute malware. Connected to the ErrTraffic Malware-as-a-Service ecosystem, attackers use a rogue…
SecurityOnline -
ISC Stormcast For Wednesday, September 2nd, 2026 https://isc.sans.edu/podcastdetail/10078, (Wed, Sep 2nd)
The content provides an update from the Internet Storm Center (ISC) featuring handler Brad Duncan. The threat level is currently indicated as green, suggesting a low risk of threats. Additionally, there is a mention of a podcast episode for September 2nd,…
SANS ISC -
CVE-2026-68162: Linux Kernel Root Escalation PoC Public
The page discusses a critical Linux kernel vulnerability identified as CVE-2026-68162, which affects the Stream Control Transmission Protocol (SCTP) networking code and has a CVSS score of 7.8. The flaw allows low-privileged users to escalate their…
-
Debian 11 Reaches End of Long Term Support
Debian 11 Linux has officially reached the end of its long-term support on August 31, 2026, concluding its five-year support lifecycle. Users are urged to upgrade to later versions, such as Debian 12 or 13, which will receive free security updates until…
SecurityOnline -
FreeRDP 3.31.0 Fixes Pre-Auth RCE Chain in Server
Two critical vulnerabilities in FreeRDP version 3.31.0 have been identified: an authentication bypass and a remote code execution (RCE) exploit. The patched version addresses five server-role flaws, with potential impacts on various Linux remote desktop…
SecurityOnline -
Old, Unpatched Flaws Give Attackers Access to Philippines Nuclear Agency
A recent cyberattack targeted a nuclear agency in the Philippines, exploiting long-unpatched vulnerabilities in widely used software, leading to the theft of sensitive data such as reactor databases and personnel records. Researchers identified that a threat…
Dark Reading -
Apple OpenAI Lawsuit Escalates Over AI Trade Secrets
A critical alert has been issued regarding two active vulnerabilities in PaperCut NG/MF. The main focus is on a trade secret lawsuit between Apple and OpenAI, where Apple claims a former employee, Chang Liu, misappropriated trade secrets for OpenAI hardware…
SecurityOnline
