News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Thu 3 Sep· 70 articles
-
French Hospital Fined €500,000 After Patient Data Breach Affects 525,000
On 3 September 2026, CNIL announced a €500,000 fine against Loire Private Hospital for failing to implement appropriate security measures to protect patients’ health data. The incident occurred in the summer of 2025 when an attacker gained access to the…
DataBreaches -
SonicWall NSM Flaws Enable Authentication Bypass and Command Execution
SonicWall has released a security bulletin detailing three critical vulnerabilities in its on‑premise Network Security Manager (NSM). The flaws, tracked as CVE-2026-78327, CVE-2026-78328 and CVE-2026-81939, carry a combined CVSSv3 high severity and affect…
-
Google Rushes Out Chrome Patch for Exploited V8 Zero Day
Google has issued an emergency Chrome update after a critical zero‑day vulnerability, CVE-2026-85046, was exploited in the wild. The flaw is a V8 JavaScript engine type confusion that can allow an attacker to read memory out-of-bounds and execute arbitrary…
-
Two Nephrology Practices Hit by Separate Attacks, One Exposed Data
Two unrelated medical practices named Nephrology Associates suffered cyberattacks this year, but only one has publicly disclosed the breach. In Kansas, Nephrology Associates, M.D., P.A. reported to the US Department of Health and Human Services on 29 July…
DataBreachesInsomnia -
Cloudflare Taps OpenAI Models to Hunt and Patch Live Vulnerabilities
Cloudflare has announced an early access offering called Vulnerability Discovery and Remediation (VDR), now part of Cloudflare Managed Defense. The service aims to help organisations prioritise and remediate vulnerabilities by combining real‑world context…
Cloudflare -
Student Data Breach Exposes Campus Doors, Labs and Building Systems
On 3 September 2026, DataBreaches[.]Net highlighted a growing concern where digital identity data used for student records also underpins physical security systems. The article notes that in a May incident, attackers exfiltrated student records, including…
DataBreaches -
Phantom Deal Scammers Target Enterprises With Fake M&A Requests
A new social engineering campaign, dubbed Phantom Deal, has been targeting large enterprises with highly crafted fake merger and acquisition requests. The attackers studied their targets in great detail, including public corporate histories and internal…
Dark Reading -
Serbian Activists Targeted by Zero-Click Pegasus Spyware Attacks
Serbian activists were targeted with zero-click Pegasus spyware and NoviSpy across a disclosed wave of infections that Citizen Lab and the SHARE Foundation traced to late 2025 into early 2026. An iPhone belonging to a member of Serbia’s student protest…
Security Affairs -
Senator Urges NSA to Clarify Which VPNs Best Foil Surveillance
A US senator has urged the National Security Agency to publish public guidance on how ordinary people should use virtual private networks (VPNs) to protect their communications from foreign surveillance. The request, from Senator Ron Wyden, notes a wide…
Ars Technica -
Cisco Patches Critical Root RCE Flaw in Silicon One Switches
Cisco has patched a critical remote code execution flaw in the Nexus 9000 series switches that use Silicon One hardware. The vulnerability, tracked as CVE-2026-20212, allows an unauthenticated attacker to run code with root privileges, with a CVSS score of…
-
ReliaQuest Says ShinyHunters Phishing Attack Was Contained
Dark Reading’s discussion on whether ShinyHunters truly breached ReliaQuest centres on a social media flare over a phishing incident. ReliaQuest warned of a “widespread ShinyHunters campaign” using spoofed domains, and an associated post suggested a…
Dark ReadingShinyHunters -
ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories
The article discusses a series of recent cybersecurity threats, including CEO phishing kits and Dropbox account hacks, highlighting the increasing sophistication of cyber attacks. It emphasizes the importance of awareness and proactive measures in combating…
The Hacker News -
Agentic Ransomware Took Down Enterprise in Ten Hours: AI Left 80-Page Audit
A recent ransomware attack on an undisclosed corporate victim involved AI agents that swiftly dismantled the company's defenses in just ten hours, producing an extensive 80-page security audit as a follow-up. This attack, reported by Palo Alto Networks’ Unit…
DataBreaches -
StreamRat Android malware spreads through Meta and TikTok ads
The article discusses the StreamRat Android malware which has been proliferating through ads on Meta (formerly Facebook) and TikTok, with a reach of approximately 570,000 users, mainly targeting Spanish speakers in Spain. The malicious campaign promoted a…
Malwarebytes -
ASCII smuggling crosses over from AI prompt injection to phishing evasion
Microsoft's research highlights a new high-volume phishing campaign that uses invisible Unicode tag characters, a technique known as 'ASCII Smuggling', which was previously associated with AI prompt injection. This campaign started on February 9, 2026,…
Microsoft -
Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root
The article discusses a critical vulnerability in Cisco Nexus 9000 switches that allows unauthenticated remote attackers to execute code as root. The vulnerability poses significant risks to network security, emphasizing the need for immediate patching and…
The Hacker News -
Manchester Airports Group Data on 8.8 Million People Leaked After Ransom Refusal
The Manchester Airports Group (MAG) announced a significant data breach affecting approximately 8.8 million individuals, involving the theft of personal information such as email addresses, phone numbers, vehicle registrations, and more. The breach occurred…
SecurityWeek -
BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory
The article discusses the BraZetsu malware, which has the capability to convert compromised Windows hosts into assets for a criminal marketplace. It highlights the critical security risks posed by this malware, including its use in cybercrime and artificial…
The Hacker News -
Pegasus Zero-Click Exploit Infects Serbian Student Activist's iPhone
A Serbian student activist was infected with Pegasus spyware via a zero-click exploit in iMessage, confirmed by Citizen Lab's investigation. The infection occurred between December 2025 and January 2026, with potential for further infections. Notifications…
Infosecurity -
Capsule Security Launches ‘AI Circuit Breaker’ to Stop Rogue Agents
Capsule Security has developed an 'AI circuit breaker' to safeguard against rogue autonomous agents operating beyond their intended scope. Founded in 2025 by Naor Paz and Lidan Hazout, the solution enables real-time detection and intervention, preventing…
SecurityWeek -
Fewer attacks, more force: Link11’s European Cyber Report finds new DDoS records for the first half of 2026
Link11's European Cyber Report for the first half of 2026 reveals a 42% decrease in DDoS attacks, yet records for attack intensity have soared, marking new highs in bandwidth (2.3 Tbit/s), packet rate (322 million packets/s), and cumulative data volume (705…
SecurityOnline -
Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data
Thomson Reuters experienced a significant breach of its court software, potentially compromising sensitive information such as Social Security Numbers (SSNs) and sealed court data. The incident was reported by cybersecurity expert Swati Khandelwal on…
The Hacker News -
AI 'Machine Speed' Cuts 2-Week Attack Down to 10 Hours
The article discusses a recent cyberattack where AI agents significantly reduced the attack duration from the typical two weeks to just ten hours. Conducted by a human using frontier AI, this attack demonstrated high efficiency as AI agents worked in…
Dark Reading -
Outsider Phishing Kit Survives Takedown With 700 New Pages
A recent report by Group-IB revealed that the Outsider Phishing Kit, a phishing-as-a-service operation run by a threat actor named ChenLun, has continued its malicious activities following a law enforcement takedown. Despite the efforts that included a civil…
Infosecurity -
Cisco Secure Email S/MIME Flaws Publicly Disclosed
The content alerts about multiple active exploits detected on September 2, 2026, concerning vulnerabilities in Cisco products. Key vulnerabilities include CVE-2026-20354 and CVE-2026-20355 related to S/MIME flaws allowing decryption of sensitive email…
-
412,000 The Town 2025 Ticket Buyers’ Data Hits the Dark Web
A significant data breach involving 412,000 ticket buyers from the São Paulo music festival, The Town 2025, has emerged on a Russian-language forum. The compromised database, which includes sensitive information such as names, email addresses, CPF numbers,…
Security Affairs -
CVE-2026-80714 (CVSS 9.8): Linux Root Escalation PoC Out
The content discusses the critical vulnerability CVE-2026-80714 in the Linux kernel, which has a CVSS score of 9.8. This vulnerability affects the IPVS netfilter component and allows local users to escalate privileges to root. The flaw is a use-after-free…
-
CREST Onboards First Cohort for AI-Enabled Pentesting Accreditation
The article discusses CREST's introduction of an AI-Enabled Penetration Testing accreditation for 10 companies, aimed at promoting responsible AI use in penetration testing services. This module, introduced in July 2026, is an addition to their existing…
Infosecurity -
JFrog Artifactory CVE-2026-82329 Exploited
The article discusses a critical authentication bypass vulnerability in JFrog Artifactory, known as CVE-2026-82329. This vulnerability, which has a CVSS score of 9.8, allows unauthenticated attackers to gain full administrative control over self-managed…
-
HiddenLayer Raises $100 Million for AI Runtime Security
HiddenLayer, an AI security company based in Austin, has raised $100 million in a Series B funding round, reaching a total of over $155 million raised since its inception in 2022. The company secures the lifecycle of AI applications by providing enterprise…
SecurityWeek -
'Breeze Comet' Tears Into Brazilian & Global Financial Systems
Breeze Comet, a sophisticated cybercrime group in Brazil, is exploiting the country's financial systems to enact fraudulent transactions. This group targets a variety of organizations, including banks and fintech companies, using advanced techniques such as…
Dark Reading -
US and Canadian Court Records Breached Following Thomson Reuters Incident
Thomson Reuters reported a cybersecurity incident affecting its C-Track court management software, resulting in the breach of sensitive case data in Canada and the US. Unauthorized access was detected on June 30, affecting records from Ontario courts and 11…
Infosecurity -
AI Agent Firewall Startup AIR Security Emerges From Stealth With $50 Million
AIR Security has emerged with $50 million in funding to provide a new type of firewall specifically designed for AI agents, acknowledging the increasing complexity and risks of AI add-ons. The company, co-founded by Yair Saban and Niv Hoffman, aims to ensure…
SecurityWeek -
Preparing for the Post-Quantum Era: A Call to Action
The CISA and the G7 Cyber Security Working Group released a publication titled 'Preparing for the Post-Quantum Era: A Call to Action' highlighting the urgent need for organizations and governments to transition to post-quantum cryptography (PQC) to protect…
CISA -
US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries
The article discusses a large-scale Remote Monitoring and Management (RMM) phishing campaign that has made the United States its primary target, affecting 46 countries globally. It emphasizes the growing sophistication of phishing attacks, particularly…
The Hacker News -
Russian National Indicted For Exploiting Online Platform Used For Freelance Employment And Distributing Malware To Thousands Of Victims
A federal grand jury indicted Searzhudin Tamirlanovich Aktulaev on charges including conspiracy and aggravated identity theft after his arrest in Cyprus. The indictment, unsealed recently, alleges he exploited a freelance employment platform to distribute…
DataBreaches -
North Dakota Supreme Court impacted by third-party data breach that has affected dozens of states
A criminal investigation has been initiated after a data breach linked to C-Track, a third-party vendor for the North Dakota Supreme Court, affected the court's information. The North Dakota Court System was notified in late July about the breach that may…
DataBreaches -
SonicWall CVE-2026-83548 Leads to CISA Alert
SonicWall disclosed two critical vulnerabilities in its SMA1000 series appliances, specifically **CVE-2026-83548** (a pre-authentication SSRF flaw) and **CVE-2026-83549** (a post-authentication OS command injection flaw). These vulnerabilities are actively…
-
153 Million Driver License Images Offered on Dark Web
A threat actor has begun offering digital scans of over 153 million US and Canadian driver’s licenses on a dark web identity theft service called Nexus. Alongside the driver's licenses, there's also access to more than 10 million ID cards and other…
SecurityWeek -
Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks
Attackers are exploiting the trusted Node.js runtime to deliver malware in targeted attacks, posing a significant threat to web security. This trend underscores the vulnerabilities within commonly trusted platforms that can be manipulated. Organizations are…
The Hacker News
