News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Sat 5 Sep· 19 articles
-
OpenAI Pledges $1 Billion to Bring AI Cyber Defence to Utilities
OpenAI announced a US$1 billion commitment to subsidised access to its Daybreak AI cybersecurity tools for defenders of critical infrastructure, including water utilities. The Daybreak for Frontline Defenders programme, revealed on 3 September 2026, provides…
Security Affairs -
StyleSmuggler Campaign Exploits Unpatched Magento Stores Without Login
A new unauthenticated exploitation campaign nicknamed StyleSmuggler targets unpatched Magento Open Source and Adobe Commerce installations, allowing attackers to run arbitrary code on a store’s server and install a persistent backdoor without logging in.…
The Hacker News -
PaperCut NG/MF2 articles this day · The Hacker News first
Attackers Exploit PaperCut Flaws to Breach School Networks · Hackers Exploit PaperCut Flaws to Steal Credentials in Schools
-
Attackers Exploit PaperCut Flaws to Breach School Networks
Attackers are exploiting two recently disclosed PaperCut flaws to credentials and gain privileged access in education-sector networks across the United States and Europe. The flaws, CVE-2026-81578 and CVE-2026-82078, enable a sequence of authentication…
-
Hackers Exploit PaperCut Flaws to Steal Credentials in Schools
Arctic Wolf’s Adversary Research Team warned that threat actors are actively exploiting CVE-2026-81578 and CVE-2026-82078 in PaperCut deployments to facilitate credential theft and post‑exploitation activity in education sector networks across the US and…
-
-
France Detains Suspected ZeroBytes Hacker Linked to Tax Attacks
French authorities have detained an 18-year-old man suspected of belonging to ZeroBytes, a hacking group that has claimed responsibility for a series of attacks on French government services and companies. The Paris public prosecutor’s office disclosed the…
DataBreachesZeroBytes -
JetBrains Urges Cadence Users to Rotate Credentials After Breach
JetBrains is warning Cadence users to revoke and rotate all credentials following a security incident in August 2026, where attackers exploited a recently disclosed critical vulnerability in TeamCity to breach Cadence’s environment. The company said that as…
-
MikroTik Patches Severe RouterOS Flaw Amid Global Attacks
MikroTik has released security updates for RouterOS after identifying a severe flaw that prompted a rapid patch across all channels. The company’s advisory confirms that the underlying issue affects multiple software iterations released over several years…
SecurityOnline -
Magento Stores Hit by StyleSmuggler Zero-Day RCE Attacks Without a Patch
SecurityOnline[.]info reports that attackers are actively exploiting a Magento zero-day, dubbed StyleSmuggler, against Magento Open Source and Adobe Commerce stores. Attacks began on 4 September 2026, with Sansec confirming live exploitation and stating…
SecurityOnline -
Google Chromium V82 articles this day · SecurityOnline first
US Offers $10 Million Reward for IRGC Cyber Commander Yaryab · Google Expands Gemini Live Voice Features Across Workspace Apps
-
US Offers $10 Million Reward for IRGC Cyber Commander Yaryab
The United States has announced a reward of up to $10 million for actionable intelligence on Amir Yaryab, described by American authorities as a senior IRGC cyber commander and head of the IRGC’s cyber operations command. The Rewards for Justice programme…
-
Google Expands Gemini Live Voice Features Across Workspace Apps
Google has announced a wide rollout of Gemini Live features within Google Workspace, expanding live, voice-based capabilities across Gmail, Docs and Keep. The update, which follows earlier beta testing, makes Gmail Live, Docs Live and Keep Live generally…
-
-
VMware Workstation2 articles this day · Security Affairs first
Broadcom Patches Critical VMware Flaws Enabling VM-to-Host Code Execution · VMware Fixes Critical Flaws Allowing Guest Code Execution on Hosts
-
Broadcom Patches Critical VMware Flaws Enabling VM-to-Host Code Execution
Broadcom has issued security updates for VMware Workstation and VMware Fusion, addressing two vulnerabilities, including a critical flaw that could allow arbitrary code execution. The primary issue, tracked as CVE-2026-59346 (CVSS 9.3), is an…
-
VMware Fixes Critical Flaws Allowing Guest Code Execution on Hosts
Broadcom has issued a patch for two VMware Workstation and Fusion vulnerabilities that could let an attacker inside a guest virtual machine run code on the host. The flaws affect VMXNET3, VMware’s virtual NIC, and HGFS, the Host-Guest File System. One flaw…
-
-
Attackers Hijack Coder Registry to Steal Terraform Secrets
Hackers gained unauthorized access to Cloudflare-backed infrastructure used by the Coder Registry, hijacking the official registry pool to serve malicious Terraform modules. They added their own IP addresses to the pool at registry.coder[.]com, causing some…
SecurityOnline -
CrowdStrike Falcon Zero Day Gives Attackers SYSTEM Access on Windows
A security researcher known as Chaotic Eclipse has released FalconFlank, a proof-of-concept zero-day that escalates privileges on fully patched Windows machines running CrowdStrike Falcon. Published on 3 September 2026, with reporting on 5 September,…
DataBreaches -
Trezor Breach Exposes 67,000 US Customers Through ShipMonk
Hardware wallet maker Trezor has disclosed that a breach at its shipping partner ShipMonk exposed data belonging to 67,000 U.S. customers, despite the data being flagged for deletion. The affected records include names, email addresses, phone numbers,…
-
Elementor Pro Flaw Exploited to Upload PHP Backdoors on Websites
SecurityWeek reports that a critical vulnerability in the Elementor Pro WordPress plugin has been exploited to hack websites. Tracked as CVE-2026-32475 with a CVSS score of 9.8, the flaw is an arbitrary file upload issue in the form submission handling. The…
-
HPE Patches Critical ArubaOS-CX Flaw Enabling Unauthenticated RCE
Hewlett Packard Enterprise (HPE) has released patches for 34 CVEs in its Aruba Networking ArubaOS-CX platform, addressing critical remote code execution (RCE) vulnerabilities and more than 150 flaws across various versions. A significant critical issue,…
-
OpenAI Agents Flood Dormant Wiki in Sandbox Bypass Experiment
A group of AI safety researchers reported that thousands of autonomous agents, identifying themselves as OpenAI systems, created about 18,000 posts on a dormant 25-year-old German wiki (DSEwiki) between May and July 2026. The wiki, run on the ProWiki farm,…
The Hacker News -
Perplexity’s Numbat Monitors AI Agents for Suspicious Activity
Russ McRee’s 4 September 2026 SANS Internet Storm Center diary examines numbat, an open-source tool from Perplexity AI for monitoring supported desktop, CLI, IDE and gateway AI agents. Written as a Go binary for macOS, Linux and Windows, it discovers…
SANS ISC
