News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Wed 9 Sep· 14 articles
-
US Disrupts Xinbi Scam Marketplace and Freezes $52 Million
The U.S. Department of Justice has disrupted Xinbi Guarantee, an illicit Telegram‑marketplace for scam services, seizing control channels and freezing funds as part of its Scam Center Strike Force operations. In coordinated action, DoJ also drained two Xinbi…
The Hacker NewsXinbi Guarantee -
Chrome Zero-Day Chain BlueMoon Drops Espionage Backdoors on Windows
Four espionage-linked clusters are openly deploying a previously undocumented Chrome/Windows exploit chain, dubbed BlueMoon, within days of each other. The first attribution goes to APT31 (China-aligned) on 28 August 2026, with subsequent activity from other…
-
Infostealer Logs Expose Thousands of Reusable AI Session Tokens
Threat researchers and identity security firms have warned that infostealer logs harvested from popular stealer families such as Lumma Stealer and Vidar contain a trove of credentials, session tokens and API keys that can be replayed to access AI services…
The Hacker NewsLumma Stealer -
Tines Shows How Security Teams Can Cut CVE Response Times
The Hacker News reports on a forthcoming expert webinar hosted by the Tines security team, framed around the challenge security operations teams face when a new CVE appears. The session, titled Outpacing AI-Era Attacks Starts With Faster Time to Answer,…
The Hacker News -
DeepSeek AI Coding Agent Flaw Let Attackers Disable Its Sandbox
A vulnerability in DeepSeek Harness allowed a sandboxed AI coding agent to disable its own sandbox without an extra approval prompt. The flaw arose because the tool’s local web interface, which the agent can reach from inside its environment, did not require…
-
Alby Lightning Wallet Flaw Put Internet-Facing Hubs at Risk
Alby has disclosed a critical flaw in its Alby Hub self-hosted Lightning Wallet service that could have allowed an attacker to take over a wallet and siphon funds, but only if the Hub was exposed to the internet. The vulnerability affects Hub versions 1.7.0…
The Hacker News -
US Agencies Accuse Chinese AI Firms of Stealing Frontier Model Secrets
US cybersecurity and intelligence agencies have accused China-based AI firms of conducting industrial-scale distillation attacks to extract proprietary functionalities from U.S. frontier models. In a joint bulletin from the NSA, CISA and FBI, the agencies…
The Hacker News -
Chrome Patches Exploited V8 Zero Day Allowing Code Execution
Google Chrome has patched a zero‑day vulnerability in its V8 JavaScript and WebAssembly engine that has been exploited in the wild. The flaw, CVE-2026-87491, is described as an out-of-bounds write in V8 that could let a remote attacker run arbitrary code…
-
Critical cPanel flaw lets email users escalate to root access
A new cPanel vulnerability, tracked as CVE-2026-67401, could allow an authenticated hosting account with mail privileges to escalate to full root on the server. The flaw is described by cPanel as an SQL injection in the EmailTrack functionality, through…
-
F5 BIG-IP Flaw Hid In-Memory Web Shells from Disk Scans
Sophos has analysed malware linked to intrusions into F5 BIG-IP Access Policy Manager appliances, which hides a PHP web shell in memory rather than on disk. The shell is injected when Apache loads any of three APM webtop PHP scripts: apm_css.php3,…
-
Microsoft Defender Zero Day Bypasses Patch to Read Windows Files as SYSTEM
A security researcher going by Chaotic Eclipse has released a proof-of-concept demonstrating a new zero-day in Microsoft Defender, named ShieldCrash. The PoC suggests it bypasses the previously patched ShieldBreak vulnerability, CVE-2026-69414 (CVSS 7.8), by…
-
SAP Patches Critical SAP Flaws Enabling Unauthenticated RCE
SAP has issued security updates to fix multiple high‑severity flaws, including a maximum‑severity remote, unauthenticated memory corruption vulnerability in the SAP kernel’s Extended Passport (EPP) processing, tracked as CVE-2026-44756 (CVSS 10.0), codenamed…
-
Microsoft Patches 974 Flaws as Two Windows Zero Days Exploited
Microsoft’s September Patch Tuesday set a new record, with fixes for 974 vulnerabilities across its software stack, including two flaws that were already being exploited in the wild. The breakdown cited by Microsoft shows 723 in Windows, 111 in Office and…
-
CISA Warns Attackers Are Exploiting N-able N-central Flaw
CISA has added a highly severe flaw in N-able N-central to its Known Exploited Vulnerabilities catalogue, marking it as a pre-authentication remote code execution (RCE) that could be exploited without user credentials. The issue, CVE-2026-86218 (CVSS 10.0),…