News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Fri 11 Sep· 9 articles
-
GitLab Patches CVSS 10 Flaw Exploited to Steal Secrets
GitLab has released patches for multiple high-severity flaws, including a CVSS 10.0 path traversal vulnerability (CVE-2026-85706) affecting the repository commits API. The flaw could allow an unauthenticated attacker to read arbitrary files from the GitLab…
-
Anthropic Exposes Chinese AI Labs Harvesting Claude Training Data
Anthropic has disclosed that it identified and disrupted industrial-scale illicit distillation attacks on Claude, originating from seven China-based labs including Alibaba, Moonshot, DeepSeek, Zhipu (Z[.]ai), and MiniMax. Knowledge distillation is a…
The Hacker News -
Anthropic Warns AI Agents Are Powering Global Cyberattacks
Anthropic has warned that Claude’s capabilities are being repurposed by a broad spectrum of threat actors, from cybercriminals to state-sponsored groups, to assist with cyber attacks, data exfiltration, propaganda and mass surveillance between December 2025…
The Hacker NewsUNC2452 -
Russian Hackers Used AI to Rebuild Malware After Detection
Anthropic says a Russian state‑sponsored group, tracked as GTG-20006 (Generative Threat Group 20006), ran an AI‑driven workflow to quickly rebuild and redeploy its attack toolkit after detections. The operation, linked to the Midnight Blizzard cluster (also…
The Hacker NewsGTG-20006 -
Why Vulnerability Scores Fail Without Proof of Exploitation
Security teams have become adept at spotting vulnerabilities, but the real challenge now is proving which of them can actually be exploited to reach something valuable. The piece argues that a vulnerability’s severity in isolation is not enough to gauge…
The Hacker News -
Attackers Chain JFrog Artifactory Flaws to Seize Admin Control
Attackers chained two Artifactory flaws to seize admin control of self-hosted JFrog Artifactory servers and plant backdoors, according to Wiz. Between 15 August and 8 September 2026, they exploited CVE-2026-42018, which exposes an internal anonymous-user…
-
China-Linked Hackers Exploit Sogou Flaw to Deploy GRAYRABBIT Backdoor
A China‑linked threat group known as UNC3569 exploited a flaw in Sogou Input Method for Windows to deploy a backdoor, GRAYRABBIT, on victims’ machines. The attack began with a crafted link issued via email or chat that instructed Sogou’s settings program to…
-
PaperCut Fixes Actively Exploited Flaws After 395 Organisations Hit
PaperCut has issued a maintenance release for PaperCut NG/MF that supersedes all previous emergency patches. The new MR (maintenance release) packages, versions 26.0.5, 25.0.13 and 24.1.10, contain all fixes from Emergency Patch Releases 1, 2 and 3 as well…
-
Cisco Firewall Flaws Exploited to Deploy Web Shells and Ransomware
Cisco has disclosed ongoing exploitation of two patched vulnerabilities in its Secure Firewall Management Center (FMC) by multiple threat clusters linked to ransomware and state‑sponsored activity. CVE-2026-20079, an authentication bypass affecting FMC’s web…