News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Mon 14 Sep· 59 articles
-
Russia-linked hackers exploit Cisco firewall flaws to deploy Cyclops Blink
A likely Russia-linked threat actor is exploiting two vulnerabilities in Cisco Secure Firewall Management Centre (FMC) to deploy an updated version of the Cyclops Blink malware. Sophos and Cisco Talos identified the activity, while Sophos attributed it with…
-
ENISA Warns Frontier AI Could Enable “Negative Time-to-Exploit”
ENISA says frontier AI is compressing the cyberattack lifecycle, allowing systems to automate reconnaissance, vulnerability discovery, exploitation, lateral movement and data theft. In its July 2026 paper, *ENISA’s view on Cybersecurity in the Frontier AI…
Security Affairs -
CISA Warns of Actively Exploited Cisco Email Gateway Flaw
CISA added CVE-2026-76461 to its Known Exploited Vulnerabilities (KEV) catalogue on 14 September 2026. The vulnerability affects Cisco Secure Email Gateway and is known as the Cisco Secure Email Gateway SQL Injection Vulnerability. It could allow an…
-
GitLab Community Edition and Enterprise Edition3 articles this day · Infosecurity first
CISA Warns of Active Exploitation of Critical GitLab File Theft Flaw · Critical GitLab Flaw Exploited as CISA Orders Emergency Patching
-
CISA Warns of Active Exploitation of Critical GitLab File Theft Flaw
GitLab vulnerability CVE-2026-85706 is being actively exploited after its disclosure and patching on 10 September 2026. The path-traversal flaw affects self-hosted GitLab Community Edition and Enterprise Edition instances and has a CVSS score of 10 out of…
-
Critical GitLab Flaw Exploited as CISA Orders Emergency Patching
Rapid7 reported on 14 September 2026 that a critical GitLab vulnerability, CVE-2026-85706, was being exploited in the wild. GitLab disclosed and patched the path-traversal flaw in its repository commits API on 10 September. Rated CVSS 10.0, the vulnerability…
-
GitLab Urges Patching as Attackers Probe Critical File-Read Flaw
GitLab users have been urged to patch CVE-2026-85706, a maximum-severity path-traversal vulnerability reportedly being probed in the wild. The flaw affects GitLab CE/EE versions 18.7 before 19.1.8, 19.2 before 19.2.6 and 19.3 before 19.3.2. According to…
-
-
Apple Patches Record 261 Flaws Across New Operating Systems
Apple released its annual operating-system updates on 14 September 2026, including iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27 and visionOS 27. It also issued bug-fix-only updates for the 26-series systems and macOS Sequoia 15.8. According…
-
China Rejects Anthropic CEO’s Call to Slow Advanced AI Development
China has rejected Anthropic chief executive Dario Amodei’s proposal to slow the development of advanced artificial intelligence, with Beijing describing it as fearmongering and an attempt by the United States to contain China’s technology sector. In his…
Security Affairs -
MeshCentral Backdoor Attack Gives Hacker Root Access to Credentials
A cybersecurity incident involving an attacker exploiting the MeshCentral backdoor has been reported. This attacker gained root access and targeted subscriber credentials on September 14, 2026. The attack highlights vulnerabilities in systems utilizing…
The Hacker News -
Telegram Desktop Flaw Lets Hidden JavaScript Steal Exported Messages
A vulnerability in Telegram Desktop has been identified that allows hidden JavaScript to extract messages from HTML exports. This flaw could compromise user privacy and security by enabling unauthorized access to sensitive communications. The article…
The Hacker News -
Wisconsin School District Cuts Internet After Possible Security Incident
A possible network security incident disrupted the School District of Monroe in Wisconsin, prompting it to disconnect from the internet. Students were told to shut down computers, the district’s phone service stopped working and a scheduled ACT session was…
DataBreaches -
DDRop Attack Threatens Intel TDX and AMD SEV-SNP Confidential Computing
A new cybersecurity vulnerability, the DDRop attack, has been identified, posing significant risks to Intel's TDX and AMD's SEV-SNP confidential computing technologies. This exploitation allows attackers to breach confidential computing environments. The…
The Hacker News -
Red Heron Exploits Gitea Flaw in Espionage Campaign Against 13 Organisations
The article discusses the exploitation of a remote code execution (RCE) vulnerability in Gitea by a group known as 'Red Heron'. This cyber espionage campaign has targeted 13 organizations across six countries. The campaign highlights the risks associated…
The Hacker NewsRed Heron -
Anthropic Chief Urges Slower AI Progress as Agent Risks Grow
Anthropic chief executive Dario Amodei has urged the artificial intelligence industry to slow the improvement of frontier models, arguing that security and alignment work must be given time to catch up. In an essay published online, Amodei warned that rapid…
Dark Reading -
WordPress Adds Automated Checks to Block High Risk Plugins
WordPress has introduced automated plugin reviews to prevent the distribution of high-risk updates, enhancing its security measures. This feature allows for proactive identification and blocking of potentially harmful plugins before they are made available…
The Hacker News -
Malicious Twitch Extension Exposed OAuth Tokens From 31,000 Users
A malicious Twitch browser extension, Twitch Enhanced Viewer | JeetBot, reportedly exposed the live OAuth session tokens of about 31,000 users, according to research by Socket published on 11 September 2026. The extension was available through both the…
Infosecurity -
Rogue AI Agents and WeChat Worm Lead This Week’s Threats
The article, titled "Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits," covers significant cybersecurity topics as of September 14, 2026. Key points include emerging threats like rogue AI agents and the WeChat worm, as…
The Hacker News -
Beijing Hits Back at Anthropic CEO’s Call to Curb China’s AI Development
China's Ministry of Foreign Affairs responded sharply to Anthropic CEO Dario Amodei's call for the U.S. to limit China's AI development, warning that fearmongering harms global cooperation on AI governance. As President Trump and Chinese leader Xi Jinping…
SecurityWeek -
Google’s new search redirects make links harder to check before you click
Google has implemented a new search result linking system that uses redirects through a `google.com/goto?url=...` format, obscuring direct access to destination URLs. This change aims to reduce abuse by making it harder to collect URLs in bulk, although…
Malwarebytes -
Human Attacker Hits Machine-Speed Exploitation of Marimo RCE
A human attacker successfully exploited a remote code execution flaw (CVE-2026-39987) in Marimo notebooks, moving from a vulnerable device to an SSH bastion host in just eight seconds. This speed, typically attributed to AI, was achieved with a hand-crafted…
-
CISA Flags Artifactory, ScreenConnect and GitLab Flaws as Exploited
The US Cybersecurity and Infrastructure Security Agency (CISA) has added four vulnerabilities affecting JFrog Artifactory, ConnectWise ScreenConnect and GitLab to its Known Exploited Vulnerabilities (KEV) catalogue. The entries are CVE-2026-42016 (CVSS 8.1),…
-
Anthropic Warns AI Agents Could Threaten Human Control of the Internet
Warnings from within the artificial intelligence industry have renewed debate over whether increasingly capable systems could escape human control or be misused to threaten humanity. Anthropic chief executive Dario Amodei said companies may need to slow…
SecurityWeek -
Sophos Finds Cyclops Blink on Cisco Firewall Management Systems
Sophos Counter Threat Unit (CTU) researchers have identified a new 64-bit Linux variant of the Cyclops Blink malware on multiple compromised Cisco Firewall Management Center (FMC) devices. The malware previously focused mainly on 32-bit PowerPC-based…
SecurityOnlineCyclops Blink -
Revolut Exposes Customer Data After Impersonated Agency Request
Revolut is notifying a small, unspecified number of users that their personal and financial information was exposed after an unauthorised party impersonated a government agency. The London-based fintech, which provides banking and investment services to more…
SecurityWeek -
Ransom Group Claims Greenberg Traurig Breach Exposed 126,000 People
Silent Ransom Group (SRG) has claimed responsibility for an attack on Greenberg Traurig, a New York-headquartered law firm with more than 3,200 lawyers. According to SRG, it first accessed a corporate iPad on 13 August, downloaded an employee’s data and…
DataBreachesLuna Moth -
Anthropic Researcher Puts AI Extinction Risk Above 10% by 2036
The article presents an opinion-led debate about whether artificial intelligence will ultimately benefit humanity or create risks beyond human control. Bill Gates’ 26 August 2026 memo argues that the transition to an AI-driven era could be among history’s…
SecurityWeek -
Defence Cyber Warfare Market Set to Nearly Double by 2031
Cybersecurity spending in the defence industry is forecast to rise sharply as military networks and mission systems face growing cyber threats. A MarketsandMarkets report published on 14 September 2026 projects that the cyber warfare market will grow from…
Infosecurity -
AI Powered Attacks Force Cybersecurity Teams to Rethink Validation
The article discusses how advancements in artificial intelligence (AI) have altered the landscape of security exposures, necessitating a shift in validation methods. Key points include the increased speed and sophistication of AI-powered attacks, the need…
The Hacker News -
China-linked hackers exploited Sogou flaw to deploy GrayRabbit backdoor
A critical vulnerability in Tencent’s Sogou Input Method for Windows has been exploited in the wild by a China-linked threat actor, according to Gen Threat Labs. The software is a widely used Chinese-language input method editor, reportedly installed by…
-
Revolut Data Breach Exposes Customer IDs in Fake Agency Requests
Revolut has confirmed that an unauthorised third party obtained sensitive customer information after submitting fraudulent requests from an email address using a legitimate government agency domain. The requests passed valid technical domain authentication…
Infosecurity -
Revolut Exposed Customer Data After Government Email Scam
Revolut has acknowledged disclosing sensitive customer records to an unauthorised party after accepting fraudulent information requests sent from an email address on a legitimate government agency domain, according to reports cited by Malwarebytes. The…
Malwarebytes -
CISOs Struggle to Control AI Agents as Risks Outpace Defences
A Team8 survey of its invitation-only “CISO Village” found that 71% of chief information security officers are experimenting with, or augmenting existing security tools with, AI-agent capabilities. The survey identifies AI and agent security as respondents’…
SecurityWeek -
Windows 11 Preview Adds Cloud Rebuild for Damaged PCs
Microsoft has introduced a native “Cloud Rebuild” recovery option in Windows 11 preview build 26220.9343. The feature is available through the Windows Recovery Environment (WinRE), which can launch after repeated boot failures or be opened manually through…
SecurityOnline -
Unit 42 Maps Cloud Identities by Behaviour to Expose Anomalies
Palo Alto Networks’ Unit 42 has described a behavioural clustering model for mapping cloud identities to their functional roles, based on activity recorded in audit logs. The researchers analysed more than 40,000 identities across 125 cloud environments over…
unit42.paloaltonetworks.com -
Telus Warns Canadian Customers of Account Takeovers and Data Theft
Telus is notifying some Canadian consumer telecom customers that their accounts were breached and personal information accessed. The company said the intrusions occurred between February 2025 and June 2026, after an attacker used compromised credentials to…
SecurityWeek -
NCSC Warns of Critical Check Point VPN Flaws Enabling RCE
The Dutch National Cyber Security Centre (NCSC) has warned of two critical vulnerabilities in Check Point VPN products, both rated 9.8 on the CVSS scale. CVE‑2026‑85102 affects the VPN negotiation process and could allow an unauthenticated attacker to bypass…
Security Affairs -
Hackers Exploit JFrog Artifactory Bugs to Install Persistent Backdoors
Threat actors have been exploiting three high-severity vulnerabilities in self-hosted JFrog Artifactory deployments to obtain administrative access and install backdoors, according to cybersecurity firm Wiz. Artifactory is widely used to manage software…
-
Revolut Exposed Customer Data After Fraudulent Government Requests
Revolut has confirmed a data security incident in which attackers impersonated a government body and used an email address from a genuine government domain to send fraudulent information requests. The company supplied sensitive customer data without…
SecurityOnline -
Google’s Artemis Faces Open-Source Attribution Dispute Over Code
Google’s Android automation project, Artemis, has been accused of breaching open-source licence requirements by the team behind mobile-use. Minitap says Artemis reused code released under the Apache 2.0 licence but failed to preserve the required attribution…
SecurityOnline -
OpenAI Agent Swarm Flooded RubyGems With Malicious Packages
Security researchers say an OpenAI agent swarm was behind a cyber-attack on the RubyGems open-source package manager that began on 11 May 2026. The campaign, dubbed “GemStuffer”, flooded the platform with malicious packages and reportedly led RubyGems to…
Infosecurity
