News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 16 Sep· 82 articles
-
Ontario Hospital Confirms Ransomware Attack Encrypted Patient Files
Nipigon District Memorial Hospital in Ontario, Canada, is responding to a ransomware incident affecting its information technology systems. The hospital said in a social-media post that some patient services may be affected, although the supplied report does…
DataBreaches -
CISOs Pour More Money Into AI Despite Unclear Security Returns
Organisations are increasing spending on artificial intelligence (AI) for cybersecurity despite limited evidence that the technology is delivering clear returns. An IANS and Artico survey of more than 500 chief information security officers found that…
Dark Reading -
Cyberattack Knocks International Meteor Organisation’s Site Offline
The International Meteor Organization (IMO), a nonprofit that coordinates and publishes amateur and professional observations of meteors, says a cyberattack has severely disrupted its ageing infrastructure. A message posted on its website on Wednesday said…
Ars Technica -
BambooToken Malware Hides Command and Control Through MQTT Brokers
Lumen’s Black Lotus Labs has detailed BambooToken, a malware family targeting Windows and Linux systems through MQTT, a publish-and-subscribe messaging protocol widely used by smart devices and industrial systems. The researchers believe the campaign was…
Security Affairs -
Cloudflare Uncovers Stealthy JavaScript Attacks on Retail Sites
Cloudflare says its Page Shield machine-learning system detected four malicious JavaScript operations, comprising eight payloads, in live traffic on online retail and tourism sites. Humans verified the findings after automated detection; seven of the eight…
Cloudflare -
Apple Patches 273 Flaws as Screen Sharing Bug Faces Active Attacks
On 14 September 2026, Apple released security updates addressing 273 CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS and iPadOS 27 and 26.7, visionOS 27, watchOS 27, tvOS 27, Safari 27 and Xcode 27. The update includes 134…
-
Cisco Identity Services Engine2 articles this day · SecurityOnline first
Attackers Exploit Cisco ISE Flaw to Bypass Management Interface · Cisco ISE Flaw Exploited to Grant Unauthenticated Root Access
-
Attackers Exploit Cisco ISE Flaw to Bypass Management Interface
CISA added CVE-2026-76460 to its Known Exploited Vulnerabilities (KEV) catalogue on 16 September 2026. The vulnerability affects Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC). Cisco names it the Identity Services…
-
Cisco ISE Flaw Exploited to Grant Unauthenticated Root Access
Cisco warned on 16 September 2026 that attackers are actively exploiting a critical vulnerability in its Identity Services Engine (ISE) and ISE-PIC products. Tracked as CVE-2026-76460, the flaw has a CVSS score of 10.0 and affects releases 3.1 through 3.5…
-
-
Hotel Systems Scanned for Abandoned PIAF-HMS Vulnerabilities
SANS Internet Storm Centre reported on 16 September 2026 that internet scans were targeting applications associated with hotel and hospitality systems. The activity began on 15 September and continued the following day, using the user agent…
SANS ISC -
Judge Orders Radaris Domains Transferred After Privacy Law Case
A New Jersey judge has ordered the transfer of radaris.com and 13 other domains linked to the people-search company Radaris to Atlas Data Privacy Corp. The action followed a lawsuit alleging violations of Daniel’s Law, which allows New Jersey law enforcement…
Krebs on Security -
Cybersecurity Veteran Shares Survival Lessons for a Brutal Job Market
Dark Reading’s Becky Bracken speaks with cybersecurity veteran Hal Pomeranz about career anxiety during what he describes as an “unprecedentedly bad job market”. Pomeranz, an independent consultant specialising in incident response, digital forensics and…
Dark Reading -
Browser Extensions Hijacked AI Assistants in Five Major Browsers
On 16 September 2026, Forever Security disclosed BragJack, a proof-of-concept attack that hijacks built-in AI assistants in five browsers: Google Chrome with Gemini, Microsoft Edge, Opera Neon, Perplexity Comet and Claude in Chrome. Researcher Gal Weizman…
-
Spain’s AEPD Reports First Personal Data Breach Linked to AI Agent
The Spanish Data Protection Agency (AEPD) has published details of what it describes as the first notification of a personal-data breach carried out by design through an AI agent. The investigation is continuing, and the agency has not established exactly…
SecurityWeek -
Leaked Okenit Tool Could Automate Russian Ministry Persona Operations
A leaked cache posted to a darknet forum on 9 October 2025 appears to show “Lemmings”, a Python-based system developed by St Petersburg company Okenit to create and manage synthetic online identities. DomainTools says the material contains internal GitLab…
dti.domaintools.com -
Check Point Patches Critical Flaw Allowing Root Access Without Login
Check Point has released an urgent LivePatch update for CVE-2026-91843, a critical vulnerability in its Security Management and Log Server products. The flaw has a CVSS v3 score of 9.8 and is described as a stack overflow in the unauthenticated login…
-
Critical Issabel Framework Flaw Enables Unauthenticated OS Commands
A recent article highlights a critical vulnerability in the Issabel Framework that allows attackers to execute OS commands without authentication. This flaw poses a significant security risk, as it can be exploited by malicious actors to gain unauthorized…
The Hacker News -
Three Threat Groups Target Russian Enterprises With Destructive Malware
The article discusses the targeting of Russian enterprises by three distinct threat groups employing methods such as backdoors, ransomware, and data wipers. It highlights the growing cybersecurity risks these organizations face and the potential…
The Hacker News -
Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture2 articles this day · SOCRadar first
Attackers Exploit Critical WooCommerce Plugin Flaw to Upload Webshells · Attackers Exploit WooCommerce Plugin Flaw to Upload PHP Web Shells
-
Attackers Exploit Critical WooCommerce Plugin Flaw to Upload Webshells
Attackers are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture plugin for WordPress to upload PHP webshells. Wordfence said its firewall blocked more than 100,000 attempts targeting CVE-2026-27540, which affects the…
-
Attackers Exploit WooCommerce Plugin Flaw to Upload PHP Web Shells
Attackers are actively targeting CVE-2026-27540, a critical unauthenticated arbitrary file-upload vulnerability in Rymera Web Co’s Wholesale Lead Capture Plugin for WooCommerce. The flaw, classified as CWE-434 and rated 9.8 Critical by Wordfence, affects…
-
-
Malicious Extension Hijacks AI Assistants Across Major Browsers
This article discusses a critical vulnerability affecting AI assistants across browsers like Chrome, Comet, Edge, and Opera Neon due to a malicious browser extension. The extension could hijack user interactions, potentially leading to serious security…
The Hacker News -
SecurityWeek Summit Shows Defenders How to Tame Expanding Attack Surfaces
SecurityWeek’s 2026 Attack Surface Management Summit is scheduled for 16 September 2026 as a fully virtual event, running from 11am to 3pm. The summit is aimed at cyber defenders and will focus on identifying, understanding and reducing risks across…
SecurityWeek -
Von der Leyen Warns AI Could Enable Hacking at Unprecedented Scale
European Commission President Ursula von der Leyen warned in her State of the European Union speech on 16 September 2026 that emerging AI models could enable hacking “on a level we never thought possible”. She said such systems could soon be controlled by…
SecurityWeek -
Google Android4 articles this day · CISA first
Actively Exploited Pixel Modem Flaw Bypasses Permission Checks · Google Fixes Exploited Pixel Modem Flaw in September Update
-
Actively Exploited Pixel Modem Flaw Bypasses Permission Checks
CISA added CVE-2026-58704 to its Known Exploited Vulnerabilities (KEV) catalogue on 16 September 2026. The vulnerability affects Google Pixel devices and is an improper authorisation flaw in the cellular modem that may allow attackers to bypass permission…
-
Google Fixes Exploited Pixel Modem Flaw in September Update
Google’s September 2026 Pixel security update fixes CVE-2026-58704, a high-severity cellular modem vulnerability with a CVSS score of 8.0. The flaw is a permission bypass caused by a logic error, potentially allowing remote, proximal or adjacent privilege…
-
Google Patches Pixel Zero Day Exploited in Targeted Attacks
Google has patched a high-severity zero-day in the modem component of Pixel smartphones after observing “limited, targeted exploitation”. Tracked as CVE-2026-58704, the vulnerability results from a logic error that can allow a permission bypass and remote…
-
CISA Warns of Active Exploitation in Google Pixel Vulnerability
CISA added CVE-2026-58704, described as a Google Pixel improper authorisation vulnerability, to its Known Exploited Vulnerabilities (KEV) Catalog on 16 September 2026. The agency said the addition was based on evidence of active exploitation, but did not…
-
-
CISA and NIST Urge One-Hour Limits to Block Cloud Token Theft
CISA and NIST have issued final guidance for protecting cloud identity tokens and assertions from theft, forgery and misuse. Published on 15 September 2026 as NIST Interagency Report 8587, the voluntary guidance is aimed at federal agencies, cloud service…
Infosecurity -
Cisco Warns Attackers Are Exploiting Critical Secure Email Gateway Flaw
Cisco has confirmed active exploitation of CVE-2026-76461, a critical SQL injection vulnerability in the email-parsing logic of AsyncOS Software for Cisco Secure Email Gateway. Rated CVSS 9.8 and classified as CWE-89, the flaw can be exploited remotely…
-
AIUC Raises $40 Million to Certify Enterprise AI Agent Security
AIUC, a San Francisco-based company founded in 2024, has raised $40 million in a Series A funding round, bringing its total investment to $55 million. The round was led by Ribbit Capital, with additional backing from First Harmonic. The company developed…
SecurityWeek -
Hijacked AI Coding Assistant Session Spreads Shai-Hulud to 100 Repositories
In a recent incident reported by The Hacker News, an attacker managed to hijack an AI coding assistant session, leading to the spread of malicious code known as Shai-Hulud across approximately 100 repositories. This raises significant concerns regarding the…
The Hacker News -
Parallels Desktop Flaw Gives Mac Users Root Access, Intel Fix Missing
A recent security vulnerability in Parallels Desktop allows non-admin Mac users to gain root access, but the fix is unavailable for Intel-based Macs. The article emphasizes the importance of timely updates in cybersecurity and the potential risks associated…
The Hacker News -
Italian Government Email Hack Exposes Data on 680 Revolut Users
A suspected compromise of an Italian government certified email (PEC) account may have enabled attackers to impersonate law enforcement and obtain sensitive information on about 680 Revolut customers, according to the Financial Times as cited by Security…
Security Affairs -
Iranian Hackers Use Chosen Brick Malware to Target Dissidents Worldwide
US, UK and Dutch cybersecurity and intelligence agencies have issued a joint advisory about Chosen Brick, a Windows malware family used by Iranian state actors against dissidents, activists and journalists worldwide. The activity has been observed since at…
SecurityWeek -
N0va Phishkit Targets US and EU Businesses in Identity Theft Push
The article reports on the emergence of 'N0va Phishkit,' a phishing toolkit targeting businesses in the US and EU, which poses a significant challenge to identity security. The toolkit employs sophisticated techniques to deceive users and extract sensitive…
The Hacker NewsN0va Phishkit -
Critical WordPress Calendar Flaws Put 200,000 Sites at Risk of Takeover
More than 200,000 WordPress websites may be exposed to takeover attacks through two critical vulnerabilities in The Events Calendar plugin, which has more than 600,000 active installations. Defiant identified the flaws, which affect plugin versions before…
-
AI-Driven BlackHatSect0r Crew Exposed Millions of Hosts and Secrets
SOCRadar says an internet-exposed operation server linked to the French-speaking crew BlackHatSect0r && DXQRTXX contained 4.9GB across 9,299 files, including a Go-based command-and-control platform, a 16,834-entry credential vault and tooling for scanning,…
SOCRadarBlackHatSect0r & DXQRTXX -
Google Patches Pixel Modem Flaw Exploited in Targeted Attacks
Google has addressed a security vulnerability in its Pixel modem, which has shown signs of limited targeted exploitation. The patch comes as a proactive measure to enhance mobile security for its users, ensuring that potential threats are mitigated…
The Hacker News -
Threat Intelligence Alone Cannot Close the Cybersecurity Exploitation Gap
The article discusses the limitations of relying solely on threat intelligence to close the exploitation gap in cybersecurity. It emphasizes the importance of combining threat intelligence with effective security validation methods to accurately gauge what…
The Hacker News -
Hackuity Raises $19 Million to Expand AI Vulnerability Operations Platform
French vulnerability management company Hackuity has raised $19 million in a funding round led by Forgepoint Capital, taking its total funding to $38 million. The Lyon-based company said it will use the investment to accelerate development of its…
SecurityWeek -
Acronis cPanel Backup Flaw Exploited in Targeted Cyberattacks
The article discusses the recent exploitation of a vulnerability in the Acronis cPanel Backup Plugin, which has led to targeted cyberattacks. Key points include details about the nature of the vulnerability, the potential consequences for affected systems,…
The Hacker News
