News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 16 Sep· 82 articles
-
Hiscox Report Finds Cyber Attacks Hit 29% of Organisations Worldwide
The Hiscox Cyber Readiness Report 2026 found that 29% of organisations worldwide experienced at least one successful cyber-attack in the 12 months covered by the study. Affected organisations reported an average of four incidents, with attacks costing about…
Infosecurity -
New York Healthcare Provider PMG Reports Data Breach Affecting 282,075 Patients
New York healthcare provider Premier Medical Group (PMG) is notifying 282,075 individuals that attackers accessed files containing personal and medical information. The incident occurred in June, when some of PMG’s systems were disrupted; the provider said…
SecurityWeek -
Google Android2 articles this day · SecurityOnline first
Google Patches Pixel Modem Flaw Exploited in Targeted Attacks · Google Patches Pixel Modem Flaw Exploited in Targeted Attacks
-
Google Patches Pixel Modem Flaw Exploited in Targeted Attacks
Google’s September 2026 Pixel Update Bulletin fixes 110 vulnerabilities, including CVE-2026-58704, which Google says may be under limited, targeted exploitation. The high-severity flaw is in the phones’ cellular modem and results from a logic error that can…
-
Google Patches Pixel Modem Flaw Exploited in Targeted Attacks
Google’s 16 September 2026 Pixel Update Bulletin addresses three Android vulnerabilities, including CVE-2026-58704, which Google says may be undergoing limited, targeted exploitation. The flaw affects the cellular modem firmware and is rated 8.0 under…
-
-
Google and Mozilla Patch 115 Browser Flaws, Including Critical Bugs
Google and Mozilla have released browser updates addressing 115 security vulnerabilities in total. Chrome 153 fixes 42 defects, including three critical issues: CVE-2026-91726, an out-of-bounds read in WebGL, and CVE-2026-91721 and CVE-2026-91749,…
-
Axoflow Pre-Processes Sigma Detections to Cut SIEM Data Volumes
Axoflow has announced AxoDetect, a detection component now available in early access. Introduced during Splunk .conf26 on 16 September 2026, it runs Sigma rules within the security-data pipeline, before data reaches a security information and event…
SecurityOnline -
NightEagle Hackers Hide Exchange Backdoor Behind Stolen VPN Access
Kaspersky’s Global Emergency Response Team says the NightEagle group, also known as APT-Q-95, has targeted businesses in Russia after previously focusing on organisations in Asia. In most investigated incidents, the attackers used stolen valid credentials to…
-
Fake macOS Toolkit Site Uses ClickFix Tactic to Deploy AMOS Stealer
Palo Alto Networks’ Unit 42 has analysed an Atomic macOS (AMOS) stealer infection created in a laboratory on 5 August 2026. The infection began on a website, getmacouscloud[.]com, that claimed to provide instructions for installing a “macOS toolkit”. Users…
unit42.paloaltonetworks.com -
TP-Link Tapo C200 Flaws Expose Camera Feeds to Network Attackers
Security researchers have disclosed two zero-day vulnerabilities in TP-Link’s Tapo C200 security camera, a model used for baby and pet monitoring, home security and small-office environments. OPSWAT said the flaws are CVE-2026-15315 and CVE-2026-15316, both…
-
Microsoft Word Update Crashes Automated Document Workflows
Microsoft has acknowledged an issue affecting Word in Microsoft Office version 2608, build 20326.x. The application can close unexpectedly when third-party document or template-management software creates and populates a document template. Microsoft’s Word…
SecurityOnline -
OpenAI Doubles Codex Sponsorship Places for Open Source Maintainers
OpenAI has begun the second round of its Codex for Open Source sponsorship programme, increasing the number of available places from 5,000 to 10,000. Selected open-source maintainers will receive six months of access to ChatGPT Pro 5x, including Codex…
SecurityOnline -
Acronis Patches Exploited cPanel Backup Flaw Enabling Privilege Gain
Acronis has released urgent patches for a vulnerability in its Backup plugin for cPanel & WHM after detecting exploitation in limited, targeted attacks. The flaw, tracked as CVE-2026-87886 and rated 7.8 on the CVSS scale, involves insecure file permissions…
-
Industrial Devices Hit by Critical Flaws in Shared Firmware
Researchers at Nozomi Networks have identified vulnerabilities in shared firmware used by industrial equipment from Pepperl+Fuchs, Phoenix Contact and Carlo Gavazzi Automation. Affected products include Pepperl+Fuchs ICE2 and ICE3 network modules, Phoenix…
-
Attackers Exploit Critical Issabel PBX Flaw to Run Commands Remotely
The Shadowserver Foundation detected active exploitation of a critical Issabel PBX vulnerability on 9 September 2026. Tracked as CVE-2026-89026, the flaw has a CVSSv3 score of 9.8 and affects Issabel Framework versions before commit…
-
Octopus Deploy Fixes Flaws That Could Enable Remote Code Execution
Octopus Deploy has patched two high-severity vulnerabilities in Octopus Server, its continuous delivery platform. CVE-2026-91778 has a CVSS v4 score of 7.2 and stems from incorrect permission validation, allowing users with certain scoped permission sets to…
-
SE Labs Launches PIVOT to Test Cybersecurity Products Against Hackers
UK security testing provider SE Labs has launched a six-month programme to assess how well cybersecurity products defend against sophisticated threat groups and attack techniques. The PIVOT programme, announced on 15 September 2026, includes Broadcom,…
Infosecurity -
Fake Avast Renewal Pages Harvest Details for Follow-Up Scams
Malwarebytes says scammers are using polished, apparently AI-assisted pages to support antivirus renewal scams. The messages claim a subscription has renewed and direct recipients to a cancellation page, even though no payment or subscription exists. The…
Malwarebytes -
Critical WSO2 Flaw Exploited to Steal API Credentials and Secrets
A critical WSO2 vulnerability patched earlier this year is being exploited in the wild, according to exposure management firm WatchTowr. Tracked as CVE-2026-5430 and rated 10.0 on the CVSS scale, the flaw affects WSO2 API Manager, API Control Plane, Traffic…
-
Iranian Spyware Campaign Targets Dissidents With Chosen Brick Malware
The UK’s National Cyber Security Centre (NCSC), the FBI and the Netherlands’ General Intelligence and Security Service (AIVD) have warned that opponents of Iran’s regime may be targeted by a Tehran-backed spyware campaign. Their advisory, published on 15…
Infosecurity -
CenterPoint Energy Investigates Alleged Theft of 7.49m Customer Records
CenterPoint Energy has confirmed that an unauthorised third party obtained personal information belonging to some of its customers through an external-facing system. The Houston-based utility, which serves about 7 million electricity and gas accounts across…
Security Affairs4d722e4d656f77 -
Oracle Fixes Over 800 Vulnerabilities in September Security Update
Oracle has released its September 2026 Critical Security Patch Update (CSPU), containing 673 new security patches. The fixes address 672 unique CVEs across 17 risk matrices, while Oracle says patches for other flaws resolve more than 130 additional CVEs,…
SecurityWeek -
SloppyRAT Attack Chain Uses ClickFix Lures to Enable Ransomware Operations
Researchers at Zscaler ThreatLabz have analysed SloppyRAT, a remote-access tool linked to suspected ransomware operators and discovered in June 2026. The malware targets Windows endpoints and relies on social engineering rather than a software vulnerability.…
SecurityOnline -
Android Malware Clones Banking Apps to Evade Security Tools
Group-IB researchers have identified Vwork, a malicious Android utility used alongside the Gigabud banking trojan by the GoldFactory cybercrime group. The campaign targets mobile banking users in 11 countries: Brazil, Colombia, Egypt, Indonesia, Laos,…
SecurityOnlineGoldFactory -
Casbaneiro Banking Trojan Targets Latin American Financial Users
FortiGuard Labs has identified a campaign using the Casbaneiro banking trojan against financial consumers in Argentina, Peru, Colombia and Mexico. The suspected Latin American cybercriminal group distributes phishing emails and malicious PDFs posing as court…
SecurityOnline -
WooCommerce Plugin Flaw Lets Attackers Plant Web Shells
Attackers are exploiting a vulnerability in the WooCommerce Wholesale Lead Capture plugin, allowing them to plant PHP web shells on affected sites. This compromise can lead to severe security risks, including unauthorized access and control over the web…
The Hacker News -
Attackers Target WSO2 API Manager with Forged Admin Tokens
The article discusses active exploitation attempts targeting the WSO2 API Manager through JWT bypass using forged admin tokens, highlighting an increasing trend in API security vulnerabilities. Key points include the method of exploitation, potential impacts…
The Hacker News -
OpenAI’s ChatGPT Review Project Leaves Sensitive Chats Exposed to Contractors
A report by 404 Media says OpenAI operates an initiative known as Project Lily, in which hundreds of outsourced prompt reviewers manually read genuine ChatGPT conversations. The reviewers are reportedly asked mainly to assess response style, including…
SecurityOnline -
Google Unveils Voice AI That Speaks 97 Languages and Acts in Background
Google has unveiled two voice-focused AI models, Gemini 3.8 Live and Gemini 3.8 Live Extended Thinking, aimed at real-time conversations and more complex reasoning. The company says Gemini 3.8 Live is designed for large-scale, cost-efficient deployment and…
SecurityOnline -
Googlebook AI laptops debut October 5 with Android-based ChromeOS makeover
Google has announced an “Opening Night” event for 5 October in New York City, where it plans to publicly showcase its new Googlebook laptop range. The announcement follows confirmation that pre-orders will open on 21 September. Acer, ASUS, Dell, HP and…
SecurityOnline -
Apache ZooKeeper Flaws Let Attackers Delete Nodes and Spoof Logs
The Apache Software Foundation has released updates for four Apache ZooKeeper vulnerabilities affecting versions 3.8.0 to 3.8.6 and 3.9.0 to 3.9.5. The flaws could affect distributed coordination clusters used by platforms including Apache Hadoop and Apache…
-
Google’s AI Adds Real-Time Translation Across 70 Languages
Google says its AI technologies and products now support more than 300 languages, potentially reaching up to 7 billion people, or about 86% of the world’s population. In an announcement attributed to senior vice-president James Manyika, the company also…
SecurityOnline -
Google Expands Pixel Scam Detection to Third-Party Chat Apps
Google’s September 2026 Pixel Drop expands scam detection beyond Google Messages to notifications from third-party chat applications. The feature is rolling out in 10 markets: the United States, United Kingdom, Australia, Canada, Singapore, India, Germany,…
SecurityOnline -
CISA Warns of Critical mySCADA Flaw Exposing Industrial Controls
CISA has disclosed two vulnerabilities in mySCADA myPRO Manager, affecting installations running version 2.1 and earlier. CVE-2026-73807 is rated critical, with a CVSS v3 score of 9.8, while CVE-2026-82567 has a score of 6.3. Both are classified as…
-
HPE SD-WAN Flaws Let Attackers Hijack Networks Without Patches
Hewlett Packard Enterprise (HPE) issued a security advisory on 15 September 2026 covering four critical vulnerabilities in the API of its Networking EdgeConnect SD-WAN Orchestrator. The most severe, CVE-2026-76670 and the related CVE-2026-76669, are…
-
ISC Stormcast Reports Green Threat Level for 16 September 2026
The content provides information about the ISC Stormcast for Wednesday, September 16th, 2026, including the handler on duty, Johannes Ullrich, and the current threat level, which is green. It includes links for further engagement such as discussions, classes…
SANS ISC -
Apache Syncope Fixes Six Flaws, Including Critical SQL Injection and Sandbox Escape
The Apache Software Foundation has released fixes for six vulnerabilities in Apache Syncope, an open-source identity-management platform. The flaws affect the 3.0, 4.0 and 4.1 branches: versions 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.7, and 4.1.0-M0…
-
Google Chrome 153 Fixes Critical WebGL Flaw Enabling Code Execution
Google has released Chrome version 153, fixing 42 security defects, including three vulnerabilities highlighted in the report. CVE-2026-91749 is rated critical with a CVSSv3 score of 9.6 and involves an out-of-bounds read in the WebGL component.…
-
Critical Node.js Flaw Lets Attackers Spoof IPs in Express Apps
Security researchers have disclosed CVE-2026-90711, a critical IP-spoofing vulnerability in the Node.js `proxy-addr` package. The flaw is rated 9.1 under CVSSv3 and affects versions before 2.0.8, including version 1.1.0. `proxy-addr` is used by applications…
-
Critical Langflow Flaw Lets Authenticated Users Run Code as Root
IBM X-Force has disclosed two vulnerabilities in Langflow OSS, including a critical flaw rated CVSS 9.6. CVE-2026-12944 affects versions 1.0.0 through 1.10.0 and results from an incomplete security-scanner blocklist. Although dangerous Python modules such as…
-
North Korean Hackers Hide Linux Implant Inside HAProxy Load Balancers
A likely North Korean advanced persistent threat group has targeted South Korean media and automotive organisations, with some compromises reportedly active since early 2025. Rapid7 attributed the activity to North Korean groups with medium confidence,…
Dark ReadingAPT37
