News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Fri 18 Sep· 59 articles
-
PhantomRaven npm Package Highlights AI’s Growing Malware Risk
The article discusses the emergence of a malicious npm package called PhantomRaven, allegedly created by a self-identified bug bounty hunter using a large language model (LLM). The report highlights the implications of AI in cybersecurity, particularly how…
The Hacker News -
Critical Orkes Conductor Flaw Lets Attackers Run Commands Without Login
A critical, unauthenticated remote-code-execution vulnerability in Orkes Conductor is being exploited in attacks. Tracked as CVE-2026-58138 and rated 9.8 (critical) by CVSS, the flaw affects the open-source framework used to orchestrate microservices,…
-
Four Linux Kernel Flaws Expose Systems to Root Takeover Attacks
A researcher disclosed four Linux kernel privilege-escalation vulnerabilities on 18 September 2026, with public proof-of-concept exploits available for each. CVE-2026-80844, CVE-2026-81000 and CVE-2026-68121 are rated 7.8 where scored, while CVE-2026-74469…
-
China Linked PAPERMILL Campaign Uses Tax Phishing to Deploy VenomRAT
JUMPSEC’s Detection and Response Team has identified PAPERMILL, a suspected China-nexus cybercrime cluster targeting enterprises, particularly organisations in India. The campaign uses phishing emails carrying .img disk images disguised as urgent tax…
SecurityOnline -
Manufacturing Ransomware Victims Surge 40% as Europe Bears Brunt
Manufacturing organisations accounted for 22% of all ransomware victims between April 2025 and March 2026, according to a Black Kite study, making the sector the most targeted for the fifth consecutive year. Disclosed incidents in manufacturing rose by about…
Infosecurity -
checkpoint Quantum Security Management2 articles this day · SecurityWeek first
Check Point Fixes Critical Flaw Allowing Root Code Execution · Check Point Fixes Critical Flaw Enabling Root-Level Code Execution
-
Check Point Fixes Critical Flaw Allowing Root Code Execution
Check Point has fixed CVE-2026-91843, a critical vulnerability with a CVSS score of 9.8 affecting its Security Management and Log Servers. The flaw could allow an unauthenticated attacker to execute arbitrary code with root privileges over the network.…
-
Check Point Fixes Critical Flaw Enabling Root-Level Code Execution
Check Point, Kaspersky and Tanium have patched serious vulnerabilities in their security products, including flaws that could enable remote code execution. Check Point disclosed CVE-2026-91843, a critical vulnerability affecting its Security Management and…
-
-
Fake bpost Sites Demand €4.95 While Stealing Banking Details
A parcel-delivery phishing campaign is impersonating courier services worldwide, including Belgium’s bpost, to steal personal and financial information. In the campaign analysed by Malwarebytes, emails claimed a package could not be delivered because €4.95…
Malwarebytes -
AI DLP Startup MIND Raises $72 Million to Secure Data in Motion
Seattle-based data loss prevention startup MIND has raised $72 million in a Series B funding round, taking its total funding to $112 million. Crosspoint Capital Partners led the investment, with existing backers YL Ventures and Paladin Capital Group also…
SecurityWeek -
Chinese Cybercrime Syndicate Uses Dubai Payment Gateways to Test Stolen Cards
Recorded Future’s Insikt Group has identified Tajin Group, a suspected Chinese-speaking cybercriminal syndicate, as a vendor operating on Chinese-language “guarantee” marketplaces. The group is linked to phishing, payment-card theft and money laundering,…
SecurityOnlineTajin Group -
Spain Reports First AI Agent Attack on Personal Data, AEPD Says
Spain’s Data Protection Agency (AEPD) has reported what it describes as the country’s first personal-data breach caused by an attack carried out using an AI agent. In a report submitted by an unnamed organisation and described on 14 September, an…
Dark Reading -
Google Patches Two Critical Chrome Flaws That Enable Code Execution
Google released Chrome security updates on 17 September 2026 to address 16 vulnerabilities. The flaws include two described as critical: CVE-2026-93374, a use-after-free issue in the Dawn graphics library, and CVE-2026-93372, a buffer overflow in WebGL. Both…
-
RatHat Android Malware Survives Uninstall Through ADB Access
The article discusses the RatHat Android malware, which exploits the Android Debug Bridge (ADB) to maintain shell access even after being uninstalled. This malware poses significant risks to Android devices, as it retains control and can execute commands…
The Hacker News -
Dokploy Flaw Lets Authenticated Users Execute Commands as Root
Dokploy has a critical operating-system command-injection vulnerability, tracked as CVE-2026-72878 and vulnerability note VU#280377. The flaw affects self-hosted Platform-as-a-Service environments and allows authenticated users to run shell commands as root.…
-
GhostCode Phishing Kit Hijacks Microsoft Device Codes to Breach Firms
Researchers at eSentire’s Threat Response Unit (TRU) have identified a phishing kit dubbed GhostCode that abuses Microsoft’s OAuth 2.0 device authorisation flow to target enterprise sales teams and service providers in North America. The unidentified,…
SecurityOnline -
New HTTP QUERY Method Could Bypass Web Defences and Caches
In June 2026, the IETF published RFC 10008, defining QUERY, the first new standard HTTP method since PATCH in 2010. QUERY is intended to sit between GET and POST: it is safe, idempotent and cacheable, but places the query in the request body rather than the…
SANS ISC -
Critical pgAdmin Flaw Lets Attackers Log In as Administrators
A critical authentication-bypass vulnerability in pgAdmin 4, tracked as CVE-2026-86863 and rated 9.8 (CVSSv3), affects releases from 6.2 through 9.17 when Webserver authentication is enabled. The flaw allows a remote user who can reach pgAdmin to forge an…
-
WordPress 7.1.1 Fixes 11 Flaws, Including Unauthenticated XSS
WordPress 7.1.1 is a maintenance and security release addressing 11 vulnerabilities in versions before 7.1.1. The fixes include several stored cross-site scripting (XSS) issues, including one in the `wpautop()` function that could allow an unauthenticated…
SecurityOnline -
ISC Stormcast September 18, 2026 Edition Reports Green Threat Level
The ISC Stormcast for September 18, 2026, features handler Xavier Mertens, with the current threat level rated as green. The page includes links to previous and next entries in the diary, as well as additional resources including details about classes taught…
SANS ISC
