News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 22 Sep· 83 articles
-
AI Agents Are Reshaping Lateral Movement in Enterprise Networks
The article discusses how AI agents are changing the dynamics of lateral movement in cybersecurity. It highlights the expansion of AI agent capabilities within enterprises and the security challenges that arise due to their growing access to sensitive…
The Hacker News -
Critical VeloCloud Orchestrator Flaw Is Being Exploited in Attacks
A critical security vulnerability in the VeloCloud Orchestrator has been identified, with a CVSS score of 10.0, indicating severe risk. The flaw is actively being exploited in certificate-based setups, raising concerns for network security. This highlights…
The Hacker News -
Most OT and Medical Devices Share Networks, Forescout Finds
Research from Forescout’s Vedere Labs suggests that most organisations using operational technology (OT) or connected medical devices do not keep those systems on dedicated network segments. The researchers analysed 47,700 segments containing more than 2.5…
SecurityWeek -
Rockwell Survey Finds Cyber Incidents Threaten Industrial Growth
A Rockwell Automation report based on survey responses from industrial and manufacturing decision-makers says more than one-third of organisations view cybersecurity risk as one of the biggest external obstacles to growth. The findings, released on 22…
Dark Reading -
Forescout Finds OT and Medical Devices Sharing Networks with IT
Nearly half of network segments containing operational technology (OT) or medical devices (IoMT) also include IT and internet of things (IoT) equipment, potentially widening organisations’ attack surfaces and enabling lateral movement, according to security…
Infosecurity -
CISA Warns of Critical Siemens Industrial Edge Account Takeover Flaw
CISA has warned of a critical authentication bypass in Siemens Industrial Edge Management that could enable an unauthenticated remote attacker to take over user accounts. Tracked as CVE-2026-18963, the flaw affects the reset-credentials process in the…
-
Zyxel GS1900-48HPv2 firmware2 articles this day · Security Affairs first
Chinese Hackers Exploit Zyxel Switch Flaw to Steal Credentials · CISA Flags Zyxel Switch Flaw Enabling Unauthenticated Code Execution
-
Chinese Hackers Exploit Zyxel Switch Flaw to Steal Credentials
A Chinese threat actor has exploited a recently disclosed vulnerability in Zyxel GS1900 switches to steal sensitive information, according to threat intelligence firm GreyNoise. Tracked as CVE-2026-7273 and rated 8.8 on the CVSS scale, the flaw is a…
-
CISA Flags Zyxel Switch Flaw Enabling Unauthenticated Code Execution
The US Cybersecurity and Infrastructure Security Agency (CISA) has added a Zyxel GS1900 Series switch vulnerability, tracked as CVE-2026-7273 and rated 8.8 by CVSS, to its Known Exploited Vulnerabilities catalogue. The flaw is a stack-based buffer overflow…
-
-
DORA Year Two Puts SOC Visibility Under the Spotlight
The article titled "DORA Year Two: Can Your SOC Actually See the Attack?" published on September 22, 2026, discusses the importance of visibility for Security Operations Centers (SOCs) in detecting cyberattacks. It emphasizes the need for advanced monitoring…
The Hacker News -
Linux Kernel Flaw Lets ARM64 KVM Guests Access Host Memory
A recent vulnerability has been discovered in the Linux kernel, allowing ARM64 KVM guests unauthorized read-write access to the host memory. This flaw poses significant risks for virtualization security as it can potentially be exploited by malicious…
The Hacker News -
Malicious NPM Package Hits 2 Million Downloads in Supply Chain Attack
The NPM ecosystem has been hit by an ongoing supply-chain campaign involving the malicious package `indexed-btree`, according to Checkmarx. The package imitates the legitimate `sorted-btree` utility and reached 2 million weekly downloads before detection.…
SecurityWeek -
Critical SharePoint Flaw Lets Authenticated Attackers Run Code Remotely
The article discusses a critical vulnerability in SharePoint, initially identified as a spoofing issue by Microsoft, which allows authenticated remote code execution (RCE). The update highlights the potential security risks associated with this flaw and…
The Hacker News -
Muse AI Zero Day Could Turn Macs Into Backdoors via Stolen Tokens
Mac security researcher Patrick Wardle has found a zero-day in Meta’s Muse AI assistant that could allow an attacker to turn it into a powerful backdoor. According to Malwarebytes, Muse’s locally running macOS application has an undocumented configuration…
Malwarebytes -
AI Drives 300% Bot Surge as API Attacks More Than Double
AI helped drive a 300% increase in bot traffic during the past year, particularly affecting the commerce sector, according to Akamai’s latest *State of the Internet* report, published on 22 September 2026. The report draws on threat intelligence from…
Infosecurity -
WordPress Fixes Click2Shell Bug Enabling Theme Based RCE Attacks
WordPress has patched 11 vulnerabilities, including a potentially serious flaw dubbed Click2Shell that could enable remote code execution (RCE). The issue has no CVE identifier. WordPress said specially crafted URLs could automatically install and preview…
SecurityWeek -
Veeam Backup and Replication2 articles this day · SecurityOnline first
Public Exploit Lets Local Users Gain SYSTEM Access on Veeam Agent · Veeam Windows Agent Flaw Exploited to Gain SYSTEM Access
-
Public Exploit Lets Local Users Gain SYSTEM Access on Veeam Agent
A public proof-of-concept exploit for CVE-2026-32996 was released on 14 September 2026, exposing a critical local privilege-escalation flaw in Veeam Agent for Microsoft Windows. The vulnerability affects version 13.0.1.2067 and all earlier version 13 builds.…
-
Veeam Windows Agent Flaw Exploited to Gain SYSTEM Access
Veeam Agent for Microsoft Windows vulnerability CVE-2026-32996 is reportedly being exploited in the wild, with public technical details and proof-of-concept code now available. Arctic Wolf researchers confirmed the active exploitation, according to the…
-
-
Claude-Powered Researchers Used Discourse Flaw to Reach OpenAI Code
Researchers at cybersecurity company Hacktron used Anthropic’s Claude to demonstrate a chain of vulnerabilities that gave them access to an internal OpenAI software repository. The work was conducted as ethical security research, and the researchers say they…
Malwarebytes -
Malicious npm Package Hid Its Loader in Runtime Code Before Removal
On September 22, 2026, The Hacker News reported on a malicious npm package named "indexed-btree" which disguised its loader within runtime code prior to its removal. This incident highlights ongoing concerns about supply chain attacks and malware impacting…
The Hacker News -
Gartner Urges CISOs to Rethink Incident Plans as Deepfakes Rise
Gartner has warned that chief information security officers (CISOs) need to update incident-response plans to address multimodal deepfakes and AI-driven social engineering. Findings from its *AI-driven Social Engineering Attacks* report, based on a survey of…
Infosecurity -
Microsoft Update Disrupts File History Backups on Windows 10 and 11
Microsoft has confirmed that its September update has disrupted File History on Windows 10 and Windows 11. The built-in backup feature can no longer create or update file backups on affected systems, even when the destination drive or network-attached…
SecurityOnline -
WageMole2 articles this day · Security Affairs first
North Korean Fake Jobs Infected 30,000 Devices and Stole $10.7m · North Korean Fake Job Interviews Infect 30,000 Devices Worldwide
2 outlets-
North Korean Fake Jobs Infected 30,000 Devices and Stole $10.7m
Law enforcement and intelligence agencies from Japan, the United States, Australia and Germany have attributed a long-running fake recruitment operation to a North Korean group known as WaterPlum, also called Contagious Interview. According to their joint…
SecurityWeek -
North Korean Fake Job Interviews Infect 30,000 Devices Worldwide
A North Korea-linked group known as WaterPlum, or Contagious Interview, has infected at least 30,000 devices in more than 100 countries through fake job interviews, according to a joint advisory published on 18 September by Japan’s National Police Agency,…
Security Affairs
-
-
Amazon Blocks Meta’s Muse AI Assistant Over Shopping Security Risks
Amazon has deployed detection mechanisms to identify Meta’s Muse artificial intelligence assistant and block it when it attempts to shop on a user’s behalf. Blocked users are redirected to a dedicated warning screen, preventing Muse from carrying out…
SecurityOnline -
MovieReaper Malware Hides in Torrents to Steal Files Worldwide
Kaspersky has identified MovieReaper, a modular malware framework distributed through malicious torrent downloads. Attackers compromised the itorrents.org repository, meaning booby-trapped files can be delivered through multiple tracker websites. The payload…
SecurityOnline -
SideCopy Targets Indian Universities in ReverseRAT Espionage Campaign
The article discusses the recent cybersecurity threats posed by SideCopy, a threat group that has expanded its operations in India by targeting academic institutions through spear-phishing tactics using ReverseRAT malware. It emphasizes the rise of cyber…
The Hacker NewsSideCopy -
APT36 Uses Fake News Sites to Target India and Afghanistan Governments
APT36, also known as Transparent Tribe, has launched a campaign dubbed Operation RapidRust against government and defence organisations in India and Afghanistan, according to Zscaler ThreatLabz. The suspected Pakistan-nexus group used typosquatted domains…
SecurityOnlineOperation C-Major -
Critical Meta Muse Flaw Could Turn AI Assistant Into a Backdoor
The article discusses a critical vulnerability in AI assistants, specifically the Meta Muse setting that could allow attackers to exploit the AI as a backdoor for unauthorized access. It emphasizes the increasing risk associated with AI technologies and…
The Hacker News -
Iran-Linked Handala Hack Uses HEAVYGRAM to Hijack Telegram Accounts
Group-IB researchers have identified 29 new samples of HEAVYGRAM, a malware family targeting Iranian dissidents, Farsi-language journalists and academics. The campaign is associated with Handala Hack, which analysts assess with moderate confidence to be an…
SecurityOnlineHandala -
WordPress Comment2Shell Flaw Lets Anonymous Users Execute Code
The article discusses a security vulnerability in WordPress's Comment2Shell feature, allowing anonymous comments to lead to Remote Code Execution (RCE) through an admin session. The flaw, identified on September 22, 2026, presents significant risks for…
The Hacker News -
Attackers Exploit Zyxel and Veeam Flaws for SYSTEM Access
The article discusses the active exploitation of vulnerabilities identified in Zyxel and Veeam systems, highlighting their severity that allows command and SYSTEM-level access. It emphasizes the importance of cybersecurity measures to prevent such…
The Hacker News -
ISC Stormcast Reviews September’s Green-Level Cyber Threats
The page provides information about the ISC Stormcast for September 22nd, 2026, featuring handler Didier Stevens and indicating a current threat level of green. It includes links to previous diaries, discussions, and SANS classes taught by Johannes Ullrich,…
SANS ISC -
Arista Warns Attackers Are Exploiting Critical VeloCloud Flaw
On 22 September 2026, Arista Networks warned that attackers were actively exploiting CVE-2026-93952, a critical vulnerability in on-premises VeloCloud Orchestrator. The flaw has a CVSS score of 10.0. Arista said it was discovered externally and was being…
-
OpenAI plans AI agents to rival Grok Bot and Meta’s Muse
SecurityOnline, citing a report from The Information, says OpenAI is developing new features in response to competition from SpaceXAI’s Grok Bot and Meta’s Muse. The report says Grok Bot, launched in August, has dedicated cloud-computing resources and can…
SecurityOnline -
Suspected Chinese Actor Exposed 18,566 Government Records in Campaign
GreyNoise and Acronis researchers have linked a suspected Chinese-speaking threat actor to a campaign exploiting WordPress and other internet-facing systems. On 22 July 2026, the operator reportedly used a two-stage chain involving CVE-2026-63030 and…
-
X Sues Bitcoin Content Farm Over $278,000 Engagement Fraud
X is suing operators of a Bitcoin-focused content farm, alleging that they manipulated engagement metrics to obtain $278,000 in creator revenue. According to the company’s complaint, numerous accounts were coordinated to repost and like one another’s posts,…
SecurityOnline -
Google Fined €403 Million Over Unlawful Location Data Processing
Ireland’s Data Protection Commission (DPC) has fined Google €403 million (approximately US$463 million) over its processing of users’ location data and ordered the company to change its practices within six months. The decision follows a six-year…
SecurityOnline -
US Proposes AI Incident Alerts with China to Curb Security Risks
US Treasury Secretary Scott Bessent said on Sunday that the United States had proposed a new “notification mechanism” with China for artificial intelligence incidents that could affect national security. The proposal was discussed during weekend talks in New…
SecurityWeek -
D-Link Routers Exposed to Critical DHCP and L2TP Attacks
Security researchers have disclosed two vulnerabilities in D-Link DIR-822A routers running firmware A_101, along with functional proof-of-concept code. CVE-2026-86296 is a stack-based buffer overflow in the udhcpcd DHCP server and is rated CVSS 10.0, while…
-
Pega Warns of Critical SAML Flaws Affecting Platform Customers
Pega disclosed two SAML authentication flaws in Pega Platform on 18 September 2026: one rated Critical with a CVSS score of 9.5 and another rated High at 7.0. The vendor tracks the issue internally as advisory P26; no CVE has been assigned. Pega said it is…
SecurityOnline
