News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 17 so far |
Wed 30 Sep· 79 articles
-
AI Coding Agents Exposed 13,000 Images Across 300 Organisations
Glow, a cybersecurity firm, reports that AI coding agents tasked with showing code changes in reviews accidentally exposed more than 13,000 internal images from developers at 300+ organisations. The data include customer billing records and screen captures…
The Hacker News -
Fake ChatGPT CustomGPT Campaign Uses ClickFix to Deploy RATs
Cybercriminals have fused a legitimate ChatGPT feature with the ClickFix technique to deliver malware, according to Huntress. The campaign leverages CustomGPTs—personalised ChatGPT instances that follow specific instructions—to impersonate real products and…
Infosecurity -
Study Finds Car Apps Share Driver Data With Advertisers and Brokers
A Northeastern University study, conducted with Consumer Reports, tested 21 cars from 19 brands and 30 companion apps across model years 2022–2025, observing network activity while vehicles were stationary, driven, and via their apps. The researchers found…
Malwarebytes -
Anthropic Warns AI Agents Could Trigger Irreversible Legal Liability
Anthropic has flagged unsettled liability questions surrounding AI agents in its stock market prospectus, warnings echoed as OpenAI faces a hacking-related lawsuit. The firm argues that autonomous agent actions could lead to real-world harm through errors,…
SecurityWeek -
Cloudflare Plans Quantum-Proof TLS Certificates for 2027
Cloudflare has announced plans to issue quantum-proof TLS certificates as part of a wide‑ranging overhaul of the web’s public key infrastructure (WebPKI). The move would see Cloudflare operate a post‑quantum variant of certificates known as Merkle Tree…
Ars Technica -
Star Blizzard’s RedFlick Phishing Chain Needs One Click to Deploy Malware
Microsoft reports that Russian state‑backed APT Star Blizzard has refreshed its TTPs to evade detection, expanding large‑scale phishing campaigns and a new RedFlick infection chain that requires only a single user action for malware execution. In attacks…
SecurityWeekCallisto -
CSuite Phishing Campaign Steals Microsoft 365 Sessions and Installs Remote Access Tools
ANY[.]RUN researchers have traced a US-focused CSuite phishing campaign that, in analysis of 351 sandbox sessions, yielded a majority of submissions from the United States (51%), with exposure concentrated in technology, manufacturing, government and…
The Hacker News -
FBI Urges ShinyHunters Members to Turn Informant After Arrest
The FBI has urged members of the ShinyHunters hacking collective to come forward following the arrest of a suspected leader, Pepijn van der Stap, in the Netherlands on 15 September while on probation for earlier hacking and extortion offences. Dutch police…
SecurityWeekShinyHunters -
Attackers Turn ChatGPT Custom GPTs into RAT Delivery Traps
Threat actors have exploited ChatGPT’s Custom GPT feature and related Google Sites click-through to deliver a multi-stage remote access trojan (RAT), according to Huntress researchers. In at least 40 incidents, victims were lured by a fake Custom GPT page on…
Security Affairs -
OpenAI Launches $500 Pro Tier While Cutting Limits for Existing Users
OpenAI used its DevDay 2026 to unveil a new top-tier subscription, Pro 500, priced at $500 per month and aimed at power users demanding maximum computational speed. The company simultaneously reduced privileges for the existing $200 Pro plan: in Codex and…
SecurityOnline -
Firefox Redesign Brings Back Compact Mode and Adds AI Off Switch
Mozilla has rolled out a redesigned Firefox interface after months of Nightly testing, with the update reaching desktop and mobile users globally. The refresh modernises the look, reintroducing classic features that had been removed and emphasising a balance…
SecurityOnline -
Apple iOS and iPadOS3 articles this day · SecurityOnline first
Apple Patches CoreGraphics Zero Day Exploited in Targeted iPhone Attacks · CISA Flags Exploited Apple Graphics Flaw Affecting iPhones and Macs
-
Apple Patches CoreGraphics Zero Day Exploited in Targeted iPhone Attacks
Apple has released a security update for a zero-day in CoreGraphics that it says may have been exploited in an extremely sophisticated attack. The flaw is tracked as CVE-2026-86950, with Apple noting that processing a maliciously crafted file could lead to…
-
CISA Flags Exploited Apple Graphics Flaw Affecting iPhones and Macs
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added Apple CVE-2026-86950, a flaw in CoreGraphics, to its Known Exploited Vulnerabilities (KEV) catalog. Described as an out-of-bounds write that can lead to arbitrary code execution when…
-
Google Gemini Turns Find Hub Into a Memory Based Valuables Tracker
Google Gemini is being paired with Google’s Find Hub to create a memory-based tracking system for important documents and valuables. The piece describes an approach in which semantic memory — rather than physical device positioning — underpins item tracking.…
-
-
Critical Apache PLC4X Flaw Enables OPC UA Server Impersonation
A critical flaw in the Apache PLC4X OPC UA driver has been disclosed as CVE-2026-102508, with a CVSS v4 score of 9.2. The advisory notes that an attacker positioned between a client and server could impersonate the OPC UA server and read, forge or modify…
-
OpenAI Launches Dots, AI Assistants That Work Around the Clock
OpenAI has unveiled Dots, a persistent AI assistant described as online and operational around the clock. Marketed as proactive, Dots can perform tasks in the background and even initiate actions, such as sending a forgotten invoice after the user grants…
SecurityOnline -
Citrix NetScaler ADC3 articles this day · The Hacker News first
Attackers Exploit Citrix NetScaler Flaw to Deploy Root Web Shells · Citrix NetScaler Zero Day Gives Attackers Tunnels Into Internal Networks
-
Attackers Exploit Citrix NetScaler Flaw to Deploy Root Web Shells
Unknown threat actors have been observed exploiting a newly patched flaw in Citrix NetScaler ADC and NetScaler Gateway appliances to target organisations in North America and Europe. The activity, detected by Mandiant Consulting and Google Threat…
-
Citrix NetScaler Zero Day Gives Attackers Tunnels Into Internal Networks
Mandiant and Google Threat Intelligence Group (GTIG) have detailed active exploitation of a Citrix NetScaler zero-day affecting the NetScaler ADC and Gateway appliances, tracked as CVE-2026-88772 (with a CVSS of 9.5) and CVE-2026-88771. The campaigns,…
-
NetScaler Flaw Exploited to Gain Root Access Before Authentication
Citrix NetScaler ADC and NetScaler Gateway have been widely exploited in the wild after a critical flaw, CVE-2026-88772, was patched. The memory overflow flaw lies in how the Datagram Transport Layer Security (DTLS) handling works inside the NetScaler Packet…
-
-
AI Coding Agents Expose 13,000 Internal Screenshots on GitHub
Glow Labs has exposed more than 13,000 internal screenshots by fault of AI coding agents that uploaded images to public GitHub repositories. The firm flags this as PixelLeak, linking the leak to developers at over 300 organisations. The exposed data spans…
SecurityOnline -
OpenSSL2 articles this day · SecurityWeek first
OpenSSL DTLS Flaw Can Leak Memory or Crash Clients and Servers · OpenSSL and WolfSSL Patch Flaws Threatening TLS Authentication
-
OpenSSL DTLS Flaw Can Leak Memory or Crash Clients and Servers
OpenSSL has disclosed a high-severity vulnerability in its DTLS implementation that can cause a heap memory leak to the peer or crash the vulnerable process. Tracked as CVE-2026-84782, the flaw occurs when a DTLS handshake message is being resent while a…
-
OpenSSL and WolfSSL Patch Flaws Threatening TLS Authentication
OpenSSL and WolfSSL have released patches addressing roughly a dozen vulnerabilities in each library. In OpenSSL, 14 issues were fixed, with one classified as high severity: CVE-2026-84782. This flaw could allow a remote, unauthenticated peer to obtain…
-
-
Nigerian Fraudsters Hijack .edu Accounts for University Job Scams
In a UK-facing write‑up of Proofpoint research, Nigerian-linked fraudsters are described as hijacking .edu accounts to push university job scams across the United States. The operation begins with credential phishing aimed at stealing login details, then…
SecurityOnline -
OpenAI Targets Enterprise Teams With New ChatGPT Workspaces
OpenAI has used its DevDay 2026 to signal a big shift towards the enterprise collaboration market. The company announced ChatGPT Space, a shared workspace designed to keep the end‑to‑end creative lifecycle inside OpenAI’s ecosystem, with enterprise…
SecurityOnline -
America.gov Launches AI Chatbot for US Government Services
America[.]gov has launched an official AI chatbot that uses Gemini and Grok, positioning it as a single digital front door to US government services. The system currently operates as a natural language question-and-answer interface that extracts answers from…
SecurityOnline -
SVG Phishing Surges as Attackers Hide Malware in Image Files
Symantec logged a sharp resurgence in SVG phishing attacks in August 2026, with 26,433 malicious SVG files blocked. The firm notes that this spike follows a quiet first half of the year and places SVGs among the top three malicious attachment types now seen…
SecurityOnline -
Ransomware-Linked Malware Hits South Africa’s Air Traffic OT Network
South Africa’s Air Traffic and Navigation Services (ATNS), the state-owned organisation that runs air traffic control and weather operations for around 10% of global airspace, says ransomware-linked malware was detected in an operational technology (OT)…
Dark Reading -
Azure Ransomware Attack Wiped Cloud Tenants and Stole Storage Keys
Microsoft Security researchers link the JADEPUFFER Azure attack, tracked by Microsoft as Storm-3168, to an agentic ransomware operation that leveraged compromised Azure service principals to wipe a cloud tenant and harvest storage keys in June 2026. The…
SecurityOnlineJadePuffer -
TeamViewer Fixes Five Flaws That Could Enable Remote Code Execution
TeamViewer has disclosed five high-severity vulnerabilities affecting its Full Client and Host across Windows, Linux and macOS, with the most severe rated CVSS 8.8. The flaws, tracked as CVE-2026-92370 (8.8), CVE-2026-19743 (7.8), CVE-2026-92368 (7.8),…
-
Five Electron Flaws Let Untrusted Content Escape App Protections
Five high-severity vulnerabilities in the Electron framework were published by the Electron maintainers on 29 September 2026, with CVSS scores ranging from 7.4 to 8.3. All flaws allow untrusted content to escape a sandbox, an origin boundary, or a privilege…
-
HPE Patches Critical Flaws Enabling Remote Code Execution in Wi-Fi Access Points
HP E has disclosed 18 vulnerabilities in its Instant ON access points, with five deemed Critical. The most severe flaws are CVSS 9.8 issues, CVE-2026-76721 and CVE-2026-76722, both not yet exploited at the time of the advisory. The batch also includes two…
-
WatchGuard Patches Firebox Flaws Enabling Unauthenticated Remote Code Execution
WatchGuard has released patches for 14 vulnerabilities in its Fireware OS, affecting Firebox firewalls. The most severe flaw is CVE-2026-86131, a code injection vulnerability in the BOVPN Over TLS client that can enable remote code execution with a CVSS v4…
-
VUSec Details BTR Spectre Attack That Can Leak Linux Kernel Secrets
Researchers at VUSec have released full details and proof-of-concept code for Branch Target Reuse (BTR), a Spectre-v2 variant that targets just-in-time (JIT) compilers. The end-to-end Linux kernel exploit demonstrated leaking data from kernel memory at…
-
GeoServer Cloud Fixes GitHub Actions Flaw Exposing Repository Secrets
GeoServer’s Cloud project fixed a critical flaw in its GitHub Actions workflow that could have allowed an outside contributor to run code on the build runner and exfiltrate repository secrets. The issue resided in the geoserver-cloud repository’s CI…
SecurityOnline -
SANS Internet Storm Center Reports Green Threat Level on 30 September
The SANS Internet Storm Center diary for September 30, 2026, features Johannes Ullrich as the handler on duty, with a current threat level of green. The page includes links to previous entries, podcasts, and information about classes taught by Ullrich at…
SANS ISC -
Critical Podman Flaw Lets Images Override Container Sandboxing
Podman has a critical vulnerability, CVE-2026-94603, that can let a container image disable or override sandboxing when started with podman run. The advisory assigns a CVSSv3 score of 10.0 and notes that the issue stems from a checkpoint annotation carried…
-
Trump Unveils Voluntary AI Safety Accord as Experts Warn of Gaps
President Donald Trump claimed on 29 September 2026 that he and a group of leading artificial intelligence company leaders had signed a voluntary accord aimed at “self-policing” AI development. The meeting at the White House was marketed as addressing public…
SecurityWeek -
JupyterLab Desktop Flaw Enables Code Execution via Malicious URLs
A security report on JupyterLab Desktop describes a vulnerability, CVE-2026-102530, that allows remote code execution when a user connects to a malicious server URL. The flaw arises from the Connect to Remote Server dialog not sanitising server URLs,…
-
Cybersecurity Incident Hits Prisoner Health Records in Boston Jails
A cybersecurity incident has affected the electronic health record system used for prisoner medical records in Suffolk County, Massachusetts. The system is operated by Computer Systems Integrated Inc. (CSII), which runs the EHR platform that stores prisoner…
DataBreaches
