News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Thu 8 Oct· 75 articles
-
Microsoft launches PQC TLS pilot to test post-quantum certificates
Post-quantum authentication is moving from theory to concrete testing, with Microsoft launching a PQC TLS Pilot Program to help certificate authorities evaluate interoperability and operational readiness in controlled environments. Key focus is on how…
Microsoft -
AWS AgentCore flaw let one chatbot prompt expose an entire account
A now-patched vulnerability in AWS Bedrock’s AgentCore could allow a single prompt to a public-facing AI chatbot to seize control of an entire AWS account’s AgentCore deployment. Researchers from Zenity Labs demonstrated that agents deployed via Bedrock…
Dark Reading -
Let’s Encrypt will cut certificate lifetimes to 64 days in 2027
Let’s Encrypt plans to reduce the lifetime of free SSL/TLS certificates from 90 days to 64 days, with the new 64‑day window taking effect from 10 February 2027. The move continues the organisation’s drive toward automated certificate management.…
Ars Technica -
Italy’s Foreign Ministry Fends Off Website Attack as DDoS Risk Looms
Italy’s Foreign Ministry says its website is currently under attack, with its protection systems mitigating the incident so far and no disruption reported. The ministry is monitoring the situation alongside the Polo Strategico Nazionale, the national cloud…
Security Affairs -
US arrests alleged ATM jackpotting architect over $5.1 million heist
US authorities have arrested and arraigned a 50-year-old Venezuelan member of the Tren de Aragua (TdA) cartel, Anibal Alexander Canelon Aguirre, on charges related to an ATM jackpotting scheme that used Ploutus-D malware to compromise cash machines and…
Dark ReadingTren de Aragua -
StepSecurity Maps AI Agent Skills to Expose Supply Chain Risks
StepSecurity has introduced two complementary inventories to map AI agent skills in your development environment: on developer machines through Dev Machine Guard, and in GitHub repositories via an Agent Skills page under GitHub. The Dev Machine Guard view…
StepSecurity -
CISA Flags Actively Exploited ProFTPD Flaw That Exposes Files
CISA added CVE-2015-3306, the ProFTPD Improper Access Control Vulnerability, to its Known Exploited Vulnerabilities (KEV) catalogue on 8 October 2026. The vulnerability affects ProFTPD and could let remote attackers read and write arbitrary files using the…
-
CISA Flags Actively Exploited ONLYOFFICE Flaw That Could Enable Remote Code Execution
CISA added CVE-2021-3199 to its Known Exploited Vulnerabilities (KEV) catalogue on 8 October 2026. The vulnerability affects ONLYOFFICE Docs and is a path traversal flaw in ONLYOFFICE Docs Server that could allow remote code execution. The flaw can occur…
-
CISA Confirms Exploitation of Strapi Flaw Exposing User Data
CISA added CVE-2023-22894 to its Known Exploited Vulnerabilities (KEV) catalogue on 8 October 2026. The vulnerability affects Strapi and is named the Strapi Cleartext Storage of Sensitive Information Vulnerability; it could expose sensitive user details to…
-
CISA Flags Actively Exploited Apache Struts Flaw for Urgent Patching
CISA added CVE-2016-3081 to its Known Exploited Vulnerabilities (KEV) catalogue on 8 October 2026. The vulnerability affects Apache Struts and could let a remote attacker execute arbitrary code when Dynamic Method Invocation is enabled. Apache describes…
-
CISA Flags Exploited BIND Flaw That Can Take DNS Servers Offline
CISA added CVE-2015-5477 to its Known Exploited Vulnerabilities (KEV) catalogue on 8 October 2026. The vulnerability affects ISC BIND and is a data processing error that could let remote attackers cause a denial of service by sending TKEY queries. The flaw…
-
China-Based Hackers Accused of Stealing Emails Across 7 Countries
Hackers tied to a Chinese cybersecurity company stole email from government organizations, law enforcement agencies, healthcare systems, and religious institutions in Southeast Asia, the FBI and agencies in 6 other countries said on October 8. The company,…
-
UAC-00992 articles this day · Infosecurity first
Russia Aligned Hackers Refine MatchBoil Malware to Spy on Ukraine’s Key Sectors · Russia Aligned UAC-0099 Refines MATCHBOIL Malware to Target Ukraine
2 outlets-
Russia Aligned Hackers Refine MatchBoil Malware to Spy on Ukraine’s Key Sectors
A Russia-aligned cyber-espionage actor known as UAC-0099 is refining a malware dropper called MatchBoil to target Ukrainian organisations across the transportation, manufacturing and energy sectors. ESET's analysis identifies MatchBoil as the delivery…
Dark Reading -
Russia Aligned UAC-0099 Refines MATCHBOIL Malware to Target Ukraine
A Russia-aligned cyber espionage group known as UAC-0099 has been steadily evolving its MATCHBOIL downloader over a two-year period, according to ESET research published on 8 October 2026. The analysis covers MATCHBOIL samples observed between April 2024 and…
Infosecurity
-
-
ThreatsDay Round-Up Exposes Rogue Affiliates and Leaky Attack Tools
A weekly ThreatsDay round-up notes a miscellany of mischief, from a rogue ransomware affiliate who kept profits for himself to an exposed server containing intrusion tools. The piece highlights that gang betrayals, careless operators, and sloppy design…
-
BraZetsu’s Persistent Server Patterns Exposed Its Infrastructure After IOCs Aged
Hunt[.]io traced BraZetsu’s infrastructure and found that hosting patterns and certificate data remained useful long after the original indicators of compromise (IOCs) had become outdated. Group-IB had previously described BraZetsu as a Python framework…
Security AffairsBraZetsu -
New Forensic Tools Reconstruct AI Agent Activity from Stored Data
Two new forensic review scripts have been added to FOR577’s material, aimed at reconstructing AI agent activity rather than replaying actions. The opencode-chat-replay[.]py script turns stored session data from opencode into readable transcripts or…
SANS ISC -
Attackers Hijack Three Country Domains to Impersonate Google and Others
Attackers have hijacked three country-code top-level domain namespaces—.gh (Ghana), .sl (Sierra Leone) and .as (American Samoa)—to impersonate Google and other services. By compromising the infrastructure behind these ccTLDs, they were able to pass domain…
Malwarebytes -
Japan’s Data Leaks Surge as Hackers Exploit Apps and Metabase
Attackers in Japan have been chaining personal data leaks by abusing mobile-app APIs and exploiting known flaws in business systems, according to a 8 October 2026 alert from JPCERT/CC. The incidents, described as limited and fragmentary by the CERT, span…
-
Cisco Patches 35 Flaws, Including Critical NX-OS Bugs Enabling Root Access
Cisco has released patches for 35 vulnerabilities across its product lines, with more than a dozen rated critical. The update covers Meraki, License On-Prem, NX-OS, Application Policy Infrastructure Controller (APIC) and Finesse, among others. The most…
-
Russia Linked to ASHVEIN Malware Targeting Ukrainian Government Staff
UAC-0099, a Russia-aligned threat actor, has been linked to a .NET infostealer and remote access trojan named ASHVEIN (internal name TelemetryBrowser). TrendAI attributes current activity to Ukrainian government personnel, part of the Earth Sirrush cluster.…
The Hacker News -
IBM Patches 23 DataPower Gateway Flaws, Including Four Critical Bugs
IBM has released patches for 23 DataPower Gateway vulnerabilities across two IBM security bulletins, including four rated as Critical. The flaws span remote code execution, out-of-bounds writes and a cross-site scripting issue in the Web UI. The most severe…
-
Security Awareness Training Falls Short as Social Engineering Evolves
Security awareness training isn’t dead, but its value is debated. The piece surveys empirical hints that training’s benefits may be limited as successful attacks continue to rise, and notes a spectrum of opinions on whether awareness programmes help. The…
SecurityWeek -
DNS hijacks of three country domains enabled unauthorised HTTPS certificates
Attacker activity targeted three country-code top-level domain registries, hijacking the namespaces for .gh (Ghana), .sl (Sierra Leone) and .as (American Samoa). By altering authoritative DNS records, the attackers created conditions whereby HTTPS…
Infosecurity -
AI Pentesting Tool ARTEX Used to Steal Data from South Korean Firms
Cybersecurity researchers have disclosed a targeted campaign against South Korean financial organisations that leveraged an AI pentesting tool called ARTEX to facilitate data theft. The activity, observed from late September to early October 2026, involved…
The Hacker News -
Attackers Target Atlassian Flaw Hours After PoC Details Emerge
Threat actors began targeting CVE-2026-21589, a critical pre-authentication vulnerability in Atlassian’s self-hosted Data Center products, within hours of its PoC details going public. Atlassian disclosed the flaw on 5 October, rating it 9.3 on the CVSS…
-
Ransomware recovery boss accused of hiding payments and overcharging clients
Zohar Pinhasi, the Florida-based owner of ransomware remediation company MonsterCloud, has been charged by federal prosecutors with wire fraud and conspiracy. The indictment alleges that, behind clients’ backs, Pinhasi paid attackers’ decryption ransoms…
Security Affairs -
ASOS Confirms Customer Data Breach After Employee Impersonation Attack
ASOS has confirmed a data breach affecting customer personal data, disclosed in an email to customers on 8 October 2026. The retailer said the attacker gained access by impersonating a trusted contact to obtain login credentials for an employee account,…
Infosecurity -
Cloudflare Redesigns Radar to Make Global Internet Trends Easier to Explore
Radar, Cloudflare’s real‑time view of global Internet trends, has been redesigned to balance technical depth with usability and to broaden its audience beyond expert users. The update responds to feedback that the previous landing page, which used a dense…
Cloudflare -
Preinstalled Android malware turns low-cost phones into ad fraud proxies
Bitdefender researchers say a malware campaign they call Midnight Mimosa is preinstalled in the firmware of some low-cost, multi-brand Android devices built on MediaTek platforms. The malicious system app is present before a phone is first switched on, is…
bitdefender.com -
US Offers $10 Million Reward for Suspect in Microsoft Exchange Attacks
The United States has announced a reward of up to $10 million for information leading to the capture of Zhang Yu, a Chinese national accused of involvement in the Hafnium cyber campaign against Microsoft Exchange servers. Zhang is charged alongside Xu Zewei,…
SecurityWeek -
SonicWall and Splunk Patch Flaws That Could Enable Attacks
SonicWall and Splunk have issued patches for a set of critical- and high-severity vulnerabilities across their products, including flaws that could allow pre-emptive unauthenticated access, arbitrary code execution, or privilege escalation. The most severe…
-
Senate Bill Could Hold AI Agent Operators and Developers Liable for Hacking
The article reports that a new bipartisan Senate proposal, the AI Agent Accountability Act, could place liability for AI-driven hacking incidents on both operators and developers of AI agents. Senators Josh Hawley and Chris Murphy outline that operators…
DataBreaches -
Amazon’s About You profile reveals startling inferences behind shopping recommendations
Amazon’s About You page offers a window into what Amazon believes it knows about a shopper, and the article notes that users can see and edit some of those inferences rather than all of them being hidden behind opaque personalization. The page, introduced in…
Malwarebytes -
Coupang Sues to Overturn $462 Million Fine for 33 Million Customer Data Leak
Coupang, South Korea’s largest online retailer, has filed two separate lawsuits at the Seoul Administrative Court to nullify a 620 billion won (£?approx $462 million) fine imposed over a data leak that affected more than 33 million customers. The action…
DataBreaches -
Kelly Jackson Higgins to Leave Dark Reading After Two Decades
Kelly Jackson Higgins, Editor-in-Chief of Dark Reading, has announced she will depart the title after two decades with the publication. In a post dated 8 October 2026, she explains that, following Dark Reading’s 20th anniversary celebrations and her five…
Dark Reading -
Allies Warn China Linked Firm Helped Hack Networks Worldwide
The UK’s National Cyber Security Centre (NCSC), working with partners from Australia, Canada, Japan, New Zealand, Spain and the United States, has issued an advisory about malicious cyber activity enabled by China-linked company Integrity Technology Group…
ncsc.gov.ukFlax Typhoon -
Insignary’s new scanner uncovers hidden code and AI dependencies
Insignary has announced the general availability of Clarity AIR, a new source-code scanning product designed to expose what actually runs in software, beyond what developers declare. The tool works at the snippet and source-code level, comparing code against…
SecurityOnline -
Rein Security raises $25 million to guard AI agents at runtime
Rein Security has raised $25 million in a Series A funding round, taking the total raised by the company to $35 million. The round was co-led by Glilot Capital and Sienna Venture Capital, with additional support from Corner Ventures, Atlacle and RNP Capital…
SecurityWeek -
Meta’s Muse AI builds personal dossiers on users and their contacts
Meta’s Muse AI agent is under renewed scrutiny after TIME magazine detailed its data handling, revealing that Muse maintains constantly updated dossiers on users and their connections. The service, launched last month, acts as a multi-task digital…
Malwarebytes
