News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Thu 8 Oct· 75 articles
-
AI Powered Attackers Breach South Korean Banks Using ARTEX Tool
A suspected China-based threat actor used AI-assisted tooling in a campaign that successfully exfiltrated data from South Korean financial organisations, researchers at CrowdStrike disclosed. The attacker leveraged ARTEX, a new open-source pentesting agent,…
Infosecurity -
Pwn2Own’s Third Day Puts Pixel 10 in the Crosshairs for $1.33M
Pwn2Own Ireland 2026’s third day had 17 attempts scheduled, with about $1.33 million in prize money at stake, according to the Zero Day Initiative (ZDI). The Google Pixel 10 was the main attraction, with three teams due to attempt exploits against it. The…
thezdi.com -
Wazza Phishing Kit Hides Adobe Lures Behind a Multi-Stage Trap
ANY[.]RUN has tracked a new phishing kit named Wazza that targets banking, manufacturing, and government organisations across the US, Europe and Australia. Unlike traditional credential theft kits, Wazza employs a multi-stage routing chain to decide which…
The Hacker News -
Four US States Sue TP-Link Over Security Claims and Router Flaws
Four US states have filed lawsuits against TP-Link Systems, alleging the router maker misled consumers about product security and China ties. Florida, Iowa, Montana, and Nebraska each filed complaints on 6 October 2026, drawing on state consumer protection…
-
Claude AI Chat Prompts Florida Arrest After Shooting Threats
In Lee County, Florida, thirty-year-old Carli Michelle Heller was arrested in late September on charges of making written or electronic threats to conduct a mass shooting or act of terrorism, under Florida Statute 836.10. The arrest followed an incident in…
SecurityOnline -
HAFNIUM2 articles this day · The Hacker News first
US Offers $10 Million Reward for Alleged HAFNIUM Campaign Director · US Offers $10 Million Reward for Suspected HAFNIUM Hacker
2 outlets-
US Offers $10 Million Reward for Alleged HAFNIUM Campaign Director
The U.S. State Department has announced a reward of up to $10 million for information leading to the arrest of Zhang Yu, a director at Shanghai Firetech Information Science and Technology. He is accused of playing a central role in the HAFNIUM campaign, the…
Security Affairs -
US Offers $10 Million Reward for Suspected HAFNIUM Hacker
The U.S. State Department has offered up to $10 million for information leading to the identification or location of Zhang Yu, a Chinese national charged in the United States in connection with the 2021 Microsoft Exchange Server attacks known as HAFNIUM. The…
The Hacker News
-
-
Atlassian Bamboo Data Center2 articles this day · Security Affairs first
Hackers Exploit Critical Atlassian Flaw to Steal Sensitive Files · Hackers Exploit Critical Atlassian Flaw to Steal Restricted Files
-
Hackers Exploit Critical Atlassian Flaw to Steal Sensitive Files
A critical vulnerability in Atlassian Data Center products, tracked as CVE-2026-21589, is reportedly being exploited in the wild. Atlassian’s advisory describes it as an arbitrary file access flaw with a CVSS score of 9.3, affecting eight Data Center…
-
Hackers Exploit Critical Atlassian Flaw to Steal Restricted Files
Threat actors are exploiting CVE-2026-21589, a critical arbitrary file access flaw in Atlassian Data Center products, with a CVSS score of 9.3. The vulnerability allows unauthenticated attackers to read specific files from the web application root if they…
-
-
16 Malicious Firefox Extensions Masqueraded as Crypto Wallets to Steal Keys
Cybersecurity researchers have uncovered a cluster of 16 malicious Mozilla Firefox extensions that impersonate Rabby Wallet and OKX Wallet interfaces to steal users’ recovery phrases and private keys. The extensions’ code interposes during wallet import…
The Hacker News -
Europol and US watchdog warn agencies to prepare for quantum threats
Europol and the US Government Accountability Office have issued alerts this week highlighting the growing urgency of post-quantum cryptography (PQC) and the risks posed by quantum computers to current cryptographic protections. The US GAO published a…
Infosecurity -
MonsterCloud Chief Accused of Hiding Ransom Payments from Clients
Zohar Pinhasi, the head of MonsterCloud, appeared in a New York court facing wire fraud charges related to a ransomware remediation scheme. The indictment alleges that Pinhasi claimed MonsterCloud could decrypt ransomware and recover encrypted data without…
SecurityWeek -
Chrome 155 Enables JPEG XL by Default Across Major Platforms
Google has released Chrome 155 with native JPEG XL (JXL) decoding enabled by default, removing the need for extensions or experimental flags to view JXL images and animations. The change follows a period in which Google reintroduced JXL support and a…
SecurityOnline -
OpenAI and Meta Lead Surge in Bids for AI Domain Names
ICANN has revealed a substantial surge in applications for new generic top‑level domains (gTLDs), receiving 1,615 domain applications from 481 different applicants in this round. The spike is largely driven by teams centred on artificial intelligence, with…
SecurityOnline -
FortiBleed attacks persist as hackers abuse stolen Fortinet credentials
US authorities warn that the FortiBleed campaign against Fortinet FortiGate firewalls and SSL VPN gateways remains active, with widespread credential abuse enabling unauthorised access. An FBI and US Secret Service notice on 6 October cites SOCRadar data…
Infosecurity -
OpenAI Claims AI Solved 372 Maths Problems, but Proofs Await Review
OpenAI has released a torrent of mathematics papers via GitHub, claiming that its unreleased Pioneer Model has produced novel solutions or major breakthroughs for 372 mathematical problems across 722 manuscripts. The company characterises this as “solving…
SecurityOnline -
Oracle Health Breach May Have Exposed Data of 20 Million People
The SecurityWeek report centres on a data breach hitting Oracle Health’s Cerner legacy systems. The Texas attorney general’s office, via Bloomberg, says personal and medical data of nearly 20 million people was compromised in an incident that began in 2025.…
SecurityWeek -
Google Drive and Docs Add Native Markdown Editing and Previews
Google has announced native Markdown support across Google Drive and Google Docs, allowing users to preview, edit, and collaborate on Markdown (.md) files without first converting them to Google’s formats. The feature is rolling out gradually and is now…
SecurityOnline -
FortiBleed Attackers Lock Organisations Out of Fortinet Devices
Attackers behind the FortiBleed campaign are compromising Fortinet devices to lock organisations out of their own systems. The operation, which targets internet‑exposed FortiGate firewalls and SSL VPN appliances, began in June and relies on a mix of using…
SecurityWeek -
MonsterCloud Owner Charged in Alleged $19 Million Ransomware Scam
The U.S. Department of Justice has charged Zohar Pinhasi, a 50-year-old American-Israeli national who owned MonsterCloud, with two counts of wire fraud and one count of wire fraud conspiracy. Prosecutors allege he defrauded ransomware victims by telling them…
The Hacker News -
Iranian Hackers Used a Fake Job Test to Target an Iraqi Engineer
Iran-linked threat actors, tracked by Unit 42 as CL-STA-1178, conducted a tightly targeted operation aimed at an Iraqi engineer involved in critical infrastructure. The campaign began with a fake Dubai Airports careers portal in March 2026, followed by a…
SecurityOnlineCL-STA-1178 -
Attackers Hijack URL Scanner Browsers to Target Russia’s Bankruptcy Registry
Rogue AI agents are said to have hijacked the browsers of a public URL scanner, urlquery[.]net, to run JavaScript and evade sandbox restrictions. According to Zenity Labs, the attackers used Base64-encoded JavaScript hidden in URLs (often shortened) so that…
SecurityOnline -
Malicious Tensorlake npm Release Steals Secrets and Spreads the Worm
The Tensorlake npm package, tensorlake, a TypeScript SDK for Tensorlake applications, sandboxes and cloud services, was compromised as part of a ChainDrop / Shai-Hulud supply chain attack. The malicious release, version 0.5.144, is no longer available on the…
The Hacker News -
Google opens SynthID AI detector to the public, with caveats
Google has opened its SynthID AI Detector to the public, following more than a year of restricted testing with journalists and media professionals. The web-based tool, accessible via synthid[.]com, lets users determine whether an image, video, or audio piece…
SecurityOnline -
Windows 11 Turns Search Into a Context-Aware AI Control Hub
Microsoft has rolled out a substantial shift for Windows 11, unveiled at a recent Surface event, with the Search Menu and taskbar being reimagined as a context-aware AI assistant and central control hub. The company introduced “Hybrid Intelligence,” a new…
SecurityOnline -
Google’s Playground AI Turns Text Prompts Into Playable Games
Google has unveiled Playground, its experimental AI platform for creating video games, announcing a soft launch on 7 October 2026. The service enables users to generate playable 2D or 3D games from textual prompts, without requiring programming or artistic…
SecurityOnline -
Apache DolphinScheduler Fixes Six Flaws Exposing Credentials and Data
Apache DolphinScheduler has released version 3.4.3 to address six authorization flaws that could enable authenticated users to access sensitive data and, in some cases, credentials stored in Kubernetes. The vulnerabilities affect all releases prior to 3.4.3,…
-
wolfSSH flaw could let attackers pass off forged server keys
wolfSSL has released wolfSSH 1.6.0 to fix five security flaws across the lightweight SSH library, with the most serious being CVE-2026-16516, which scores 9.0 on CVSSv4. The flaws affect wolfSSH 1.5.0 and earlier, and the patch closes all five issues in the…
-
Cisco Finesse SSRF Flaw Could Expose Data, With Patches Due in 2027
Cisco has publicly disclosed an unauthenticated server‑side request forgery (SSRF) flaw in the Finesse web interface, tracked as CVE-2026-20362. The vulnerability is rated 7.2 on CVSSv3 and is said to affect Finesse deployments regardless of device…
-
VMware Patches Critical VM Escape Flaw After Public PoC Release
VMware Workstation and Fusion VMXNET3 Flaw CVE-2026-59346 has been disclosed with a full technical write‑up and a public proof-of-concept. The integer‑overflow vulnerability can allow a privileged guest user to run code on the host, effectively escaping the…
-
Poisoned npm Package Steals Developer Secrets and Threatens File Wipe
StepSecurity has disclosed a supply chain incident centred on the npm package tensorlake@0.5.144, released on 8 October 2026. The release appears to have been built from the project’s own main branch, with a provenance attestation attached to the npm…
StepSecurity -
Atlassian Patches Flaw That Could Expose Files in Jira, Bitbucket and Confluence
The SANS podcast for 8 October 2026 reports on several ongoing security issues. A patched Atlassian vulnerability, disclosed 5 October, is being observed in honeypot traffic via proof‑of‑concept exploit strings. The flaw hinges on how Atlassian products…
SANS ISC -
Splunk Patches Critical Unauthenticated RCE in Enterprise Search Clusters
Splunk has released advisories patching 22 vulnerabilities across four Splunk Enterprise branches, including a high‑severity, unauthenticated remote command execution flaw in the Patroni REST API. The most severe, CVE-2026-76268, carries a CVSS v3 score of…
-
Cybersecurity Firm Owner Accused of Profiting From Ransomware Victims
A U.S. indictment alleges that Zohar Pinhasi, a known cybersecurity figure and owner of MonsterCloud, defrauded ransomware victims by falsely presenting himself as able to decrypt data without paying attackers. He is charged in the Eastern District of New…
DataBreaches -
WordPress XSS Flaws Let Attackers Plant Hidden Admins and Backdoors
Security researchers say two unauthenticated stored XSS flaws in Ninja Forms and WPC Product Bundles for WooCommerce are being used in a WordPress campaign to plant hidden administrator accounts and persist backdoors. The flaws, CVE-2026-94504 (Ninja Forms)…
