News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Fri 9 Oct· 70 articles
-
OpenAI Fires Three Safety Researchers After Breach of Trust Probe
OpenAI says it has terminated three of its safety researchers over a breach of trust, stating the dismissals followed an internal investigation that found they violated clear policies on handling sensitive information. The company did not spell out exact…
SecurityWeek -
ASOS Breach Let Attackers Send Fake Notifications to Customers
ASOS has disclosed a breach this week in which a threat actor, naming itself Xuanye Group, gained unauthorised access by abusing a login credentials chain starting from an employee’s trusted contact. Check Point threat intelligence briefs describe how the…
Dark ReadingXuanye Group -
AI Security Boom Drives Cyber M&A to a Record 117 Deals in Q3
The AI-driven scramble is fuelling a record-breaking surge in cybersecurity M&A in 2026. The latest Momentum Cyber report notes 117 deals announced in the most recent quarter, with a broad shift in buyers: not only traditional cybersecurity players, but…
Dark Reading -
GhostAction Hijacks Maintainer Accounts to Steal Secrets From GitHub Repositories
Cybersecurity researchers have disclosed a widespread credential-theft campaign in which malicious GitHub workflows were planted in tens of thousands of repositories. Using the accounts of two high-profile maintainers, Takashi Kitao (author of pyxel) and…
The Hacker NewsGhostAction -
Germany Arrests Suspected Qilin Ransomware Leader After Extradition
Germany has arrested a Russian national suspected of leading the Qilin ransomware operation, following his detention in Japan earlier this year. Japanese authorities detained him in Osaka in May under a provisional detention warrant as he travelled as a…
Security AffairsQilin -
VPN over DNS activity drives a 40 billion request surge to Iranian domains
DomainTools’ investigation details an unprecedented surge in DNS activity in March 2026 that pointed to VPN-over-DNS activity rather than a conventional DNS anomaly. The flood began around 07:00 UTC on 1 March 2026, rapidly escalating to more than 40 billion…
dti.domaintools.com -
Cloudflare’s Clef Omni makes audio, video and image decisions in one API call
Cloudflare has expanded its Clef family with Clef-omni, a multimodal decision model that now accepts audio, video, image, and text inputs in a single API call. Clef-omni processes wav or mp3 audio and mp4/webm video alongside images and textual data,…
Cloudflare -
ShinyHunters2 articles this day · Dark Reading first
FBI Arrests Suspected ShinyHunters Co-Conspirator in Pennsylvania · Pentagon Data Breach Exposes Records of 3.1 Million People
2 outlets-
FBI Arrests Suspected ShinyHunters Co-Conspirator in Pennsylvania
The FBI has arrested another suspected co-conspirator of the ShinyHunters group, with FBI Director Kash Patel confirming the arrest on 9 October 2026. The suspect is described by outlets as a Canadian citizen who was taken into custody in Pennsylvania. The…
The Hacker News -
Pentagon Data Breach Exposes Records of 3.1 Million People
ShinyHunters once again grabbed headlines after the group claimed to have breached the FBI, alleging data on nearly every FBI employee and applicant from a third-party jobs portal it said it compromised. The claim has been disputed, with authorities and…
Dark Reading
-
-
P7 DarkSword iOS Exploit Adds Stealthier Keychain and Crypto Theft
Researchers have disclosed a new variant of the DarkSword iOS exploit kit, named P7 DarkSword. Billed as a lighter-on-device variant, it patches tighter on-device stealth by removing debug logs, and it now also exfiltrates keychain data and crypto-wallet…
-
Ricardo Swiss breach exposes personal details of 890,000 accounts
A data breach on the Ricardo Swiss platform exposed the personal details of around 890,000 user accounts. Hackers were able to access names, postal addresses and telephone numbers, with business users’ company names also revealed. Ricardo has stated that…
SecurityOnline -
Hackers Target Executives’ Families to Bypass Corporate Defences
Executives’ families are increasingly deemed a soft underbelly for corporate security, with attackers pivoting from the office to the home through social engineering and device compromises. The piece cites March 2026 findings from Google Cloud’s Office of…
Dark Reading -
Nginx UI Flaw Lets Authenticated Attackers Take Over Servers
A critical remote code execution flaw has been disclosed in the Nginx UI project (CVE-2026-107806), with a working proof-of-concept exploit published. The vulnerability enables authenticated attackers to execute arbitrary code on affected servers,…
-
Apache Camel Karavan flaws could let attackers hijack Kubernetes deployments
Two high‑severity vulnerabilities in Apache Camel Karavan have been disclosed, exposing open‑source cloud integration environments to potential remote code execution and malicious Kubernetes resource injection. The flaws are tracked as CVE‑2026‑103413 and…
SecurityOnlineApache Software Foundation -
CISA Urges Patching of Critical Flaws in Energy Sector Software
Six critical flaws across Grid Protection Alliance’s openPDC and openHistorian threaten energy-sector critical infrastructure. The vendor lists six CVEs affecting these products, with the most severe having a CVSSv3 score of 9.8. OpenPDC versions before…
-
Wikimedia Links AI Agents to Data Probes and API Traffic Surge
Wikimedia Foundation has disclosed that rogue AI agents were active on its platforms, including Wikipedia and related open-knowledge sites, after an investigation triggered by recent reports of agent-driven activity. In a blog post dated 5 October, Chief…
InfosecurityOpenAI agents -
GhostAction Campaign Hijacks Maintainers to Steal Secrets From 345 Repositories
GhostAction Returns documents a fresh wave of GitHub Actions credential theft in which attackers compromise open-source maintainers to push a malicious security-audit[.]yml workflow that exfiltrates secrets from the target repository and its history. In the…
StepSecurity -
Anthropic Launches Free Scanner to Find Flaws in Open Source Code
Anthropic has launched OSS Scanner, a free vulnerability scanner for open-source code aimed at helping maintainers identify and fix flaws before attackers exploit them. The project grew from lessons learned while testing Claude against real-world targets…
Security Affairs -
Researchers question whether the Luna Moth leak really came from Silent Ransom Group
A public breach analysis centred on a bespoke “Luna Moth Files” site has raised questions about whether Silent Ransom Group (SRG) was actually involved in a leak or if the material is fabrication. DataBreaches[.]net notes that, while initial analyses…
DataBreachesLuna Moth -
Apple’s 14GB AI Models Spark Calls for a macOS Opt Out
Apple is facing growing pushback as it ramps up the integration of its Apple Intelligence into macOS 27 Golden Gate. The piece frames the move as a deliberate deepening of AI features within the operating system, but it notes a strong market reaction from…
SecurityOnline -
Four More US States Sue TP-Link Over Router Security Claims
Four more U.S. states sued router maker TP-Link Systems on October 6, bringing the total to five, with Texas filing a suit in February. Florida, Iowa, Montana and Nebraska allege the California company misled buyers about how secure its routers are and how…
-
ICANN’s Proposed .lan Domain Raises Risks for Home Networks
ICANN has published its updated list of generic top‑level domain (gTLD) applications, with the .lan proposal drawing notable concern from the networking community. The application, filed by Identity Digital (also known as Coffee Danger), seeks to add a .lan…
SecurityOnline -
AI Agents Could Become the Next Target for Business Email Compromise
The piece warns that as AI agents are granted authority to act within core business systems, attackers could target those agents in a way that mirrors traditional business email compromise (BEC). In a BEC-like danger, an attacker might prompt a third‑party…
Dark Reading -
Cloudflare Adds CPU and Memory Profiling to Workers and Durable Objects
Cloudflare has introduced on-demand CPU and memory profiling for its Workers and Durable Objects, enabling developers to generate interactive flamegraphs to see exactly where code is consuming resources. The feature is accessible from the Workers…
Cloudflare -
AnyDesk Linux Flaw Lets Attackers Gain Root Before Connections Are Accepted
Security researchers have published a fully working exploit for a pre-authentication remote code execution flaw in AnyDesk on Linux, enabling root access before a connection is accepted. The exploit, named AnyPwn, targets a heap buffer overflow in AnyDesk’s…
-
Cloudflare Joins Forces With Deno to Bring Workers to Your Own Infrastructure
The Deno team is joining Cloudflare, with a plan to merge workerd and celld and enable the Deno runtime to be self-hosted at scale. The goal is to simplify running Cloudflare’s Workers and Durable Objects on users’ own infrastructure, by providing a…
Cloudflare -
Anthropic launches free AI scanner to uncover open source flaws
Anthropic has unveiled OSS Scanner, a free opt-in vulnerability scanner for open-source projects, designed to help secure the ecosystem using artificial intelligence. The service is billed as fully model-generated, with outputs not requiring human review or…
The Hacker News -
AhsayCBS2 articles this day · SecurityWeek first
Hackers Exploit AhsayCBS Flaws to Deploy Hidden Crypto Miners · Hackers Exploit AhsayCBS Flaws to Deploy Webshells and Crypto Miners
-
Hackers Exploit AhsayCBS Flaws to Deploy Hidden Crypto Miners
Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners. Details of the flaws are below - CVE-2026-105133 (CVSS v4…
-
Hackers Exploit AhsayCBS Flaws to Deploy Webshells and Crypto Miners
SecurityWeek reports that two unpatched flaws in AhsayCBS, CVE-2026-105133 and CVE-2026-105134, are being exploited in the wild to achieve unauthenticated remote code execution. The defects allow an attacker to manipulate arguments in certain functions to…
-
-
CISA Adds Five Flaws to KEV After Flax Typhoon Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog after reports that a China-linked actor group, Flax Typhoon, abused them in targeted intrusions. The flaws…
-
Ransomware Recovery Firm Accused of Overcharging Clients by Millions
The article reports on allegations surrounding MonsterCloud, a ransomware incident response firm led by Zohar Pinhasi, who has been charged by the United States Attorney’s Office for the Eastern District of New York with wire fraud and conspiracy to commit…
SecurityOnline -
Poem Guided Botnet Hijacks AI Services to Mine Cryptocurrency
SecurityWeek reports a string of cyber security items in this week’s “In Other News.” Notable among them are AI-enabled attacks against Korea’s banking sector, a poem-guided botnet operation, and long prison terms for high‑profile cybercrime figures. In…
-
Ransomware attacks hit record high as groups turn to triple extortion
Ransomware activity hit an all‑time high in the third quarter of 2026, with Comparitech documenting 2,627 claimed attacks between July and September. The figure marks a 27% rise on Q2 2026 and a 61% increase year over year. The analysis notes pronounced…
InfosecurityEverest -
Hackers Hijack Three Country Domains to Obtain Rogue HTTPS Certificates
Hackers hijacked three country-code top-level domains—.gh (Ghana), .sl (Sierra Leone), and .as (American Samoa)—to obtain unauthorized HTTPS certificates covering a number of Google domains and other organisations’ domains. Google disclosed that the…
SecurityWeek -
SailPoint warns human-speed security cannot keep pace with AI agents
The Hacker News report covers a SailPoint study on a growing security paradox as enterprises rush to deploy autonomous AI agents. The Horizons of Identity Security report argues that security architectures remain designed for human workloads, creating an “AI…
The Hacker News -
Ransomware Outage at SoftBank Cloud Unit Disrupts 1,200 Partners
A ransomware incident has disrupted IDC Frontier Inc., a SoftBank cloud-services subsidiary, with outages reported on 7 October affecting 495 corporate and local government customers. IDC Frontier stated it is still assessing the extent of the damage and…
DataBreaches -
ASOS Breach Exposed Customer Details and Shopping Search Histories
ASOS has disclosed that the data breach affecting its systems involved attackers gaining access after tricking an employee into handing over login credentials. While the retailer originally said payment card details and customer passwords were not accessed,…
Malwarebytes -
SonicWall SMA1000 Flaw Exploited to Bypass Authentication
Threat actors are actively exploiting a critical flaw in SonicWall SMA1000 appliances, with exploitation observed in the wild. The vulnerability, CVE-2026-102255, affects the SMA1000 line’s WorkPlace portal via an unintended access path in the Extraweb…
-
US Seizes Chinese Hacking Tools Used to Target Critical Infrastructure
The Justice Department and the FBI announced court‑authorised seizures of two hacking tools, Microscan and FishHub, which were built and operated by Integrity Technology Group, a Beijing‑based firm with government contracts. The tools were designed to scan…
Security Affairs -
Citrix Patches Critical NetScaler Flaw Enabling Remote Code Execution
Citrix has released security updates for CVE-2026-107406, a critical memory overflow flaw affecting NetScaler ADC and NetScaler Gateway that could enable remote code execution or denial-of-service under certain configurations. The vulnerability is triggered…
