News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Fri 9 Oct· 70 articles
-
Allies expose how Chinese firm Integrity Tech enabled global cyber espionage attacks
A joint warning from the US, UK and allied countries outlines the tactics, techniques and procedures attributed to a sanctioned Chinese organisation known as Integrity Technology Group. The advisory connects Integrity Tech to Beijing-linked cyber operations…
InfosecurityIntegrity Technology Group -
Preinstalled Android Malware Hijacks Budget Phones for Ad Fraud and Botnets
Midnight Mimosa is a supply-chain style Android malware campaign that preinstalls itself in the firmware of low-cost devices built on MediaTek platforms. Discovered and analysed by Bitdefender, the malware sits as a persistent system app that cannot be…
SecurityWeek -
OpenAI Turns ChatGPT Into an Interactive App Builder with GPT-6
OpenAI has signalled a major shift with the rollout of GPT-6, which the company says is now broadly available across all ChatGPT account tiers. The standout feature is Intelligent UI, which allows ChatGPT to go beyond plain text and generate interactive…
SecurityOnline -
GoBalance Flaw Lets Attackers Hijack Dark Web Sites’ .onion Addresses
A security flaw in GoBalance, a Go-based version of Onionbalance used by many dark‑web sites to stay reachable during attacks, could let attackers hijack a site’s .onion address. The flaw arises during the signing of the descriptor that binds a public onion…
The Hacker News -
Ransomware attack cripples SoftBank’s IDCF cloud services in Japan
A ransomware attack on SoftBank’s IDCF Cloud platform, which operates under the SoftBank Group umbrella, struck on 7 October 2026 and culminated in widespread service outages in East Japan Region 1. IDCF later confirmed that four critical partitions were…
SecurityOnline -
ISACA Plans 2027 AI Governance Certification Amid Training Gap
ISACA is accelerating governance work around AI by planning to launch an AI governance certification in early 2027, in beta now. The new credential sits within a family of AI-focused qualifications designed to help professionals manage AI securely and…
Infosecurity -
Anthropic launches AI vulnerability scans for open-source projects
Anthropic has unveiled OSS Scanner, a service aimed at providing eligible open-source projects with complimentary and regular vulnerability scanning. The programme, which uses Anthropic’s Claude Mythos models to review codebases for security flaws, sends a…
SecurityOnline -
US Seizes Domains Used by Chinese Hackers to Scan and Spy on Networks
The United States says it has disrupted two tools built by Chinese firm Integrity Technology Group and used by state-sponsored hacking groups against critical infrastructure. MicroScan was used to scan networks for vulnerabilities; FishHub let users remotely…
SecurityWeek -
Raspberry Pi OS update fixes desktop bugs and auto-mounts encrypted USB drives
Raspberry Pi OS has received a desktop-focused update, with the Raspberry Pi Foundation releasing the latest image. Although the core Linux kernel version remains the same (6.18.50 LTS), the release concentrates on a broad sweep of bug fixes and fine-tuning…
SecurityOnline -
Hackers Earn $562,500 for Three Remote Exploits on Pixel 10
Three teams demonstrated remote exploits against Google’s Pixel 10 at Pwn2Own Ireland on 8 October 2026, with the event confirming patches were required for targets. The Pixel 10 entries were remote exploits, meaning breaches were delivered via web content…
-
Anthropic launches AI flaw scanner and OT infrastructure defence programme
Anthropic has unveiled two cybersecurity initiatives stepping up how it handles AI-generated vulnerability findings. The OSS Scanner service uses Anthropic’s latest model capabilities to periodically scan open-source projects, with maintainers opting in to…
SecurityWeek -
Microsoft slashes Family plan storage from 6TB to a shared 2TB
Microsoft has begun rolling out a overhaul of storage for Microsoft 365 Family and Premium subscriptions, shifting away from per-user quotas to a shared pool. Previously, each member on a Family plan enjoyed an independent 1 TB of OneDrive storage, giving up…
SecurityOnline -
NetScaler ADC3 articles this day · SecurityOnline first
Citrix Patches Critical NetScaler Flaw That Could Enable Remote Code Execution · Citrix urges urgent patching of critical NetScaler flaw that risks remote code execution
-
Citrix Patches Critical NetScaler Flaw That Could Enable Remote Code Execution
Citrix has released patches for a critical vulnerability in NetScaler ADC and NetScaler Gateway that could allow remote code execution or denial-of-service under certain configurations. The flaw, tracked as CVE-2026-107406, is described by Citrix as a memory…
-
Citrix urges urgent patching of critical NetScaler flaw that risks remote code execution
Citrix is urging immediate patching of a critical NetScaler vulnerability tracked as CVE-2026-107406, a memory overflow that could allow remote code execution or cause a denial-of-service. The flaw affects NetScaler ADC and NetScaler Gateway appliances when…
-
Citrix Urges NetScaler Users to Patch Critical Flaw Enabling Remote Code Execution
Citrix has flagged a critical memory overflow flaw in NetScaler ADC and NetScaler Gateway, tracked as CVE-2026-107406, with a CVSS v4 score of 9.5. The vulnerability may lead to remote code execution or denial of service when NetScaler appliances are…
-
-
Ten AI giants pledge stronger UK data protections after ICO warning
Ten major AI firms, including Amazon, Anthropic, Apple, Cohere, DeepSeek, Google, Meta, Microsoft, OpenAI and Stability AI, have pledged or committed to strengthen data protection policies in the UK after the ICO urged clearer transparency around how…
Infosecurity -
AI-Driven Hacker Used ARTEX to Target South Korean Financial Firms
CrowdStrike says an unidentified attacker targeted South Korean financial organisations from late September to early October 2026, stealing data that was being prepared for sale. Industry reports described breaches at several firms, including a bank’s…
Security Affairs -
AI Agent Logs Expose Attacker Chats and Help Trace Cyber Intrusions
On 9 October 2026, the SANS Internet Storm Center’s Friday Stormcast notes continued concerns about how AI agents are used in cyberattacks and how defenders can trace those activities. The episode highlights two scripts by Jim Clausing that convert AI-agent…
SANS ISC -
CISA Flags Five Actively Exploited Flaws in Enterprise Tools
The article reports that on 8 October 2026 the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five high-risk vulnerabilities to its active threat list. These flaws are actively exploited in the wild and affect popular enterprise tools,…
-
Hackers Win $1.2 Million at Pwn2Own, With Pixel 10 Bugs Leading the Payouts
Pwn2Own Ireland 2026 concluded with hackers earning more than $1.2 million from exploits across phones, printers, smart speakers, smart home hubs, wellness devices, AI infrastructure and coding tools, and cloud databases. The standout prize went to Google…
SecurityWeek -
FBI Seizes Seven Domains Used by China Linked Flax Typhoon to Target US Infrastructure
The FBI and Department of Justice announced the disruption of a China-linked threat group activity known as Flax Typhoon, which used a set of compromised domains to scan and, in some cases, intrude into U.S. critical infrastructure. Seven domains were…
The Hacker NewsFlax Typhoon -
Phishing campaign abuses Power BI pages to install rogue ScreenConnect clients
A phishing operation has been observed abusing Microsoft Power BI to install rogue ScreenConnect remote access clients. In this campaign, attackers hosted a fake document on a public Power BI page that appeared legitimate to email filters. Recipients who…
SecurityOnline -
IBM Patches Critical Verify Access Flaws Enabling Remote Code Execution
IBM has released security updates to fix 22 vulnerabilities across its Verify Access and related identity management products. The roundup lists a total of six CVEs, with five rated Critical and one High. The highest-severity issue is CVE-2026-78401, scored…
-
Researchers Predict When AI Companions May Start Giving Rogue Answers
Researchers from George Washington University have published a paper exploring whether the timing and cause of AI going rogue can be predicted, and whether such predictions can help prevent it. The work focuses on scenarios where personal AI companions…
SecurityWeek -
OpenAI Exposes Russian and Iranian Networks Planting Fake News
OpenAI disrupted two state-aligned influence campaigns by terminating multiple accounts linked to Russia and Iran that were running deceptive “false front” operations to plant propaganda in legitimate news outlets. The campaigns used artificial intelligence…
SecurityOnline -
Chinese Hackers Target Critical Infrastructure to Steal Data and Spy
Threat actors described as Chinese state hackers are alleged to be targeting critical infrastructure worldwide to steal data for long‑term intelligence collection. The piece pools together claims that these actors use automated tooling to identify…
SecurityOnline -
TP-Link Patches Tapo Cameras Flaws That Could Let Attackers Hijack Video Streams
TP-Link has disclosed three high‑severity vulnerabilities in its Tapo C325WB cameras, all affecting hardware version V2. The flaws could enable unauthenticated attackers on the adjacent network to manipulate live video streams or the camera’s settings. The…
-
Hackers Exploit AhsayCBS Flaws to Gain SYSTEM Access and Deploy Miners
Security researchers warn of active, wild exploitation of two AhsayCBS vulnerabilities that together enable remote code execution on affected hosts. The attackers chain an authentication weakness (CVE-2026-105133) in ApiStructsAction[.]java with a remote…
-
Telegram Desktop flaw lets attackers steal session keys with one click
SecurityResearchers publicly disclosed a high-severity vulnerability in Telegram Desktop, designated CVE-2026-107181, which enables an account takeover through a remote attacker stealing session keys with a single click. The flaw affects Telegram Desktop…
-
HPE Patches Critical Flaws That Could Expose Server Management Tools
HPE has released fixes for two critical flaws across its server and network management tools. The first, CVE-2026-79820, affects iLO 7 and could let a remote attacker obtain administrative access without login, when used with HPE Compute Ops Management…
