News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Mon 12 Oct· 56 articles
-
SonicWall SMA10004 articles this day · SecurityWeek first
Hackers Exploit Critical SonicWall SMA 1000 Flaw in the Wild · Attackers Exploit Critical SonicWall SMA Flaw Without Logging In
-
Hackers Exploit Critical SonicWall SMA 1000 Flaw in the Wild
Threat actors are actively exploiting a maximum-severity vulnerability in SonicWall SMA 1000 appliances, specifically CVE-2026-102255, a server-side request forgery (SSRF) flaw in the WorkPlace interface used for remote access. SonicWall describes the issue…
-
Attackers Exploit Critical SonicWall SMA Flaw Without Logging In
Attackers are already targeting SonicWall SMA 1000 appliances with a critical SSRF flaw tracked as CVE-2026-102255, which carries a CVSS score of 10.0. The vulnerability is a pre-authentication server-side request forgery via an unintended alternate access…
-
Hackers Exploit Critical SonicWall SMA Flaw Within Days of Disclosure
Threat actors are actively exploiting a critical vulnerability in SonicWall Secure Mobile Access (SMA) 1000 appliances less than a week after its public disclosure. The flaw, CVE-2026-102255, is a pre-authenticated server-side request forgery (SSRF) with a…
-
Attackers Exploit Critical SonicWall SMA1000 Flaw Days After Disclosure
Threat actors began exploiting a critically rated vulnerability in SonicWall SMA1000 appliances shortly after it was publicly disclosed. CVE-2026-102255 is a pre-authenticated server-side request forgery (SSRF) flaw affecting the SMA1000 Work Place…
-
-
ShinyHunters3 articles this day · Infosecurity first
Canadian Ransomware Negotiator Arrested in FBI ShinyHunters Crackdown · Cybersecurity Executive Arrested in FBI ShinyHunters Investigation
3 outlets-
Canadian Ransomware Negotiator Arrested in FBI ShinyHunters Crackdown
A Canadian ransomware negotiator, identified as Edward Dubrovsky (with variations Dubrovski/Dobrovsky in sources), has been arrested in Pennsylvania as part of the FBI’s ShinyHunters crackdown. Court documents filed in the Eastern District of Pennsylvania…
Security Affairs -
Cybersecurity Executive Arrested in FBI ShinyHunters Investigation
A Canada-based cybersecurity executive, reportedly Edward Dubrovsky, was arrested in the United States amid the FBI’s ongoing ShinyHunters investigation, which includes claims of hacking FBI systems. FBI Director Kash Patel confirmed the arrest, describing…
SecurityWeek -
FBI Arrests Canadian Cybersecurity Executive Over ShinyHunters Ties
The FBI has arrested Edward Dubrovsky, a Canadian cybersecurity executive, in connection with the ShinyHunters group. Court documents identify Dubrovsky, 54, of Toronto, as charged with conspiracy to threaten to impair the confidentiality of information with…
Infosecurity
-
-
Ghostscript flaw could let crafted PDFs trigger remote code execution
Artifex Software released Ghostscript 10.08.0 on 8 September 2026 to fix a critical heap buffer overflow in the JPEG 2000 image decoder used when Ghostscript processes PDFs and PostScript. The vulnerability, tracked as CVE-2026-39919, can enable…
-
DDoS attack knocks Canonical websites and security services offline for four hours
Canonical suffered its second DDoS attack in 2026, disrupting public websites for over four hours. The incident, disclosed on 8 October via the Ubuntu Discourse forum, affected Canonical’s main portals—ubuntu[.]com, canonical[.]com, the Ubuntu blog, the…
Security Affairs -
Ransomware Negotiator Charged With Conspiring to Extort Money
US authorities have charged Edward Dubrovsky, a high-profile figure in the ransomware negotiation scene, with conspiracy to extort money by threatening to impair the confidentiality of information. The 54-year-old was arrested in Pennsylvania last week, with…
Dark Reading -
Why Identity Resilience Is Essential to Restoring Business Operations
Cyber resilience starts with identity. The piece argues that as enterprises rely increasingly on cloud identity providers and a mix of IdPs, maintaining identity resilience is essential to overall cyber resilience. If staff cannot access apps because…
Dark Reading -
Progress fixes 31 MarkLogic flaws, including three rated 9.9 CRITICAL
Progress Software has issued a security bulletin in October 2026 noting a total of 31 MarkLogic Server vulnerabilities have been fixed across multiple products and releases. In the published summary, 5 CVEs are highlighted as critical, with three of them…
-
Attackers Exploit Atlassian Flaw Just Two Hours After Details Emerge
The weekly recap from 12 October 2026 highlights a stretch where attackers moved rapidly on newly disclosed flaws, underscoring how speed without adequate context can outpace defenders. The standout is Atlassian Data Center’s arbitrary file access flaw,…
-
Leaked files reveal how Luna Moth scammers trick staff into granting remote access
Check Point researchers have analysed leaked files from an anonymous onion site, “The Luna Moth Files”, which purportedly contain internal documents and chat logs from a major ransomware gang known as Luna Moth, Silent Ransom Group (SIG) and tracked as…
InfosecurityLuna Moth -
CERT/CC Warns 11 Unpatched Thelia Flaws Could Enable Server Takeover
CERT/CC has warned that 11 Thelia vulnerabilities remain unpatched, with seven of them capable of remote code execution by an authenticated back‑office user. The CERT/CC note highlights a patch gap, noting that the vendor could not be reached and no fix is…
-
Cloudflare adds SQL-powered filters to Logpush to cut log costs
Cloudflare has integrated a new Transformer feature into Logpush that lets users filter, redact, and reshape log data as it is exported, rather than after delivery. Transformers are SQL queries tied to a specific Logpush dataset; they run in-process inside…
Cloudflare -
IonQ to Buy Network Access Firm Elisity in $1.3 Billion Deal
IonQ is set to acquire Elisity in a stock-only deal valued at up to $1.3 billion, with up to $150 million of that as earnout contingent on Elisity’s performance. The transaction is expected to close in Q4 2026, and IonQ noted that the number of shares issued…
SecurityWeek -
Icon Cancer Centre Operator Confirms Patient Data Breach at Supplier’s System
Icon Oncology Group, operator of Icon Cancer Centre and described as Australia’s largest cancer care provider, has disclosed a data breach affecting patient information held on a supplier’s system. In a notification dated 12 October 2026, the group said…
DataBreaches -
Cyberattack Forces French Supermarkets to Discard Fresh and Frozen Food
French supermarket chains Intermarché and Cooperative U reported a cyberattack that forced their refrigeration systems to defrost, AFP said on 12 October 2026. The companies told AFP that around 150–200 Intermarché outlets and nearly 100 Cooperative U stores…
DataBreaches -
Bricksforge2 articles this day · The Hacker News first
Hackers Exploit Critical Bricksforge WordPress Flaw to Upload Malicious Files · Hackers Exploit Critical Bricksforge WordPress Flaw for RCE
-
Hackers Exploit Critical Bricksforge WordPress Flaw to Upload Malicious Files
Security researchers have disclosed a critical flaw in the Bricksforge WordPress plugin, tracked as CVE-2026-85097, which is being exploited in the wild. The vulnerability carries a CVSS score of 9.8 and allows unauthenticated attackers to upload arbitrary…
-
Hackers Exploit Critical Bricksforge WordPress Flaw for RCE
A critical unauthenticated remote code execution flaw in the Bricksforge WordPress plugin (CVE-2026-85097, CVSS 10.0) has been actively exploited in the wild, according to Patchstack. The vulnerability affects Bricksforge up to version 3.1.8[.]9, with a…
-
-
Leaked Password Exposes Personal Data of 8.8 Million Danes in CPR Breach
An attacker reportedly abused a Danish company’s legitimate access to the country’s population register (CPR) to retrieve personal data for around 8.8 million people, including names, addresses and CPR numbers. The breach hinged on a leaked password linked…
Malwarebytes -
MariaDB Fixes Nine Flaws That Could Enable Code Execution and Data Theft
MariaDB has disclosed a set of nine vulnerabilities affecting both the MariaDB Server and the Connector/C client library, disclosed on 9 October 2026 and publicised on 12 October 2026. Five of the flaws are rated high severity, with CVSSv3 scores up to 8.5,…
-
Fahmida Y Rashid Takes the Helm as Dark Reading’s Editor in Chief
Fahmida Y Rashid has been named Dark Reading’s editor-in-chief, with the official appointment announced on 12 October 2026. In her first public message as leader, she emphasised a continuation of the publication’s focus on deep technical coverage and on…
Dark Reading -
Dark Web Empire Market Co Founder Jailed for 40 Years and Fined $5 Million
A Virginia man who co-created and ran the dark web marketplace Empire Market has been sentenced to 40 years in federal prison, with a $5 million fine. Raheim Hamilton, 30, of Suffolk, Virginia, co-owned and operated Empire Market from 2018 to 2020. During…
DataBreaches -
DDoS Attack Disrupts Canonical’s Websites for More Than Four Hours
Canonical’s websites were disrupted by a sustained distributed denial-of-service (DDoS) attack, marking the second such incident this year. The firm confirmed on 8 October that “Canonical’s websites are under a sustained distributed denial of service…
SecurityWeek -
Cyber Attack Disrupts Refrigeration Across French Supermarket Chains
Several French supermarket chains have been hit by a cyber-attack that appears to target refrigerated storage across multiple stores. Coopérative U, which operates Hyper U, Super U, U Express and Utile, confirmed on X that production cold‑rooms were affected…
-
Personal AI Agents Are Taking on Corporate Identities, Raising New Security Risks
Bring Your Own Agent is described as a new wave of personal AI assistants that employees connect to corporate systems, effectively acting as autonomous agents that operate in the employee’s name. The piece frames this as an identity-related challenge first…
The Hacker News -
Chrome’s XSLT Removal Could Break Windows Server Remote Access Portals
Google plans to deprecate client-side XSLT in Chromium browsers, a move that could cause the RD Web Access pages used for Remote Desktop Services on Windows Server to fail to render. The article explains that the RD Web Access portal relies on the browser to…
SecurityOnline -
Money Mule Network Leader Admits Laundering $7 Million for Cybercriminals
A US court has heard that Oleg Korniev, a dual Ukrainian-Russian national aged 42, led Your Mule Cashout (YMCO), a sophisticated international money‑mules network that helped cybercriminals move stolen funds abroad. Court documents describe YMCO as an online…
SecurityWeek -
Ledger Halts CryptoBilis Wallet Sales After $86 Million Theft Claims
Ledger has paused CryptoBilis-sold sales of its hardware wallets after reports that funds were stolen from users who purchased devices through the Indonesian crypto reseller. The incident is said to have involved losses in excess of $86 million, according to…
The Hacker News -
iRhythm Says Data Breach Affects at Least 360,000 People
iRhythm, a medical equipment and digital health analytics provider, has notified that hackers accessed and exfiltrated data from third‑party‑hosted business applications used to store iRhythm information. The intrusion occurred between 3 June and 8 June,…
SecurityWeek -
Phishing Emails Now Target AI Assistants With Hidden Instructions
Phishing emails are increasingly designed to target both human recipients and the AI assistants that process their messages. Malwarebytes reports a scenario in which a suspicious message includes a password‑protected attachment (with the password supplied in…
Malwarebytes -
Windows 11 Quick Settings lets users ring a paired Android phone
Microsoft is trialling a new mobile device entry within Windows 11 Quick Settings in experimental builds. After a user connects and pairs an Android phone, the paired device appears in the Quick Settings panel and can be controlled from there. The change is…
SecurityOnline -
LineageOS 24.0 adds browser-based flashing for Android 17 devices
LineageOS has released version 24.0, built on Android 17, with a broad set of updates aimed at improving stability and the upgrade pipeline. The release notes indicate comprehensive updates to multiple system applications and a refined upgrade path, and they…
SecurityOnline -
AI Powered Cybercriminal Stole 628,000 Ukrainian Records in Campaigns
CyberXero, a Russian‑speaking, financially motivated threat actor described by SOCRadar as an initial access broker, operated with an AI orchestration layer running on its own infrastructure to support two parallel campaigns. One is a broad global operation…
Security AffairsCyberXero -
Developer Runs Google’s New Googlebook OS on an Apple Silicon Mac
Google has unveiled Googlebook OS, a hybrid system merging ChromeOS and Android to offer a desktop-class Android experience, developed in collaboration with hardware manufacturers. The article notes the OS, previously codenamed Aluminium OS, is intended for…
SecurityOnline -
Ransomware gangs exploit Palo Alto VPN flaw months after patch release
Ransomware groups are continuing to target a high‑severity vulnerability in Palo Alto Networks products, CVE-2026-0257, despite a patch released five months ago. ReliaQuest warned on 9 October that multiple groups, including Qilin and Settra, are actively…
-
Supplier Malware Incident May Expose Data of 8.7 Million Karaoke Customers
One of Japan’s largest karaoke groups, Daiichi Kosho, disclosed a potential data breach stemming from a supplier incident that may have exposed personal information for up to about 8.7 million customers. The breach source is an incident at Nippon Columbia…
Infosecurity -
Google’s Offline AI Notes App Keeps Meeting Data on Your Mac
Google has released an experimental offline note‑taking and personal knowledge base tool for Mac called Google AI Edge Foresight. The software is optimised for Apple Silicon and runs entirely on the user’s local machine, with no cloud processing or ongoing…
SecurityOnline
