News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Wed 14 Oct· 86 articles
-
Cisco Secure Email3 articles this day · The Hacker News first
Cisco Email Gateways Face Active Attacks That Could Expose Cluster SSH Keys · CISA Flags Exploited Cisco Email Gateway Flaw With Critical Score
-
Cisco Email Gateways Face Active Attacks That Could Expose Cluster SSH Keys
Cisco’s Secure Email Gateway is being exploited in the wild for CVE-2026-76519, a critical arbitrary file write vulnerability rated CVSS 3.1 v3.1 9.8. The flaw lies in the AMP File Reputation feature, specifically in how the file reputation service handles…
-
CISA Flags Exploited Cisco Email Gateway Flaw With Critical Score
CISA added CVE-2026-76519 to its Known Exploited Vulnerabilities (KEV) catalogue on 14 October 2026. The Cisco Secure Email Gateway Relative Path Traversal Vulnerability affects Cisco Secure Email Gateway and could let an unauthenticated remote attacker…
-
Cisco Email Gateway Flaw Exploited to Run Commands as Root
Cisco has warned that active attacks are exploiting a critical vulnerability in its Secure Email Gateway. The flaw, tracked as CVE-2026-76519 (CVSS 9.8), can allow a sender with no login to write files to the appliance’s operating system and, if successful,…
-
-
Hackers Stole Configurations for 500 FortiGate Firewalls in FortiManager Breach
Unit 42 reports a multi-stage intrusion against a telecommunications provider, which began in September 2024 with the exploitation of CVE-2024-47575 against a FortiManager appliance. The attackers registered a rogue Virtual FortiGate named localhost on the…
-
Hackers Push Supermarket Fridges to 50°C, Spoiling Food Across Europe
A mass cyberattack compromised Internet-connected refrigeration controllers in around 700 supermarkets across Europe, triggering spoilage of large quantities of perishable merchandise and, in some cases, fires. French authorities said the remotely operable…
Ars Technica -
Ivanti Connect Secure2 articles this day · The Hacker News first
Ivanti VPN Zero Days Let Attackers Gain Root Access, Even When Patched · CISA Urges Ivanti Users to Patch Zero Day Behind Data Theft Attacks
-
Ivanti VPN Zero Days Let Attackers Gain Root Access, Even When Patched
Ivanti reported that two zero-day flaws in its Ivanti Connect Secure (ICS) hardware and software were exploited in the wild, centring on a high-severity authentication bypass combined with unauthenticated remote code execution (RCE) in SSL-VPN and…
-
CISA Urges Ivanti Users to Patch Zero Day Behind Data Theft Attacks
CISA has urged organisations to urgently update Ivanti Connect Secure (ICS) appliances to the latest version after the disclosure of a zero-day authentication bypass vulnerability, tracked as CVE-2026-104935 (CVSS 8.6). The flaw affects ICS versions…
-
-
Microsoft Windows3 articles this day · Malwarebytes first
CISA Flags Actively Exploited Windows Flaw That Bypasses Security Protections · Microsoft fixes 1,415 flaws as exploited Windows bug puts users at risk
-
CISA Flags Actively Exploited Windows Flaw That Bypasses Security Protections
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Microsoft Windows Shell flaw, tracked as CVE-2026-96951, to its Known Exploited Vulnerabilities (KEV) catalog. The advisory notes that the vulnerability is a Windows Shell command…
-
Microsoft fixes 1,415 flaws as exploited Windows bug puts users at risk
Microsoft Patch Tuesday in October 2026 set a new vulnerability record, addressing 1,415 CVEs across Microsoft products and services. The update cycle, described as the first four-digit/month in Microsoft’s reporting, spans Windows and related components,…
-
Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Zero Day
Microsoft’s October Patch Tuesday patch release has set a new record with fixing 1,413 vulnerabilities, including an actively exploited Windows Shell zero-day. The record-breaking bundle underscores the rapid pace of flaws being disclosed and addressed, with…
-
-
Storm-31193 articles this day · SecurityWeek first
Microsoft disrupts Chinese phishing network behind 1 billion messages · Microsoft Disrupts Chinese Phishing Kits Behind One Billion Messages
3 outlets-
Microsoft disrupts Chinese phishing network behind 1 billion messages
Microsoft Threat Intelligence and the Microsoft Digital Crimes Unit have exposed Yam Store, a Chinese-language phishing ecosystem that has powered more than a billion phishing emails and SMS messages to tens of thousands of organisations in the past nine…
Dark Reading -
Microsoft Disrupts Chinese Phishing Kits Behind One Billion Messages
Microsoft and Health-ISAC, with the JC3 and a coalition including Resecurity, Cloudflare, Oracle, Proofpoint and TRM Labs, have disrupted three Chinese-language phishing kits: CoGUI (also known as NX or FA), Haozi (Phoenix) and Iron Man System. In a…
The Hacker News -
Microsoft Seizes Chinese Phishing Marketplace Behind a Billion Messages
Microsoft and Health-ISAC, acting under a US District Court for the Southern District of Florida order, disrupted a Chinese-language cybercrime marketplace that supplied phishing infrastructure to criminals. The authorities seized and redirected domains used…
SecurityWeek
-
-
Yandex Strikes Shifted Bot Traffic to Other Hosting Providers
Following reported strikes on Yandex data centres, Cloudflare’s Radar and Bot Management data show that the initial expectation of a broad collapse of Russian bot activity was misleading. Across two distinct Yandex autonomous systems—AS13238 (Yandex Search)…
Cloudflare -
Claude Code Preview Flaw Let Attackers Steal Developer Credentials Silently
A critical, silent zero-click flaw in Anthropic’s Claude Code Desktop preview pane could quietly exfiltrate credentials from developers’ machines. The vulnerability arose from three architectural gaps in the preview pane that rendered HTML documents…
Dark Reading -
Palo Alto Networks Cloud NGFW2 articles this day · SecurityOnline first
CISA Flags Actively Exploited PAN-OS Flaw That Grants Root Access · Palo Alto Patches PAN-OS Flaw Exploited to Gain Root Access
-
CISA Flags Actively Exploited PAN-OS Flaw That Grants Root Access
CISA added CVE-2026-0322 to its Known Exploited Vulnerabilities (KEV) catalogue on 14 October 2026. The vulnerability affects Palo Alto Networks PAN-OS and could let an authenticated attacker with network access execute arbitrary code as root on a firewall.…
-
Palo Alto Patches PAN-OS Flaw Exploited to Gain Root Access
Palo Alto Networks has disclosed CVE-2026-0322, a high-severity remote code execution flaw affecting PAN-OS managed devices, notably PA-Series, VM-Series and Panorama (virtual and M-Series). The vulnerability sits in the PAN-OS management interface and can…
-
-
CISA Warns of Attacks Exploiting AhsayCBS Authentication Flaw
CISA added CVE-2026-105133 to its Known Exploited Vulnerabilities (KEV) catalogue on 14 October 2026. The Ahsay AhsayCBS Improper Authentication Vulnerability affects AhsayCBS and could let a remote attacker bypass authentication by manipulating a parameter…
-
CISA Warns of Active Attacks on Critical AhsayCBS Flaw
CISA added CVE-2026-105134 to its Known Exploited Vulnerabilities (KEV) catalogue on 14 October 2026. The flaw affects Ahsay AhsayCBS and is a command injection vulnerability that could let a remote attacker execute operating system commands. The…
-
Hackers Exploited Nextcloud Flaw to Plant PHP Web Shells
Hackers compromised a Nextcloud deployment by exploiting a flaw in Collabora Online’s Built-in CODE Server app (Richdocumentscode). Attackers sent unauthenticated requests to proxy[.]php while the local CODE server was not running (for example during…
-
Anthropic Tests How Small AI Models Could Spread Across Smart Devices
Anthropic researchers demonstrated that very small AI models could, in principle, be capable of self-replication across consumer IoT devices, by running a Google Gemma model across 15 off-brand Android TV boxes. They describe a four-stage process for an…
Malwarebytes -
US Charges 14 in North Korean Remote Worker Fraud Scheme
The US Department of Justice has charged 14 individuals in a North Korea–linked fraud operation that recruited “remote IT workers” to siphon revenue from American companies. The indictment, filed on 14 October 2026, describes a scheme operational from about…
The Hacker News -
AI Agents Breached an Industrial Control Network in 16 Minutes
A Booz Allen report, presented at SecurityWeek’s ICS Cybersecurity Conference in Nashville, details how frontier AI agents performed in an isolated industrial‑control (OT) lab. The study used AI models with no prior knowledge of the target OT environment—no…
SecurityWeek -
F5 Patches NGINX Flaws That Could Allow Remote Code Execution
F5 has issued three security advisories on 14 October 2026 detailing high‑risk NGINX vulnerabilities that affect NGINX Open Source and NGINX Plus, with memory corruption leading to remote code execution. The flaws are tracked as CVE-2026-97205…
-
Attackers Exploit EC-CUBE AmazonPay Flaw to Hijack Checkout Redirects
EC-CUBE’s AmazonPay Plugin is under active exploitation for CVE-2026-103671, with JPCERT/CC, IPA and EC-CUBE reporting threat actors are weaponising the flaw in the wild. The vulnerability allows unauthenticated attackers to tamper with checkout parameters…
-
Siemens and Rockwell Disclose Critical Flaws in Industrial Systems
Siemens issued 17 industrial-control-system security advisories, releasing fixes for some vulnerabilities and mitigations for others while permanent updates are pending. The issues span products including Simatic S7-1500 CPUs, Industrial Edge devices and…
SecurityWeek -
Japan’s Ransomware Wave Hits Hundreds, Exposing Millions of Records
Japan is grappling with a broad ransomware wave that researchers say is affecting hundreds of organisations and exposing millions of records, prompting urgent government warnings and renewed scrutiny of data protection practices. The incidents include…
DataBreaches -
UK Sanctions Crypto Platform Cryptomus Over Payments Linked to Russia
The United Kingdom has imposed economic sanctions on Cryptomus, the cryptocurrency platform also known as Certa Payments and Xeltox Enterprises, for processing payments that benefit the Russian government and its financial institutions. The sanctions,…
Krebs on Security -
Harmonic Security raises $50 million to protect workplace AI use
Harmonic Security, a workforce AI protection startup, has announced a $50 million Series B funding round, taking its total raised to $76 million. The round was led by Crosspoint Capital Partners, with continued backing from existing investors. The company,…
SecurityWeek -
ROMULUS Turns ClickFix Into a Multi-Campaign Malware Delivery Platform
Cybersecurity researchers have identified ROMULUS as a new, multi-payload delivery platform built on the ClickFix technique, used to disseminate a range of malware via an expanding ecosystem. Investigators from Vedere Labs, part of Forescout Research,…
Infosecurity -
Zero Trust Summit Opens With AI Identity Threats in Focus
SecurityWeek’s Zero Trust Strategies Summit is taking place today as a fully immersive virtual conference and expo, opened at 11:00 BST? (11:00 AM ET in the original posting). The event aims to move beyond theory, focusing on practical approaches to Zero…
SecurityWeek -
Russia Used AI to Orchestrate Fake School Events in Peru and Ecuador
A Russia-based influence operation used AI-enabled planning and spoofed communications to target schools in Peru and Ecuador, with the aim of creating events that could inflame local tensions. According to OpenAI, operators posed as education authorities and…
Dark Reading -
Cloudflare fixes Hyperdrive bug that caused empty MySQL query results
Cloudflare has announced that Hyperdrive for MySQL is now generally available, completing the beta period that introduced MySQL protocol support to their distributed database connection pooler for Cloudflare Workers. The team describes Hyperdrive as a…
Cloudflare -
Chinese Phishing Kits Fuel a Billion Messages and Mass Fraud
Microsoft’s latest threat intelligence review exposes a Chinese-language phishing kit ecosystem that enables mass credential theft and fraud at scale. The researchers identify three kits marketed via the underground YAM Store — CoGUI (NX/FA), Haozi…
MicrosoftStorm-2990 -
Anthropic warns small AI models could fuel self-spreading IoT malware
Anthropic has warned that advances in small, weight-based AI models could enable self-replicating malware that operates across Internet-of-Things devices such as smart fridges and vacuum cleaners. The company suggested that by next year smaller models may…
Ars Technica -
Curl Fixes HTTP/2 Upload Flaw That Could Trigger Memory Corruption
A security flaw in curl’s handling of HTTP/2 uploads could allow memory corruption and potential code execution on the client machine when a malicious server accepts an upload. The issue, described as a use-after-free tracked as CVE-2026-92392, arises during…
-
Extortion Group Claims It Stole Data From 38 Maritime Firms
A cyber extortion claim has put 38 shipping, port and logistics companies in the spotlight after a group said it stole data and would publish it unless multimillion-pound ransoms were paid by 19 October. The claim comes from a group known as n0n, according…
DataBreachesn0n -
Deepfake Fraud Drills Test Whether Staff Verify Payment Requests
The Hacker News outlines a pragmatic approach to defending against deepfake fraud by running a readiness drill that tests how well an organisation would respond to simulated voice and video impersonations. The piece opens with a concrete scenario: a cloned…
The Hacker News -
OpenAI Employee Charged After Hidden Recorder Found in Meeting Room
OpenAI reported that a hidden audio recording device was discovered on 30 September in a TV rear port of an executive conference room at its San Francisco office. The device, encrypted and wrapped in toilet paper, had apparently been in place since 28…
Security Affairs -
AI Agents Build Chrome Exploit in Six Days, Putting 1bn Users at Risk
Researchers at XBOW used a public OpenAI model to assemble a Chrome full-chain exploit in six days, chaining three then-unknown Chrome bugs into a single attack that could run code on Windows simply by loading a webpage. The team deployed AI agents running…
