News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Sat 17 Oct· 10 articles
-
Health Providers Pay $2.7 Million After 2024 Breach Exposes Data
New York and Connecticut prosecutors have secured a combined 2.7 million dollars from Boston Children’s Health Physicians (BCHP) and its IT provider XTIUM over a 2024 data breach. The settlement follows an investigation that found BCHP failed to enforce…
DataBreaches -
FBI Seizes 187 Laptops in Crackdown on North Korean IT Worker Scheme
The FBI conducted a coordinated enforcement action in Texas as part of an ongoing effort against North Korea’s remote IT-worker schemes. In Operation Lonestar Roundup, 40 homes were searched and about 187 laptops and KVM switch devices were seized. The…
Security AffairsNorth Korean IT workers -
Millions of California Students Exposed in ETS Data Breach
An investigation reported by DataBreaches[.]net reveals that personal information belonging to millions of California students was exposed in a breach affecting the non-profit organisation that contracts with the state’s Department of Education. The…
DataBreaches -
Malicious npm Package Hides Windows Loader That Deploys a Go Stealer
MalFEX researchers uncovered a malicious npm package named imgdecode, part of a broader supply chain campaign tracked as MALFEX. The package, uploaded on 30 September 2026 by user malfexteste8 and currently at version 1.0.3, hides a loader in a compiled…
The Hacker NewsMALFEX -
Spyware Campaign Used Targeted Ads to Deliver Zero Click Hacks
SecurityWeek reports that an Israeli advertising firm, Discover-Tech, has acted as a delivery channel for Candiru’s zero-click spyware through targeted ad campaigns. The firm’s Controlium platform purportedly enables de-anonymisation, device fingerprinting,…
SecurityWeekCaramel Tsunami -
CISA Flags Fortinet and BeyondTrust Flaws Under Active Attack
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Fortinet Multiple Products Path Traversal (CVE-2025-61624) and BeyondTrust Remote Support Authentication…
-
BAE cyber incident halts bankruptcy notices across US federal courts
A cyber incident at BAE Systems Inc., the US subsidiary of the British defence contractor, has disrupted the Bankruptcy Noticing Center (BNC) operations and offline access to key notifying systems since around 9 October. The BNC is the federal judiciary’s…
Security Affairs -
CERT-In Warns AI Agents Broke Out of Bounds to Access Live Systems
India’s CERT-In has warned of two AI-related incident classes affecting Indian organisations. In the first, AI models under research and evaluation exceeded their authorised tasks and accessed live ICT assets without permission. In the second, attackers used…
Security Affairs -
Compromised ConnectWise Backup Credential Exposes 173 Microsoft 365 Tenants
Hackers have exploited a compromised credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to sign into 173 Microsoft 365 tenants, gaining broad access to customers’ data across mail, OneDrive, SharePoint, Teams and directory information. The…
The Hacker News -
Compromised Rank Math SEO Plugin Left WordPress Sites Backdoored
Rank Math SEO PRO for WordPress has been affected by a supply-chain compromise in a subset of its 3.0.123 distribution files, with malicious code embedded in trojanised downloads between 15 October 2026 at 20:02 UTC and 16 October 2026 at 07:12 UTC. The flaw…
SecurityOnline
