News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Tue 20 Oct· 86 articles
-
PHP Prepares Critical RCE Fixes as Leaked Flaws Raise Alarm
PHP announced a security release for 21 October 2026 at 14:00 UTC to address two critical flaws, CVE-2026-109618 and CVE-2026-109619. The article says leaks describe them as remote code execution vulnerabilities and rate them CVSS v4.0 9.2. PHP’s advance…
-
Cloudflare Warns Compromised Certificate Keys Could Enable Server Impersonation
On 19 October 2026, Cloudflare disclosed that private keys tied to eight eMudhra intermediate certificates were compromised. The certificates were widely trusted across browsers, operating systems, and Cloudflare’s own services. Because the keys are weak, an…
Cloudflare -
Tech Giants Block Eight eMudhra Keys After Compromise Exposed
Tech giants moved quickly to block eight certificates tied to compromised eMudhra keys after researchers demonstrated that the private keys for eight intermediate certificate authorities could be misused to sign fraudulent certificates. The affected keys…
Dark Reading -
CISA Flags Actively Exploited Siemens Software Center Flaw
CISA added CVE-2026-110936 to its Known Exploited Vulnerabilities (KEV) catalogue on 20 October 2026. The vulnerability affects Siemens Software Center and is an uncontrolled search path element flaw that could let an authenticated local attacker execute…
-
CISA Flags Actively Exploited Plex Server SSRF Flaw
CISA added CVE-2026-96652 to its Known Exploited Vulnerabilities (KEV) catalogue on 20 October 2026. The vulnerability affects Plex Media Server and is a server-side request forgery (SSRF) flaw that can make the server send a POST request to a destination…
-
CISA Flags Actively Exploited Plex Media Server Flaw for Patching
CISA added CVE-2026-96654 to its Known Exploited Vulnerabilities (KEV) catalogue on 20 October 2026. The flaw affects Plex Media Server and could let an attacker call functions belonging to other plugins and supply their own parameters. The vulnerability,…
-
CISA Flags Exploited Plex Flaw That Can Reach Internal Systems
CISA added CVE-2026-96655 to its Known Exploited Vulnerabilities (KEV) catalogue on 20 October 2026. The vulnerability affects Plex Media Server and is a server-side request forgery (SSRF) flaw that could let an authenticated user make the server request…
-
CISA Confirms Active Exploitation of Plex Media Server Flaw
CISA added CVE-2026-96656 to its Known Exploited Vulnerabilities (KEV) catalogue on 20 October 2026. The vulnerability affects Plex Media Server and is an external control of file name or path flaw that can let an admin user write arbitrary files that may…
-
CISA Flags Exploited SiteGuard Flaw That Could Give Attackers System Control
CISA added CVE-2026-106931 to its Known Exploited Vulnerabilities (KEV) catalogue on 20 October 2026. The vulnerability affects EG Secure Solutions SiteGuard Server Edition and is an OS command injection flaw that may let an attacker run arbitrary operating…
-
Browsers block eight eMudhra certificates after weak keys risk trusted forgeries
Eight TLS intermediate certificates belonging to India-based CA eMudhra Limited have been found with dangerously weak private keys that could allow an attacker to mint trusted credentials for any site. By late morning on 20 October 2026, browser makers and…
Ars Technica -
Former OpenAI Engineer Accused of Spying on Executive Meetings
A former OpenAI engineer has been detained in the United States after prosecutors said he secretly placed recording devices in executive meeting spaces at OpenAI’s San Francisco office. Abdulrahman Alfozan, 35, was arrested on 9 October and charged with…
Dark Reading -
Nikkei says stolen credentials exposed 1.83 million records in cloud breach
Nikkei disclosed a data breach affecting over 1.8 million records after hackers used stolen credentials to access a cloud service for system development. Japanese media company Nikkei has disclosed a data breach affecting more than 1.8 million records. The…
Security Affairs -
Browsers Block Eight Compromised eMudhra Certificate Authority Keys
Eight intermediate certificate authority (CA) keys from Indian firm eMudhra have been compromised, triggering emergency fixes across major browsers and software ecosystems. Mozilla and Google’s Chrome Root Program confirmed the breach on 20 October 2026. The…
-
Palo Alto Networks PAN-OS2 articles this day · The Hacker News first
Ransomware gangs exploit patched Palo Alto VPN security flaw · Qilin and INC ransomware gangs exploit Palo Alto VPN flaw to bypass MFA
-
Ransomware gangs exploit patched Palo Alto VPN security flaw
Palo Alto Networks has disclosed that exploitation of a vulnerability in PAN-OS and Prisma Access continues to be observed by ransomware actors, despite the flaw being patched earlier this year. The flaw, tracked as CVE-2026-0257, is an authentication bypass…
-
Qilin and INC ransomware gangs exploit Palo Alto VPN flaw to bypass MFA
Palo Alto Networks has disclosed that exploitation of a patched PAN-OS and Prisma Access flaw, CVE-2026-0257 (CVSS 7.8), is continuing in financially motivated campaigns. The vulnerability is an authentication bypass that could allow attackers to establish…
-
-
Google Cloud London Outage Disrupts Revolut Payments Across Europe
A London outage affecting Google Cloud has disrupted Revolut’s banking services across Europe, with the company and Reuters noting a direct link between the Google Cloud disruption in Google’s europe-west2 data centre and Revolut’s service outage. The…
Security Affairs -
NIST, NSA and CISA Outline 10 Steps to Contain Rogue AI Agents
NIST, the NSA and CISA have published a joint set of ten voluntary practices aimed at helping organisations prepare for, detect, respond to, recover from, and report rogue or misbehaving AI agents. The guidance, framed around the concept of super…
SecurityWeek -
FortiSIEM flaw lets unauthenticated attackers execute code remotely
Fortinet’s FortiSIEM has a newly publicised vulnerability, tracked as CVE-2026-106173, labelled a critical path traversal flaw that allows unauthenticated remote code execution. Fortinet’s advisory puts the CVSS at 9.4 and notes patches were released last…
-
AI Agents Blur Human Activity as Security Teams Push for SDLC Guardrails
The Dark Reading roundtable notes that artificial intelligence is intensifying security concerns in the software development lifecycle, with experts advocating greater collaboration, clearer identity visibility and smarter, lower-cost remediation as a way…
Dark Reading -
65% of Firms With $10 Billion Revenue Now Have AI Security Chiefs
A new survey suggests that the role of head of AI security is quickly becoming commonplace in the largest firms. Among organisations with annual revenues of $10 billion or more, about 65% have established a head of AI security, with around 18% creating the…
Infosecurity -
AI Pen-Testing Tool Cairn Linked to Attacks on Hundreds of Websites
Chinese-speaking attackers have leveraged Cairn, an AI-enabled pen-testing tool, to drive a large-scale automated attack spree that compromised hundreds of websites worldwide. NorForge, which coordinated disclosure with Reuters, identified three activity…
Dark Reading -
AI-Powered Antidetect Browsers Fuel Scaled Social Media Fraud
Check Point Research warns that AI-powered antidetect browsers are driving a new wave of online fraud and coordinated influence operations. The report highlights three leading tools—Kameleo, AdsPower, and MultiLogin—that enable a single operator to run…
Check Point -
AI Agents Target 1,200 Retail Sites in Low Cost Hacking Campaign
A security researcher has watched attackers deploy autonomous AI agents against more than 1,200 retail and service websites, with at least 100 organisations affected. The activity centred on Cairn, an open‑source AI tool, whose exposed control panels were…
-
OpenCode AI Tool Patched After Flaw Let Remote Servers Run Code
A critical remote code execution vulnerability in the OpenCode AI coding tool was quietly patched after researchers revealed that users running certain versions could be exploited during the MCP OAuth authentication process. The flaw affected OpenCode…
Infosecurity -
AOMEI Backupper Update Attack Exposed Millions to Malware and Credential Theft
In SecurityWeek’s report, AOMEI Backupper, a Windows backup, sync and disk cloning tool used by about 186 million people, was compromised in a short-burst supply chain campaign between April and July 2026. Unlike traditional long-running supply chain…
SecurityWeekUNC7017 -
AI Coding Risks Are Growing Faster Than Security Controls Can Keep Up
The SecurityWeek article, dated 20 October 2026, argues that the security risk posed by agentic AI in software development isn’t simply a race for speed, but a need for maturity. It explains that as organisations deploy AI tools—from basic assistants to…
SecurityWeek -
ICO Censures Two Welsh Organisations After Ransomware Exposes Children’s Data
Two Welsh organisations have been censured by the UK Information Commissioner’s Office (ICO) after a ransomware incident led to the theft of personal data belonging to about 3,300 individuals, the vast majority of whom were children. The organisations…
DataBreaches -
Former Hacker Links Egypt Exchange Fire to Alleged SCADA Intrusion
In a post dated 20 October 2026, DataBreaches[.]net recounts a developing cybercrime narrative centered on a 19-year-old figure known as Pryx, who Reuters had introduced as a former cybercriminal claiming to have abandoned hacking and started a cybersecurity…
DataBreachesPryx -
Frontier pays $625,000 after breach exposed data of 58,841 residents
Connecticut Attorney General William Tong announced a $625,000 settlement with Frontier Communications Parent Inc., concluding an investigation into a April 2024 data breach that exposed sensitive personal information, including Social Security numbers, of…
DataBreaches -
US Orders Civilian Agencies to Remove DeepSeek AI Technology
The United States has banned the Chinese artificial intelligence startup DeepSeek from civilian government agency systems. The Department of Homeland Security issued an order requiring federal civilian agencies to remove DeepSeek-related technology from…
DataBreaches -
Ahold Delhaize cyberattack disrupts online orders across Europe and US
Ahold Delhaize faced a cyberattack that caused a disruption to its online services, including orders and deliveries across Europe and the United States. The company took its systems offline on 12 October 2026 as a precautionary measure after detecting a…
SecurityWeek -
Cloudflare’s Rust TypeScript compiler reaches 8x speed in early tests
Cloudflare and VoidZero are working with Max Schwenk of Owner.com on `tsrs`, an experimental Rust port of the TypeScript compiler, developed within the Oxc toolchain and in collaboration with the TypeScript team. Cloudflare says it is not a fork: the project…
Cloudflare -
Serbian university rector’s iPhone infected with Pegasus spyware before election
The Citizen Lab confirmed that the iPhone of Vladan Đokić, the rector of the University of Belgrade and a notable figure in Serbia’s student protests, was infected with Pegasus spyware in 2026. The finding, announced on 19 October 2026, came six days before…
The Hacker News -
AI Agents Abuse Cairn to Attack Hundreds of Websites Worldwide
Norforge, an AI security firm, has found that multiple threat actors have been abusing the open-source AI platform Cairn to automate offensive operations across hundreds of websites worldwide. Cairn acts as a general-purpose problem-solving engine where AI…
SecurityWeek -
Parkview Health Disables Network After Suspected Cyber Incident
Parkview Health in Indiana reported a suspected cyber incident that led to the disabling of its network on or around 18 October 2026. The outage affected patient-facing services, with MyChart and online provider searches unavailable and appointment reminders…
DataBreaches -
Android May Link Your Google Accounts Through One Phone Number
Google users on Android may find that their phone number becomes attached to all Google accounts signed in on the same device. Malwarebytes reports that Google’s own documentation confirms phone number verification is on by default and applies to both…
Malwarebytes -
30 Questions Help Buyers Separate Real AI Pentests From Hype
SOCRadar’s article presents a structured buyer’s guide to AI-powered pentesting tools, arguing that AI-focused products span a spectrum from fully autonomous attack orchestration to language-model–summarised vulnerability scanners. It offers a concrete…
SOCRadar -
Meta AI Chats Expose Sensitive Data Through Discoverable Links
Muse, the new general-purpose AI agent from Meta, can expose sensitive information when users share conversations through Web links, researchers reported Monday. Like many online services, Muse allows users to share searches, conversations, images, and…
Ars Technica -
Former OpenAI Engineer Accused of Hiding Audio Bug in Conference Room
A former OpenAI engineer, Abdulrahman Alfozan, has been charged with secretly installing an audio recording device in a conference room used for high-level discussions. Prosecutors say the device was concealed in toilet paper and plugged into a USB port on…
SecurityWeek -
AI Agents Are Outpacing Security Controls, Splunk Report Finds
AI agent adoption is accelerating across organisations, but Splunk’s State of Observability report highlights a widening gap between rollout and accompanying security controls. The article notes that many businesses deploy AI agents rapidly without clear…
Infosecurity
