News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Fri 23 Oct· 9 articles
-
MacOS Ransomware Rebuilds Itself to Evade Detection, Researcher Finds
Heartbreaker, a Rust-based macOS ransomware sample, has surfaced in SecurityWeek’s roundup after researcher Patrick Wardle found it on VirusTotal. Uploaded in May 2025 and still undetected at the time of reporting, it seeks persistence via a LaunchAgent,…
SecurityWeek -
Mirai Botnet Tries to Exploit PHP2Shell, but Finds No Way In
Researchers have linked attempts to exploit PHP2Shell to a Mirai-derived botnet, with new ASLR-bypass exploits emerging, though no confirmed in‑the‑wild compromise has yet been demonstrated. Two days after PHP issued emergency fixes for the PHP2Shell flaws,…
-
China-Linked Hackers Use AI Framework in ConnectWise Supply-Chain Attack
A China-linked threat actor known as Storm-0940 has been using the open‑source AI penetration testing framework Artex to automate intrusions into ConnectWise customers’ environments, Microsoft reported. The activity, active since at least 2021, ramped up in…
SecurityWeekStorm-0940 -
Arista VeloCloud Flaw Marks Third Exploited Orchestrator Zero-Day
Arista Networks has released patches for a third exploited zero-day in its VeloCloud Orchestrator (VCO), a central management tool used in software-defined networking. The vulnerability, tracked as CVE-2026-114625, is a critical SQL injection that can be…
-
Capcom Breach Exposes Email Addresses of 11.7 Million Users
Capcom has disclosed a data breach affecting CAPCOM ID, its shared service used for online access and gaming. The incident was detected on 19 October 2026 and involved unauthorised access to CAPCOM ID. The attackers stole the email addresses of 11,774,247…
SecurityWeek -
Quest Diagnostics probes unauthorised access to patient records in Quanum platform
Quest Diagnostics has disclosed a cyber incident affecting its Quanum Lab Services Manager, a platform used by some clients to place test orders and access results. In a regulatory filing, the company said it learned of unauthorized access to this system…
SecurityWeek -
Compromised LiteLLM Update Stole Secrets and Fueled Cloud Abuse
LiteLLM was compromised in a contemporary supply‑chain incident, with malicious packages pushed to PyPI and Docker Hub. The attackers abused GitHub CLI OAuth tokens that had been leaked from an internal LiteLLM deployment exposed to the public internet. They…
SecurityWeek -
Atlassian Flags 162 High and 14 Critical Flaws in Server Products
Atlassian’s October bulletin lists 176 vulnerability entries, including 14 critical-severity issues, all in third-party components.
-
Iranian Hackers Resume Data Theft Using US Based Command Servers
Prince of Persia, a government-sponsored Iranian threat group also known as Infy, resurfaced its command-and-control (C&C) infrastructure in the United States for the first time since 2016, according to Semperis. After a three-month lull in operations, the…
SecurityWeekInfy
