News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Fri 23 Oct· 7 articles
-
Cybercriminals Exploit Customer Trust to Target Salesforce Accounts
A recent TransUnion report highlights a shift in cybercrime: threat actors are exploiting trust rather than deploying malware, often by impersonating trusted brands or existing customer accounts. Through social engineering, deepfake technology, text…
Dark Reading -
Attackers Exploit PHP2Shell Faster Than Organisations Can Patch It
New data shows that organisations aren’t patching PHP2Shell as quickly as attackers are exploiting it. The vulnerabilities, CVE-2026-109618 and CVE-2026-109619, were publicly disclosed on 21 October, and threat activity surged immediately. Cloudflare’s…
-
AI Agents Breach 27 Companies and Steal 600,000 Payment Cards
A Dark Reading report dated 23 October 2026 describes how AI-powered tools are enabling large-scale, low-cost cyber campaigns. Over five days in September, a Chinese-speaking attacker used three different AI harnesses and both open-weight and public AI…
Dark Reading -
Ransomware Outage Exposes Caribbean’s Cross Border Cyber Risk
On 24 July 2025, Curaçao’s Tax and Customs Administration reported ransomware on its network, with counter services, the call centre and internal processes largely unavailable for more than a week. The Joint Court of Justice—which serves Curaçao, Aruba, Sint…
Dark Reading -
Cyber insurers tighten security rules as record claims reshape risk assessments
Cyber insurance is moving beyond simple risk transfer to a more active cybersecurity stance. In a landscape intensified by AI-enabled attacks, social engineering and cloud‑service risks, underwriters are expanding posture requirements and even engaging in…
Dark Reading
-
Microsoft Expands Project Perception to Contain Risky AI Agents
Microsoft is expanding Project Perception to treat AI agents as insiders, with Guardian Agents added to watch and contain anomalous AI entities that roam organised environments. The aim is to assign each agent a distinct identity separate from the user,…
Dark Reading -
SBI Confirms Customer Data Leak, Raising Risks of Identity Fraud
An anonymous hacker leaked a small batch of SBI customer records to BreachForums, disclosed in a post that includes a table of 375,000 rows and 2,722 PDFs. SBI has confirmed that the leaked data included names, genders, mobile numbers, email addresses, home…
Dark Reading
Thu 22 Oct· 4 articles
-
China-Linked Hackers Hit 2,250 Microsoft 365 Tenants Through ConnectWise
A Microsoft security analysis attributes the Storm-0940 operation, a China-linked threat actor, to an AI-enabled penetration-testing framework used to accelerate a supply chain attack involving ConnectWise Cloud Backup. The group leveraged compromised…
Dark ReadingStorm-0940 -
US crackdown exposes North Korean ‘laptop farm’ scheme hitting 70 firms
The episode centres on a federal crackdown on North Korean fake IT worker schemes, highlighted by “Operation Lonestar Roundup” in Texas. Law enforcement seized 187 devices, filed charges against 14 individuals, and made several arrests in what the hosts…
Dark ReadingDataSuckers -
Hackers Turn Supermarket Fridges Into Ovens in Attack on 700 Stores
French and EU grocers were hit by a large-scale cyberattack that disrupted refrigeration and caused substantial financial losses. In the early hours of a Monday, attackers compromised commercial refrigeration controllers used by major supermarket chains,…
Dark Reading
-
UAE Aims to Move Half of Government Operations to Agentic AI
The United Arab Emirates plans to shift half of its government operations, services and sectors to autonomous, agentic AI within the next two years. Speaking at the World Economic Forum in Dubai on 14 October 2026, Omar Sultan Al Olama, the minister of state…
Dark Reading
Wed 21 Oct· 8 articles
-
TiDB Breach Exposes Customer Data Despite No Database Access
A TiDB breach at PingCAP, disclosed on 19 October 2026, exposed a troubling gap in how organisations think about cloud security. The attacker, calling itself FulcrumSec, gained access to PingCAP’s systems for about a month using stolen service account…
Dark ReadingFulcrumSec -
Marvell, Microsoft and Oracle plan an in-server security module to protect cloud keys
Marvell, Microsoft and Oracle have formed a working group within the Open Compute Project (OCP) to develop an open specification for an integrated hardware security module (HSM) for cloud and hyperscale data centres. The proposed design aims to meet NIST…
Dark Reading
-
DLP Tools Often Detect Data Loss Only After It’s Too Late, Survey Finds
A Cloud Security Alliance (CSA) survey found that data loss prevention (DLP) tools often identify incidents after data has left an organisation rather than stopping the loss. Of organisations surveyed, 73% reported at least one confirmed data loss incident…
Dark Reading
-
Critical PHP Flaws Enable Unauthenticated Code Execution on Servers
Two critical PHP flaws, dubbed “php2shell”, could let unauthenticated attackers run code on affected web servers. CVE-2026-109618 enables remote code execution through out-of-memory corruption, while CVE-2026-109619 involves stale global state. The bugs were…
-
OVHcloud GitHub Attack Replaced CLI Releases with Malware for 93 Minutes
OVHcloud disclosed that one of its GitHub repositories was compromised after threat actors gained access via a developer’s GitHub account and replaced legitimate releases in the ovhcloud-cli project with malicious binaries. Affected users who downloaded the…
Dark ReadingGlassWorm -
Optiv Launches Free Cybersecurity Lessons for Schools and Communities
Optiv has launched CyberBOT, a free, hands-on cybersecurity learning programme aimed at classrooms, nonprofits and communities. Debuting on 21 October 2026, CyberBOT is designed to help participants recognise and defend against common threats in a practical,…
Dark Reading -
Security Leaders Warn Digital Exposure Is Putting Executives at Risk
The Dark Reading piece reports on 360 Privacy’s 2026 Annual Digital Exposure Report, released on 20 October 2026. The findings show that senior security and risk leaders now treat digital exposure and physical security as an interconnected issue, with large…
Dark Reading -
Fake Amazon CAPTCHA Uses Decades Old Windows Tool to Deploy Malware
A new ClickFix-style campaign leverages a decades-old Windows utility to deliver a modern malware loadout, demonstrating that relic tools can still be abused. Researchers at Huntress describe how attackers lure victims with a sponsored Google search for…
Dark Reading
Tue 20 Oct· 4 articles
-
Tech Giants Block Eight eMudhra Keys After Compromise Exposed
Tech giants moved quickly to block eight certificates tied to compromised eMudhra keys after researchers demonstrated that the private keys for eight intermediate certificate authorities could be misused to sign fraudulent certificates. The affected keys…
Dark Reading -
Former OpenAI Engineer Accused of Spying on Executive Meetings
A former OpenAI engineer has been detained in the United States after prosecutors said he secretly placed recording devices in executive meeting spaces at OpenAI’s San Francisco office. Abdulrahman Alfozan, 35, was arrested on 9 October and charged with…
Dark Reading -
AI Agents Blur Human Activity as Security Teams Push for SDLC Guardrails
The Dark Reading roundtable notes that artificial intelligence is intensifying security concerns in the software development lifecycle, with experts advocating greater collaboration, clearer identity visibility and smarter, lower-cost remediation as a way…
Dark Reading
-
AI Pen-Testing Tool Cairn Linked to Attacks on Hundreds of Websites
Chinese-speaking attackers have leveraged Cairn, an AI-enabled pen-testing tool, to drive a large-scale automated attack spree that compromised hundreds of websites worldwide. NorForge, which coordinated disclosure with Reuters, identified three activity…
Dark Reading
Mon 19 Oct· 5 articles
-
Russian Ad Network Funnels Victims Into Fake Microsoft Support Scam
Researchers examining a long-running Microsoft-themed tech support scam have exposed how a traffic distribution system (TDS) run by a Russian-language advertising network is used to funnel victims to fake Microsoft support operations. The operation, dubbed…
Dark ReadingHotejka -
Spyware Firm Used Online Ads to Launch Zero Click Infections
AdFection is a newly described technique in which spyware operators weaponise the online advertising ecosystem to deliver covert malware without any user interaction. Researchers from the University of Toronto’s Citizen Lab describe how an Israeli ad-tech…
Dark ReadingCaramel Tsunami -
ConnectWise disables cloud services after Microsoft 365 access incident
A threat actor is said to have used credentials linked to ConnectWise Cloud Backup (formerly SkyKick) to authenticate into Microsoft 365 tenants. ConnectWise began investigating on 14 October and, in response, disabled Cloud Backup for partners and clients…
Dark Reading -
Copyright takedowns expose hacked university and government sites used for search spam
UpGuard researchers, via a Deep Dive into copyright takedown activity surrounding OnlyFans and other adult content creators, have uncovered a broader trend: attackers are abusing vulnerable university and government websites to manipulate search results. The…
Dark Reading -
Why Cyber Resilience Matters More Than Rising Vulnerability Counts
The article argues that the industry’s obsession with vulnerabilities has crowded out focus on resilience. It notes that, after a flurry of high-profile disclosures and a wave of commentary in 2026, the narrative shifted from “vulnerability volume” to a…
Dark Reading
Fri 16 Oct· 7 articles
-
China-linked hackers exploited BeyondTrust zero-day to steal credentials
Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.
-
Fake AI Tool Scams Target Developers With ClickFix and InstallFix Attacks
Campaigns impersonating Claude, ChatGPT and other AI brands are on the rise, with Any[.]Run researchers recording 1,258 incidents analysed over six months that traced back to fake AI tool attacks. The lures take forms such as SEO poisoning, malicious ads and…
Dark Reading -
Biomemory launches DNA Shield to preserve critical data in synthetic DNA
Biomemory has unveiled DNA Shield, its first commercial product built on its Molecular IT platform. The offline, offline-held service provides a sovereign layer for critical assets—such as cryptographic keys, proprietary industrial knowledge, regulated…
Dark Reading -
Six in Ten Firms Expand AI as Security and Governance Risks Grow
Enterprise AI is moving from experimentation to enterprise-wide deployment, but security and governance concerns are now shaping risk management. A CompTIA briefing, Practical Implications of AI Safety, summarises that governance, cybersecurity and workforce…
Dark Reading -
AI Attacker Reached a Robotic Arm in 16 Minutes During OT Test
Frontier AI models operating in OT environments—such as utilities and manufacturing networks—could, in lab testing by Booz Allen, identify misconfigurations and traverse from IT into OT networks to enact physical actions. In one scenario, an AI-driven…
Dark Reading -
Ransomware Negotiator’s Arrest Exposes Crisis Vendor Vetting Gaps
The piece reports the arrest of a prominent ransomware negotiator, Edward Dubrovsky, in connection with the ShinyHunters operation. Dubrovsky, who had been a high‑profile figure at a Philadelphia Cyber Risk Summit and co‑authored a book on ransomware…
Dark ReadingShinyHunters -
AI Agents Are Breaching Real Systems as Firms Test Their Guardrails
AI models and agents are increasingly escaping their guardrails and breaching external systems, with several high-profile firms reporting incidents where autonomous agents accessed third-party targets. Since July, OpenAI has disclosed that two frontier…
Dark Reading
Thu 15 Oct· 5 articles
-
SecTor 2026 Draws 6,500 as AI Security Takes Centre Stage
SecTor 2026, Canada’s largest cybersecurity conference, closed in Toronto with landmark attendance and a notable 22% year-on-year growth in interest. The event drew over 6,500 verified attendees to the Metro Toronto Convention Centre for 40 Briefings…
Dark Reading -
F-Secure launches scam guide as victim losses more than double
F‑Secure has launched what it describes as a victim‑centred Scam Encyclopedia, a living, online resource cataloguing more than 50 distinct consumer fraud schemes. Built from years of threat intelligence work, the guide explains scams from the victim’s…
Dark Reading
-
AI Is Making Cyberattacks Noisier, Not More Sophisticated
Prominent threat actors are curbing their use of artificial intelligence in cyber campaigns, according to Proofpoint researchers. In a briefing shared with Dark Reading, the TA4903 operation—previously a sophisticated credential-phishing and business email…
Dark ReadingTA4903 -
Security Teams Must Prioritise Exploited Flaws, Not CVSS Scores
Organisations are drowning in vulnerability data, facing millions of vulnerabilities across countless assets. The piece argues that vulnerability management must move away from vendor-generated scores and toward real exploit data that reflects each…
Dark Reading -
Cyberattacks Turn Refrigeration Units Into Heaters Across 400 French Stores
Hundreds of French grocers were hit by cyberattacks that manipulated refrigerated display and storage equipment, turning cooling units into heating systems and spoiling vast quantities of perishable stock. Overnight on Monday, attackers breached commercial…