News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Fri 23 Oct· 3 articles
-
Capcom ID Breach Exposes Millions of User Records and Emails
Capcom has disclosed a data breach affecting CAPCOM ID, the unified account used for online play and web services across its titles such as Resident Evil, Street Fighter and Monster Hunter. In a notice published on 22 October, the Japanese publisher said…
Infosecurity -
Microsoft 365 Token Theft Lets Attackers Bypass MFA in BEC Campaigns
A new, large-scale business email compromise (BEC) campaign targeted Microsoft 365 environments using token-spraying techniques to access corporate accounts without the attackers needing passwords. Researchers from Huntress identified the operation after a…
Infosecurity -
Third Party Breaches Hit 69% of Victims as Tech Vendors Spread Risk
A new Kroll report finds that more than two-thirds (69%) of data breach victims in the past year were affected by a third-party breach, with 79% of those individuals’ data accessed following a compromise at a technology company during June 2025 to June 2026.…
Infosecurity
Thu 22 Oct· 5 articles
-
EU Probes Booking.com Over Security and Phishing Risks
The European Commission has opened formal proceedings against Booking[.]com to assess potential security failings under the EU’s Digital Services Act (DSA). The investigation will determine whether the online travel platform complied with the DSA’s…
Infosecurity -
Iranian hackers use US servers and Telegram to hide spyware campaigns
An Iranian nation-state threat group known as Prince of Persia has been found hosting its command-and-control (C2) infrastructure in the United States to support malware delivery and cyber-espionage campaigns. The activity was uncovered by Semperis, which…
InfosecurityInfy -
AI-Powered Attack on ConnectWise Took Cloud Services Offline
A Chinese state-aligned actor, tracked as Storm-0940, used an agentic AI penetration testing framework called ARTEX to compromise Microsoft 365 tenants used by ConnectWise, leading to multiple ConnectWise cloud services going offline. Microsoft assessed that…
InfosecurityStorm-0940 -
Attackers Targeted PHP2Shell Flaws Four Days Before Disclosure
Threat intelligence analysts now observe large-scale evidence of exploitation of the two critical PHP vulnerabilities
Infosecurity -
Cloud Misconfigurations Drive 45% of Critical Incidents, SANS Finds
Nearly all organisations now operate production workloads in the cloud, yet the 2026 SANS Cloud Security Survey Insights shows a clear maturity gap. Based on 400 IT and security professionals, the report finds that only about 40% regard their cloud security…
Infosecurity
Wed 21 Oct· 6 articles
-
AI Powered Athena Phishing Platform Uses Cloaking to Evade Detection
A new phishing-as-a-service (PhaaS) platform, Athena StealthRoute, has been identified as using AI tools to both craft and conceal phishing attacks. Researchers from Abnormal AI first spotted its infrastructure during an August 2026 phishing campaign. They…
InfosecurityAthena StealthRoute -
AI Agent Ran 100,000 Autonomous Actions in Cyber-Attack Campaign
Security researchers at Symantec’s Threat Hunter Team uncovered a self-directed AI agent capable of running a full cyber-attack with minimal human input, including up to 100,000 autonomous actions such as vulnerability scanning, exploitation, credential…
Infosecurity -
Ransomware Attacks Jump 50% as Data Theft Replaces Encryption
Ransomware activity rose sharply in the third quarter of 2026, with almost 2,894 attacks recorded between July and September. Nord Security’s analysis shows a 50% year‑on‑year increase, alongside an 8.6% rise from the previous quarter, suggesting that law…
InfosecurityThe Gentlemen -
SafePay Ransomware Hits 600 Critical Infrastructure Organisations
The SafePay ransomware group has compromised at least 600 critical infrastructure organisations worldwide, according to a joint advisory from US, German and UK government agencies led by CISA. Since first appearing in August 2024, SafePay has impacted a…
InfosecuritySafePay -
PHP2Shell flaws threaten remote code execution across PHP websites
Two critical PHP remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, were disclosed ahead of the security patches scheduled for 21 October 2026. Together dubbed “PHP2Shell”, the vulnerabilities were due to be announced at 2pm GMT alongside…
-
Ransomware Attack Exposed Welsh Children’s Data Through ‘Password1’ Test Account
Thousands of children and their families were affected when ransomware attackers breached Data Cymru, the Local Government Data Unit – Wales, via a long-standing test account that was protected by the password “Password1”. The ICO’s investigation found that…
Infosecurity
Tue 20 Oct· 4 articles
-
65% of Firms With $10 Billion Revenue Now Have AI Security Chiefs
A new survey suggests that the role of head of AI security is quickly becoming commonplace in the largest firms. Among organisations with annual revenues of $10 billion or more, about 65% have established a head of AI security, with around 18% creating the…
Infosecurity -
OpenCode AI Tool Patched After Flaw Let Remote Servers Run Code
A critical remote code execution vulnerability in the OpenCode AI coding tool was quietly patched after researchers revealed that users running certain versions could be exploited during the MCP OAuth authentication process. The flaw affected OpenCode…
Infosecurity -
AI Agents Are Outpacing Security Controls, Splunk Report Finds
AI agent adoption is accelerating across organisations, but Splunk’s State of Observability report highlights a widening gap between rollout and accompanying security controls. The article notes that many businesses deploy AI agents rapidly without clear…
Infosecurity -
Attackers exploit Siemens Software Center flaw to spread malware via ClickFix
Siemens has warned customers that attackers are actively exploiting a dynamic link library (DLL) side-loading flaw in its Software Center to distribute malware. The activity is linked to the Romulus multi-platform ClickFix campaign, a server hosting panel…
Mon 19 Oct· 5 articles
-
Known exploited flaws take 87 days to patch as AI threats grow
A Moody’s report has found that known exploited vulnerabilities take a median 87 days to be patched, meaning half of such flaws remain unremediated for at least three months after disclosure. For vulnerabilities with no known exploitation evidence, the…
Infosecurity -
Conduent to Pay $80 Million Over Breach Affecting 62 Million People
Conduent has agreed to pay $80 million to settle a class action linked to a 2024 cyber incident that exposed personal and health data for about 62 million people. The filing to the US District Court for the District of New Jersey on 16 October 2026 outlines…
Infosecurity -
OpenCode Breach May Have Exposed AI Provider Keys to Attackers
OpenCode, the open-source AI agent framework provider, confirmed a security breach that impacted its Console service—the component that stores and authenticates access to API credentials for teams using OpenAI, Anthropic and Google AI models. The incident…
Infosecurity -
ConnectWise Takes Cloud Services Offline After Microsoft 365 Breach
ConnectWise has suspended access to several cloud services after detecting unauthorized access to Microsoft 365 tenants. The investigation began on 15 October, with the company confirming on 19 October that the attackers accessed application identities…
Infosecurity -
US Cybersecurity Job Postings Fall 26%, CISO Roles Plunge 39%
US cybersecurity job postings fell by 26.4 per cent year on year from January to September 2026, according to CyberSN’s analysis. A total of 235,786 cybersecurity roles were posted in 2026 on JobSpikr, the lowest figure in the four years CyberSN has tracked…
Infosecurity
Fri 16 Oct· 3 articles
-
Ransomware Gangs Turn to Physical Threats to Pressure Staff and Families
Ransomware gangs are increasingly combining cyber extortion with threats of physical harm to senior staff, the latest report from Semperis has warned. The 2026 Ransomware Risk Report, published on 14 October, notes that a quarter of campaigns now use…
Infosecurity -
China-Linked Hackers Exploited BeyondTrust Flaw to Install Root Backdoor
A suspected China state-backed actor, Armory Castle, exploited a newly disclosed critical vulnerability in BeyondTrust Remote Support, CVE-2026-102764, to gain access and escalate privileges on affected appliances. Google warns this allowed the group to…
-
Cyber Incident Halts US Bankruptcy Notices Nationwide
A cybersecurity incident has disrupted the US federal bankruptcy process by taking offline the systems that generate and distribute bankruptcy notices. The Administrative Office of the US Courts confirmed on 15 October that the IT systems and websites…
Infosecurity
Thu 15 Oct· 5 articles
-
Danfoss StoreView Exposure Plunges After French Supermarket Cyberattack
Internet-exposed Danfoss StoreView controllers in France have been disappearing from public view at a rapid pace in the wake of a cyber incident affecting hundreds of French supermarkets’ food supplies. Censys researchers reported a 71% drop in…
-
Aoki Infostealer Targets AI Coding Credentials to Hijack Developer Accounts
New versions of the Aoki infostealer are targeting credential and session files used by popular AI coding assistants, according to a Symantec report. The latest development marks a shift from earlier Aoki variants, which focused on browser data,…
InfosecurityAoki -
LiteLLM flaws could hand attackers admin access and expose AI keys
Two high‑risk vulnerabilities have been disclosed in LiteLLM, a widely adopted open‑source LLM gateway tool used to connect AI applications to providers including OpenAI, Google and Anthropic. The flaws, tracked as CVE-2026-35029 and CVE-2026-59823, affect…
-
Microsoft Dismantles Phishing Marketplace Behind 1 Billion Messages
Microsoft and law enforcement partners say they have dismantled a large-scale phishing ecosystem built around Yam Store, an underground marketplace tracked by Microsoft as Storm-3119. The operation unraveled after Microsoft and Japanese police investigated a…
InfosecurityStorm-3119 -
UK Police Reprimanded for Uploading 179 People’s Data to Unvetted Platform
The Information Commissioner’s Office (ICO) has issued a reprimand and enforcement notice to the Metropolitan Police Service (MPS) over governance failings linked to its use of the Auror third‑party platform for crime intelligence and shoplifting operations.…
Infosecurity