CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 10–13 on weekend days.

  • On CISA KEV CVEs
  • Other coverage
Show as table
Articles published per day
DayArticles published
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Sun 25 Oct13
Today, Mon 26 Oct0 so far
Exploited only
57 articles

Latest days

Tue 2 Dec 2025· 57 articles

  1. AWS Transform: Agentic AI Automates Legacy Code Modernization and Reduces Technical Debt

    At the re:Invent 2025 conference, AWS announced a sweeping enhancement to its application‑modernisation service, AWS Transform, introducing a new suite of Agentic AI capabilities designed to tackle technical debt and heavy manual modernization tasks. The…

    SecurityOnline
  2. AWS re:Invent 2025: Agentic AI, Marengo 3.0 Video Model, and Visa Payment Partnership

    As AWS re:Invent 2025 unfolds, TwelveLabs unveiled what it calls the “world’s most powerful” video-understanding model, Marengo 3.0, on the Amazon Bedrock platform, while Visa announced a partnership with AWS to advance Agentic Payments enabling AI services…

    SecurityOnline
  3. NVIDIA Invests $2 Billion in Synopsys to Integrate Agentic AI into Chip Design

    NVIDIA and Synopsys have expanded their strategic partnership with a USD 2 billion equity investment in Synopsys, bought at USD 414.79 per share, to push AI and accelerated computing deeper into chip design and related fields. The multiyear agreement will…

    SecurityOnline
  4. AWS re:Invent: Agentic AI Launches with Nova Sonic Voice; Partners with Google Cloud on Networking

    At AWS’s annual re:Invent 2025 conference in Las Vegas, AWS unveiled a major series of enhancements to its Amazon Connect contact centre platform, notably introducing “Agentic AI,” a new generation of autonomous AI agents powered by the Nova Sonic voice…

    SecurityOnline
  5. Privacy Alert: India Mandates Undeletable Sanchar Saathi App on All New Smartphones

    According to Reuters, the Indian government has informed major smartphone manufacturers that they must preinstall the government-developed Sanchar Saathi app on all new devices, and that the software cannot be removed. The Ministry of Communications…

    SecurityOnline
  6. Critical OpenVPN Flaws Fix: Heap Over-Read (CVSS 9.1) and HMAC Bypass Allow DoS Attacks

    The OpenVPN project has issued a security update in the 2.7 series to address two high-severity flaws, including CVE-2025-12106, which carries a CVSS score of 9.1 and stems from insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1. The…

    SecurityOnline
  7. Android Emergency: Critical DoS Flaw and 2 Exploited Zero-Days in Framework Require Immediate Patch

    Google has released the Android Security Bulletin for December 2025, detailing vulnerabilities and active exploitation in the wild, including a critical flaw in the Android Framework that could allow remote attackers to disable devices. Patches are being…

    SecurityOnline
  8. GreyNoise launches free scanner to check if you’re part of a botnet

    On 1 December 2025, GreyNoise Labs announced a free tool called GreyNoise IP Check, which lets users see if their IP address has been observed in malicious scanning operations, including botnets and residential proxy networks. The company says the problem…

    DataBreaches
  9. nopCommerce Flaw (CVE-2025-11699) Allows Admin Takeover by Reusing Session Cookies After Logout

    A security advisory has revealed a vulnerability in nopCommerce, CVE-2025-11699, that could allow an attacker to hijack administrator accounts by reusing session cookies after logout. The flaw stems from nopCommerce failing to invalidate session cookies upon…

    SecurityOnline
  10. Next-Gen Stealer Arkanix Bypasses Chrome App-Bound Encryption Using C++ Process Injection

    A new threat dubbed Arkanix has emerged from G DATA, rapidly evolving from a Python script to a sophisticated C++ stealer capable of bypassing Chrome’s app-bound encryption. The article notes the C++ build uses VMProtect for obfuscation and features a…

    SecurityOnline
  11. CVE-2025-64775: Apache Struts “File Leak” Vulnerability Threatens Disk Exhaustion

    CVE-2025-64775, described as Apache Struts “File Leak,” is a DoS vulnerability that can slowly exhaust disk space by abusing how Struts handles multipart request processing during file uploads. According to The Apache Software Foundation, the flaw allows an…

    SecurityOnline
  12. HHS OCR Seeks Questions About HIPAA Security Rule Risk Management Requirement

    The HHS Office for Civil Rights (OCR) is producing a pre-recorded video for HIPAA covered entities and business associates reviewing the HIPAA Security Rule’s Risk Management implementation specification. According to HHS Office for Civil Rights, OCR…

    DataBreaches
  13. Law enforcement shuts down Cryptomixer in major crypto crime takedown

    Europol announced the seizure of $29M in Bitcoin after shutting down Cryptomixer, a crypto-mixing service used for cybercrime and money laundering, which has allegedly helped launder over EUR 1.3 billion in Bitcoin since its creation in 2016. The operation,…

    Security Affairs
  14. The BOSS Breach: APT36 Pivots to Linux Espionage with “Silent” Shortcuts

    According to CYFIRMA, a prominent state-aligned threat actor known as APT36 (Transparent Tribe) has evolved from targeting Windows to Linux, deploying tailored malware against Indian government-sector Linux environments and adopting a dual-platform delivery…

    SecurityOnlineOperation C-Major
  15. Albiriox: The Russian ‘MaaS’ Android Trojan Redefining Mobile Fraud

    According to Cleafy Threat Intelligence, Albiriox is a newly identified Android banking trojan offered as a Malware-as-a-Service (MaaS), combining on-device fraud capabilities with remote control and real-time interaction. The operation began with a private…

    SecurityOnline
  16. Semiconductor Showdown: Apple and NVIDIA Battle for TSMC’s A16 Capacity

    As AI demand surges, Apple and NVIDIA are locked in a fierce bid for TSMC’s forthcoming angstrom-class A16 capacity, alongside the A14 process, according to information obtained by Digitimes. The piece notes that TSMC is expanding its advanced-node capacity…

    SecurityOnline
  17. ChatGPT Ads Spotted: Monetization Push Underway to Offset $115 Billion in OpenAI Losses

    ChatGPT Ads Spotted: Monetization Push Underway to Offset $115 Billion in OpenAI Losses notes that OpenAI, while commanding a large user base, is facing staggering losses. The piece flags that earlier reports said ChatGPT might add advertising rather than…

    SecurityOnline

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device