News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Wed 10 Dec 2025· 58 articles
-
OpenAI, Anthropic, Google Unite: Launch Agentic AI Foundation Under Linux
OpenAI, Anthropic, Google Unite: Launch Agentic AI Foundation Under Linux reports that the Agentic AI Foundation (AAIF) is being established as a dedicated fund under the Linux Foundation, with founding members including Anthropic, OpenAI, and Block and…
SecurityOnline -
The “Surprise Metric”: Google’s New AI Architecture Outperforms GPT-4 in Memory
On 10 December 2025, Google unveiled two innovations—the Titans architecture and the MIRAS framework—designed to enable AI models to “read while remembering,” dynamically updating core memory in real time as they process vast information. The breakthrough…
SecurityOnline -
Seamless Sign-In: Microsoft WebView2 Gets Entra ID for Enterprise Auth
On 10 December 2025, the Daily CyberSecurity article reports that Microsoft’s WebView2, the browser-based control used to embed web content in native Windows applications, will gain Entra ID authentication for enterprise sign‑in. Beginning with the…
SecurityOnline -
Apple’s Walls Fall: iOS and Android Interoperability is Finally Here
For users hoping to move between iOS and Android, Google has begun allowing the Pixel 10 series to transfer data wirelessly to iPhones, with industry chatter suggesting a deeper, system‑level integration for migration beyond the current Switch to Android…
SecurityOnline -
UK Sanctions Russian and Chinese Firms Suspected of Being ‘Malign Actors’ in Information Warfare
According to Associated Press, Britain announced sanctions on Russian and Chinese entities regarded as malign actors in information warfare, signalling a broader effort to counter hybrid threats. The measures target the Telegram microblogging channel Rybar…
SecurityWeek -
CISA KEV Alert: WinRAR Zero-Day Used for Malware Injection and Windows UAF RCE Under Active Attack
According to CISA KEV, the agency has added two critical vulnerabilities to its Known Exploited Vulnerabilities Catalog, with active exploitation observed in the wild. The first, CVE-2025-6218, affects WinRAR 7.11 and earlier on Windows and can be exploited…
SecurityOnline -
Critical Fortinet Flaw Risks Unauthenticated Admin Bypass via FortiCloud SSO SAML Forgery
Fortinet has issued an urgent security advisory about a critical vulnerability that could allow unauthenticated attackers to bypass FortiCloud Single Sign-On and potentially gain admin access via a forged SAML token, a flaw rated 9.1 on the CVSS scale. The…
SecurityOnline -
Microsoft Patches Three Zero-Days Including Active Cloud Files UAF to SYSTEM and Copilot RCE
Microsoft wrapped up December with a Patch Tuesday that fixes three zero-day vulnerabilities alongside a broader update addressing 72 flaws across its ecosystem. The most urgent fix targets the Windows Cloud Files Mini Filter Driver, tracked as…
SecurityOnline -
Critical Ivanti EPM Flaw (CVE-2025-10573) Risks Admin Session Hijack and Unauthenticated RCE
Ivanti has rolled out an urgent security update for Endpoint Manager (EPM), patching a cluster of vulnerabilities that could allow attackers to execute arbitrary code or hijack administrator sessions. The most severe flaw, CVE-2025-10573, is a Stored XSS…
SecurityOnline -
OpenAI ‘Code Red’: Sam Altman Halts Projects to Battle Google and Fix a Sycophancy Crisis
OpenAI chief executive Sam Altman has reportedly ordered an internal “Code Red” with an eight-week freeze on non-core projects, including the Sora video-generation model, directing all available resources to improve ChatGPT’s performance and engagement to…
SecurityOnline -
IBM Spends $11 Billion on Confluent to Build Its AI ‘Intelligent Data Platform’
IBM has agreed to acquire Confluent for $31 per share in cash, in an all-cash deal valued at approximately $11 billion, a move that follows its earlier acquisitions of Red Hat and HashiCorp to bolster hybrid cloud and data infrastructure. Confluent, based in…
SecurityOnline -
GrayBravo MaaS Deploys CastleRAT Backdoor, Hiding C2 with Steam Profile Dead Drop Resolvers
According to Insikt Group (Recorded Future), GrayBravo MaaS is powering a tiered threat ecosystem that includes CastleLoader and the newly discovered CastleRAT, a remote access trojan capable of stealing credentials, logging keystrokes and capturing screens.…
SecurityOnlineGrayBravo -
High-Severity Rockwell Flaws Risk Industrial SQLi Data Tampering and Safety Device DoS Requiring Manual Fix
Rockwell Automation has issued security advisories for two major flaws affecting its industrial cloud platform and safety communications hardware. The most severe vulnerability, CVE-2025-12807, is in FactoryTalk DataMosaix Private Cloud and carries a high…
SecurityOnline -
Itch.io Targeted: Lumma Stealer Deployed Via Fake Updates and Reflective Node.js Loader
A sophisticated malware campaign has infiltrated the indie gaming platform Itch[.]io, using deceptive “game update” lures to distribute Lumma Stealer, according to G DATA Security Lab. Security researchers say threat actors are spamming the comments sections…
SecurityOnline -
Critical n8n RCE Flaw (CVE-2025-65964) Allows Remote Code Execution via Git Node Configuration Manipulation
A critical RCE vulnerability has been disclosed in n8n (CVE-2025-65964), which affects the Git node used to interact with version control within automation workflows. The flaw allows attackers to execute arbitrary code on the host by weaponising the…
SecurityOnline -
FrostBeacon Hits Russian B2B: Cobalt Strike Deployed via LNK and Chained Legacy Exploits
A new cyber campaign dubbed “Operation FrostBeacon” is targeting business-to-business (B2B) enterprises across the Russian Federation, with Seqrite Labs describing a dual infection strategy that culminates in deploying Cobalt Strike beacons for persistent…
SecurityOnline -
Critical ZITADEL Flaws (CVE-2025-67494, CVSS 9.3) Risk SSRF Internal Breach and Account Hijack via XSS
SecurityOnline[.]info reports three high‑severity ZITADEL flaws in its V2 Login UI, led by CVE-2025-67494 with a CVSS of 9.3 that enables unauthenticated SSRF and potential internal breach via a manipulated URL resolution process. According to the advisory,…
SecurityOnline -
Japanese Firms Suffer Long Tail of Ransomware Damage
More than two months after ransomware disruptions began, Japanese food and beverage group Asahi Holdings continues to report back‑office disruptions and warned of a possible data breach affecting 1.9 million people, a sign of the long tail of recovery for…
Dark Reading
