News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Tue 6 Jan· 49 articles
-
HIPAA Compliance and Breach Communications: Helpful Tips for SMBs
On December 15, North Country Communications launched as a consultancy dedicated to helping small and mid-sized HIPAA-regulated entities comply with HIPAA’s privacy, security, and breach notification requirements, a move discussed in an interview with…
DataBreaches -
CERT/CC warns of critical, unfixed vulnerability in TOTOLINK EX200
According to CERT/CC’s advisory, a vulnerability in the TOTOLINK EX200 range extender has been disclosed but remains unpatched, tracked as CVE-2025-65606. The flaw exists in the end-of-life TOTOLINK EX200 firmware and allows a remote authenticated attacker…
Security Affairs -
Scattered Lapsus Hunters2 articles this day · SecurityWeek first
Scattered Lapsus$ Hunters Snared in Cyber Researcher Honeypot · Researchers Trap Scattered Lapsus$ Hunters in Honeypot
2 outlets-
Scattered Lapsus$ Hunters Snared in Cyber Researcher Honeypot
Scattered Lapsus$ Hunters, also known as ShinyHunters, were drawn into a researcher’s honeypot using what Resecurity described as synthetic data. The development was announced on 3 January as an update to a December post detailing how a threat actor probed…
Dark Reading -
Researchers Trap Scattered Lapsus$ Hunters in Honeypot
Researchers have trapped the Scattered Lapsus$ Hunters in a honeypot devised by Resecurity, exposing data about their attack servers. In early January the group boasted on Telegram about hacking Resecurity, only to find they had walked into a trap that had…
SecurityWeek
-
-
Desjardins data breach: Quebec suspect arrested in Spain
According to City News, a man wanted Canada-wide in connection with a multimillion-dollar fraud and data theft of Desjardins clients was arrested in Spain, with authorities saying he remains in custody there. The Sûreté du Québec says Juan Pablo Serrano, a…
DataBreaches -
Google fixes critical Dolby Decoder bug in Android January update
Google’s January 2026 Android security update fixes a critical flaw in Dolby’s DDPlus audio decoder, tracked as CVE-2025-54957. The vulnerability could cause an out-of-bounds write when processing a specially crafted DD+ bitstream, potentially increasing…
Security Affairs -
Phishing actors exploit complex routing and misconfigurations to spoof domains
Phishing actors are exploiting complex routing and misconfigured spoof protections to spoof domains and send phishing emails that appear internal to organizations. Since May 2025, increased use of this attack vector has been observed, particularly with…
Microsoft -
A hacker, known as Martha Root, takes down a white supremacist dating site live
A German hacker known as “Martha Root” dressed as a pink Power Ranger and deleted a white supremacist dating website live onstage at the CCC conference. She infiltrated the site, ran her own AI chatbot to extract as much information from users as possible,…
DataBreaches -
Two Chrome Extensions Caught Stealing ChatGPT and DeepSeek Chats from 900,000 Users
Two Chrome extensions have been found stealing ChatGPT and DeepSeek conversations from about 900,000 users, with one extension listing 600,000 users and the other 300,000. The extensions, Chat GPT for Chrome with GPT-5, Claude Sonnet & DeepSeek AI and AI…
The Hacker News -
Introducing the Microsoft Defender Experts Suite: Elevate your security with expert-led services
Security teams are being pushed to their limits as AI-powered cyberattacks grow in speed, scale, and sophistication, with only 14% of organisations surveyed by the World Economic Forum reporting confidence in having the right people and skills to meet…
Microsoft -
ClickFix Campaign Serves Up Fake Blue Screen of Death
A new ClickFix campaign, tracked as PHALT#BLYX, has been identified by researchers from Securonix as targeting hospitality-sector clients with a multistage infection chain that blends fake captcha challenges with a legitimate Microsoft tool. The campaign…
Dark Reading -
1/6/26, 4:19 PM
A leading southern European bank has strengthened its cyber resilience by adopting Darktrace / Proactive Exposure Management to unify a previously fragmented risk landscape fed by vulnerability scans, pen tests and risk reports. The solution consolidates…
darktrace.com -
Unpatched Firmware Flaw Exposes TOTOLINK EX200 to Full Remote Device Takeover
The CERT Coordination Center (CERT/CC) has disclosed details of an unpatched security flaw affecting the TOTOLINK EX200 wireless range extender, which could allow a remote authenticated attacker to gain full control of the device. The flaw, CVE-2025-65606…
The Hacker News -
Phishing campaign abuses Google Cloud services to steal Microsoft 365 logins
Phishing operators are abusing Google Cloud services to harvest Microsoft 365 credentials, using Google Cloud Application Integration’s Send Email feature to send messages from a legitimate-looking noreply-application-integration@google[.]com address. The…
Malwarebytes -
Hacker Conversations: Katie Paxton-Fear Talks Autism, Morality and Hacking
Katie Paxton-Fear, who is neurodiverse and describes herself as autistic, explains that autism has shaped much of her approach to hacking and risk ethics. According to SecurityWeek, her early fascination with computers, an obsession with Neopets, and a…
SecurityWeek -
Cyber Counterintelligence (CCI): Resecurity releases data on John Erin Binns (IRDev)
Cyber Counterintelligence (CCI): Resecurity releases data on John Erin Binns (IRDev) is the focus of a new DataBreaches[.]Net piece, which states that Resecurity has published 105 pages containing over 1,000 messages relating to Binns, with the contents of…
DataBreaches -
Cyber Risk Trends for 2026: Building Resilience, Not Just Defenses
SecurityWeek’s cyber risk outlook for 2026 argues that outpacing attackers by stopping every attack is unlikely; organisations should instead focus on becoming measurably more resilient, an approach that integrates governance, operations, technology and…
SecurityWeek -
Resecurity Went on the Cyber Offensive – When ‘Shiny Objects’ trick ‘Shiny Hunters’
Resecurity released 105 pages containing over 1,000 messages tied to hacker John Erin Binns, detailing contacts with an unnamed woman in Turkey and an associate called “S.M.” The communications reference the so‑called “Scattered LAPSUS$ Hunters” and the…
Security Affairs -
Critical Dolby Vulnerability Patched in Android
SecurityWeek reports that a critical Dolby audio decoder vulnerability, tracked as CVE-2025-54957, was patched in the January 2026 Android update. The flaw, described as a medium-severity out-of-bounds write issue in the Dolby Digital Plus Unified Decoder,…
SecurityWeek -
Sophisticated ClickFix Campaign Targeting Hospitality Sector
Securonix warns of a stealthy ClickFix campaign targeting the hospitality sector for remote access trojan deployment, beginning with phishing emails that claim Booking[.]com reservation cancellations and link to an impersonating site displaying a fake…
SecurityWeek -
Dozens of Major Data Breaches Linked to Single Threat Actor
The SecurityWeek report, published on 6 January 2026, ties dozens of major data breaches to a single threat actor operating under the moniker Zestix, also linked to the online persona Sentap, according to Hudson Rock. The actor is described as an initial…
SecurityWeek -
Disney fined $10m for mislabeling kids’ YouTube videos and violating privacy law
Disney will pay a $10m settlement after the Federal Trade Commission said it violated children’s privacy rights by mislabeling kid-targeted content on YouTube, according to the Federal Trade Commission (FTC). The agreement, first proposed in September 2025,…
Malwarebytes -
Fake Booking Emails Redirect Hotel Staff to Fake BSoD Pages Delivering DCRat
The article highlights a cybersecurity alert regarding fake booking emails targeting hotel staff, which redirect them to counterfeit Blue Screen of Death (BSoD) pages designed to deliver the DCRat malware. This underscores the evolving tactics of…
The Hacker News -
2025 in Review: The Evolution of Supply Chain Security & What's Next
StepSecurity’s 2025 review highlights a year of sustained growth and real-world impact, with the company securing over 13 million builds weekly and detecting major supply chain incidents often before public disclosure. The firm reports more than 5x ARR…
StepSecurity -
What is Identity Dark Matter?
Identity dark matter is the unseen mass of identities that live outside traditional governance, fragmented across SaaS, on‑prem, IaaS, PaaS, and shadow apps, with non‑human identities such as APIs, bots, and service accounts often remaining untraceable. The…
The Hacker News -
VS Code Forks Recommend Missing Extensions, Creating Supply Chain Risk in Open VSX
Popular AI-powered Visual Studio Code forks such as Cursor, Windsurf, Google Antigravity, and Trae have been found to recommend extensions that do not exist in the Open VSX registry, creating potential supply chain risks when malicious packages are published…
The Hacker News -
NordVPN Denies Breach After Hacker Leaks Data
NordVPN denied suffering a breach after a threat actor claimed to have obtained data from its systems, with the firm stating that initial forensic work has found no evidence of its servers or internal production infrastructure being compromised. The hacker…
SecurityWeek -
Top 10 Ransomware Groups of 2025
The Top 10 Ransomware Groups of 2025 show an ecosystem that shifted from centralised factions to a more fragmented, collaborative landscape, with groups mixing brands and affiliates and reusing tooling across campaigns. Scattered Lapsus$ Hunters topped the…
SOCRadar -
n8n Sandbox Escape: How CVE-2025-68668 Turns Workflows into Weapons
According to Rhoda Smart, a vulnerability in the n8n workflow automation platform tracked as CVE-2025-68668 lets authenticated users escape the Python sandbox and run arbitrary operating system commands, delivering a near-maximum CVSS score of 9.9. The flaw…
SecurityOnline -
Cybersecurity M&A Roundup: 30 Deals Announced in December 2025
Cybersecurity M&A in December 2025 saw 30 deals announced, with eight pure-play acquisitions exceeding $1 billion, and SecurityWeek noting the year saw more than 420 deals catalogued in 2025. Akamai announced the acquisition of Fermyon, a serverless cloud…
SecurityWeek -
CVE-2025-68668: Arbitrary Command Execution in n8n Python Code Node
CVE-2025-68668 is a newly disclosed vulnerability in n8n that affects the Python Code Node and has drawn attention for its severity. It impacts all n8n versions from 1.0.0 up to, but not including, 2.0.0, with the issue fully addressed starting from version…
SOCRadar -
The Robotics Revolution: NVIDIA Unveils Physical AI and the Jetson T4000 at CES 2026
At CES 2026, NVIDIA shifted its emphasis from purely digital AI to “Physical AI” systems designed to interact directly with the real world. The company unveiled the Jetson T4000 module, delivering 1,200 FP4 TFLOPS of compute within a 70-watt envelope and 64…
SecurityOnline -
Connex IT Partners with AccuKnox for Zero Trust CNAPP Security in Southeast Asia
Connex IT Partners with AccuKnox for Zero Trust CNAPP Security in Southeast Asia reports that AccuKnox has appointed Connex Information Technologies as its authorised distribution partner across South and Southeast Asia. The move aims to deepen regional…
SecurityOnline -
New n8n Vulnerability (9.9 CVSS) Lets Authenticated Users Execute System Commands
A new critical security vulnerability in the open-source workflow platform n8n could allow an authenticated attacker to execute arbitrary system commands on the host running n8n, with the flaw tracked as CVE-2025-68668 and a CVSS score of 9.9. It affects n8n…
The Hacker News -
The Rubin Era: NVIDIA’s Next-Gen AI Factory Chips Enter Mass Production
On 6 January 2026, NVIDIA announced at CES 2026 that its next-generation AI computing platform, codenamed “Rubin,” has entered full-scale mass production. The Rubin platform centres on six newly designed chips, notably the Rubin GPU and Vera CPU, with the…
SecurityOnline -
The Reasoning Car: NVIDIA Launches Alpamayo to Give AI Vehicles Human Logic
At CES 2026, NVIDIA unveiled Alpamayo, a new suite of open‑source AI models and simulation tools designed to tackle the long tail of rare and complex driving scenarios. The Alpamayo open‑source model family aims to strengthen autonomous systems’ perception,…
SecurityOnline -
The Desk-Side Revolution: NVIDIA’s DGX Spark Update Delivers 2.5× AI Speed Boost
NVIDIA announced a major update to its DGX Spark desktop AI development platform at CES 2026, delivering performance gains of up to 2.5× through software optimisation alone and introducing a new suite of tools and workflows for Agentic AI development. The…
SecurityOnline -
The Open Door: Critical 9.8 Severity Flaw in Harvester Lets Hackers Hijack New Servers
SecurityOnline -
Critical AdonisJS Bodyparser Flaw (CVSS 9.2) Enables Arbitrary File Write on Servers
Tracked as CVE-2026-21440 (CVSS score: 9.2), the flaw affects the AdonisJS multipart file handling mechanism and could allow a remote attacker to write arbitrary files on the server if exploited through a reachable upload endpoint, according to AdonisJS. The…
The Hacker News -
CVE-2025-68428: Critical Flaw in jsPDF Library Allows Server-Side File Theft
CVE-2025-68428 is a Local File Inclusion and Path Traversal flaw affecting the Node[.]js builds of jsPDF, which can let an attacker read arbitrary files from the server’s local file system and embed their contents in generated PDFs. The issue lies in how…
SecurityOnline
