News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Wed 7 Jan· 50 articles
-
Attackers Exploit Zero-Day in End-of-Life D-Link Routers
Attackers are actively exploiting a zero-day vulnerability in discontinued D-Link DSL gateway devices to run arbitrary shell commands, with most affected gateways being models no longer supported by D-Link for firmware updates. The flaw, designated…
Dark Reading -
Phishers Exploit Office 365 Users Who Let Their Guard Down
Phishers are exploiting Office 365 users by spoofing domains to make messages appear internal, a tactic highlighted by Microsoft Threat Intelligence on 6 January 2026. The research notes that attackers can spoof domains through complex routing and…
Dark Reading -
Ni8mare flaw gives unauthenticated control of n8n instances
According to Cyera researchers who discovered the vulnerability, Ni8mare is a critical flaw in n8n trackable as CVE-2026-21858 with a CVSS of 10.0, allowing unauthenticated attackers to fully compromise affected instances. The issue affects all versions of…
Security Affairs -
Black Cat Behind SEO Poisoning Malware Campaign Targeting Popular Software Searches
Black Cat has been attributed to a search engine optimisation (SEO) poisoning campaign that uses fraudulent sites advertising popular software to trick users into downloading a backdoor capable of stealing sensitive data. According to CNCERT/CC and…
The Hacker News -
Explore the latest Microsoft Incident Response proactive services for enhanced resilience
As cyber threats accelerate in speed and sophistication, organisations must focus on resilience to contain and recover from incidents, according to Microsoft Security’s latest post. The article introduces expanded proactive incident response services…
Microsoft -
The Loudest Voices in Security Often Have the Least to Lose
The piece, written by Joshua Goldfarb and published on 7 January 2026, argues that security advice fails when it comes from those who won’t bear the consequences. It outlines five archetypes—the panic inducer, the hype rider, the Chicken Little, the…
SecurityWeek -
Lack of MFA is Common Thread in Vast Cloud Credential Heist
An emerging threat actor known as Zestix or Sentap used infostealers to harvest credentials and breach file-sharing instances in attacks on about 50 enterprises, according to Hudson Rock. The researchers say the attacker relied on infostealers such as…
Dark Reading -
Crypto wallet firm Ledger faces customer data breach through payment processor Global-e
Ledger is facing a data exposure incident tied to its third‑party payment processor Global-e, according to a report by DataBreaches[.]Net. An email notification sent to customers by Global-e, and later shared by pseudonymous blockchain sleuth ZachXBT on X,…
DataBreaches -
Chrome Extensions With 900,000 Downloads Caught Stealing AI Chats
Two malicious Chrome extensions, impersonating a legitimate AITOPIA addon, were observed gathering more than 900,000 downloads while secretly exfiltrating users’ conversations with ChatGPT and DeepSeek, according to OX Security. The extensions—called “Chat…
SecurityWeek -
Misconfigured email routing enables internal-spoofed phishing
The article discusses how attackers exploit misconfigured email routing and spoof protections to send phishing emails that appear to originate from within an organization, using phishing-as-a-service (PhaaS) platforms like Tycoon2FA. Increased phishing…
Security Affairs -
Cyberattacks Likely Part of Military Operation in Venezuela
Cyberattacks are described as possibly part of a wider military operation in Venezuela, with President Trump hinting at “a certain expertise” that shut down power in Caracas during the raid. During a 3 January 2026 press conference, he suggested the outage…
Dark Reading -
DDoSia Powers Affiliate-Driven Hacktivist Attacks
A public cybersecurity write‑up reports that a pro‑Russian hacktivist group known as NoName057(16) is using a volunteer‑distributed tool to disrupt government, media and institutional websites tied to Ukraine and Western interests, with activity dating back…
Dark Reading -
Vulnerability in Totolink Range Extender Allows Device Takeover
SecurityWeek reports a security defect in the Totolink EX200 wireless range extender that could allow attackers to take over vulnerable devices. Tracked as CVE-2025-65606, the flaw lies in the firmware-upload error-handling logic, which when processing…
SecurityWeek -
Critical n8n Vulnerability (CVSS 10.0) Allows Unauthenticated Attackers to Take Full Control
According to Cyera Research Labs, researchers disclosed a maximum-severity flaw in n8n, tracked as CVE-2026-21858 with a CVSS score of 10.0, named Ni8mare, which allows an unauthenticated remote attacker to gain full control of vulnerable instances. The…
The Hacker News -
Several Code Execution Flaws Patched in Veeam Backup & Replication
Veeam has patched four code execution flaws in its Backup & Replication product, with the fixes applying to version 13.0.1[.]180 and earlier and introducing version 13.0.1.1071. The vulnerabilities include CVE-2025-59470, which can be exploited by a user…
SecurityWeek -
Inside GoBruteforcer: AI-Generated Server Defaults, Weak Passwords, and Crypto-Focused Campaigns
GoBruteforcer, a modular Go-written botnet, brute-forces user credentials for FTP, MySQL, PostgreSQL and phpMyAdmin on Linux servers, spreading via a chain of web shells, downloaders and an IRC bot. According to Check Point Research, the current wave is…
Check Point -
Cybersecurity Firms Secured $14 Billion in Funding in 2025
Cybersecurity firms secured $14 billion in funding in 2025, according to Pinpoint Search Group. Security solutions providers raised $13.97 billion across 392 funding rounds, up 47% on 2024, and 2025 was the strongest year since the 2021 peak. Two-thirds of…
SecurityWeek -
Hackers Exploit Zero-Day in Discontinued D-Link Devices
SecurityWeek reports that an OS command injection vulnerability in discontinued D-Link gateway devices has been exploited in the wild as a zero-day. Tracked as CVE-2026-0625 (CVSS 9.3), the flaw arises because the dnscfg[.]cgi library does not properly…
SecurityWeek -
One million customers on alert as extortion group claims massive Brightspeed data haul
Brightspeed, a major US fibre broadband provider, is investigating claims by the Crimson Collective extortion group that it stole data belonging to more than 1 million residential customers, including extensive personally identifiable information and billing…
MalwarebytesCrimson Collective -
Webinar: Learn How AI-Powered Zero Trust Detects Attacks with No Files or Indicators
According to The Hacker News, security teams are still chasing malware, but today many attacks do not arrive as files or drop binaries. The article promotes a deep-dive technical session with the Zscaler Internet Access team on 7 January 2026, explaining how…
The Hacker News -
Veeam resolves CVSS 9.0 RCE flaw and other security issues
Veeam has released patches for a critical RCE flaw in Backup & Replication, tracked as CVE-2025-59470 with a CVSS score of 9.0. The fix also addresses three additional vulnerabilities: CVE-2025-55125 (RCE as root via malicious backup, CVSS 7.2),…
Security Affairs -
Complex Routing, Misconfigurations Exploited for Domain Spoofing in Phishing Attacks
Threat actors have been observed spoofing legitimate domains to make phishing emails appear internal, using complex routing and misconfigured domain protections to their advantage. The attack vector has been employed in opportunistic campaigns powered by…
SecurityWeek -
n8n Warns of CVSS 10.0 RCE Vulnerability Affecting Self-Hosted and Cloud Versions
n8n has warned of a maximum-severity security flaw that could enable authenticated remote code execution (RCE) if exploited, tracked as CVE-2026-21877 and rated 10.0 on the CVSS scale. According to n8n, under certain conditions an authenticated user may…
The Hacker News -
The Future of Cybersecurity Includes Non-Human Employees
Non-human identities are described as a growing feature of modern organisations, with NHIs including bots, AI agents, service accounts and automation scripts as enterprises scale AI and cloud automation. A 51% majority of respondents to ConductorOne’s 2025…
The Hacker News -
Veeam Patches Critical RCE Vulnerability with CVSS 9.0 in Backup & Replication
Veeam has released security updates for its Backup & Replication software to fix a critical remote code execution vulnerability tracked as CVE-2025-59470, which carries a CVSS score of 9.0. This flaw could allow a Backup or Tape Operator to perform RCE as…
The Hacker News -
Hackers actively exploit critical RCE flaw in legacy D-Link DSL routers
Threat actors are actively exploiting a critical remote code execution flaw tracked as CVE-2026-0625 in legacy D-Link DSL routers, with a CVSS score of 9.3, according to VulnCheck. The vulnerability stems from an improper sanitization in the dnscfg[.]cgi…
Security Affairs -
Microsoft Warns Misconfigured Email Routing Can Enable Internal Domain Phishing
According to the Microsoft Threat Intelligence team, threat actors in phishing campaigns are abusing misconfigured routing and spoof protections to impersonate organisations’ domains and send emails that appear to originate internally. They have leveraged…
The Hacker News -
Self-Hosters Beware: 3 Critical Coolify Flaws Grant Root Access
Self-hosters are being urged to patch three critical Coolify flaws that could grant root access, with the flaws collectively affecting more than 52,000 exposed instances worldwide, including in Germany and the United States. The vulnerabilities,…
SecurityOnline -
The $230B AI Titan: Musk’s xAI Raises $20B to Build the World’s Largest GPU Clusters
On 7 January 2026, Elon Musk’s artificial intelligence company, xAI, announced the completion of a $20 billion Series E funding round. Investors include Valor Equity Partners, Fidelity Investments, the Qatar Investment Authority, and several others, with…
SecurityOnline -
The Logitech Blackout: How an Expired Certificate Bricked Your Mac Mouse Settings
The Logitech Blackout article, published on 7 January 2026, explains that macOS users of Logi Options+ may have had settings fail to apply because Logitech did not renew a digital certificate, preventing the software from connecting to its servers. The…
SecurityOnline -
Fake Booking.com lures and BSoD scams spread DCRat in European hospitality sector
Researchers have identified a late-December 2025 campaign, dubbed PHALT#BLYX, targeting European hotels with fake Booking-themed emails that lead victims to bogus BSoD pages and prompt the execution of malicious PowerShell commands. According to Securonix,…
Security Affairs -
Ongoing Attacks Exploiting Critical RCE Vulnerability in Legacy D-Link DSL Routers
A newly discovered critical security flaw in legacy D-Link DSL gateway routers has come under active exploitation in the wild, tracked as CVE-2026-0625 with a CVSS score of 9.3, and concerns a command injection in the dnscfg[.]cgi endpoint arising from…
The Hacker News -
The Central Brain: Qualcomm Unveils Agentic AI and Dual-Elite Platforms at CES 2026
At CES 2026 Qualcomm highlighted Agentic AI and software-defined vehicles as a core shift, emphasising a central computing brain approach for future in‑vehicle systems. The company showed a dual Snapdragon Elite platform-based central domain controller—the…
SecurityOnline -
Brain Meets Brawn: Boston Dynamics and Google DeepMind Unite for the New Atlas
On 7 January 2026, Boston Dynamics announced at CES 2026 a strategic partnership with its former parent, Google DeepMind, to integrate Gemini Robotics foundation models into the Atlas humanoid robot. The collaboration plans a joint research programme aimed…
SecurityOnline -
The Ten-Year Car: Qualcomm and Google Unveil the Future of AI-Powered Mobility
At CES 2026, Qualcomm announced a deepening of its decade-long alliance with Google to advance software-defined vehicles, in-vehicle agentic AI, and cloud-native development environments. The collaboration centres on integrating Qualcomm’s Snapdragon Digital…
SecurityOnline -
Reliability Over Speed: MediaTek Debuts Filogic 8000 to Power the Wi-Fi 8 Revolution
At CES 2026, MediaTek announced the Filogic 8000 series as its new Wi-Fi 8 chipset platform, signalling its drive to shape the emerging Wi-Fi 8 ecosystem. The Filogic 8000 is pitched for a wide range of devices, from broadband gateways and enterprise access…
SecurityOnline -
The 1000Hz Illusion: NVIDIA Unveils G-SYNC Pulsar and DLSS 4.5 at CES 2026
NVIDIA unveiled G-SYNC Pulsar at CES 2026, promising 1000Hz-class dynamic visual clarity by combining Variable Overdrive with VRR Backlight Strobing and a Rolling Scan technique. According to NVIDIA, this approach delivers up to a fourfold improvement in…
SecurityOnline -
-
CVSS 10.0 Alert: Critical n8n Flaw CVE-2026-21877 Grants Total Control
According to GHSA-v364-rw7m-3263, n8n has a critical flaw tracked as CVE-2026-21877, rated CVSS 10.0, that potentially allows total control of both self-hosted and cloud-based instances through Remote Code Execution via Arbitrary File Write. The…
SecurityOnline -
CVE-2025-65606: TOTOLINK EX200 Error Opens Root Telnet Door
CVE-2025-65606 is a vulnerability in the TOTOLINK EX200 Wi‑Fi extender that turns an error during a firmware upload into an unauthenticated root Telnet service. The flaw occurs when the device, already End-of-Life, enters an abnormal error state during…
SecurityOnline
