News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Thu 8 Jan· 60 articles
-
OpenAI Launches ChatGPT Health with Isolated, Encrypted Health Data Controls
OpenAI has launched ChatGPT Health, a sandboxed space that lets users talk about their health and optionally securely connect medical records and wellness apps to receive tailored responses. The feature is described as having its own memory and purpose-built…
The Hacker News -
CISA Flags Microsoft Office and HPE OneView Bugs as Actively Exploited
CISA on Wednesday added two security flaws affecting Microsoft Office and Hewlett Packard Enterprise (HPE) OneView to its Known Exploited Vulnerabilities (KEV) catalog, according to CISA, with evidence of active exploitation. The vulnerabilities listed are…
The Hacker News -
The End of the Unified Inbox: Gmail Kills POP3 Fetching and Gmailify in 2026
Google has formally rescinded support for retrieving messages from external email accounts via the POP3 protocol, and the Gmailify feature has been deprecated, according to the article published on 8 January 2026. Users relying on these services are advised…
SecurityOnline -
Android Behind Closed Doors: Google Ends Quarterly AOSP Code Drops in 2026
On 8 January 2026, Google announced a shift in how AOSP source code is released, ending the quarterly code drops after this year. The company plans a biannual cadence for AOSP updates, with public releases limited to the second and fourth quarters. In…
SecurityOnline -
The Logitech Fix: How to Restore Your Broken Mac Mouse Settings (Jan 2026)
On 8 January 2026, SecurityOnline[.]info reported that Logitech’s Logi Options+ and G HUB macOS software suites suffered a widespread service disruption caused by the expiration of the firm’s Apple Developer Certificate. Under Apple’s security protocols, an…
SecurityOnline -
The Ubiquitous Brain: Arm Unveils the Era of Physical AI and AI-Defined Platforms
At CES 2026, Arm positioned its Computing Platform at the vanguard of a new era, describing 2025 as a watershed moment and predicting that by 2026 artificial intelligence will be an omnipresent feature of daily life, driven by a fusion of Physical AI and…
SecurityOnline -
Agentic Evolution: Lenovo Unveils “Qira” and AI Cloud Gigafactories at CES 2026
During CES 2026, Lenovo used its Tech World event at Las Vegas’s Sphere to unveil a sweeping “Hybrid AI Advantage” roadmap, centred on Lenovo Qira, a personal AI super-agent service that runs across Lenovo PCs and Motorola smartphones. The company also…
SecurityOnline -
CISA KEV Alert: HPE’s Maximum CVSS Score Flaw and a Zombie PowerPoint Bug
CISA has updated its Known Exploited Vulnerabilities (KEV) Catalog with two new entries, including a critical flaw in HPE OneView tracked as CVE-2025-37164, which carries the maximum CVSS score of 10.0 and allows a remote unauthenticated user to perform…
SecurityOnline -
Public Exploit Released: Critical n8n Flaw CVE-2026-21858 Exposes 100k Servers
Public Exploit Released: Critical n8n Flaw CVE-2026-21858 Exposes 100k Servers has highlighted a logic error in how n8n processes incoming HTTP requests, described as a Content-Type Confusion that can let unauthenticated attackers seize full control of a…
SecurityOnline -
“VM Isolation is Not Absolute”: Researchers Unmask Sophisticated ESXi “Maestro” Exploit
According to Huntress, a new report describes a December 2025 intrusion in which threat actors achieved a full VM escape from a guest VM to seize control of the underlying VMware ESXi hypervisor, challenging the security promises of virtualization. The…
SecurityOnline -
GoBruteforcer Returns: How AI Code Snippets Fueled a 50,000-Server Botnet
A new report from Check Point Research details the 2025 evolution of the GoBruteforcer botnet, which targets Linux servers running common services such as MySQL, FTP and phpMyAdmin. The researchers estimate that more than 50,000 Internet-facing servers may…
SecurityOnline -
CVE-2025-67859: Critical Auth Bypass Discovered in Popular Linux Battery Utility
CVE-2025-67859 has been identified as a critical authentication bypass in the Linux power management utility TLP, specifically affecting the new “profiles daemon” introduced in TLP version 1.9.0, which runs with root privileges and manages power settings via…
SecurityOnline -
CrazyHunter: The “Ruthless” Ransomware Stalking Healthcare
A new, highly aggressive ransomware named CrazyHunter is stalking the healthcare sector, with Trellix researchers releasing an in-depth analysis of its methods and objectives. First appearing in mid-2024 as a fork of the Prince ransomware, it has rapidly…
SecurityOnline -
GitLab Patch: High-Severity XSS & AI Flaws Expose User Data
GitLab has issued a critical security release for its Community Edition and Enterprise Edition platforms, patching a raft of vulnerabilities that range from high-severity XSS to unauthorized AI model access, with updates available immediately for versions…
SecurityOnline -
Spy Games or Glitch? The Truth Behind Venezuela’s BGP Leak
Security researchers traced a BGP route leak at Venezuela’s state-owned CANTV (AS8048) to just before a U.S. military operation aimed at Nicolás Maduro, with one analyst noting that traffic from AS8048 was anomalously redirected through Sparkle, an Italian…
SecurityOnline -
“Sophisticated” Zero-Day Demystified: Public Exploit Drop Blows Cover on Critical Apple WebKit Flaw
SecurityOnline -
One Request to Rule Them All: Critical Trendnet Flaw (CVE-2025-15471) Allows Total Takeover
A critical pre-authentication command injection vulnerability CVE-2025-15471 has been uncovered in the Trendnet TEW-713RE Wi‑Fi extender, allowing remote attackers to seize full control of the device with a single HTTP request. The flaw carries a CVSS score…
SecurityOnline -
“Ghost Tap” Rising: New Wave of Android Malware Turns Phones into Digital Pickpockets
According to Group-IB, a new underground market for NFC-enabled Android malware is spreading globally, with Chinese threat actors selling tools to conduct unauthorized tap-to-pay transactions remotely. Dubbed “Ghost Tap” by researchers, the malware relays…
SecurityOnline -
CVE-2025-60262: Critical Misconfiguration in H3C Wireless Gear Hands Control to Hackers
CVE-2025-60262 exposes a critical misconfiguration in certain H3C wireless controllers and access points, where anonymous FTP uploads can be owned by root, enabling remote attackers to seize root-level control of the devices. The flaw stems from…
SecurityOnline -
Taiwan Faces 2.6 Million Cyberattacks Daily from China
According to Taiwan’s National Security Bureau (NSB), a comprehensive 2025 analysis shows China’s cyber army ramped up its offensive, launching an average of 2.63 million intrusion attempts per day against Taiwan’s critical infrastructure, a 6% rise on the…
SecurityOnline
