News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Tue 13 Jan· 60 articles
-
Hexaware Partners with AccuKnox for Cloud Security Services
According to CyberNewsWire, Hexaware Technologies has entered into a partnership with AccuKnox to extend its Zero Trust cloud security platform into enterprise accounts managing hybrid and multi-cloud infrastructure. The collaboration combines AccuKnox’s…
SecurityOnline -
New Malware Campaign Delivers Remcos RAT Through Multi-Stage Windows Attack
A new campaign dubbed SHADOW#REACTOR has been disclosed for delivering Remcos RAT through an evasive multi-stage Windows attack, with researchers from Securonix detailing an orchestrated chain that begins with an obfuscated Visual Basic Script launcher…
The Hacker News -
Cyber Fraud Overtakes Ransomware as Top CEO Concern: WEF
According to the World Economic Forum (WEF), cyber-enabled fraud has overtaken ransomware as the primary concern for CEOs in the Global Cybersecurity Outlook 2026, marking a major shift in how business leaders view digital risk. The report notes that…
SecurityWeek -
CISA Warns of Active Exploitation of Gogs Vulnerability Enabling Code Execution
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned of active exploitation of a high-severity flaw in Gogs, tracked as CVE-2025-8110 with a CVSS score of 8.7, which relates to a path traversal issue in the repository file editor that…
The Hacker News -
Unveiling VoidLink – A Stealthy, Cloud-Native Linux Malware Framework
VoidLink is a cloud-first Linux malware framework designed to maintain long-term access to cloud and container environments, written in Zig and capable of running in Kubernetes or Docker, with the ability to recognise multiple cloud providers including AWS,…
Check Point -
-
AI Identity Theft: Critical ServiceNow Flaw (CVE-2025-12420) Allows Unauthenticated Impersonation
A critical vulnerability in the ServiceNow AI Platform, tracked as CVE-2025-12420, could allow unauthenticated attackers to masquerade as legitimate users, potentially enabling privilege escalation. With a severity of 9.3 out of 10, the flaw centres on a…
SecurityOnline -
CISA “Must-Patch” Alert: Critical Gogs Exploit CVE-2025-8110 Active in Wild
According to CISA, a dangerous new entry has been added to its “Must-Patch” list warning that a popular self-hosted Git service called Gogs is being actively exploited to breach networks via CVE-2025-8110. The vulnerability, which scores a high-severity CVSS…
SecurityOnline -
Attackers Weaponize Legitimate RMM Tools via Fake PDFs
According to AhnLab Security Intelligence Center (ASEC), threat actors are hijacking legitimate RMM software to infiltrate networks by abusing trusted tools such as Syncro, SuperOps, NinjaOne, and ScreenConnect. The campaign, active since at least October…
SecurityOnline -
Angular Security Alert: High-Severity SVG Flaw CVE-2026-22610 Exposes Apps to XSS
Angular has disclosed a high-severity vulnerability in the Template Compiler, tracked as CVE-2026-22610, which could allow attackers to bypass built-in protections and execute arbitrary JavaScript via SVG elements. With a CVSS score of 8.5, the flaw stems…
SecurityOnline -
“TryCloudflare” Abuse: AsyncRAT Exploits Free Tunnels to Build Stealthy WebDAV Network
According to Trend Micro, a sophisticated campaign distributing the AsyncRAT Remote Access Trojan is abusing Cloudflare’s free-tier services and TryCloudflare tunneling domains to host malicious WebDAV servers, effectively hiding command-and-control…
SecurityOnline -
The AI Alliance: Apple Taps Google Gemini to Power the New Siri
13 January 2026: Apple and Google have issued a joint statement confirming a landmark multi-year strategic alliance, with Apple set to integrate Google’s Gemini models and cloud infrastructure as the bedrock of its Apple Foundation Models to power a highly…
SecurityOnline -
India’s Source Code Demand Sparks Tech Revolt
India’s Make in India push has collided with a government proposal that would force smartphone makers to surrender proprietary source code for government testing, a move that has sparked a fierce backlash across the tech sector. According to Reuters, the…
SecurityOnline -
Cutting the Cord: QEMU 11.0 to Expunge 32-Bit Host Support in Cloud Variant
QEMU is moving to expunge 32-bit processor support from its Cloud host variant, a change confined to the Cloud distribution while the standard QEMU remains 32-bit capable. Project developers have submitted a comprehensive suite of fifty patches aimed at…
SecurityOnline -
Double Critical: Hardcoded Secrets Expose Ruckus IoT Controllers to Root RCE
A pair of critical vulnerabilities in the Ruckus vRIoT IoT Controller have been disclosed, each carrying a maximum CVSS score of 10.0 and enabling potential full system compromise on firmware versions prior to 3.0.0[.]0 (GA). The flaws, CVE-2025-69425 and…
SecurityOnline -
CVE-2025-52694 (CVSS 10): Critical Advantech SQL Injection Exposes IoT Devices
CVE-2025-52694 is a SQL injection flaw in Advantech’s IoT product line that carries a CVSS score of 10.0, marking it as a critical threat that requires immediate attention from administrators. According to CSA Singapore, successful exploitation allows an…
SecurityOnline -
Critical Alert: Moxa Switches Exposed to OpenSSH Remote Code Execution (CVSS 9.8)
A critical vulnerability in Moxa’s industrial ethernet switches has been identified, with the flaw affecting the OpenSSH component used by the devices and a CVSS score of 9.8. The vulnerability, tracked as CVE-2023-38408, stems from an unreliable search path…
SecurityOnline -
Tearing Down the Wall: Google Brings AirDrop Support to the Pixel 9
According to Android Authority, Google is advancing cross‑platform file synchronization by bringing AirDrop support to the Pixel 9 via enhanced Quick Share functionality. The feature, originally planned for the Pixel 10, surfaced in the Pixel 9 series’…
SecurityOnline -
The End of the Shopping Tab: Google Unveils “Agentic Commerce” and UCP
At NRF 2026 Retail’s Big Show in New York, Google CEO Sundar Pichai unveiled the company’s nascent e-commerce strategy, introducing the concept of “Agentic Commerce” and the Universal Commerce Protocol (UCP). The objective is to revolutionise online shopping…
SecurityOnline -
Key Insights on SHADOW-AETHER-015 and Earth Preta from the 2025 MITRE ATT&CK Evaluation with Trend Vision One™
Trend Research™ highlights from the 2025 MITRE ATT&CK Evaluation show SHADOW-AETHER-015 and Earth Preta testing Trend Vision One™ in ER7, with the blog noting that Demeter and Hermes emulations reveal sophisticated cloud and phishing-based attack chains. In…
trendmicro.comMUSTANG PANDA
