News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Wed 14 Jan· 63 articles
-
Critical Node.js Vulnerability Can Cause Server Crashes via async_hooks Stack Overflow
According to Node[.]js, a critical vulnerability affecting virtually every production Node[.]js app could cause a denial-of-service if exploited, by causing Node[.]js to exit with code 7 when async_hooks stack overflows occur. The issue arises because a bug…
The Hacker News -
PLUGGYAPE Malware Uses Signal and WhatsApp to Target Ukrainian Defense Forces
CERT-UA has disclosed details of new cyber attacks against Ukraine’s defence forces deploying malware known as PLUGGYAPE between October and December 2025, with the activity attributed to a Russian hacking group tracked as Void Blizzard (aka Laundry Bear or…
The Hacker News -
The Invisible Brain: Inside Apple’s Secret Deal to “Apple-ify” Google Gemini
According to The Information, Apple has secured a high degree of autonomy in its partnership with Google Gemini, with the ability to perform “Independent Fine-tuning” that lets Apple refine the Gemini model in isolation while keeping the underlying…
SecurityOnline -
Meet Your New Coworker: Anthropic’s Claude Now Controls Your Mac
Anthropic has unveiled Claude Cowork, a preview feature that lets Claude operate as an autonomous assistant for file management and automation on a Mac. Described as a simplified version of Claude for everyone, it aims to extend AI capabilities from chat…
SecurityOnline -
Metaverse Retreat: Meta Cuts 1,000 Staff to Pivot Toward AI Wearables
According to Bloomberg, Meta has begun a workforce reduction within its Reality Labs division, affecting over 1,000 personnel as the company pivots from the metaverse toward AI wearables. An internal memorandum from Chief Technology Officer Andrew Bosworth…
SecurityOnline -
Medical Memory: OpenAI Acquires Torch to Unify Your Health Data
Medical Memory: OpenAI Acquires Torch to Unify Your Health Data was published on 14 January 2026, and reports that after the launch of ChatGPT Health last week, OpenAI announced the strategic acquisition of Torch, a budding medical technology startup, with…
SecurityOnline -
The Biology Factory: NVIDIA and Lilly’s $1B Bet on AI Drug Discovery
On 14 January 2026, NVIDIA announced a five-year alliance with Eli Lilly underpinned by a projected $1 billion investment to establish the inaugural AI Co-Innovation Lab, alongside a collaboration with Thermo Fisher to turn research facilities into…
SecurityOnline -
The Nation-State of AI: Meta Launches “Meta Compute” to Power Superintelligence
On 14 January 2026, Meta CEO Mark Zuckerberg announced the inauguration of “Meta Compute,” a bold initiative aimed at catalysing personal superintelligence through colossal AI infrastructure. The plan envisions building tens of gigawatts of energy-powered…
SecurityOnline -
Node.js Patches Memory Leak and Permission Bypasses
Node[.]js has issued a critical security update addressing a trio of high-severity vulnerabilities that could cause data leaks, DoS conditions, and authentication bypasses, with patches rolling out across 25.x, 24.x, 22.x and 20.x release lines. At the…
SecurityOnline -
Taiwan Endures Greater Cyber Pressure From China
Taiwan is facing increased cyber pressure from China, with Chinese cyber-threat groups targeting the island’s critical infrastructure, including energy utilities and hospitals. In 2025, Taiwan averaged 2.63 million attacks a day on critical infrastructure, a…
Dark Reading -
Siemens Issues Critical Alert for Maximum 10.0 Vulnerability in Industrial Systems
Siemens Issues Critical Alert for Maximum 10.0 Vulnerability in Industrial Systems, reported on 14 January 2026 by Daily CyberSecurity, highlights a critical flaw affecting industrial systems. The article indicates that the vulnerability is associated with a…
SecurityOnline -
Critical SAP Alert: S/4HANA SQL Injection & Wily RCE Threaten Financial Data
According to SAP, on January 13, 2026 the enterprise software giant released 17 new security notes addressing vulnerabilities that could expose critical financial data and allow for full system compromise, with the update focusing on fresh threats rather…
SecurityOnline -
Patch Tuesday, January 2026 Edition
Patch Tuesday, January 2026 Edition reports that Microsoft today issued patches to fix at least 113 security holes across Windows and related software, eight of which were rated critical, with one zero-day, CVE-2026-20805, being actively exploited in the…
Krebs on Security -
Personal Details of Thousands of Border Patrol and ICE Agents Allegedly Leaked in Huge Data Breach
Sensitive details of around 4,500 ICE and Border Patrol employees—including almost 2,000 agents working in frontline enforcement—have allegedly been released by a Department of Homeland Security whistleblower following last week’s fatal shooting of Renee…
DataBreaches -
Fortinet Critical Alert: CVE-2025-64155 RCE & Config Leaks Exposed
Fortinet has issued a sweeping set of advisories for its product ecosystem, patching several critical vulnerabilities that could let attackers execute arbitrary code, delete files, or hijack device configurations. The most severe flaw is CVE-2025-64155, a OS…
SecurityOnline -
VoidLink: The “Cloud-First” Malware Hunting Your Linux Servers
VoidLink, described as a “cloud-first” malware framework, was identified by researchers at Check Point Research and discovered in December 2025, with January 14, 2026 marking its latest coverage. The toolkit targets Linux servers and containerized…
SecurityOnline -
Chrome 144 Released: 10 Security Fixes Patch Dangerous V8 Engine Flaws
Chrome 144 has been promoted to the stable channel, with Google stating the update addresses 10 vulnerabilities and includes three high-severity flaws that could affect the browser’s rendering and JavaScript engines. The release is versioned as 144.0.7559.59…
SecurityOnline -
Critical OpenCode Flaws Let Websites Hijack Your PC
OpenCode has two high‑severity flaws, CVE-2026-22813 and CVE-2026-22812, that researchers say could let attackers write malicious code onto a victim’s machine by visiting a webpage. The most critical, CVE-2026-22813, carries a CVSS score of 9.4 and exploits…
SecurityOnline -
Patch Tuesday Jan 2026: Microsoft Fixes 114 Flaws & 3 Zero-Days
Microsoft’s January 2026 Patch Tuesday fixes a total of 114 vulnerabilities, including eight critical flaws and 106 important-severity issues across Windows components from NTFS to the Cloud Files Mini Filter Driver. The update also introduces three zero-day…
SecurityOnline -
Spy, Steal, Lock: deVixor Android Trojan Hits Banking & Crypto Users
January 14, 2026 marks the publication of a report on deVixor, an Android banking malware campaign that CRIL notes has been aggressively targeting Iranian users since October 2025. The threat combines the stealth of a spy with ransomware capabilities,…
SecurityOnline -
Critical Appsmith Flaw CVE-2026-22794 Allows Account Takeover
A critical vulnerability in Appsmith, tracked as CVE-2026-22794, carries a near-maximum CVSS score of 9.7 and enables remote attackers to hijack user accounts by manipulating a single HTTP header. The flaw stems from a lack of validation in how password…
SecurityOnline -
Elastic Stack Under Fire: 7 New Flaws Expose Files & Crash Servers
Elastic has released a comprehensive security update addressing seven distinct vulnerabilities across Elasticsearch, Kibana, Packetbeat, and Metricbeat, warning administrators to patch urgently to prevent arbitrary file access and potential DoS impacts. The…
SecurityOnline -
Malicious Chrome Extension Drains Crypto via Secret API Keys
A malicious Google Chrome extension named MEXC API Automator has been exposed as a wallet-draining trap after being published on the Chrome Web Store on 1 September 2025 by an entity known as jorjortan142, according to Socket’s Threat Research Team. The…
SecurityOnline
