News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Sat 17 Jan· 20 articles
-
US Cyberattack Blacks Out Venezuela, Leads to Maduro’s Capture in 2026
The piece reports that a cyberattack plunged Venezuela’s capital into darkness this month, demonstrating the Pentagon’s ability not only to turn lights off but to turn them back on, according to U.S. officials briefed on the operation. The January 3…
DataBreaches -
Ukraine–Germany operation targets Black Basta, Russian leader wanted
Police in Ukraine and Germany identified two Ukrainian suspects linked to the Black Basta ransomware group and issued an international wanted notice for the group’s alleged Russian ringleader, Oleg Nefedov, according to the Ukrainian Office of the Prosecutor…
Security Affairs -
Black Basta Ransomware Leader Added to EU Most Wanted and INTERPOL Red Notice
Ukrainian and German law enforcement authorities have identified two Ukrainians suspected of working for the Russia-linked ransomware group Black Basta. In addition, the group’s alleged leader, a 35-year-old Russian national named Oleg Evgenievich Nefedov,…
The Hacker News -
A faceless hacker stole my therapy notes – now my deepest secrets are online forever
In September 2025, a Helsinki court ordered the release of Aleksanteri Tomminpoika Kivimäki (aka “Julius Kivimäki” aka “Zeekill”) pending the resolution of his appeal of an April 2024 conviction stemming from the theft of psychotherapy records of 33,000…
DataBreaches -
OCR’s Latest HIPAA Guidance and Common HIPAA Pitfalls
OCR’s Latest HIPAA Guidance emphasises that HHS OCR will prioritise risk assessments and expand its investigations into risk management in 2026, as reported by Theresa Defino. Alisa Chestler and Layna Cook Rush of Baker Donelson summarise recommendations…
DataBreaches -
China-linked APT UAT-8837 targets North American critical infrastructure
According to Cisco Talos, a China-linked threat group tracked as UAT-8837 has targeted North American critical infrastructure since at least last year, with activity showing tactics, techniques and procedures that overlap with other China-nexus clusters. The…
Security AffairsUAT-8837 -
Judge orders Anna’s Archive to delete scraped data; no one thinks it will comply
According to Ars Technica, a federal judge has entered a default judgment against Anna’s Archive, ordering the shadow library to delete all copies of WorldCat data and to stop scraping, using, storing or distributing the data. The operator, which launched in…
DataBreaches -
Tennessee Man Pleads Guilty to Repeatedly Hacking Supreme Court’s Filing System
According to Associated Press, a Tennessee man named Nicholas Moore, 24, from Springfield, pleaded guilty to hacking the U.S. Supreme Court’s filing system more than two dozen times and to illegally accessing records from AmeriCorps and the Department of…
SecurityWeek -
OpenAI to Show Ads in ChatGPT for Logged-In U.S. Adults on Free and Go Plans
OpenAI said it would begin showing ads in ChatGPT to logged-in adult U.S. users on Free and Go plans in the coming weeks, marking a new revenue approach for the AI firm. According to The Hacker News, ads will appear at the bottom of conversations and will be…
The Hacker News -
CodeBreach: Missing Regex Anchors Exposed AWS Console to Takeover
A seemingly minor misconfiguration in a regular expression could have allowed attackers to seize control of critical AWS infrastructure, potentially compromising millions of cloud environments, according to Wiz Research. The vulnerability in AWS’s CodeBuild…
SecurityOnline -
Keylogger Found Harvesting Credentials on Top US Bank’s Employee Store
Researchers at Sansec have found an active keylogger planted on the employee merchandise store of a top US bank, potentially exposing the credentials and personal data of over 200,000 employees, according to Sansec. The malware was live for about 18 hours…
SecurityOnline -
CVE-2025-60021: Apache bRPC Flaw Opens Door to Remote Command Injection
CVE-2025-60021 concerns Apache bRPC, an industrial‑grade C++ RPC framework whose heap profiler’s /pprof/heap endpoint contains a lack of input validation that can be exploited to execute remote commands. According to the advisory, the service does not…
SecurityOnline -
The Ad Era Begins: OpenAI Launches $8 ChatGPT Go with Sponsored Answers
OpenAI has officially launched ChatGPT Go in the United States and globally, priced at $8 per month to bridge the gap between free users and the premium Plus experience. The move introduces integrated advertising, with OpenAI planning to test ads in the U.S.…
SecurityOnline -
The $8 Revolution: OpenAI Launches ChatGPT Go and Breaks the Ad Barrier
OpenAI has officially expanded its subscription strategy with the global rollout of ChatGPT Go, priced at $8 per month in the United States. The launch follows a soft departure in India last August 2025 and rapid expansion to 170 countries, according to…
SecurityOnline -
The Silver Jubilee: Wikipedia Inks Landmark AI Deals with Meta, Microsoft, and Amazon
According to Wikimedia Enterprise, Wikipedia’s monetisation drive is expanding as a 25th anniversary initiative sees technology giants such as Amazon, Meta, Microsoft, Mistral AI, and Perplexity join the collaboration to access Wikipedia’s content via…
SecurityOnline -
The Infinite Loop: Windows 11 Update KB5073455 Breaks Shutdown & Hibernation
Microsoft has confirmed that the January 2026 security updates inadvertently affect the stability of certain enterprise-grade hardware, specifically Windows 11 version 23H2 after installing the KB5073455 cumulative update. Following this update, some…
SecurityOnline -
The Great Expurgation: X Bans “InfoFi” to Kill AI-Generated Crypto Spam
According to X (formerly Twitter), Nikita Bier, a product lead at the platform, has formally announced a definitive eviction of AI-generated spam and incentive-driven fabrication from X, stating that the deluge of synthetic promotional content will no longer…
SecurityOnline -
Microsoft Kills the Last Vista-Era Server Lifecycle
Microsoft has announced that Windows Server 2008, built on the Windows Vista/Longhorn architecture, will no longer receive official patches or technical patronage from Microsoft, marking the end of its extended support. The finality comes after a paid…
SecurityOnline -
The End of Rationing: Google Boosts Gemini Limits and Unbundles Model Quotas
On 17 January 2026, Google signalled a recalibration of its Gemini quotas, effectively reducing the daily allocation for some subscribers while presenting new, tiered options. According to support.google[.]com, the changes transition from a shared resource…
SecurityOnline -
Anatomy of an Attack: The Payroll Pirates and the Power of Social Engineering
Anatomy of an Attack: The Payroll Pirates demonstrates how social engineering can bypass technical controls and cause real financial damage, with 36% of incidents Unit 42 engaged with beginning via social engineering, according to 2025 Unit 42 Global…
unit42.paloaltonetworks.com
