News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Mon 19 Jan· 47 articles
-
Ransomware attack on Ingram Micro impacts 42,000 individuals
Ingram Micro disclosed that a ransomware incident exposed the personal data of about 42,000 people, including names, dates of birth, Social Security numbers and job-related information. The firm said the cyber event was detected on 3 July 2025 and that an…
Security Affairs -
ChatGPT Health Raises Big Security, Safety Concerns
ChatGPT Health, announced on 19 January 2026, promises a dedicated experience that securely brings your health information together with ChatGPT’s capabilities, but raises significant safety and data security questions. According to OpenAI, ChatGPT Health…
Dark Reading -
Google Gemini Prompt Injection Flaw Exposed Private Calendar Data via Malicious Invites
Cybersecurity researchers have disclosed a prompt-injection flaw in Google Gemini that could bypass calendar privacy controls by hiding a malicious payload in a standard Google Calendar invite. According to Miggo Security, Liad Eliyahu said the vulnerability…
The Hacker News -
Poland Under Intensified DDoS Siege: Weekly DDoS Threat Intelligence Analysis
Poland faced an intensified DDoS campaign during the 12–18 January 2026 period, with SOCRadar counting 4,087 attack entries across 149 unique domains and 137 unique IP addresses, the majority directed at Polish infrastructure. According to NoName057(16), a…
SOCRadar -
TP-Link Patches Vulnerability Exposing VIGI Cameras to Remote Hacking
TP-Link has patched a serious vulnerability that can be exploited to take control of more than 32 of its VIGI C and VIGI InSight series professional surveillance camera models, in what TP-Link describes as an authentication bypass affecting the cameras’…
SecurityWeek -
StealC malware control panel flaw leaks details on active attacker
Researchers uncovered an XSS flaw in StealC malware’s control panel, exposing key details about a threat actor using the info stealer. StealC is an infostealer that has been active since at least 2023, sold as Malware-as-a-Service to steal cookies and…
Security Affairs -
How we mitigated a vulnerability in Cloudflare’s ACME validation logic
On 13 October 2025, security researchers identified a vulnerability in Cloudflare’s ACME (Automatic Certificate Management Environment) validation logic that could disable some WAF features on specific ACME-related paths. The flaw was rooted in how the edge…
Cloudflare -
Jordanian Admits in US Court to Selling Access to 50 Enterprise Networks
A Jordanian national has pleaded guilty in a US court to selling unauthorized access to compromised enterprise networks after an undercover agent caught him red-handed. The defendant, Feras Khalil Ahmad Albashiti, 40, a resident of the Republic of Georgia,…
SecurityWeek -
‘SolyxImmortal’ Information Stealer Emerges
SolyxImmortal is a newly identified information stealer written in Python that targets Windows systems and runs as a background process, relying on legitimate APIs and third‑party libraries for data harvesting and exfiltration. According to Cyfirma, it can…
SecurityWeek -
Cyber Insights 2026: Information Sharing
Cyber Insights 2026: Information Sharing notes that information sharing is necessary and widespread for cybersecurity, but never perfectly effective. The piece highlights rapid, public-private collaboration that helped detect and respond to the Salt Typhoon…
SecurityWeek -
⚡ Weekly Recap: Fortinet Exploits, RedLine Clipjack, NTLM Crack, Copilot Attack & More
The weekly recap spotlights a slate of high‑profile security disclosures, led by a Fortinet FortiSIEM flaw that is under active exploitation in the wild. According to The Hacker News, the vulnerability is tracked as CVE-2025-64155 (CVSS 9.4) and allows an…
The Hacker News -
Firefox joins Chrome and Edge as sleeper extensions spy on users
A Malwarebytes article traces the sleeper extensions phenomenon to a cybercrime group called DarkSpectre, which is linked to three campaigns: ShadyPanda, GhostPoster, and Zoom Stealer. GhostPoster, which initially targeted Microsoft Edge users, later…
Malwarebytes -
New Reports Reinforce Cyberattack’s Role in Maduro Capture Blackout
US officials told The New York Times that cyberattacks were used to turn off the lights in Caracas and disrupt air defence radars during the January 3 extraction of Venezuelan President Nicolas Maduro. Shortly after, The New York Times learned from unnamed…
SecurityWeek -
DevOps & SaaS Downtime: The High (and Hidden) Costs for Cloud-First Businesses
According to the 2024 CISO's Guide to DevOps Threats report by GitProtect, leading cloud DevOps services experienced 48 critical and major incidents, with total downtime and degraded performance amounting to over 4,755 hours in 2024. The article notes a 69%…
The Hacker News -
New StackWarp Hardware Flaw Breaks AMD SEV-SNP Protections on Zen 1–5 CPUs
A team of academics from the CISPA Helmholtz Center for Information Security in Germany has disclosed a new hardware vulnerability, codenamed StackWarp, that affects AMD processors and can allow privileged attackers to run malicious code inside confidential…
The Hacker News -
Introducing Real-Time DDoS Threat Intelligence for Europe
SOCRadar has launched Real-Time DDoS Threat Intelligence for Europe on SOCRadar Labs, offering live monitoring and analysis of DDoS attacks targeting European infrastructure. The platform updates every 5 seconds, giving security teams real-time visibility…
SOCRadar -
Malicious Chrome Extension Crashes Browser in ClickFix Variant ‘CrashFix’
A fresh variant of the ClickFix attack uses a malicious Chrome extension to display a security warning and lure victims into executing commands to install malware, according to Huntress. Dubbed CrashFix, the campaign begins with the NexShield extension,…
SecurityWeek -
42,000 Impacted by Ingram Micro Ransomware Attack
IT distributor Ingram Micro says around 42,000 people were affected when ransomware hit its systems, with the incident occurring on 3 July 2025 and forcing some services offline. The company later recovered the impacted systems by 9 July 2025, after outages…
SecurityWeek -
The Outlook Freeze: New Windows 11 Update Breaks POP3 Accounts in Outlook Classic
Microsoft’s January 2026 security release KB5074109 appears to be the catalyst for instability in Outlook Classic when used with the latest Windows 11 24H2 or 25H2 updates, with users reporting the client freezing or a prolonged white screen after adding…
SecurityOnline -
The Patch After the Patch: Microsoft Issues Emergency Fix for Remote Desktop and Shutdown Bugs
Microsoft has issued emergency out-of-band (OOB) updates in January 2026 to address issues arising after the latest general patch for Windows 10 and Windows 11, including problems with Remote Desktop login authentication and remote devices failing to shut…
SecurityOnline -
The Utility of Intelligence: Sarah Friar Reveals OpenAI’s $20B Infrastructure Roadmap
OpenAI’s chief financial officer Sarah Friar has released a manifesto arguing that the company’s growth is driven by a tightly coupled cycle of compute capacity and revenue, framing OpenAI as an AI infrastructure provider rather than a mere software vendor.…
SecurityOnline -
The Zena Evolution: Linux Mint 22.3 Arrives with Cinnamon 6.6 and Kernel 6.14
Linux Mint 22.3, codenamed Zena, arrives with Cinnamon 6.6 and a Linux kernel 6.14, continuing Mint’s alignment with the Ubuntu LTS line. The release, announced on 19 January 2026, covers Cinnamon, MATE and Xfce editions, and centralises release notes in a…
SecurityOnline -
The Pixel 9 Zero-Click Exploit Chain That Breaks the Kernel
According to Google Project Zero, researchers have delineated a three-part zero-click exploit chain targeting the Google Pixel 9 that progresses from remote code execution during media decoding to kernel-level compromise. The chain hinges on vulnerabilities…
SecurityOnline -
Multiple Database Leak Claims Involve JobsGO, MyVete, PIXPAY, and Fondasol
SOCRadar’s Dark Web Team identified multiple new data leak claims this week involving JobsGO, MyVete, PIXPAY, and Groupe Fondasol. The alleged database of JobsGO is leaked, with the threat actor claiming the incident occurred in early January 2026 and…
SOCRadar -
CrashFix Chrome Extension Delivers ModeloRAT Using ClickFix-Style Browser Crash Lures
Cybersecurity researchers have disclosed a campaign, dubbed KongTuke, that used a malicious Chrome extension masquerading as an ad blocker to crash the browser and deliver a remote access trojan dubbed ModeloRAT through ClickFix-style lures. The extension,…
The Hacker News -
Hacker pleads guilty to hacking Supreme Court, AmeriCorps, and VA Systems
Nicholas Moore, 24, from Springfield, Tennessee, pleaded guilty to repeatedly hacking the U.S. Supreme Court’s electronic filing system and to accessing AmeriCorps and VA Health System accounts, according to DoJ. Court documents reveal he used his Instagram…
Security Affairs -
A week in security (January 12 – January 18)
A week in security for January 12 to January 18 highlights a Malwarebytes Labs round-up of recent threats and research. The article links several notable pieces, including WhisperPair, which on January 16 demonstrated how Bluetooth earbuds and headphones can…
Malwarebytes -
-
Security Bug in StealC Malware Panel Let Researchers Spy on Threat Actor Operations
Cybersecurity researchers disclosed a cross-site scripting (XSS) vulnerability in the StealC information stealer’s web-based control panel, enabling them to gather crucial insights into one of the threat actors using the malware in their operations. By…
The Hacker News -
The RAM Crunch: Why Your Next Smartphone Will Cost More in 2026
According to IDC, a RAM shortage is looming as the most formidable obstacle facing the smartphone industry in 2026, with the supply disruption likely to curb market growth. The IDC assessment follows a 1.9% positive growth in 2025 and notes that Apple and…
SecurityOnline -
The $134 Billion Gambit: Musk Sues OpenAI While California Crackdown Hits xAI
In a legal move against OpenAI and Microsoft, Elon Musk has demanded a staggering $134 billion in restitution, according to Bloomberg. Simultaneously, California Attorney General Rob Bonta served a cease and desist order on Musk’s artificial intelligence…
SecurityOnline -
Defending the Data Moat: Google Appeals Monopoly Ruling to Block Forced Data Sharing
According to Why we're appealing the DOJ search distribution case, Google has formally initiated an appeal against the federal court ruling that declared its dominance in the search engine market an unlawful monopoly, with a bid to stay the implementation of…
SecurityOnline -
Beyond Routing: Transform the OpenWrt One into a Powerful Debian Micro-Server
The OpenWrt One is described as the inaugural hardware offering from the OpenWrt open‑source firmware community, with the device manufactured by partners in China and powered by an ARM-based architecture. A new project, openwrt-one-debian, now enables…
SecurityOnline -
Fake Malwarebytes Campaign Exploits DLL Sideloading to Drop Infostealers
A new malware campaign masquerading as legitimate software installers has been uncovered, with threat actors impersonating Malwarebytes to drop information-stealing payloads. The operation was observed between 11 and 15 January 2026, identified through a set…
SecurityOnline -
CVE-2026-0695: High-Severity XSS Flaw Patched in ConnectWise PSA 2026.1
ConnectWise PSA 2026.1 patches CVE-2026-0695, a high-severity stored XSS flaw with a Base Score of 8.7 that could turn a Time Entry note into a script-heavy attack vector. The issue, described as Improper Neutralization of Input During Web Page Generation,…
SecurityOnline -
DragonForce: The Rise of a New “Ransomware Cartel” Built on LockBit and Conti DNA
A new analysis by security researchers at S2W details DragonForce as a growing ransomware operation described as a cartel, first detected in late 2023 and expanding rapidly by offering a centralised, highly configurable Ransomware-as-a-Service model. The…
SecurityOnlineDragonForce -
Fake Productivity Tools: 5 Malicious Chrome Extensions Hijack Enterprise Sessions
According to Socket’s Threat Research Team, five malicious Google Chrome extensions masquerading as productivity tools for Workday, NetSuite and SAP SuccessFactors have been found to steal authentication tokens and hijack enterprise sessions. The…
SecurityOnline -
Sitting Ducks and Scammy Notifications: Inside a Global Malvertising Operation
Researchers at Infoblox have uncovered a massive, deceptive push-notification network built on hijacked, abandoned domains to flood users with scam alerts. The investigation details how the so‑called Sitting Ducks vulnerability enabled threat actors to claim…
SecurityOnline -
Unpatched RCE: Livewire Filemanager Upload Flaw (CVE-2025-14894) Exposes Laravel Apps
A critical new flaw has been uncovered in Livewire Filemanager, a component used within the Laravel PHP framework, tracked as CVE-2025-14894 with a CVSS of 7.5. The vulnerability stems from inadequate validation of uploaded data, allowing an unauthenticated…
SecurityOnline -
KnownSec Data Leak Exposes State-Aligned Cyber Espionage Pipeline
A massive data leak from KnownSec, a Beijing-based cybersecurity firm, exposes how the organisation operates as a contractor for China’s Ministry of Public Security and other state entities, blurring the line between defensive services and offensive…
SecurityOnline
