News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 21 Jan· 60 articles
-
CERT/CC Warns binary-parser Bug Allows Node.js Privilege-Level Code Execution
CERT/CC has disclosed a vulnerability in the binary-parser npm library, tracked as CVE-2026-1245, which affects all versions prior to 2.3.0, with patches released on 26 November 2025. According to CERT/CC’s advisory, the flaw stems from a lack of…
The Hacker News -
Total Takeover: Critical CVSS 10 Flaw Found in Oracle Fusion Middleware
Oracle has kicked off 2026 with a Critical Patch Update that includes a maximum-severity flaw in Oracle Fusion Middleware, tracked as CVE-2026-21962, which could allow attackers to seize complete control over affected servers without a password. The advisory…
SecurityOnline -
Critical Zoom Flaw (CVE-2026-22844): CVSS 9.9 Command Injection Exposes Hybrid Meetings
A near-maximum severity vulnerability has been discovered in Zoom’s enterprise infrastructure, tracked as CVE-2026-22844 with a CVSS of 9.9, potentially turning hybrid meeting setups into open doors for attackers. According to the advisory, the issue is a…
SecurityOnline -
The Robots.txt Myth: Does a Missing File Really Delete Your Site from Google?
On 21 January 2026, a report disseminated by webmaster Adam Coster suggests that if a website lacks a robots[.]txt file, Google Search will refrain from indexing its content, and if the file was once present but is now removed, Google will purge all search…
SecurityOnline -
The End of Anonymous APKs: Google’s New Mandate for Verified Android Sideloading
Google is moving to require developer certificates for sideloaded Android apps, meaning only software bearing a valid cryptographic signature will be installable via sideloading in targeted markets this year. The change follows a current, largely seamless…
SecurityOnline -
Digital Capital Punishment: Meta Oversight Board Reviews First Permanent Ban Case
According to Meta Oversight Board, the first-ever review of a permanent ban on a user account has been convened, signalling a landmark moment in the digital punishment regime. The case concerns the permanent disabling of an account after the user…
SecurityOnline -
-
CVE-2025-65586: Libheif Flaw Exposes Image Decoders to Denial-of-Service
CVE-2025-65586 is a newly disclosed flaw in libheif, the open‑source library used for decoding modern image formats, which can cause applications to crash simply by processing a malicious image. The vulnerability lies in the library’s uncompressed decoder…
SecurityOnline -
“Contagious” Code: North Korean Hackers Infiltrate Developer Workflows via Visual Studio Code
The “Contagious Interview” campaign, attributed to North Korean (DPRK) threat actors, has evolved to target developers inside their code editors and package managers, according to Jamf Threat Labs. The latest wave uses VS Code task configuration files,…
SecurityOnline -
Crypto Foundation Cracked: One-Byte Overflow in GNU libtasn1 (CVE-2025-13151)
Crypto Foundation Cracked: One-Byte Overflow in GNU libtasn1 (CVE-2025-13151) reports a stack-based buffer overflow in GNU libtasn1, a critical library used for parsing ASN.1 data in secure communications. The flaw, tracked as CVE-2025-13151 with a CVSS…
SecurityOnline -
Hidden in Plain Site: PURELOGS Stealer Hides Malware in Archive.org Images
In a January 2026 analysis, PureLogs stealer is shown to hide in Archive[.]org images as part of a four‑stage malware delivery chain, with Louis Schürmann, a Security Analyst at Swiss Post Cybersecurity, dissecting the campaign. The chain begins with a…
SecurityOnline -
VoidLink: The First Advanced Malware Framework Architected Entirely by AI
VoidLink is described by Check Point Research as the first evidently documented case of an era where a malware framework was authored, architected, and executed largely by artificial intelligence. According to Check Point Research, the malware’s creation…
SecurityOnline -
Search Engine Exposed: Apache Solr Flaws Leak Data & Bypass Auth
According to Daily CyberSecurity, two moderate-severity vulnerabilities in Apache Solr could leak data and allow unauthorized access, prompting administrators to update their deployments urgently. The first flaw, CVE-2026-22444, affects Solr versions 8.6…
SecurityOnline -
Google Chrome 144 Patches High-Severity “Race” Condition in V8 Engine
Google Chrome has released version 144.0.7559.96/0.97 for Windows and Mac, with Linux receiving 144.0.7559.96, to fix a single high-severity vulnerability described as a “Race in V8.” The flaw resides in V8, Google’s JavaScript and WebAssembly engine, and a…
SecurityOnline -
Redis RCE Exposed: Researchers Detail Exploit for “Simple” Stack Overflow in Official Containers
Security researchers from JFrog Security Research have publicly disclosed a complete exploit chain for Redis CVE-2025-62507, a high-severity flaw affecting Redis versions 8.2.0 through 8.2.2 with a CVSS of 8.8. The vulnerability sits in the XACKDEL command,…
SecurityOnline -
ImageMagick Alert (CVE-2026-23876): “XBM” Image Uploads Trigger Massive Heap Overflow
ImageMagick has a high-severity flaw, CVE-2026-23876, where uploading a specially crafted XBM image can trigger a massive heap buffer overflow in the XBM decoder. The vulnerability, which carries a CVSS score of 8.1, arises from an integer truncation bug in…
SecurityOnline -
“Evelyn Stealer” Weaponizes Visual Studio Code Extensions
The article highlights a multi-stage espionage operation, named Evelyn Stealer, that weaponises the Visual Studio Code extension ecosystem to infiltrate development environments and harvest high-value data, according to Trend Micro. By disguising malicious…
SecurityOnline -
Hard-Coded Keys and Open Doors: Critical Flaws Found in PrismX AP Controllers
A trio of vulnerabilities has been discovered in Browan Communications’ PrismX MX100 AP Controller, with the most severe effectively leaving the digital keys under the doormat. According to TWCERT/CC, unpatched controllers are wide open to remote attacks due…
SecurityOnline -
Operation Covert Access: Rust RAT Infiltrates Argentina’s Judiciary
Operation Covert Access: Rust RAT Infiltrates Argentina’s Judiciary has been uncovered by researchers who describe a stealthy, Rust-based Remote Access Trojan used to infiltrate Argentina’s legal system. According to Seqrite Labs, spear-phishing emails carry…
SecurityOnline -
CVE-2026-0629: TP-Link VIGI Flaw Lets Attackers Reset Admin Passwords
CVE-2026-0629 has been disclosed as a high-severity vulnerability in TP-Link’s VIGI series surveillance cameras, allowing attackers on a local network to bypass authentication and reset the admin password via the password recovery feature. According to…
SecurityOnline
