News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Thu 22 Jan· 63 articles
-
CVE-2026-20045 Actively Exploited Cisco Unified Communications Zero-Day Explained
In late January 2026, Cisco released emergency patches for CVE-2026-20045, a critical remote code execution vulnerability affecting its Unified Communications products, with the issue confirmed as actively exploited in real-world attacks. The flaw affects…
SOCRadar -
The Final Piece: Xbox App Hits Windows on Arm, Transforming Copilot+ PCs into Gaming Rigs
Microsoft has officially announced that the Xbox App now provides comprehensive support for Arm-based Windows 11 PCs, allowing Copilot+ PCs with Qualcomm Snapdragon processors to download and play PC titles directly through the app. The feature build sits on…
SecurityOnline -
AI Unleashed: Microsoft Reinvents Notepad and Paint for 2026
Microsoft has refreshed Notepad and Paint for 2026, with Notepad (version 11.2512.10.0) gaining enhanced Markdown formatting, including strike-through text and nested lists, along with a new Welcome Screen accessed via a megaphone icon in the toolbar. Paint…
SecurityOnline -
7,000 Days Later: Download the Final “Ultimate” Windows 7 and Vista ISOs
On 22 January 2026, a Windows community figure known by the pseudonym Bob Pony has curated specialised ISO images for Windows 7 and Windows Vista, incorporating every patch released through January 2026, according to Bob Pony. Microsoft issued the final…
SecurityOnline -
Automated FortiGate Attacks Exploit FortiCloud SSO to Alter Firewall Configurations
Arctic Wolf has warned of a new cluster of automated malicious activity targeting Fortinet FortiGate devices via FortiCloud SSO, with the activity beginning on 15 January 2026. According to Arctic Wolf, the campaign mirrors a December 2025 one that exploited…
The Hacker News -
Resurgence of a multi‑stage AiTM phishing and BEC campaign abusing SharePoint
Microsoft Defender Researchers uncovered a multi-stage adversary-in-the-middle (AiTM) phishing and business email compromise (BEC) campaign targeting multiple organisations in the energy sector, which resulted in the compromise of various user accounts. The…
Microsoft -
The End of Lying About Your Age: ChatGPT Now “Guesses” Your Age to Block NSFW Content
OpenAI has unveiled a sophisticated AI-driven age prediction mechanism within ChatGPT that moves beyond user-provided birth dates by analysing “behavioral patterns” to determine a user’s age, with safeguards that trigger additional content filters if a user…
SecurityOnline -
Cisco Fixes Actively Exploited Zero-Day CVE-2026-20045 in Unified CM and Webex
Cisco has issued patches for CVE-2026-20045, a critical zero-day in Unified CM products and Webex Calling Dedicated Instance that has been actively exploited in the wild, with a CVSS score of 8.2. The flaw stems from improper validation of user-supplied…
The Hacker News -
CVE-2025-15521 (CVSS 9.8): Critical Academy LMS Flaw Exploited for Admin Takeover
CVE-2025-15521 (CVSS 9.8) is a critical flaw in the Academy LMS plugin for WordPress that allows unauthenticated attackers to seize administrator control and effectively take over a site. The vulnerability centres on how the plugin handles password updates,…
SecurityOnline -
Under Attack: Critical Cisco RCE (CVE-2026-20045) Exploited in the Wild
Cisco has issued an urgent warning about a critical remote code execution vulnerability, CVE-2026-20045, in its core communications software that is currently being exploited in the wild. The flaw targets the web-based management interface and allows…
SecurityOnline -
New Campaign Targets FortiGate Firewalls with Unauthorized Config Changes
A fresh wave of automated cyberattacks is targeting FortiGate firewalls by exploiting unauthorized access to create backdoors and steal sensitive configuration data, according to Arctic Wolf researchers who have been tracking the campaign since mid-January…
SecurityOnline -
CVE-2025-13878: High-Severity BIND Flaw Exposes Servers to Remote Crash
The Internet Systems Consortium (ISC) has issued a high-severity advisory for BIND 9, noting a vulnerability tracked as CVE-2025-13878 that allows remote attackers to crash BIND servers with a single malicious packet. The flaw, scoring 7.5 on the CVSS and…
SecurityOnline -
Darktrace Identifies Campaign Targeting South Korea Leveraging VS Code for Remote Access
Darktrace researchers identified a campaign aligned with Democratic People’s Republic of Korea (DPRK) activity that targets South Korean users, leveraging Javascript Encoded (JSE) scripts and government-themed decoy documents to deploy a Visual Studio Code…
darktrace.com -
NVIDIA Alert: High-Severity Code Execution Flaws Hit CUDA Toolkit
NVIDIA has rolled out a critical update for its CUDA Toolkit, patching four high-severity vulnerabilities that could allow arbitrary code execution and privilege escalation on Windows and Linux systems. The flaws affect “All versions up to CUDA Toolkit…
SecurityOnline -
CVE-2026-1245: Code Injection Flaw Hits Node.js binary-parser
CVE-2026-1245, a code injection flaw, affects the binary-parser library used with Node[.]js and allows attackers to execute arbitrary JavaScript on a server when untrusted input is processed dynamically. The vulnerability stems from how the library builds…
SecurityOnline -
Smishing Alert: Telegram Bots Power New PNB MetLife Phishing Campaign
A new smishing campaign targeting PNB MetLife policyholders has been uncovered, with attackers using Telegram Bots to power real‑time data exfiltration and bypass traditional C2 servers. Security researchers describe the operation as mobile‑friendly,…
SecurityOnline -
Critical Vivotek Flaw Grants Root Access (CVE-2026-22755)
A new critical vulnerability has been disclosed in the firmware of Vivotek legacy cameras, potentially turning thousands of surveillance devices into components of botnets. CVE-2026-22755 is described as a remote command injection flaw with a CVSS of 9.3,…
SecurityOnline -
Trust Hijacked: Hackers Seize Expired Domains to Poison Linux Snap Apps
A new attack trend targets the Linux Snap ecosystem by hijacking expired domains belonging to legitimate snap publishers, allowing attackers to take over accounts and push malicious updates to thousands of users. The approach leverages trust in publishers,…
SecurityOnline -
Calendar Spy: How “Indirect Prompt Injection” Turned Google Gemini Into a Spy
Calendar Spy recounts how indirect prompt injection was used to turn Google Gemini into a covert surveillance tool, revealed by Security researchers on 22 January 2026. The attack leverages the description field of a standard calendar invite to hide a…
SecurityOnline -
Supply Chain Alert: Critical Code Injection Flaw (CVSS 9.3) in Orval
Developers relying on Orval to generate type-safe clients from OpenAPI specifications are being urged to update immediately after a critical code injection flaw was discovered, tracked as CVE-2026-23947, with a CVSS score of 9.3. The flaw lies in how Orval…
SecurityOnline -
Bandwidth Bandits: Fake Notepad++ Installers Hide “Proxyjacking” Malware
According to AhnLab Security Intelligence Center (ASEC), a new wave of attacks targets users seeking free software, with the threat actor Larva-25012 allegedly distributing malware masquerading as Notepad++. The campaign is described as a Proxyjacking…
SecurityOnline -
CVE-2026-0622: Hardcoded Secret Exposes Open5GS 5G Core Networks
CVE-2026-0622 has been identified in Open5GS, a widely used open-source implementation of 5G core network functions, with attackers able to forge administrative tokens and take control of the WebUI through default hardcoded secrets. The flaw targets the…
SecurityOnline -
GitHub & Dropbox Weaponized: “Defendnot” Tool Used to Disable Windows Defender
A FortiGuard Labs briefing has detailed a sophisticated multi-stage malware campaign that targets users in Russia, abusing legitimate cloud services and Windows research tooling to bypass standard protections. The attackers repurpose Defendnot, a tool…
SecurityOnline
