News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Mon 26 Jan· 52 articles
-
Sandworm Blamed for Wiper Attack on Poland Power Grid
Researchers attributed the destructive Dec 2025 wiper attack on Poland’s energy grid to the Russian APT Sandworm, a group long associated with disruption of critical infrastructure. Attackers targeted two combined heat and power plants and a system enabling…
Dark Reading -
Why has Microsoft been routing example.com traffic to a company in Japan?
Ars Technica reports an unexplained misconfiguration in Microsoft’s network that caused traffic destined for example[.]com to be routed to a company in Japan, specifically sei.co[.]jp, a Sumitomo Electric domain, despite example[.]com being reserved by…
Ars Technica -
Emergency Microsoft update fixes in-the-wild Office zero-day
Microsoft issued emergency out-of-band security updates to fix an actively exploited Office zero‑day tracked as CVE-2026-21509, affecting Office 2016–2024 and Microsoft 365 Apps for Enterprise. The vulnerability is a security feature bypass that can allow an…
-
How to encrypt your PC's disk without giving the keys to Microsoft
In early 2025, Forbes reports investigators at the FBI served Microsoft with a warrant seeking the BitLocker recovery keys for several laptops it believed held evidence of fraud in Guam’s COVID-19 unemployment programme, and Microsoft complied. BitLocker,…
Ars Technica -
Hungarian and Romanian Police Detain Young Hackers over Fake Threat Calls
Hungarian police, in cooperation with Romanian authorities, have taken action against four young hackers suspected of making false and intimidating phone calls, according to Hungarian Conservative. The investigation began in mid-July last year after several…
DataBreaches -
Indian Users Targeted in Tax Phishing Campaign Delivering Blackmoon Malware
Cybersecurity researchers have identified an ongoing campaign that targets Indian users with a multi-stage backdoor as part of a suspected cyber espionage operation, reported on 26 January 2026. The campaign uses phishing emails that impersonate the Income…
The Hacker News -
Security strategies for safeguarding governmental data
Security strategies for safeguarding governmental data argues that threat actors, including state-sponsored groups, increasingly target cloud assets with greater sophistication and persistence, a trend driving a shift from reactive to more proactive defence.…
Microsoft -
Who Operates the Badbox 2.0 Botnet?
Krebs on Security reports that the cybercriminals behind Kimwolf, a disruptive botnet that has infected more than 2 million devices, recently shared a screenshot suggesting they had compromised the Badbox 2.0 botnet control panel, a vast China-based botnet…
Krebs on Security -
Access System Flaws Enabled Hackers to Unlock Doors at Major European Firms
Dormakaba’s Exos central management software, a hardware access manager and registration units, were found to contain more than 20 vulnerabilities that could have allowed hackers to remotely open doors at major European organisations, according to SEC…
SecurityWeek -
DPRK's Konni Targets Blockchain Developers With AI-Generated Backdoor
The North Korean threat group Konni is extending its reach to blockchain developers, using a new AI-generated PowerShell backdoor to breach development environments and, potentially, cryptocurrency holdings, according to researchers. The activity targets…
Dark Reading -
Malicious VS Code AI Extensions with 1.5 Million Installs Steal Developer Source Code
Cybersecurity researchers have identified two malicious Visual Studio Code extensions marketed as AI coding assistants that secretly siphon developer data to servers in China, in a campaign dubbed MaliciousCorgi. The extensions—ChatGPT - 中文版 (ID:…
The Hacker News -
ShinyHunters claims 2 Million Crunchbase records; company confirms breach
According to Crunchbase, a data breach was confirmed after the cybercrime group ShinyHunters claimed to have stolen over 2 million personal records. The group leaked a 402 MB compressed archive on their website following a failed extortion attempt, while…
Security Affairs -
Upwind Raises $250 Million at $1.5 Billion Valuation
Upwind, a CNAPP company, has announced a $250 million Series B funding round that brings its total raised to $430 million and values the business at $1.5 billion, according to SecurityWeek. The round was led by Bessemer Venture Partners, with additional…
SecurityWeek -
Get paid to scroll TikTok? The data trade behind Freecash ads
In January 2026, an app called Freecash shot up to the number two spot on Apple’s free iOS chart in the US, helped along by TikTok ads that resembled job offers from TikTok itself. The ads promised up to $35 an hour to watch your For You page, but TikTok…
Malwarebytes -
One privacy change I made for 2026 (Lock and Code S07E02)
According to Malwarebytes Labs, for Data Privacy Day in 2026, Malwarebytes Senior Privacy Advocate David Ruiz is making one notable change: he has given up Google Search entirely. After requesting the data Google had collected about him, he found that it…
Malwarebytes -
Energy sector targeted in multi-stage phishing and BEC campaign using SharePoint
Energy sector targets have been identified in a multi-stage phishing and BEC campaign that abused SharePoint links to steal credentials, according to Microsoft. The campaign began with a compromised trusted sender and used SharePoint document-sharing…
Security Affairs -
Dark Web Profile: BravoX Ransomware
BravoX is described as a newly observed ransomware operation that surfaced publicly on 23 January 2026 after publishing a Tor address on the RAMP forum, with a dedicated data leak site identified soon after. The group is presented as a…
SOCRadar -
Crunchbase Confirms Data Breach After Hacking Claims
Crunchbase has confirmed a data breach after hackers published files allegedly stolen from its systems, with the incident disclosed on 26 January 2026. The hackers, identified as the ShinyHunters cybercrime group, claim to have stolen more than 2 million…
SecurityWeek -
Cyber Insights 2026: Threat Hunting in an Age of Automation and AI
Cyber Insights 2026 portrays threat hunting as a shifting practice, moving from reactive to proactive and increasingly automated through machine learning and AI, while emphasising that human oversight remains essential. The piece argues that threat hunting…
SecurityWeek -
⚡ Weekly Recap: Firewall Flaws, AI-Built Malware, Browser Traps, Critical CVEs & More
The weekly recap paints a picture of risk moving into everyday tools, with Fortinet confirming activity around a FortiCloud SSO authentication bypass on fully patched FortiGate firewalls, tied to an incomplete patch for CVE-2025-59718 and CVE-2025-59719.…
-
‘Stanley’ Malware Toolkit Enables Phishing via Website Spoofing
A new malware‑as‑a‑service kit called Stanley has emerged on an underground forum, enabling phishing while the legitimate address remains visible in the browser, according to Varonis. Priced between $2,000 and $6,000, Stanley was first spotted on 12 January…
SecurityWeek -
Winning Against AI-Based Attacks Requires a Combined Defensive Approach
The piece argues that AI-powered threats are accelerating, with adversaries using large language models to conceal code, generate scripts on the fly, and make malware more elusive. It notes an ongoing trend of AI‑driven campaigns, including an November 2025…
The Hacker News -
TikTok Finalizes a Deal to Form a New American Entity
TikTok has finalised a deal to create a new American entity, forming a U.S. joint venture with investors including Oracle, Silver Lake and MGX to forestall a potential ban in the United States, according to Associated Press. The venture will operate with…
SecurityWeek -
North Korea–linked KONNI uses AI to build stealthy malware tooling
According to Check Point Research, a active phishing campaign attributed to the North Korea–aligned KONNI group targets software developers and engineers with fake project documentation tied to blockchain and crypto initiatives, using an AI-written…
Security Affairs -
What Is Clawdbot and Is It Actually Safe to Run on Your System?
Clawdbot has moved from a niche open‑source project to a widely deployed AI agent gateway, described as an agent gateway that connects LLMs to messaging platforms and local system capabilities. The article notes that the Clawdbot Gateway handles message…
SOCRadar -
Russian Sandworm Hackers Blamed for Cyberattack on Polish Power Grid
SecurityWeek reports that the Russian state-sponsored APT known as Sandworm was behind the December 2025 cyberattack targeting Poland’s power grid, according to ESET. Poland’s energy infrastructure, including two combined heat and power plants and a…
SecurityWeek -
Konni Hackers Deploy AI-Generated PowerShell Backdoor Against Blockchain Developers
The North Korean threat actor known as Konni has been observed using AI-generated PowerShell malware to target developers and engineering teams in the blockchain sector. Check Point Research said in a technical report that the phishing campaign has expanded…
The Hacker News -
1Password’s New “Genius” Defense: A Shield Against the Sneaky Copy-Paste Phishing Trap
1Password has unveiled an added defence that checks a website’s legitimacy when a user tries to fill a field or use copy-paste, and issues a preemptive warning if the site is identified as a phishing attempt. According to 1Password, the feature performs a…
SecurityOnline -
The Ouroboros Effect: Is ChatGPT Citing Elon Musk’s AI-Generated Grokipedia Into a “Content Trap”?
Grokipedia is a Wikipedia-inspired repository established by Elon Musk’s artificial intelligence venture, xAI, and is described as being autonomously authored by Grok AI, which harvests and synthesises data from the internet into encyclopedic entries. The…
SecurityOnline -
Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power grid
According to ESET researchers, a late-2025 cyberattack on Poland’s energy system has been linked to the Russia-aligned Sandworm APT, with DynoWiper described as the destructive malware used in the attempted strike on 29 December 2025. ESET attributes the…
Security Affairs -
A week in security (January 19 – January 25)
According to Malwarebytes Labs, a week in security for 19–25 January 2026 highlights a string of notable threats and issues, with the post dated 26 January 2026. The piece links several security stories from that week, including spammers abusing Zendesk to…
Malwarebytes -
Boot Loop Nightmare: Microsoft Confirms Windows 11 January Update Causes System-Killing BSOD
The piece reports that a subset of Windows 11 devices may experience a spontaneous Blue Screen of Death after installing the January 2026 patch, with boot failures showing the stop code UNMOUNTABLE_BOOT_VOLUME. According to Microsoft, the issue occurs after…
SecurityOnline -
Microsoft Issues Emergency Auto-Patch: Is Your Outlook Classic Still Freezing?
Microsoft has issued an emergency out-of-band patch to fix the instability in Outlook Classic caused by this month’s security updates, with the update being deployed automatically via Windows Update rather than requiring manual installation. The article…
SecurityOnline -
2024 VMware Flaw Now in Attackers’ Crosshairs
A SecurityWeek report warns that a critical VMware vCenter Server flaw, tracked as CVE-2024-37079 with a CVSS of 9.8, can be exploited via crafted network packets to achieve remote code execution. The vulnerability is an out-of-bounds write in the DCERPC…
-
Apple’s Grand Offensive: 20+ New Devices, Foldables, and Robotic AI Hubs
Apple is reportedly poised to mount its most intensive product offensive in recent memory, with over twenty new devices slated for release in 2026. The lineup extends beyond iterative iPhone, iPad, and Mac updates to include a foldable iPhone, an…
SecurityOnline -
The Grand Reunion: Apple Taps Intel to Build Future “Made in USA” iPhone Chips
According to a recent investigative report by Jeff Pu, an analyst at GF Securities, Apple is contemplating a strategic restoration of its silicon fabrication partnership with Intel, with production possibly starting as early as 2028 using the Intel 14A…
SecurityOnline -
The Master Key Trap: Microsoft Confirms It Hands BitLocker Keys to the FBI
Microsoft has confirmed that it will divulge device decryption keys stored in its cloud to law enforcement agencies, such as the FBI, provided they present valid legal mandates. A Forbes report cited in the piece notes that the FBI petitioned Microsoft for…
SecurityOnline -
Siri’s Gemini Glow-Up: Apple and Google Set to Launch “Truly Intelligent” iOS 26.4
According to Bloomberg’s Mark Gurman, Apple is poised to unveil the products of its collaboration with Google Gemini as early as February, with the iOS 26.4 beta expected to arrive soon and a public rollout planned for March or April. The piece suggests the…
SecurityOnline -
-
Booting Up Malware: Critical Flaw in Rufus Grants Admin Access (CVE-2026-23988)
A high-severity flaw has been discovered in Rufus, the tool used to format and create bootable USB drives, tracked as CVE-2026-23988. The vulnerability arises from an unsafe file handling practice in Rufus’s network module, where the Fido PowerShell script…
