News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 27 Jan· 63 articles
-
Microsoft Office2 articles this day · SecurityOnline first
Microsoft Office Zero-Day (CVE-2026-21509) - Emergency Patch Issued for Active Exploitation · Under Attack: Microsoft Patches Office Zero-Day (CVE-2026-21509) Exploited in the Wild
-
Microsoft Office Zero-Day (CVE-2026-21509) - Emergency Patch Issued for Active Exploitation
Microsoft on Monday issued out-of-band security patches for a high-severity Microsoft Office zero-day vulnerability exploited in attacks, tracked as CVE-2026-21509 with a CVSS of 7.8. The vulnerability is described as a security feature bypass in Microsoft…
-
Under Attack: Microsoft Patches Office Zero-Day (CVE-2026-21509) Exploited in the Wild
Microsoft has rolled out an urgent security update for Office to fix CVE-2026-21509, a zero-day vulnerability exploited in the wild that stands at a CVSS of 7.8 and targets how Office handles OLE controls. The flaw, classified as a Security Feature Bypass,…
-
-
Dormakaba flaws allow to access major organizations’ doors
Researchers from SEC Consult discovered and fixed more than 20 security flaws in Dormakaba’s exos 9300 physical access control ecosystem, which are used by large European organisations to manage doors with key cards or fingerprint readers. According to SEC…
Security Affairs -
Lost No More: Apple Unveils AirTag 2 With 50% More Range and a Genius Apple Watch Upgrade
Lost No More: Apple has unveiled AirTag 2, boasting a 50% longer Precision Finding range and an expanded Bluetooth detection radius, with a redesigned acoustic chamber that increases speaker volume by 50% so alerts can be heard at twice the distance. The…
SecurityOnline -
Microsoft Unveils Maia 200: The 3nm Beast Designed to Break NVIDIA’s AI Grip
According to Microsoft, Maia 200 was unveiled on January 26 as the company’s second-generation AI processor, built on TSMC’s 3nm process and pitched as its most formidable inference system to date. The chip houses over 140 billion transistors on a single die…
SecurityOnline -
The 5-Gigawatt Power Play: NVIDIA Pumps $2B Into CoreWeave to Build the Future of AI Factories
On 27 January 2026, NVIDIA announced a strategic investment of $2 billion into CoreWeave to bolster their collaboration in building AI factories. The partners aim to create a monumental 5GW AI Factory ecosystem by 2030, integrating NVIDIA’s Rubin computing…
SecurityOnline -
Escape “Calendar Purgatory”: Google’s New Gemini AI Autopilot Schedules Your Meetings for You
Google has announced Gemini AI integration within Google Calendar to autonomously scan participant schedules and identify the best window for meetings, aiming to cut down on calendar purgatory. When creating a new event, users can choose a “Suggested times”…
SecurityOnline -
OpenAI’s Big Ad Gamble: Why ChatGPT Ads Cost 3x More Than Meta With Way Less Data
OpenAI is piloting advertisements within ChatGPT, with promoted messages likely to appear at the end of queries for users on both the free tier and ChatGPT Go, according to the article published on January 27, 2026. The Information has disclosed that…
SecurityOnline -
The Miami Glitch: How a Single Config Error Leaked Cloudflare’s IPv6 Routes to the Global Internet
Cloudflare recently disclosed a BGP route leak that persisted for twenty-five minutes and specifically affected IPv6 traffic, causing network congestion, packet loss and an overall throughput deficit of about 12Gbps. The incident stemmed from a policy…
SecurityOnline -
Apple Unlocks AirTag 2: New iOS Update Brings High-Precision Tracking to Your Wrist
Apple has released iOS 26.2.1 and watchOS 26.2.1 to support the AirTag 2, with the updates addressing the newer hardware and fixing undisclosed software anomalies, according to the release notes. The AirTag 2 includes an upgraded Bluetooth chipset and the…
SecurityOnline -
CVSS 9.8 Sandbox Escape: Critical vm2 Flaw Exposes Millions of Apps
A critical vulnerability in vm2, a popular sandbox library for Node[.]js, has been tracked as CVE-2026-22709 and carries a maximum CVSS score of 9.8, enabling attackers to bypass the sandbox and execute arbitrary code on the host. The flaw affects vm2…
-
Incomplete Fix: High-Severity React Server Components DoS Flaw (CVE-2026-23864)
React’s developers have warned that a high-severity DoS flaw in Server Components, tracked as CVE-2026-23864, remains even after prior patches, potentially causing server crashes, out-of-memory errors, or excessive CPU use via specially crafted HTTP requests…
-
High-Severity Flaw in Western Digital Installer Opens Door to Code Execution
A high-severity vulnerability in Western Digital’s WD Discovery installer (CVE-2025-30248) has been disclosed, with a CVSS score of 8.9 and a patch delivered in WD Discovery version 5.3. The flaw enables local attackers to perform DLL hijacking by exploiting…
-
Stealth in Script: “PeckBirdy” Framework Powers New Wave of China-Aligned Attacks
PeckBirdy is a lightweight, script-based command-and-control framework built entirely on JScript that operates via the Windows Script Host to run commands without dropping heavy files that might trigger antivirus software. According to Trend Micro, PeckBirdy…
SecurityOnline -
1/27/26, 12:46 AM
DataBreaches[.]Net reports a fresh breach preview from Lena Health, with a full leak promised soon.
DataBreaches -
High-Severity DoS Flaw Hits Google Protocol Buffers (CVE-2026-0994)
A high-severity vulnerability has been identified in Google’s Protocol Buffers (protobuf), tracked as CVE-2026-0994, and affects Python implementations by enabling a Denial-of-Service (DoS) attack that can crash services. The flaw lies in the…
-
“Repo Squatting”: How Hackers Are Using GitHub’s Own Features to Hijack Official Repos
In a report published on 27 January 2026, researchers describe a campaign dubbed “repo squatting” in which attackers abuse GitHub’s handling of forks to distribute malware that looks like it comes from official sources, targeting the GitHub Desktop…
SecurityOnline -
-
“G_Wagon” Malware Hides in Fake NPM UI Library to Steal Cloud Keys
Discovered on 23 January 2026, the malicious package ansi-universal-ui is only superficially a UI library; security researchers have dubbed the multi-stage attack platform “G_Wagon” for its infostealer capabilities. According to Aikido, the package…
SecurityOnline -
Hijacking the Hackers: Researchers Sinkhole “KazakRAT” Espionage Campaign
On 27 January 2026, researchers revealed KazakRAT, a Windows-based remote access trojan used in a persistent, state-affiliated espionage campaign targeting government and financial entities in Kazakhstan and Afghanistan since at least August 2022. The…
SecurityOnline -
The CAPTCHA Trap: ClearFake Malware Tricks Users Into Hacking Themselves
A new malware campaign named ClearFake is turning a routine security verification into a trap, according to Expel’s analysis. The attackers lure visitors with fake CAPTCHA prompts and social engineering techniques, prompting users to press Win + R, then Ctrl…
SecurityOnline -
“Contagious Interview”: How North Korean Hackers Use Fake Jobs to Breach IT Firms
According to Insikt Group, a campaign dubbed “Contagious Interview” shows PurpleBravo, a North Korean threat group, increasingly targeting the IT software supply chain by masquerading as legitimate recruiters and delivering weaponised coding tests to…
SecurityOnline -
Trusted Tool, Hidden Threat: Official EmEditor Installer Hijacked to Push Malware
A compromised installer for EmEditor, a text editor trusted by developers worldwide, has been used to push sophisticated malware, according to TrendAI Research. The campaign hijacked the official download page of the U.S.-based vendor, serving a trojanised…
SecurityOnline
