News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 28 Jan· 56 articles
-
RARLAB WinRAR3 articles this day · SecurityWeek first
Months After Patch, WinRAR Bug Poised to Hit SMBs Hardest · Google Warns of Active Exploitation of WinRAR Vulnerability CVE-2025-8088
-
Months After Patch, WinRAR Bug Poised to Hit SMBs Hardest
A wide range of adversaries, including state-sponsored actors, are exploiting a WinRAR vulnerability that was patched last July, with researchers noting it remains active months after the fix. The flaw, CVE-2025-8088, is a high-severity path traversal…
-
Google Warns of Active Exploitation of WinRAR Vulnerability CVE-2025-8088
According to the Google Threat Intelligence Group, multiple threat actors, including nation-state adversaries and financially motivated groups, are exploiting a now-patched WinRAR vulnerability, CVE-2025-8088, to establish initial access and deploy a range…
-
APTs, Cybercriminals Widely Exploiting WinRAR Vulnerability
SecurityWeek reports that CVE-2025-8088, a high-severity path traversal vulnerability in WinRAR for Windows, has been widely exploited by multiple state-sponsored actors and cybercrime groups in attacks over the past six months. The flaw, which can allow…
-
-
Site catering to online criminals has been seized by the FBI
RAMP, the predominantly Russian-language online bazaar that billed itself as the “only place ransomware allowed,” has been seized by the FBI, with both its dark web and clear web sites taken over. Visits to the sites on Wednesday showed the FBI had assumed…
Ars Technica -
Fortinet Multiple Products4 articles this day · SecurityWeek first
Fortinet Confirms New Zero-Day Behind Malicious SSO Logins · U.S. CISA adds a flaw in multiple Fortinet products to its Known Exploited Vulnerabilities catalog
-
Fortinet Confirms New Zero-Day Behind Malicious SSO Logins
Fortinet has confirmed a new zero-day vulnerability, CVE-2026-24858, described as a critical authentication bypass that enables login to a device via FortiCloud SSO when SSO is enabled. The advisory notes a CVSS score of 9.8 and that the flaw affects…
-
U.S. CISA adds a flaw in multiple Fortinet products to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Fortinet flaw to its Known Exploited Vulnerabilities (KEV) catalog, tracked as CVE-2026-24858, which carries a CVSS score of 9.4 and affects FortiOS, FortiManager, and…
-
Fortinet patches actively exploited FortiOS SSO auth bypass (CVE-2026-24858)
Fortinet has released patches for a critical FortiOS flaw, CVE-2026-24858, which allows an authentication bypass via FortiCloud SSO and is reportedly being exploited in the wild. The vulnerability affects FortiOS, FortiManager and FortiAnalyzer, with a CVSS…
-
Fortinet Patches Exploited FortiCloud SSO Authentication Bypass
Fortinet has issued emergency patches for a FortiCloud SSO login authentication bypass tracked as CVE-2026-24858, which attackers have exploited in the wild to gain access to devices registered to other FortiCloud accounts. The company noted that the…
-
-
Consumers Reluctant to Shop at Stores That Don't Take Security Seriously
Consumers are increasingly reluctant to shop at retailers after cyber incidents, with the article noting that the retail sector must adapt as cybersecurity awareness grows. It cites a new SOTI report in which eighty-eight percent of consumers say they “think…
Dark Reading -
The State of Cybersecurity in the Finance Sector: Six Trends to Watch
The State of Cybersecurity in the Finance Sector highlights how credential-driven intrusion is intensifying, with phishing remaining the leading initial access vector and techniques like AiTM and QR code phishing surging. In the first half of 2025, Darktrace…
darktrace.com -
AI “digital helper” Lena Health breach exposed some Houston Methodist patients’ medical info
A data breach involving Lena Health, an AI-based care coordination platform headquartered in Houston, exposed sensitive information from Houston Methodist and other hospitals. The forum listing claims that Lena Health stored 2,134 patients’ complete PHI in…
DataBreaches -
Fake Moltbot AI Coding Assistant on VS Code Marketplace Drops Malware
Cybersecurity researchers have flagged a malicious Visual Studio Code extension for Moltbot on the official Extensions Marketplace, which pretends to be a free AI coding assistant but drops a payload on compromised hosts. The extension, named "ClawdBot Agent…
The Hacker News -
Cyber Security Report 2026
The Cyber Security Report 2026, published on 28 January 2026, from Check Point Research outlines a threat landscape where artificial intelligence is a force multiplier across cyber attacks, accelerating reconnaissance, targeting and malware development.…
Check Point -
China-Backed 'PeckBirdy' Takes Flight for Cross-Platform Attacks
China-aligned threat actors are using a cross-platform, multifunction JScript framework dubbed PeckBirdy to conduct cyber-espionage across gambling sites and government entities, according to Trend Micro threat researchers Ted Lee and Joseph C. Chen in a…
Dark Reading -
Russian ELECTRUM Tied to December 2025 Cyber Attack on Polish Power Grid
The Hacker News reports that the December 2025 cyber attack on Poland’s power grid has been attributed with medium confidence to a Russian state‑sponsored group known as ELECTRUM. Dragos described the operation as the first major cyber assault targeting…
The Hacker News -
Malicious Chrome extensions can spy on your ChatGPT chats
Researchers discovered 16 malicious browser extensions for Google Chrome and Microsoft Edge that steal ChatGPT session tokens, giving attackers access to accounts, including conversation history and metadata. The 16 extensions (15 for Chrome and 1 for Edge)…
Malwarebytes -
Cyber Insights 2026: Offensive Security; Where It is and Where Its Going
SecurityWeek’s Cyber Insights 2026 examines offensive security today and its trajectory, arguing that cyber red teaming will change more in the next 24 months than in the previous decade. The piece notes that offensive security spans pentesting, red teaming…
SecurityWeek -
Mesh Security Raises $12 Million for CSMA Platform
Mesh Security today announced that it has raised $12 million in Series A funding, bringing the company’s total raised to over $16 million. The round was led by Lobby Capital, with additional support from S Ventures and BrightPixel Capital. Founded in 2022,…
SecurityWeek -
Critical vm2 Node.js Flaw Allows Sandbox Escape and Arbitrary Code Execution
A critical sandbox escape vulnerability has been disclosed in the vm2 Node[.]js library, tracked as CVE-2026-22709, with a CVSS score of 9.8. The flaw stems from improper sanitisation of Promise handlers, creating an escape vector that could allow arbitrary…
-
Surging Cyberattacks Boost Latin America to Riskiest Region
Latin America is now described as the riskiest region for cyberattacks, with organisations facing a mix of data-leak extortion, credential-stealing campaigns, edge-device exploitation and growing use of AI by attackers. The region saw an average of 3,065…
Dark Reading -
Why We Can’t Let AI Take the Wheel of Cyber Defense
The SecurityWeek piece, written by Steve Durbin, argues that AI should augment rather than replace human security expertise, warning that autonomous cyber defence remains risky if treated as a guarantee of safety. It emphasises the danger of a closed loop…
SecurityWeek -
Google disrupts IPIDEA proxy network, blocking malware traffic
Google's Threat Intelligence Group (GTIG) and partners recently disrupted the IPIDEA proxy network, which they believe is one of the world's largest residential proxy networks. The actions included legal initiatives to dismantle control domains, sharing…
Google Cloud -
Rein Security Emerges From Stealth With $8M, Bringing Inside-Out Protection to AppSec
Rein Security has emerged from stealth with $8 million in funding, backed by Glilot Capital, and is pitching an inside-out approach to application security (AppSec). According to SecurityWeek, the Tel Aviv and New York–headquartered startup was founded in…
SecurityWeek -
WhatsApp rolls out new protections against advanced exploits and spyware
WhatsApp is quietly rolling out a new safety layer for photos, videos and documents that operates under the hood, changing what happens to files moving through chats without altering how you chat. The feature, called Strict Account Settings, is being…
Malwarebytes -
Two High-Severity n8n Flaws Allow Authenticated Remote Code Execution
Cybersecurity researchers have disclosed two high-severity flaws in the n8n workflow automation platform, identified as CVE-2026-1470 and CVE-2026-0863, with CVSS scores of 9.9 and 8.5 respectively. Both are eval injection vulnerabilities that could let an…
-
From Triage to Threat Hunts: How AI Accelerates SecOps
The Hacker News discusses how AI is reshaping security operations, focusing on Prophet Security’s Agentic AI as a practical advancement rather than a sci‑fi dream. It notes that the AI SOC agent adds a machine layer that investigates every alert with…
The Hacker News -
Mustang Panda Deploys Updated COOLCLIENT Backdoor in Government Cyber Attacks
Mustang Panda has been observed deploying an updated COOLCLIENT backdoor in government cyber espionage campaigns, with activity attributed to the group in 2025 and directed at entities across Myanmar, Mongolia, Malaysia, and Russia. According to Kaspersky,…
The Hacker News -
Password Reuse in Disguise: An Often-Missed Risky Workaround
Near-identical password reuse is a persistent, often overlooked risk even where password policies exist. The article explains that attackers increasingly obtain access through credentials that technically meet policy requirements, using small, predictable…
The Hacker News -
WhatsApp Boosts Account Security for At-Risk Individuals
WhatsApp has announced fresh security enhancements for at-risk users, introducing Strict Account Settings to bolster safety and privacy amid targeted cyber threats. The lockdown-style feature will allow users to block attachments and media from unknown…
SecurityWeek -
SolarWinds Web Help Desk Hit with Multiple RCE and Auth Bypass Vulnerabilities
SecurityOnline[.]info reports a batch of critical vulnerabilities affecting SolarWinds Web Help Desk (WHD), spanning unauthenticated remote code execution and authentication bypass flaws that could let attackers compromise host machines. The most dangerous…
-
Fake Python Spellchecker Packages on PyPI Delivered Hidden Remote Access Trojan
Cybersecurity researchers have flagged two malicious PyPI packages, spellcheckerpy and spellcheckpy, which masquerade as spellcheckers but carry a remote access Trojan. The packages were collectively downloaded a little over 1,000 times before being removed,…
The Hacker News -
US Charges 31 More Defendants in Massive ATM Hacking Probe
The US Justice Department has announced charges against an additional 31 individuals involved in a massive ATM jackpotting scheme, bringing the total targeted in the probe to 87. The defendants, predominantly Venezuelan nationals and including members of the…
SecurityWeek -
Beyond ChromeOS: Google’s “Aluminum OS” Desktop Android Leaks Online
Google has signalled its plan to merge Android and ChromeOS into a single, versatile operating system, with Aluminum OS identified as the internal codename for the desktop Android iteration. According to 9to5google, a Google engineer inadvertently disclosed…
SecurityOnline -
Labels for Machines: Google Proposes ai-disclosure Tags for Every Web Element
Google is exploring a standardised identification framework for AI-generated content based on explicit website declarations, with a new proposal called “AI Content Disclosure Attribute” emerging in the Chrome Platform Status registry. The mechanism would…
SecurityOnline -
PackageGate bugs let attackers bypass protections in NPM, PNPM, VLT, and Bun
Koi researchers have uncovered a set of vulnerabilities, collectively called “PackageGate,” in NPM, PNPM, VLT and Bun that could let attackers bypass supply chain protections and run malicious code hidden in dependencies. The flaws enabled six zero‑day…
Security Affairs -
AI for All: Google Launches $7.99 AI Plus Tier with Gemini 3 Pro
Google has expanded its AI subscription lineup with the AI Plus tier at $7.99 per month, now available across 35 nations and territories. In the United States, new subscribers can access an introductory rate of $3.99 for the first two months, with Gemini 3…
SecurityOnline -
The Egress Explosion: Google Cloud to Double Interconnect Prices in May 2026
Google Cloud Platform has announced a significant recalibration of its interconnect and CDN pricing, with changes taking effect on 1 May 2026. The revised tariff primarily affects partnerships and network operators, with certain regional charges expected to…
SecurityOnline -
Pivoting the Pin: Pinterest Cuts 15% of Staff to Fuel AI Ambitions
Pinterest, the visual discovery platform, disclosed a workforce reduction of 15% in its mandatory regulatory filings, a move described as a strategic pivot to fund artificial intelligence initiatives, according to TechCrunch. The company’s headcount prior to…
SecurityOnline -
Indurex Emerges From Stealth to Close Security Gap in Cyber-Physical Systems
Indurex, a Netherlands-based cybersecurity startup that specialises in protecting cyber-physical systems, emerged from stealth mode on Tuesday, according to SecurityWeek. The company was founded by Jalal Bouhdada, who serves as CEO, and Maarten Oosterink,…
SecurityWeek -
High-Severity Remote Code Execution Vulnerability Patched in OpenSSL
SecurityWeek reports that OpenSSL has patched a dozen vulnerabilities, all discovered by the cybersecurity firm Aisle. The high-severity issue is tracked as CVE-2025-15467 and is described as a stack buffer overflow that could lead to a crash or remote code…
