News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Thu 29 Jan· 58 articles
-
Trump Administration Rescinds Biden-Era SBOM Guidance
The White House’s Office of Management and Budget has issued a memorandum rolling back software security requirements from the Biden era, including the rules around software bills of materials (SBOMs) and related attestations. On 23 January, OMB Director…
Dark Reading -
Authenticated users can bypass the Expression sandbox mechanism to achieve full remote code execution on n8n’s main node.2 articles this day · SecurityWeek first
More Critical Flaws on n8n Could Compromise Customer Security · N8n Vulnerabilities Could Lead to Remote Code Execution
-
More Critical Flaws on n8n Could Compromise Customer Security
According to JFrog security researcher Nathan Nehorai, in a blog post, two critical vulnerabilities in the AI workflow platform n8n could allow attackers to hijack an organisation’s n8n service by bypassing sandbox protections and executing code remotely.…
-
N8n Vulnerabilities Could Lead to Remote Code Execution
SecurityWeek reports two critical- and high-severity vulnerabilities in the n8n AI workflow automation platform that could allow attackers to perform remote code execution, according to JFrog. The flaws, tracked as CVE-2026-1470 (CVSS 9.9) and CVE-2026-0863…
-
-
Understanding the Russian Cyber Threat to the 2026 Winter Olympics
The article, published on 29 January 2026, argues that the 2026 Winter Olympics in Milano Cortina sit within a broader geopolitical frame in which Russia’s cyber actions are intended to disrupt or influence major events. It notes that Russia’s current…
unit42.paloaltonetworks.com -
Turning threat reports into detection insights with AI
Security teams routinely need to transform unstructured threat knowledge into concrete defensive action, and this post from the Microsoft Defender Security Research Team describes an AI-assisted workflow designed to accelerate detection analysis. It outlines…
Microsoft -
Meta confirms it’s working on premium subscription for its apps
Meta plans to test exclusive features that will be incorporated in paid versions of Facebook, Instagram, and WhatsApp, according to TechCrunch. The article notes these plans should not be confused with the ad-free subscription options Meta introduced for…
Malwarebytes -
Ex-Google Engineer Guilty of Stealing AI Tech for Chinese Firm
Linwei Ding, a former Google engineer, has been found guilty by a federal court in the Northern District of California on 14 counts of economic espionage and trade secrets theft, according to the case USA v. Ding, N.D. Cal., No. 3:24-cr-00141, 1/29/26. He…
DataBreaches -
TAG Bulletin: Q4 2025
This bulletin compiles coordinated influence operation campaigns terminated on our platforms in Q4 2025, with the page last updated on 29 January 2026, according to Threat Analysis Group. Highlights across October to December include numerous removals of…
blog.google -
SolarWinds addressed four critical Web Help Desk flaws
SolarWinds patched six Web Help Desk vulnerabilities, including four critical flaws that can be exploited without authentication for remote code execution or to bypass authentication. The four critical issues, tracked as CVE-2025-40552, CVE-2025-40553,…
-
Researchers Find 175,000 Publicly Exposed Ollama AI Servers Across 130 Countries
A joint investigation by SentinelOne SentinelLabs and Censys has found 175,000 unique Ollama hosts across 130 countries forming an unmanaged, publicly accessible layer of AI compute infrastructure. The exposed systems span cloud and residential networks…
The Hacker News -
County pays $600,000 to pentesters it arrested for assessing courthouse security
Two security professionals who were arrested in 2019 after conducting an authorised security assessment of the Dallas County Courthouse in Adel, Iowa, will receive $600,000 to settle a lawsuit alleging wrongful arrest and defamation, according to Dan Goodin.…
Ars Technica -
New Microsoft Data Security Index report explores secure AI adoption to protect sensitive data
New Microsoft Data Security Index findings, published on 29 January 2026, reveal that generative AI is being woven into data security plans at scale, with 82% of organisations having developed plans to embed generative AI into their data security operations,…
Microsoft -
'Semantic Chaining' Jailbreak Dupes Gemini Nano Banana, Grok 4
Researchers describe a new method, dubbed semantic chaining, that can coax AI chatbots into generating malicious outputs by splitting prompts into discrete chunks. According to Dark Reading, NeuralTrust says the attack fools image-generating models and has…
Dark Reading -
Google targets IPIDEA in crackdown on global residential proxy networks
Google has disrupted IPIDEA, a large residential proxy network that enrolled users’ devices via SDKs embedded in mobile and desktop apps, in a coordinated crackdown involving legal domain takedowns, intelligence sharing on malicious SDKs, and ecosystem-wide…
Security Affairs -
Supply chain attack on eScan antivirus: detecting and remediating malicious updates
On 20 January, a supply chain attack hit the eScan antivirus from Indian firm MicroWorld Technologies, with the infected software delivered via the eScan update server. Users received a malicious Reload[.]exe that initiated a multi-stage infection chain, and…
securelist.com -
LLMs Hijacked, Monetized in ‘Operation Bizarre Bazaar’
According to Pillar Security, an LLMjacking operation dubbed Operation Bizarre Bazaar is targeting exposed LLM and MCP endpoints at scale for commercial monetization, primarily impacting self-hosted LLM infrastructure with exposed default ports,…
SecurityWeek -
Microsoft Office zero-day lets malicious documents slip past security checks
Microsoft has issued an emergency patch for a high-severity zero-day in Office that allows attackers to bypass document security checks and is being exploited in the wild via malicious files. The vulnerability, tracked as CVE-2026-21509, is classified as a…
-
You’re not paranoid: lawyers ARE coming to get you.
You’re not paranoid: lawyers are coming to get you, the piece reminds, with regulators, state attorneys general, and class-action lawyers all circling after breaches involving patient data. It chronicles Comstar, LLC, and a ransomware incident first…
DataBreaches -
Clawdbot’s rename to Moltbot sparks impersonation campaign
According to Malwarebytes, Clawdbot was forced to rename to Moltbot in early 2026 after a trademark dispute, and opportunists soon launched an impersonation campaign around the renamed project. Within days, typosquat domains and a cloned GitHub repository…
Malwarebytes -
Introducing Moltworker: a self-hosted personal AI agent, minus the minis
Moltworker is presented as a middleware that lets Moltbot, the open-source self-hosted AI agent, run on Cloudflare’s Sandbox SDK and Developer Platform APIs, rather than on dedicated Mac minis. The setup uses a entrypoint API router and a proxy between…
Cloudflare -
Android Trojan Campaign Uses Hugging Face Hosting for RAT Payload Delivery
Bitdefender researchers uncovered an Android RAT (remote access trojan) campaign utilizing the Hugging Face platform for payload delivery. The campaign employs social engineering tactics to distribute a malicious dropper app called TrustBastion, enticing…
bitdefender.com -
SolarWinds Web Help Desk2 articles this day · The Hacker News first
SolarWinds Patches Critical Web Help Desk Vulnerabilities · SolarWinds Fixes Four Critical Web Help Desk Flaws With Unauthenticated RCE and Auth Bypass
-
SolarWinds Patches Critical Web Help Desk Vulnerabilities
SolarWinds has patched six vulnerabilities in its Web Help Desk product, including four rated critical and addressed with Web Help Desk version 2026.1, released this week. The four critical flaws include CVE-2025-40551, a high-severity untrusted data…
-
SolarWinds Fixes Four Critical Web Help Desk Flaws With Unauthenticated RCE and Auth Bypass
According to The Hacker News, SolarWinds has released security updates to address multiple vulnerabilities in SolarWinds Web Help Desk, including four critical flaws that could lead to authentication bypass and remote code execution. The vulnerabilities are…
-
-
ThreatsDay Bulletin: New RCEs, Darknet Busts, Kernel Bugs & 25+ More Stories
ThreatsDay Bulletin surveys a broad mix of security signals this week, from a major dark‑web takedown to new kernel and cryptography updates and a wave of phishing, fraud and ransomware activity. It notes the FBI seized the RAMP cybercrime forum, with a…
The Hacker News -
Cyber Insights 2026: Zero Trust and Following the Path
Cyber Insights 2026: Zero Trust and Following the Path frames zero trust as an idea, a destination, and a journey rather than a single product or fixed end point, with experts stressing that trust must be justified by verifying identity and authority at…
SecurityWeek -
Survey of 100+ Energy Systems Reveals Critical OT Cybersecurity Gaps
A recent study by OMICRON analysing data from more than 100 energy installations has revealed widespread OT cybersecurity gaps across substations, power plants and control centres worldwide. The findings come from years of deploying StationGuard, OMICRON’s…
The Hacker News -
Google Disrupts IPIDEA Proxy Network
According to Google, IPIDEA was one of the largest residential proxy networks, enrolling users’ devices via SDKs and proxy software embedded in mobile and desktop apps. The takedown involved legal action against control and proxy domains and sharing…
SecurityWeek -
Nation-state and criminal actors leverage WinRAR flaw in attacks
Multiple threat actors, including nation-state and financially motivated groups, exploited a now-patched WinRAR flaw to gain initial access and deliver a range of payloads. According to Google Threat Intelligence Group (GTIG), the vulnerability…
-
3 Decisions CISOs Need to Make to Prevent Downtime Risk in 2026
CISOs should prioritise focusing on today’s actual business security risks, using continuously refreshed threat feeds sourced from active investigations to guide smart, proactive action. According to ANY[.]RUN, TI Feeds deliver data from 15,000 SOC teams and…
The Hacker News -
Introducing Apps & PATs: Centralized Visibility for GitHub Apps and Personal Access Tokens
According to StepSecurity, Apps & PATs offers centralized visibility into GitHub Apps and both fine-grained and classic Personal Access Tokens across all your organisations in a single dashboard. The feature introduces a real-time dashboard that shows all…
StepSecurity -
OpenSSL issued security updates to fix 12 flaws, including Remote Code Execution
OpenSSL released security updates that address 12 vulnerabilities in the open-source cryptographic library, including a high-severity remote code execution flaw. The disclosures note that the issues are primarily related to memory safety, parsing robustness,…
-
Locked Out of the Crate: Microsoft’s “Smart” Security Cripples ASUS ROG Ally
Microsoft Defender’s Smart App Control has flagged ASUS Armoury Crate, rendering the Armoury Crate and ROG Ally users unable to access key hardware controls. The false positive has left RGB lighting, thermal fan curves and dedicated Armoury and Control…
SecurityOnline -
The Final Hang-Up: Microsoft Disables Legacy Modem Drivers for Security
According to Microsoft, a number of legacy modem drivers have been decommissioned after users installed the latest Windows 11 cumulative updates, with the result that some hardware‑built integrated modems can no longer access the internet. The article notes…
-
The $799 Gamble: Apple Absorbs Memory Costs to Freeze iPhone 18 Prices
On 29 January 2026, Ming-Chi Kuo outlined how rising memory costs could shape Apple’s strategy around the iPhone 18. He notes that Apple is unlikely to raise retail prices for the iPhone 18 series, preferring to keep pricing stable to capture a larger market…
SecurityOnline -
The Instant Browser: Google Tests New Auto-Launch Toggle for Chrome
Google is testing a new auto-launch toggle for Chrome designed to run the browser as a foreground process during system startup. The feature is currently in the nascent testing phase within the Chrome Canary branch and has not been enabled by default; users…
SecurityOnline -
The Insider Exit Ramp: Why You Should Switch Windows 11 Channels Now
Published on 29 January 2026, the piece explains that Microsoft has disseminated a nascent Windows 11 Dev Build 26300.7674 to the Development Channel, marking the start of a new developmental branch and opening a window for channel migration. If you choose…
SecurityOnline -
The Digital Sanctuary: Apple’s 10 Essential Privacy Rules for 2026
In honour of International Data Privacy Day on 28 January, Apple has curated ten integrated privacy features for the iPhone and the wider ecosystem, urging users to review their configurations to shield personal data. According to Apple, Safari Private…
SecurityOnline -
Locking Down the Chat: WhatsApp Debuts “Strict Mode” to Combat Pegasus Spyware
According to Daily CyberSecurity, WhatsApp under Meta has announced the introduction of “Strict Account Settings,” a defence mechanism designed to counter cyber offensives and espionage, including the Pegasus spyware developed by the NSO Group. The rollout…
SecurityOnline -
The End of Manual Syntax? LinkedIn Adds Verified “Vibe Coding” Skills
LinkedIn has formally endorsed “Vibe Coding” as a recognised skill, signalling a shift away from traditional manual syntax claims for professional portfolios. The update, announced on 29 January 2026, integrates with AI development environments such as…
SecurityOnline -
PwC and Google Cloud Ink $400 Million Deal to Scale AI-Powered Defense
PwC and Google Cloud have expanded their strategic alliance with a commitment of $400 million over three years to scale AI-powered security operations. The deal aims to help organisations modernise their defenses by integrating Google’s security technologies…
SecurityWeek
