News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Thu 29 Jan· 58 articles
-
Google Disrupts IPIDEA — One of the World’s Largest Residential Proxy Networks
Google announced that it worked with other partners to disrupt IPIDEA, describing it as one of the world’s largest residential proxy networks, and that it took legal action to shutter dozens of domains used to control devices and proxy traffic. As a result,…
The Hacker News -
High-Severity IDOR Flaw Lets Admins Hijack TP-Link Omada Owner Accounts
TP-Link has issued a security advisory about multiple vulnerabilities in its Omada Controller software, with the most severe IDOR flaw potentially allowing a malicious administrator to hijack the primary Owner account and seize full control of the network…
-
Safety Broken: PyTorch “Safe” Mode Bypassed by Critical RCE Flaw
PyTorch has patched a high-severity vulnerability, tracked as CVE-2026-24747, with a CVSS score of 8.8 that allows attackers to execute arbitrary code even when users enable the weights_only=True safe-loading setting. The flaw lies in the weights_only=True…
-
CVE-2026-24765: PHPUnit Vulnerability Exposes CI/CD Pipelines to RCE
CVE-2026-24765 is a high-severity vulnerability in PHPUnit that allows Remote Code Execution by manipulating code coverage artifacts, with a CVSS score of 7.8. The flaw operates in the PHPT test runner, specifically in the cleanupForCoverage() method, which…
-
Spies in the Spreadsheet: “Sheet Attack” Uses Google Sheets & AI to Target India
According to Zscaler ThreatLabz, researchers have exposed a sophisticated cyberespionage operation that targets the Indian government and blends legitimate cloud services with artificial intelligence. The campaign, dubbed “Sheet Attack,” uses Google Sheets…
SecurityOnline -
CVE-2026-24002: Critical Sandbox Escape Turns Grist Spreadsheets into RCE Weapons
CVE-2026-24002 is described as a critical sandbox escape in Grist-Core that allows full Remote Code Execution by abusing Grist’s Pyodide-based formula engine. According to Cyera Research Labs, the flaw carries a CVSS score of 9.1 and enables attackers to…
-
Russian ransomware forum seized by U.S. law enforcement
According to the U.S. Attorney’s Office for the Southern District of Florida and the Computer Crime and Intellectual Property Section of the Department of Justice, the seizure targeted RAMP, the Russian Anonymous Marketplace, and included its clear net and…
DataBreaches -
The “Zeroplayer” Arsenal: WinRAR Flaw CVE-2025-8088 Weaponized by Spies
According to GTIG, a critical vulnerability in WinRAR, tracked as CVE-2025-8088, has become a widely used weapon by government spies and cybercriminals, with exploitation still observed months after a patch was released. The flaw is a path traversal…
-
Fake AI Assistant: Malicious “ClawdBot” Extension Hides Trojan in VS Code
On 27 January 2026, security researchers from Aikido Security uncovered a malicious Visual Studio Code extension masquerading as the popular ClawdBot, marketed as an AI coding assistant and dubbed “ClawdBot Agent.” The extension was described as fully…
SecurityOnline -
CVE-2026-23830: Critical SandboxJS Flaw (CVSS 10) Allows Total Sandbox Escape
CVE-2026-23830 is described as a critical SandboxJS flaw (CVSS 10) that constitutes a sandbox escape, allowing an attacker to run arbitrary code on the host machine with full privileges. The vulnerability stems from SandboxJS failing to lock down the Async…
-
UK plans sweeping overhaul of policing amid surge in online crimes
The British government on Monday unveiled plans for a far-reaching overhaul of policing that would centralise the fight against cybercrime, fraud and other internet-enabled offences, arguing that the current system is no longer equipped for crimes that are…
DataBreaches -
CVE-2025-14988: Critical 9.8 Vulnerability hits ibaPDA Industrial Software
CVE-2025-14988 is a critical 9.8 vulnerability identified in ibaPDA, a core data acquisition system used in industrial environments, with the flaw affecting ibaPDA version 8.12.0. The vulnerability allows unauthorized actors to tamper with the underlying…
-
The “Fake CAPTCHA” Trap: Malware Hides in Google Calendar & Images
The article, dated 29 January 2026, describes a new Fake CAPTCHA campaign that exploits a complex delivery chain involving trusted Microsoft tools and Google services to smuggle malware. According to The Blackpoint SOC, the campaign uses a Fake CAPTCHA…
SecurityOnline -
Science at the Speed of AI: OpenAI Unveils Prism for LaTeX Research
OpenAI has announced Prism, a new LaTeX research tool described as the “Claude Code for the scientific community,” which links the GPT-5.2 Thinking model with the LaTeX typesetting system to ease manuscript formatting, citation management, and even…
SecurityOnline -
The Return of the Guide: Yahoo Scout Challenges Google with AI-Native Search
29 January 2026. Yahoo Scout is described as an AI-native “Answer Engine” that is powered by Anthropic’s Claude models and currently available in a Beta iteration, with aims to integrate across Yahoo’s Mail, News, Sports and Finance ecosystems. The system…
SecurityOnline -
Excel’s New Brain: Agent Mode Brings GPT-5.2 and Claude 4.5 to Desktop
Excel has extended its AI Agent Mode to Excel for Windows and macOS, integrating with the Copilot interface and offering a model selector that lets users designate their preferred computational “brain.” At present, the primary offerings are GPT-5.2 and…
SecurityOnline -
The 13-Year Lifeline: Apple Updates the iPhone 5s to Save iMessage
Apple is extending support for older hardware by releasing iOS 12.5.8 for legacy devices such as the iPhone 5s, with the primary aim of rotating official digital certificates so that iMessage, FaceTime and Apple ID authentication continue to function beyond…
SecurityOnline -
The $40M Insider Heist: Son of Federal Contractor Investigated for Seized Crypto Theft
The United States government has a seized cryptocurrency hoard totalling 328,372 BTC, valued at about $29.2 billion at current market rates, with these assets typically entrusted to custodians designated by the U.S. Marshals Service. According to ZachXBT, a…
SecurityOnline
