News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 3 Feb· 56 articles
-
Microsoft Office5 articles this day · The Hacker News first
Russian Hackers Weaponize Microsoft Office Bug in Just 3 Days · APT28 exploits Microsoft Office flaw in Operation Neusploit
-
Russian Hackers Weaponize Microsoft Office Bug in Just 3 Days
Russian hackers have weaponised a recently disclosed Microsoft Office flaw, with APT28 beginning exploitation three days after a patch was released, on 29 January 2026, in a campaign tracked as Operation Neusploit. The attacks use specially crafted Microsoft…
-
APT28 exploits Microsoft Office flaw in Operation Neusploit
According to Zscaler ThreatLabz, the Russia-linked group APT28 is behind Operation Neusploit, a campaign that exploits a newly disclosed Microsoft Office vulnerability tracked as CVE-2026-21509 and targets Central and Eastern Europe using weaponised RTF…
-
Russia’s APT28 Rapidly Weaponizes Newly Patched Office Vulnerability
The Russian cyberespionage group APT28 rapidly weaponised a recently patched Office vulnerability, with the first attacks observed just days after Microsoft issued fixes for CVE-2026-21509. Microsoft disclosed the patch on 26 January, and Zscaler linked the…
-
CVE-2026-21509: APT28 Actively Exploits Microsoft Office Vulnerability in Ukraine
On 26 January 2026, Microsoft released an update addressing CVE-2026-21509, a high-severity flaw affecting many Microsoft Office versions and exploited in the wild by state-sponsored actors to target government and diplomatic organisations in Ukraine,…
-
APT28 Uses Microsoft Office CVE-2026-21509 in Espionage-Focused Malware Attacks
According to The Hacker News, the Russia-linked threat actor APT28 (aka UAC-0001) has been linked to attacks exploiting Microsoft Office CVE-2026-21509 as part of Operation Neusploit. Zscaler ThreatLabz observed the group weaponising the flaw on 29 January…
-
-
U.S. CISA adds SolarWinds Web Help Desk, Sangoma FreePBX, and GitLab flaws to its Known Exploited Vulnerabilities catalog
According to Security Affairs, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four flaws to its Known Exploited Vulnerabilities catalog, including SolarWinds Web Help Desk, Sangoma FreePBX, and GitLab entries. The vulnerabilities…
-
GlassWorm Malware Returns to Shatter Developer Ecosystems
GlassWorm has returned, continuing to shatter developer ecosystems by poisoning Open VSX components and leaving downstream users with infostealer infections. Researchers with application security vendor Socket detailed a supply chain attack on four…
Dark Reading -
Darktrace Malware Analysis: Unpacking SnappyBee
Darktrace’s analysis describes SnappyBee as a modular backdoor linked to Salt Typhoon, previously documented by TrendMicro in November 2024, and used after compromise to establish persistence and deploy additional malware. The malware employs a custom…
darktrace.com -
Microsoft SDL: Evolving security practices for an AI-powered world
As AI reshapes the security landscape, Microsoft’s SDL is expanding beyond traditional software security to address AI-specific concerns, a shift explained by Yonatan Zunger as the way SDL becomes a dynamic framework rather than a simple checklist. According…
Microsoft -
An AI plush toy exposed thousands of private chats with children
An AI plush toy from Bondu exposed a web console that let anyone with a Gmail account read about 50,000 private chats between children and their cuddly toys. The console allowed login with an arbitrary Google account, meaning two researchers could access…
Malwarebytes -
Docker Fixes Critical Ask Gordon AI Flaw Allowing Code Execution via Image Metadata
Docker Desktop’s built‑in Ask Gordon AI suffered a critical flaw dubbed DockerDash, which could enable remote code execution and data exfiltration through malicious image metadata, researchers disclosed. Docker released a patch in version 4.50.0 in November…
The Hacker News -
8-Minute Access: AI Accelerates Breach of AWS Environment
Attackers gained initial access to an AWS environment via credentials found in public S3 buckets and, using AI to speed operations, escalated privileges in under eight minutes, moving laterally across 19 AWS principals. The intrusion occurred on 28 November…
Dark Reading -
Dark Patterns Undermine Security One Click at a Time
Dark patterns—deliberate design choices in websites and apps—include cookie banners with a no-reject option, free trial subscriptions that are hard to cancel, hidden refund options, and misleading email access requests, and they are growing in scope every…
Dark Reading -
React Native Community CLI3 articles this day · SecurityWeek first
Hackers abused React Native CLI flaw to deploy Rust malware before public disclosure · Critical React Native Vulnerability Exploited in the Wild
-
Hackers abused React Native CLI flaw to deploy Rust malware before public disclosure
Hackers abused a critical flaw in the React Native CLI Metro server, tracked as CVE-2025-11953, to run remote commands and drop Rust malware weeks before public disclosure. The advisory notes that the Metro Development Server binds to external interfaces by…
-
Critical React Native Vulnerability Exploited in the Wild
SecurityWeek reports that threat actors have been exploiting a critical React Native vulnerability, CVE-2025-11953 (CVSS 9.8), in attacks since late December, with initial exploitation observed on December 21 and continued activity on January 4 and 21. The…
-
Hackers Exploit Metro4Shell RCE Flaw in React Native CLI npm Package
Threat actors have been observed exploiting a critical flaw in the Metro Development Server within the React Native CLI npm package, tracked as CVE-2025-11953 (Metro4Shell). According to VulnCheck, exploitation first appeared on 21 December 2025, with a CVSS…
-
-
RADICL Raises $31 Million for vSOC
RADICL today announced that it has raised $31 million in a Series A funding round, bringing the total raised by the Boulder, Colorado-based CSaaS provider to $42 million. Founded in 2021, RADICL has developed an autonomous virtual security operations centre…
SecurityWeek -
RapidFort Raises $42M to Automate Software Supply Chain Security
On 3 February 2026, RapidFort announced that it has raised $42 million in a Series A funding round to accelerate the development of its automated vulnerability elimination technology. The investment was led by Blue Cloud Ventures and Forgepoint Capital, with…
SecurityWeek -
[Webinar] The Smarter SOC Blueprint: Learn What to Build, Buy, and Automate
The Hacker News promotes a live webinar titled Breaking Down the Modern SOC: What to Build vs Buy vs Automate, scheduled as part of its The Smarter SOC Blueprint series. The session, dated 3 February 2026, features Kumar Saurabh (CEO, AirMDR) and Francis…
The Hacker News -
Improve global upload performance with R2 Local Uploads
Today, Cloudflare announces Local Uploads for R2 in open beta, which writes object data to a storage location close to the client first and then asynchronously replicates it to the bucket’s region while keeping the data immediately accessible. Local Uploads…
Cloudflare -
Vulnerability Allows Hackers to Hijack OpenClaw AI Assistant
SecurityWeek reports that OpenClaw, also known as Moltbot and Clawdbot, remains vulnerable to one-click remote code execution, with researchers from DepthFirst noting a token exfiltration flaw tracked as CVE-2026-25253. The issue allowed an attacker to…
-
Introducing Darktrace / SECURE AI – Complete AI security across your enterprise
Darktrace has unveiled Darktrace / SECURE AI, a new product within its ActiveAI Security Platform designed to secure AI across the entire enterprise, with the aim of enabling safe adoption, management and development of AI within organisations. The company…
darktrace.com -
Multi-Country DDoS Campaign: Weekly DDoS Threat Intelligence Analysis
Between January 26 and February 1, 2026, SOCRadar identified a coordinated multi-country DDoS campaign attributed to the pro-Russian threat actor NoName057(16) using the DDoSia attack tool, resulting in 5,830 recorded attack entries across 160 unique domains…
SOCRadar -
Hackers Leak 5.1 Million Panera Bread Records
SecurityWeek reports that hackers have leaked 5.1 million Panera Bread records, with the archive allegedly containing 5.1 million unique email addresses and accompanying data such as names, addresses and phone numbers. The ShinyHunters extortion group has…
SecurityWeek -
The State of AI Cybersecurity 2026 | Insights from 1,500+ Leaders
The State of AI Cybersecurity 2026 draws on insights from over 1,500 leaders across industries to map how organisations are navigating rapid AI adoption and the security implications this creates. The report finds that 44% are extremely or very concerned…
darktrace.com -
The rise of Moltbook suggests viral AI prompts may be the next big security threat
The Ars Technica report tracks a growing security concern around OpenClaw, an open source AI personal assistant that has gathered over 150,000 GitHub stars since November 2025 and now connects to major AI models while running tasks on users’ devices and via…
Ars Technica -
AT&T breach data resurfaces with new risks for customers
AT&T breach data resurfaces with new risks for customers, published on 3 February 2026, highlights how an “old” breach can grow in danger as criminals accumulate more details. The newly shared dataset is described as AT&T customer data likely gathered over…
Malwarebytes -
What the Moltbook Exposure Reveals About AI Platforms and Security Readiness?
3 February 2026 saw the Moltbook exposure become a cautionary case study in AI platform security, after researchers uncovered a publicly accessible database that lacked authentication. The database reportedly contained millions of API keys and tokens…
SOCRadar -
Apple’s new iOS setting addresses a hidden layer of location tracking
Apple has introduced a new iOS setting called limit precise location in iOS 26.3 to curb a hidden layer of location tracking by cellular carriers. The feature reduces the precision of location data shared with carriers from a street address to the…
Malwarebytes -
Kasada Raises $20 Million for Anti-Bot Expansion
According to SecurityWeek, Kasada today announced it has raised $20 million in a funding round that brings its total raised to $60 million. The investment round was led by EQT, with support from existing investors Main Sequence Ventures, Our Innovation Fund,…
SecurityWeek -
When Cloud Outages Ripple Across the Internet
Recent major cloud service outages have been hard to miss, affecting providers such as AWS, Azure, and Cloudflare and disrupting large parts of the internet and the workflows organisations rely on daily. The piece emphasises that these outages reach beyond…
The Hacker News -
A fake cloud storage alert that ends at Freecash
malwarebytes reports a fake cloud storage alert that leads to Freecash, part of a large-scale campaign described as a cloud storage subscription scam by BleepingComputer. The scam emails claim a payment issue and urge recipients to update payment details,…
Malwarebytes -
-
Notepad++ infrastructure hack likely tied to China-nexus APT Lotus Blossom
Rapid7 researchers have linked a Notepad++ hosting breach to the China-nexus APT Lotus Blossom, describing the incident as an infrastructure compromise rather than a flaw in Notepad++ code. The attack began in June 2025, with attackers compromising a shared…
Security Affairs -
The Notepad++ supply chain attack — unnoticed execution chains and new IoCs
Kaspersky’s GReAT analysis covers the Notepad++ supply chain attack, which the Notepad++ developers disclosed on 2 February 2026, stating the update infrastructure was compromised due to a hosting provider level incident from June to September 2025 with…
securelist.com -
Mozilla Adds One-Click Option to Disable Generative AI Features in Firefox
Mozilla has introduced a new controls section in Firefox’s desktop settings that lets users completely disable generative AI features, providing a single place to block current and future GenAI capabilities. According to Ajit Varma, head of Firefox, users…
The Hacker News -
Notepad++ Hosting Breach Attributed to China-Linked Lotus Blossom Hacking Group
A China-linked threat actor known as Lotus Blossom has been attributed with medium confidence to the compromise of the infrastructure hosting Notepad++, enabling the delivery of a backdoor codenamed Chrysalis to users of the open-source editor. According to…
The Hacker News -
The Final Countdown: OpenAI to Retire GPT-4o—But There’s a Catch for Enterprise Users
OpenAI has announced that GPT-4o will be retired for most users, with the retirement slated for 13 February 2026, a move that has sparked considerable debate among customers who still favour GPT-4o for specific needs. According to OpenAI, ChatGPT Enterprise…
SecurityOnline -
PC-Powered Android: Google’s “Aluminium OS” Leaks Reveal a New Rival for Windows
On 3 February 2026, a Google engineer inadvertently revealed a demonstration video of an Android desktop iteration internally designated as Aluminium OS, designed to support x86 processors and run on conventional personal computers. The project’s progress…
SecurityOnline -
Root via Telnet: Why You Must Patch Your Synology NAS Against This Decade-Old Ghost
Synology has released a series of essential or critical updates for DSM in response to a Telnet‑related vulnerability designated as CVE-2026-24061, which primarily concerns the telnetd process within the DSM terminal functionality. The company notes the flaw…
