News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 4 Feb· 59 articles
-
Native Sysmon Arrives in the Latest Windows 11 Insider Build 26300
Native Sysmon has arrived in the latest Windows 11 Insider Build 26300, with Sysmon now embedded as an Optional Feature rather than requiring a standalone install. According to Windows Insider Dev Channel, the release accompanies patch KB5074178 and…
SecurityOnline -
Breaking the AI Silo: How Google’s New “Import AI Chats” Feature Ends Context Lock-In
February 4, 2026, Daily CyberSecurity reports that Google is developing a nascent capability called “Import AI Chat History,” aimed at easing data portability between AI chat platforms. The piece notes that currently used AI interlocutors such as ChatGPT,…
SecurityOnline -
The Vanishing Taskbar: Windows 11’s Optional KB5074105 Update Rescues Users from “Explorer” Hell
On 29 January, Microsoft disseminated the preview update KB5074105 for Windows 11 versions 24H2 and 25H2, noting that the release is an “optional” update that will not be automatically retrieved or deployed. The patch is designed to address issues from the…
SecurityOnline -
Silent Intrusion: “Metro4Shell” Exploited in the Wild Since December
A new report from VulnCheck reveals that CVE-2025-11953, a critical flaw in the Metro development server dubbed “Metro4Shell,” was being actively weaponized in the wild as early as late December 2025. The findings show a gap between attacker speed and…
-
Urgent Django Update: Patches 3 Critical SQL Injections & DoS Risks
The Django maintainers have issued an urgent security release covering Django 6.0.2, Django 5.2.11, and Django 4.2.28 to fix six distinct flaws, half of which are high-severity SQL injection vulnerabilities. The most concerning fixes address three…
-
React Under Siege: Two IPs Drive 56% of Critical CVE-2025-55182 Attacks
Two IP addresses are now responsible for the majority of attacks on CVE-2025-55182, with GreyNoise reporting that between January 26 and February 2, 2026, two IPs account for 56% of all observed exploitation attempts. The 193.142.147[.]209 address provides…
-
Chrome 144 Security Alert: V8 & Libvpx Flaws Expose Systems to Hacks
The Stable channel for desktop users has just received a crucial update, patching two high-severity vulnerabilities that could leave systems exposed to exploitation, with the release bumping the version to 144.0.7559.132/.133 for Windows and Mac, and…
-
Rooted via Wi-Fi 7: TP-Link Patches Command Injection in Archer BE230
TP-Link has disclosed authenticated command injection vulnerabilities in its Archer BE230 Wi‑Fi 7 router (version 1.2), prompting a firmware update that TP-Link urges users to apply immediately. The flaws are tracked under a cluster of CVEs including…
-
CVE-2026-24936: Critical ASUSTOR Flaw (CVSS 9.5) Allows Remote System Takeover
A severe vulnerability has been discovered in ASUSTOR ADM, the operating system that powers ASUSTOR’s NAS devices, tracked as CVE-2026-24936 with a CVSS of 9.5. The flaw resides in a specific CGI program used when an administrator joins the NAS to an Active…
-
“IT Support” Imposters: ShinyHunters Vishing Rings Bypass MFA to Steal Data
On 4 February 2026, a new Mandiant report details how sophisticated voice phishing rings are bypassing MFA and stealing data from corporate environments. The activity, which bears the hallmarks of the ShinyHunters extortion group, uses live calls and…
SecurityOnlineShinyHunters -
Poisoned Comments: Critical Orval Flaw (CVE-2026-25141) Injects Code
A critical vulnerability in Orval, tracked as CVE-2026-25141, has been disclosed with a severity rating of 9.3 and could enable code injection across millions of projects. Orval, a tool that generates type-safe TypeScript API clients from OpenAPI…
-
Digital Ghost: “PhantomVAI” Malware Revives Decade-Old RunPE Tricks
According to Intrinsec Report, Digital Ghost: “PhantomVAI” is a custom loader built on a decade-old RunPE utility, repurposed to power worldwide campaigns that deliver a variety of payloads. Researchers found the loader’s DNA in the code under the namespace…
SecurityOnline -
Silent Leak: High-Severity Rancher CLI Flaw Exposes Admin Credentials
A new high-severity vulnerability in Rancher CLI could allow an attacker to harvest admin credentials under certain conditions, according to SUSE Rancher Security Team. The flaw, tracked as CVE-2025-67601, carries a CVSS score of 8.4 and affects the login…
-
Invisible Intruder: “ShadowHS” Malware Weaponizes Hackshell on Linux
Cyble Research & Intelligence Labs (CRIL) has uncovered ShadowHS, a sophisticated Linux intrusion chain that weaponises a weaponised version of hackshell through a highly obfuscated, fileless loader. Unlike typical Linux malware, ShadowHS operates in memory…
SecurityOnline -
TAMECAT Exposed: APT42’s Fileless Backdoor Targets Defense Chiefs
The article ties a sophisticated espionage campaign targeting senior defence and government officials to APT42, describing claims that the group is behind the operation. At its core is TAMECAT, a modular PowerShell backdoor designed to steal data while…
SecurityOnlineAPT42 -
AI Hub Hijacked: Polymorphic Android RAT Abuses Hugging Face to Steal Data
On 4 February 2026, Bitdefender researchers disclosed a sophisticated Android Remote Access Trojan campaign that hijacks the Hugging Face platform to host malicious payloads, bypassing standard network filters aimed at low-reputation domains. The attackers…
SecurityOnline -
CVE-2026-25137: Critical Odoo on NixOS Flaw Exposes Databases
CVE-2026-25137 is a critical vulnerability in Odoo deployments running on NixOS, rated CVSS 9.1, which leaves the database manager and thereby an organisation’s data exposed to the public Internet. The flaw arises from a conflict between Odoo’s security…
-
Game Over: Interlock Ransomware Weaponizes Anti-Cheat Zero-Day to Kill EDR
A FortiGuard Labs report details how Interlock, a ransomware group, weaponised a zero-day in a gaming anti-cheat driver to target endpoints and terminate EDR processes, using a tool called Hotta Killer alongside a kernel driver named UpdateCheckerX64[.]sys.…
-
Why Smart People Fall For Phishing Attacks
The Unit 42 piece argues that phishing remains a persistent issue in 2026, evolving rather than disappearing, with the human element at the core of most successful intrusions. It outlines three stages of a phishing attack—The Bait, The Hook, and The…
unit42.paloaltonetworks.com
