News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Thu 5 Feb· 57 articles
-
Intel’s “Do-or-Die” GPU Push: CEO Lip-Bu Tan Recruits Eric Demers to Topple NVIDIA’s Hegemony
Intel’s chief executive Lip-Bu Tan has publicly framed the company’s GPU drive as a “Do-or-Die” push, saying to Reuters that Intel is developing a proprietary GPU product lineage aimed at breaking NVIDIA’s dominance in the data centre market and extending…
SecurityOnline -
The Chrome Divorce: DOJ and 38 States File Cross-Appeal to Force Google’s Breakup
The Chrome Divorce: DOJ and 38 States File Cross-Appeal to Force Google’s Breakup reports that the US Department of Justice, with several state governments, has formally filed a notice of cross-appeal to overturn the court’s decision not to force a breakup…
SecurityOnline -
Aluminum OS Unleashed: Google’s Secret Roadmap to Sunset ChromeOS for an Android Desktop
In the article, Google is depicted as pursuing a project codenamed Aluminium OS, a realignment of ChromeOS built upon the Android stack, with the aim of eventually sunsetting the ChromeOS desktop platform. Court filings reveal that Google plans to phase out…
SecurityOnline -
Musk’s “Orbital Brain”: xAI Recruits Elite Crypto Traders as SpaceX Eyes a $1.25 Trillion IPO
On 5 February 2026, the article reports that Elon Musk’s artificial intelligence venture xAI, now integrated into SpaceX, is recruiting elite cryptocurrency traders to help refine the Grok models for interpreting blockchain telemetry and guiding…
SecurityOnline -
Two Ivy League universities had donor information breaches. Will donors be notified?
Harvard University and the University of Pennsylvania (UPenn) have both suffered data breaches affecting donor information, with leaked data reportedly including donor names, addresses, donation histories and related biographical details. Harvard said the…
DataBreaches -
10 Days to Exploit: Amaranth-Dragon Weaponizes WinRAR Flaw to Spy on SE Asia
According to Check Point Research (CPR), a Chinese-aligned threat group known as Amaranth-Dragon rapidly weaponised a newly disclosed WinRAR flaw to spy on Southeast Asia, less than ten days after CVE-2025-8088 was disclosed. The campaign has targeted…
-
Toxic Invites & Root Access: Cisco Patches Critical Meeting Flaws
Cisco has issued patches for two major Cisco collaboration platforms after critical flaws could let attackers seize meeting management systems or crash endpoints. The high-severity CVE-2026-20098 carries a CVSS 8.8 and affects Cisco Meeting Management, where…
-
CVE-2026-24735: Apache Answer Flaw Leaks Private Post History
CVE-2026-24735, disclosed on 5 February 2026, concerns Apache Answer, the Q&A platform software from The Apache Software Foundation. The flaw allows unauthenticated attackers to access the full revision history of content that was intended to be deleted,…
-
WatchGuard Patches VPN PrivEsc & Firebox LDAP Injection
WatchGuard has issued a dual advisory addressing two separate flaws that could enable privilege escalation on Windows endpoints or data exposure from an LDAP authentication server, affecting the Mobile VPN with IPSec client and Fireware OS. The first issue…
-
Video of Death: Critical vLLM Flaw (CVSS 9.8) Grants Remote Code Execution
A new critical vulnerability in vLLM, tracked as CVE-2026-22778, carries a CVSS of 9.8 and enables remote code execution by simply processing a malicious video file. The flaw results from a two‑step chain: an information leak in the Python Imaging Library…
-
Supply Chain Poison: Lotus Blossom Hits Notepad++ to Deploy “Chrysalis”
Notepad++ was compromised in a supply-chain operation attributed to the Chinese state‑sponsored threat group Lotus Blossom, which Rapid7 Labs and the Rapid7 MDR team describe in a new analysis as deploying a custom backdoor named Chrysalis and abusing an…
SecurityOnlineLOTUS PANDA -
CISA Warns of Unpatched Avation & RISS Critical Flaws
In a 5 February 2026 update, CISA has issued alerts for two critical infrastructure devices from Avation and RISS SRL, both suffering the same flaw and with the vendors silent on coordination requests. The advisories warn of high-severity vulnerabilities…
-
“Can You Hear Me?” BlueNoroff Hackers Use Fake Audio Glitch to Breach macOS
5 February 2026. A Daylight Security investigation links a social engineering campaign to BlueNoroff, a financially motivated subgroup of the Lazarus Group, which targeted professionals in the cryptocurrency and financial sectors. The attackers begin by…
SecurityOnlineLazarus Group -
Signage Hijack: Samsung MagicInfo9 Flaws (CVSS 9.8) Expose Servers
The article, published on 5 February 2026, reports that Samsung’s MagicInfo9 Server has three critical vulnerabilities that could allow unauthenticated attackers to take over affected systems. It highlights CVE-2026-25202 (CVSS 9.8) as a hardcoded credential…
-
Ghost Folders: “Directory Shadowing” Hack Hijacks WordPress SEO
A new and stealthy malware campaign targeting WordPress sites uses a technique called “directory shadowing,” where attackers create real folders that mirror the site’s permalinks to hijack legitimate URLs, according to Security analyst Puja Srivastava from…
SecurityOnline -
Open VSX Hijacked: “GlassWorm” Malware Poisons VS Code Extensions
Open VSX was hijacked in a supply chain attack that injected GlassWorm malware into four established extensions on the Open VSX Registry, a marketplace for VS Code extensions, after attackers used compromised developer credentials. The campaign began on 30…
SecurityOnline -
Industrial Alert: Critical Auth Bypass (CVSS 9.2) Hits Moxa Switches
Industrial alert warns that Moxa has issued a high‑severity advisory urging patching of a wide range of Ethernet switches against a critical authentication bypass vulnerability tracked as CVE-2024-12297, with a CVSS 4.0 score of 9.2 and the potential for…
