News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Fri 6 Feb· 42 articles
-
Novel Technique to Detect Cloud Threat Actor Operations
According to Unit 42, cloud-based alerting systems often struggle to distinguish between normal cloud activity and targeted operations by known threat actors, and the researchers tested two groups with markedly different techniques to map cloud alerts to…
unit42.paloaltonetworks.com -
Malicious packages for dYdX cryptocurrency exchange empties user wallets
Malicious packages published to npm and PyPI for the dYdX cryptocurrency exchange were found to exfiltrate wallet credentials from developers and backend systems and, in some cases, backdoor devices, according to Socket. Every application using the…
Ars Technica -
Nitrogen’s ransomware can’t be decrypted — even by Nitrogen
Nitrogen’s ESXi ransomware has a coding fault that prevents decrypting any files after encryption, according to Coveware. The malware misuses the public key by overwriting the first four bytes of the key, which means no one actually knows the private key…
DataBreaches -
"Encrypt It Already" Campaign Pushes Big Tech to Prioritize E2E Encryption
The Electronic Frontier Foundation has launched Encrypt It Already, a campaign urging major tech and communications companies to deliver end-to-end encryption (E2EE) by default across their services, amid growing privacy concerns linked to AI. The initiative…
Dark Reading -
Shai-hulud: The Hidden Cost of Supply Chain Attacks
Shai-hulud: The Hidden Cost of Supply Chain Attacks looks at how self-propagating malware in open source components has created widespread but hard‑to‑measure damage, with attackers targeting downstream victims by poisoning component libraries. The piece…
Dark Reading -
OpenClaw's Gregarious Insecurities Make Safe Usage Difficult
OpenClaw, the open source agentic AI assistant available from GitHub, continues to attract attention while underpinning ongoing security concerns. Security researchers note that it was released with usability ahead of a secure design, and that its default…
Dark Reading -
Record-breaking 31.4 Tbps DDoS attack hits in November 2025, stopped by Cloudflare
A record-breaking DDoS incident linked to the AISURU/Kimwolf botnet peaked at 31.4 Tbps and lasted 35 seconds in November 2025, with Cloudflare automatically detecting and blocking the attack. According to Cloudflare, the November 2025 event was part of a…
Security Affairs -
China-Linked DKnife AitM Framework Targets Routers for Traffic Hijacking, Malware Delivery
According to Cisco Talos, China-nexus threat actors have operated a gateway-monitoring and adversary-in-the-middle framework called DKnife since at least 2019, with seven Linux-based implants designed for deep packet inspection, traffic manipulation and…
The Hacker News -
Apple Pay phish uses fake support calls to steal payment details
Apple Pay users are being targeted by a phishing campaign that starts with a convincing email bearing Apple branding and a case ID, timestamp and urgent warnings about a fraudulent charge. The email sometimes includes a calendar appointment and a phone…
Malwarebytes -
CISA Orders Removal of Unsupported Edge Devices to Reduce Federal Network Risk
CISA has ordered Federal Civilian Executive Branch agencies to strengthen asset lifecycle management for edge network devices and remove those that no longer receive security updates from OEMs within the next 12 to 18 months. The directive aims to drive down…
The Hacker News -
Data Tool to Triage Exploited Vulnerabilities Can Make KEV More Useful
Vulnerabilities are piling up, with more than 48,100 documented in 2025, up 21% from the previous year, prompting security teams to seek smarter triage. A tool called KEV Collider aims to help by combining data from the KEV Catalog with CVSS scores, EPSS,…
Dark Reading -
Legal threat: DMCA notice to SuspectFile is refuted, but it never should have happened
According to The Hacker News, a law firm—Dennemeyer & Associates—sent SuspectFile a DMCA takedown demand over a Ravie Lakshmanan article, asserting copyright infringement and threatening removal within 24 hours or further action. SuspectFile’s editor, Marco…
DataBreaches -
Asian State-Backed Group TGR-STA-1030 Breaches 70 Government, Infrastructure Entities
A previously undocumented cyber espionage group operating from Asia is believed to have breached 70 government and critical infrastructure entities across 37 countries over the past year, according to Palo Alto Networks Unit 42. The findings also note active…
The Hacker NewsUNC6619 -
Flickr Security Incident Tied to Third-Party Email System
Flickr has disclosed a data security incident affecting its users after a vulnerability was found in a system operated by one of its email service providers. On February 5, 2026, Flickr said, this flaw may have allowed unauthorized access to some member…
SecurityWeek -
Living off the AI: The Next Evolution of Attacker Tradecraft
SecurityWeek's analysis argues that living off the AI is the next step in attacker tradecraft, building on decades of “living off the land” and “living off the cloud” techniques and now targeting AI assistants, agents and the Model Context Protocol…
SecurityWeek -
In Other News: Record DDoS, Epstein’s Hacker, ESET Product Vulnerabilities
The link you provided appears to be broken, returning an Error 404 from SecurityWeek. The page you requested does not exist or has moved, and the site’s navigation now centres on sections such as Malware & Threats, Vulnerabilities, Security Operations, and…
SecurityWeek -
How Samsung Knox Helps Stop Your Network Security Breach
Samsung Knox is presented as a security layer tailored for mobile-enabled enterprises, addressing the fact that mobile devices use networks differently from traditional endpoints. Knox Firewall offers granular, per-app network controls instead of blunt…
The Hacker News -
CrashFix: New ClickFix Variant Deliberately Breaks Browsers to Deploy RAT
A new CrashFix variant of the ClickFix campaign uses a malicious browser extension to deliberately crash users’ browsers and then deliver a Python-based Remote Access Trojan (ModeloRAT), according to Microsoft Defender Security Research Team. The attack…
SecurityOnline -
Nearly 5 Million Web Servers Found Exposing Git Metadata – Study Reveals Widespread Risk of Code and Credential Leaks
A 2026 study by the Mysterium VPN research team found that nearly 5 million public web servers expose Git metadata, with 4.96M IPs having publicly accessible .git directories. The researchers also report that 252,733 .git/config files contained active…
Security Affairs -
Airrived Emerges From Stealth With $6.1 Million in Funding
Airrived has emerged from stealth with $6.1 million in seed funding to unify cybersecurity, IT and business operations via its Agentic OS platform. Founded in 2024 and based in Dublin, California, the startup aims to unify fragmented AI tools across large…
SecurityWeek -
U.S. CISA adds SmarterTools SmarterMail and React Native Community CLI flaws to its Known Exploited Vulnerabilities catalog
According to the U.S. Cybersecurity and Infrastructure Security Agency (CISA), SmarterTools SmarterMail and React Native Community CLI flaws have been added to its Known Exploited Vulnerabilities (KEV) catalog. The entry lists CVE-2025-11953 for the React…
-
CVE-2025-13375: Critical IBM Crypto Flaw (CVSS 9.8) Exposes HSMs
IBM has issued a critical security bulletin for its Common Cryptographic Architecture (CCA), a core component that interfaces with IBM’s Hardware Security Module (HSM), in response to CVE-2025-13375, which carries a CVSS score of 9.8 and allows…
-
‘DKnife’ Implant Used by Chinese Threat Actor for Adversary-in-the-Middle Attacks
DKnife is a gateway-monitoring and adversary-in-the-middle framework used by a China-linked threat actor, active since at least 2019, to deliver and interact with backdoors on desktop, mobile, and IoT devices of Chinese users. The framework comprises seven…
SecurityWeek -
Compromised dYdX npm and PyPI Packages Deliver Wallet Stealers and RAT Malware
Cybersecurity researchers have uncovered a supply chain attack in which legitimate packages on npm and PyPI were compromised to push malicious updates that steal wallet credentials and, in the PyPI variant, deliver a remote access trojan. The affected npm…
The Hacker News -
5 Bills to Boost Energy Sector Cyber Defenses Clear House Panel
The House Subcommittee on Energy advanced five bipartisan bills aimed at boosting the physical and cyber security of the United States’ electric grid and other energy infrastructure. The measures would update Department of Energy programs, enhance grid and…
SecurityWeek -
Critical SmarterMail Vulnerability Exploited in Ransomware Attacks
SecurityWeek reports that SmarterTools SmarterMail servers are being targeted in attacks exploiting CVE-2026-24423, a critical unauthenticated remote code execution flaw rated CVSS 9.3, via the ConnectToHub API. The vulnerability arises because the API…
-
Claude Opus 4.6 Finds 500+ High-Severity Flaws Across Major Open-Source Libraries
Claude Opus 4.6, the latest large language model from Anthropic, has found more than 500 previously unknown high-severity security flaws in open-source libraries, including Ghostscript, OpenSC and CGIF. According to Anthropic, the model is not only able to…
The Hacker News -
Questions Raised Over CISA’s Silent Ransomware Updates in KEV Catalog
CISA updated 59 KEV entries in 2025 to specify that the vulnerabilities have been exploited in ransomware attacks, a move that GreyNoise’s Glenn Thorpe described as a material change to an organisation’s risk posture, noting there’s no alert or…
SecurityWeek -
Zscaler Acquires Browser Security Firm SquareX
According to SecurityWeek, Zscaler has acquired browser security firm SquareX for an undisclosed sum, with the deal closing on 5 February 2026. SquareX markets a Browser Detection and Response (BDR) solution that converts any web browser into an…
SecurityWeek -
The Gaming Winter: NVIDIA Pushes RTX 50 Super to 2027 as AI “Eats” the Global Memory Supply
According to The Information, the meteoric surge in demand for AI data centre computational power, compounded by a severe deficit in critical memory components, has allegedly compelled NVIDIA to defer the launch of its RTX 50-series revisions—widely…
SecurityOnline -
Qualcomm’s Record $12.3B Quarter Overshadowed by a Global “RAMpocalypse” Threatening 2026 Growth
Qualcomm reported a record quarterly revenue of $12.3 billion for the first quarter of fiscal 2026, driven by strong demand in the automotive and premium smartphone sectors, though guidance for the next quarter was more cautious due to a global memory…
SecurityOnline -
The $400 Billion Giant: Google’s AI Counteroffensive Explodes as Gemini Hits 750M Users
Alphabet’s earnings reveal, published on 6 February 2026, shows Gemini’s MAU topping 750 million after the Gemini 3 launch last November, up from 650 million in the preceding quarter. The article notes that this growth marks Google’s AI counteroffensive…
SecurityOnline -
Framerate Fatality: NVIDIA Confirms Windows 11 Update KB5074109 is Wreaking Havoc on Gamers
February 6, 2026 article reports that Microsoft’s January Windows 11 cumulative updates have caused a range of issues, some of which persist despite later patches. Depending on the game, frame rates may drop by 15 to 20 FPS, with occasional black screens or…
SecurityOnline -
The Invisible Landlord: ShadowSyndicate Rotates Keys to Hide Infrastructure
ShadowSyndicate, a sprawling infrastructure cluster linked to multiple ransomware families, has evolved from relying on a single SSH key to a more sophisticated practice of rotating multiple keys to manage its global footprint, according to Group-IB. The…
SecurityOnline -
Popular n8n Platform Hit by Triple Threat of RCE Flaws
The n8n workflow automation platform has been hit by a triple threat of remote code execution flaws, with three CVEs—CVE-2026-25053, CVE-2026-25056 and CVE-2026-25049—described as allowing authenticated attackers to fully take over the host server. CVSS…
-
The Invisible Proxy: NGINX Hijacked for Silent SEO Poisoning
A new campaign identified by Datadog Security Research hijacks NGINX servers to silently redirect user traffic, compromising NGINX installations and Baota (BT) management panels by injecting malicious configurations. According to Datadog Security Research,…
SecurityOnline -
Phantom in the Machine: Inside Salt Typhoon’s “SnappyBee” Backdoor
A new technical analysis by Darktrace has peeled back the layers of SnappyBee (also known as Deed RAT), a sophisticated modular backdoor attributed to the China-linked threat group Salt Typhoon (Earth Estries). The analysis describes SnappyBee as a phantom…
SecurityOnline -
4 Million Downloads at Risk: Critical Unstructured Flaw (CVSS 9.8) Allows RCE
A critical vulnerability has been discovered in the unstructured library, tracked as CVE-2025-64712, with a CVSS score of 9.8 that enables remote code execution. The flaw affects the partition_msg function used to break down Outlook .msg files, a common data…
-
Stealth Injection: Silver Fox APT Upgrades “ValleyRat” with Rare PoolParty Tech
According to Cybereason Security Services, a new threat campaign disguises malware as popular installers to deliver ValleyRat (also known as Winos 4.0), a remote access trojan linked to Silver Fox APT, targeting Chinese-speaking users with fake LINE…
SecurityOnlineVoid Arachne -
Cloud-Hosted Trap: Phishers Use Vercel & Telegram to Bypass Filters
On 6 February 2026, according to X-Labs, a cloud-hosted phishing campaign uses Vercel Blob storage and a Telegram bot to harvest data. The attack begins with a standard business email disguised as a procurement request, with a PDF attachment as the primary…
SecurityOnline
