CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 9–13 on weekend days.

Show as table
Articles published per day
DayArticles published
Sun 11 Oct9
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Today, Sun 25 Oct12 so far
Exploited only
58 articles

Latest days

Mon 9 Feb· 58 articles

  1. Co-Pilots of the Future: Apple Opens CarPlay to ChatGPT and Google Gemini for Smarter Road Trips

    According to Bloomberg, Apple plans to allow third‑party voice-controlled AI apps such as OpenAI’s ChatGPT and Google Gemini to be integrated into future CarPlay iterations, enabling bespoke AI vocal interfaces tailored for the car environment. This could…

    SecurityOnline
  2. Fortune Favors the AI: Crypto.com CEO Drops $70M on AI.com to Launch “Synthetic Secretaries” at Super Bowl LX

    On 9 February 2026, it was reported that Crypto[.]com co-founder and CEO Kris Marszalek has acquired the domain AI[.]com for $70 million, aiming to launch a bespoke AI Agent service during Super Bowl LX. The purchase eclipses the prior domain record of $30…

    SecurityOnline
  3. Code Red: 4 Critical SandboxJS Flaws (CVSS 10.0) Allow Host Takeover

    A quartet of critical SandboxJS vulnerabilities has been disclosed, each carrying a maximum CVSS score of 10.0 and capable of allowing attackers to completely break out of the sandbox and run arbitrary code on the host. The flaws are tracked as…

    SecurityOnlineCVE-2026-25520CVE-2026-25520
  4. Digital Detox Mandate: EU Charges TikTok Over “Autopilot” Design and Minor Safety Failures

    According to The European Commission, TikTok’s structural architecture contravenes the European Union’s Digital Services Act, with the commission deeming the platform’s “addictive design” unsuitable for safeguarding users’ wellbeing, particularly minors. The…

    SecurityOnline
  5. The “Compatibility” Trap: New Mac Malware Tricks Users into Bypassing TCC

    The Daily CyberSecurity reports a new macOS campaign that uses a fake “Compatibility Wizard” to trick users into bypassing macOS’s Transparency, Consent, and Control (TCC) framework, enabling the malware to access sensitive resources. The infection starts…

    SecurityOnline
  6. Tearing Down the Walled Garden: How Google Quick Share Finally Bridged the AirDrop Chasm

    On 9 February 2026, Google’s Quick Share is described as bridging the AirDrop chasm by enabling cross‑platform file transfers between Android and iOS, with the capability currently limited to the Pixel 10 series for AirDrop-style exchanges. According to Eric…

    SecurityOnline
  7. The “All-in-One” Spy: DKnife Malware Hijacks Routers to Swap Downloads

    The All-in-One Spy: DKnife Malware Hijacks Routers to Swap Downloads, reported on 9 February 2026, describes a sophisticated AitM framework that has been active since 2019 and remains a threat today, according to Cisco Talos. According to Cisco Talos, it…

    SecurityOnline
  8. Double the RAM, Half the Stress: Raspberry Pi 4’s Secret Design Overhaul to Combat the 2026 Memory Crisis

    Raspberry Pi has announced a revised pricing strategy driven by a global memory scarcity, a move intended to keep its hardware affordable as memory procurement costs rise. The company has unveiled a modified Model 4B with a redesigned circuit board prepared…

    SecurityOnline
  9. Flickr moves to contain data exposure, warns users of phishing

    According to Security Affairs, Flickr says a flaw at a third-party email provider may have exposed some users’ names, email addresses, IPs, and account activity, though passwords and payment data were not affected. The platform notes it shut down the…

    Security Affairs
  10. “JackMa” & ShadowGuard: TGR-STA-1030 Spies on 37 Nations via Linux Rootkit

    A massive, state-aligned cyber espionage campaign has infiltrated government networks across 37 countries, targeting ministries of finance, law enforcement and critical infrastructure, according to Unit 42 in a new report. The operations of TGR-STA-1030…

    SecurityOnline
  11. CVE-2026-1731: Critical BeyondTrust Flaw (CVSS 9.9) Allows Pre-Auth RCE

    CVE-2026-1731 is described as a critical pre-authentication remote code execution flaw (CVSS 9.9) that could allow attackers to take control of affected systems without any login. BeyondTrust says the vulnerability affects BeyondTrust Remote Support (RS) and…

    SecurityOnlineCVE-2026-1731CVE-2026-1731Exploited
  12. Stan Ghouls Target Uzbekistan and Russia with NetSupport RAT

    A new report from Kaspersky Labs details a fresh Stan Ghouls campaign targeting organisations in Uzbekistan and Russia, using a “living off the land” approach to control victim machines via the NetSupport RAT rather than custom trojans. According to…

    SecurityOnline
  13. CVE-2026-25526: Critical Jinjava Flaw (CVSS 9.8) Permits Remote Code Execution

    CVE-2026-25526 is a critical vulnerability in Jinjava, the Java-based template engine used by HubSpot CMS, with a near-maximum CVSS score of 9.8 that permits remote code execution. The flaw arises from how Jinjava handles loops and object creation,…

    SecurityOnlineCVE-2026-25526CVE-2026-25526
  14. “Hard Working” Thieves: Rublevka Team Steals $10M in Solana Scam-as-a-Service

    A security analysis of the Rublevka Team describes a Russian crime syndicate that has stolen over $10 million in cryptocurrency since 2023 by running a highly automated scam‑as‑a‑service platform for Solana and other assets. Affiliates use a Telegram bot to…

    SecurityOnline
  15. CVE-2025-62878: Critical 10.0 Vulnerability Found in Kubernetes Local Path Provisioner

    CVE-2025-62878 is a critical 10.0 flaw in Kubernetes’ Local Path Provisioner, a core storage component used to manage local storage in clusters. The vulnerability lets an attacker break out of the storage sandbox and write files anywhere on the host, by…

    SecurityOnlineCVE-2025-62878CVE-2025-62878
  16. APT28 Weaponizes Office Flaw to Spy on NATO & Military

    According to Trellix, the Russian state-sponsored group APT28 (also known as Fancy Bear) weaponised a newly disclosed Microsoft Office flaw, CVE-2026-21509, within 24 hours of its public reveal to spy on NATO-aligned targets across Poland, Ukraine and other…

    SecurityOnlineCVE-2026-21509CVE-2026-21509Exploited
  17. Silent Army: SystemBC Botnet Infects 10,000+ IPs & Government Networks

    A new Silent Push report identifies a massive SystemBC botnet that has infected more than 10,000 unique IP addresses across global networks, including sensitive government infrastructure. SystemBC, also known as Coroxy or DroxiDat, functions as a SOCKS5…

    SecurityOnline

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device