News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 10 Feb· 61 articles
-
A Peek Into Muddled Libra’s Operational Playbook
According to Unit 42, during a September 2025 incident response investigation, the cybercrime group Muddled Libra (also known as Scattered Spider, UNC3944) used a rogue virtual machine uncovered on a targeted environment to shed light on its operational…
unit42.paloaltonetworks.com -
Microsoft Windows4 articles this day · SecurityWeek first
Microsoft Patch Tuesday security updates for February 2026 fix six actively exploited zero-days · Patch Tuesday, February 2026 Edition
-
Microsoft Patch Tuesday security updates for February 2026 fix six actively exploited zero-days
Microsoft Patch Tuesday for February 2026 fixes six actively exploited zero-day vulnerabilities alongside 58 new security flaws across Windows, Office, Azure, Edge, Exchange, Hyper-V, WSL and other components, bringing total CVEs to 62 when third-party…
-
Patch Tuesday, February 2026 Edition
Patch Tuesday in February 2026 saw Microsoft release patches to fix more than 50 security holes across Windows and related software, including fixes for six zero-day vulnerabilities that attackers are already exploiting in the wild. According to Microsoft,…
-
Microsoft Patches 6 Actively Exploited Zero-Days
Microsoft has patched six actively exploited zero-days in its latest security update, with three of the flaws described as security feature bypass vulnerabilities that let attackers slip past built-in protections across multiple Microsoft products. Two of…
-
6 Actively Exploited Zero-Days Patched by Microsoft With February 2026 Updates
SecurityWeek reports that Microsoft’s February 2026 Patch Tuesday fixes roughly 60 vulnerabilities, including six actively exploited zero-days. The zero-days listed are CVE-2026-21510, CVE-2026-21514, CVE-2026-21513, CVE-2026-21519, CVE-2026-21533 and…
-
-
SolarWinds WHD Attacks Highlight Risks of Exposed Apps
Threat actors are pouncing on new vulnerabilities in SolarWinds Web Help Desk (WHD), highlighting the risks of exposing applications to the public Internet. The US Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-40551 to the Known…
-
In Bypassing MFA, ZeroDayRAT Is 'Textbook Stalkerware'
A new malware family called ZeroDayRAT bundles spyware, surveillance, and info-stealing capabilities for mass-market criminals, according to mobile security vendor iVerify, with access to a developer-backed panel for sales, support and updates. The campaign…
Dark Reading -
South Korea government is promoting bill for statutory damages for personal information leaks.
The South Korea government is promoting a bill that would hold companies liable for damages in personal information leaks even when there is no intent or negligence, with retroactive application to past incidents, according to DataBreaches[.]Net. The…
DataBreaches -
Microsoft sounds the alarm about Secure Boot certificates expiring later this year
Windows’ original Secure Boot certificates are set to expire in June and October 2026, a fact Microsoft has highlighted in a post published on 10 February 2026. The expiry could cause problems for PCs that do not pull down the new certificates before the…
Ars Technica -
EU Unconditionally Approves Google’s $32B Acquisition of Wiz
The European Commission has unconditionally approved Google's $32 billion acquisition of Wiz under the EU Merger Regulation, according to the European Commission, with the decision announced on 10 February 2026. The ruling is based on extensive feedback from…
SecurityWeek -
DPRK Operatives Impersonate Professionals on LinkedIn to Infiltrate Companies
DPRK operatives are now applying to remote roles using real LinkedIn accounts of people they impersonate, a tactic described by Security Alliance (SEAL) as part of a long-running campaign to infiltrate Western and other companies. These profiles reportedly…
The Hacker News -
Patch Tuesday: Adobe Fixes 44 Vulnerabilities in Creative Apps
Adobe has released its February 2026 Patch Tuesday, addressing a total of 44 vulnerabilities across its Creative Cloud apps. The updates patch nine new advisories covering Audition, After Effects, InDesign Desktop, Substance 3D Designer, Substance 3D Stager,…
SecurityWeek -
Reco Raises $30 Million to Enhance AI SaaS Security
Reco has raised $30 million in a Series B funding round led by Zeev Ventures, with participation from Insight Partners, Boldstart Ventures, Angular Ventures, Workday Ventures, TIAA Ventures, S Ventures and Quadrille Capital. The announcement comes less than…
SecurityWeek -
Vega Raises $120M in Series B Funding to Grow Security Analytics Platform
Vega, the Israeli cybersecurity startup, has raised $120 million in a Series B funding round, led by existing investor Accel with participation from Cyberstarts, Redpoint, and CRV, according to SecurityWeek News. The new investment brings Vega’s total…
SecurityWeek -
Singapore says China-backed hackers targeted its four largest phone companies
Singapore’s government has blamed a known Chinese cyber-espionage group for targeting four of its top telecommunication companies as part of a months-long attack, according to a statement on 10 February 2026. The targeted firms were Singtel, StarHub, M1 and…
DataBreaches -
RATs in the Machine: Inside a Pakistan-Linked Three-Pronged Cyber Assault on India
RATs in the Machine reports a Pakistan-linked, three-pronged cyber assault on India led by the Transparent Tribe (APT36), targeting Indian defence and government sectors across Windows and Linux. One campaign uses GETA RAT, often attributed to the SideCopy…
SecurityWeek -
80% of Fortune 500 use active AI Agents: Observability, governance, and security shape the new frontier
Microsoft’s Cyber Pulse report shows that more than 80% of Fortune 500 companies today use AI active agents built with low-code/no-code tools, with agents embedded across operations in sales, finance, security, customer service and product innovation. The…
Microsoft -
Hacktivist scrapes over 500,000 stalkerware customers’ payment records
A hacktivist has scraped more than half-a-million payment records from a provider of consumer-grade stalkerware phone surveillance apps, exposing the email addresses and partial payment information of customers who paid to spy on others. The transactions…
DataBreaches -
CodeRED Emergency Notification System Incident Update
The CodeRED emergency notification system incident update notes that the attack occurred in CodeRED’s legacy OnSolve environment on 31 October 2025, with ransomware deployed on 10 November. According to St. Mary’s update, limited subscriber information…
DataBreaches -
Discord to start requiring face scan or ID to access adult content
On 10 February 2026, DataBreaches[.]Net reported that Discord will soon require global age verification to access adult content, either via a face scan or by uploading a form of ID. Users can upload a photo of their ID to confirm age or take a video selfie,…
DataBreaches -
Discord will limit profiles to teen-appropriate mode until you verify your age
Discord announced it will put all existing and new profiles in teen-appropriate mode by default in early March, with the teen-appropriate profile mode remaining in place until users prove they are adults. To change a profile to full access will require…
Malwarebytes -
ZeroDayRAT spyware grants attackers total access to mobile devices
ZeroDayRAT is a newly discovered commercial mobile spyware toolkit that gives attackers full control over Android and iOS devices, including live camera access, keylogging, and theft of banking and crypto data. First spotted in February 2026 and analysed by…
Security Affairs -
Manipulating AI memory for profit: The rise of AI Recommendation Poisoning
Microsoft security researchers describe AI memory poisoning as a growing trend used for promotional purposes, a technique they call AI Recommendation Poisoning. The attacks rely on memory-injection prompts embedded in URLs or clickable “Summarize with AI”…
Microsoft -
SAP Patches Critical CRM, S/4HANA, NetWeaver Vulnerabilities
SAP has released 27 new and updated security notes on February 2026 security patch day, including two that address critical-severity vulnerabilities. The first critical note addresses CVE-2026-0488 (CVSS score of 9.9), a code injection bug in CRM and S/4HANA…
-
Reynolds Ransomware Embeds BYOVD Driver to Disable EDR Security Tools
Cybersecurity researchers have disclosed Reynolds, a new ransomware family that comes with a built‑in BYOVD component to evict security tools. The payload drops a vulnerable NsecSoft NSecKrnl driver and terminates processes tied to Avast, CrowdStrike Falcon,…
-
Backslash Raises $19 Million to Secure Vibe Coding
Backslash Security raised $19 million in a Series A funding round, bringing its total to $27 million raised, with the round led by Kompas VC and supported by Artofin Venture Capital, First Rays Capital, Maniv, and StageOne Ventures. Founded in 2022 and based…
SecurityWeek -
From Ransomware to Residency: Inside the Rise of the Digital Parasite
According to Picus Labs’ new Red Report 2026, which analysed over 1.1 million malicious files and mapped 15.5 million adversarial actions observed across 2025, attackers are not optimising for disruption but for long-term, invisible access. The report notes…
The Hacker News -
How safe are kids using social media? We did the groundwork
Malwarebytes Labs conducted research into how well mainstream platforms protect children under 13 online, with testing carried out between 1 December and 17 December 2025 using US-based accounts. The study found that most services perform well when kids use…
Malwarebytes -
Man tricked hundreds of women into handing over Snapchat security codes
According to Malwarebytes, 27-year-old Kyle Svara of Oswego, Illinois admitted to hacking women’s Snapchat accounts across the US, harvesting account security codes from 571 victims between May 2020 and February 2021 and gaining unauthorized access to at…
Malwarebytes -
AI/LLM-Generated Malware Used to Exploit React2Shell
According to Darktrace, security researchers identified an AI/LLM-generated malware sample that exploited the React2Shell vulnerability within Darktrace’s Cloudypots environment, illustrating how large language models can accelerate exploit development for…
darktrace.com -
New ‘ZeroDayRAT’ Spyware Kit Enables Total Compromise of iOS, Android Devices
New ZeroDayRAT is a commercial mobile spyware toolkit that enables full remote access to Android and iOS devices, with features including live camera feeds, key logging, bank and crypto theft and more, according to SecurityWeek. It is available via Telegram…
SecurityWeek -
New ‘SSHStalker’ Linux Botnet Uses Old Techniques
A newly identified Linux botnet called SSHStalker is relying on decade-and-a-half-old exploits and techniques, according to Flare. The security firm notes that SSHStalker uses multiple 2009-era tools and mechanics, including an Internet Relay Chat (IRC) bot…
SecurityWeek -
Senegal shuts National ID office after ransomware attack
Senegal closed its national ID card office after a ransomware cyberattack disrupted ID, passport and biometric services, with authorities saying operations were suspended while they assessed the impact. The incident was claimed by a new ransomware group…
Security Affairs -
ZAST.AI Raises $6M Pre-A to Scale "Zero False Positive" AI-Powered Code Security
ZAST[.]AI announced the completion of a $6 million Pre-A funding round on 5 January 2026 in Seattle, USA, bringing its total funding to around $10 million. The round was led by Hillhouse Capital, illustrating strong investor confidence in a platform…
The Hacker News -
BeyondTrust Patches Critical RCE Vulnerability
BeyondTrust has rolled out patches for a critical RCE vulnerability in Remote Support (RS) and Privileged Remote Access (PRA) that could be exploited remotely without authentication. The flaw is tracked as CVE-2026-1731 and carries a CVSS score of 9.9, with…
-
Warlock Ransomware Breaches SmarterTools Through Unpatched SmarterMail Server
SmarterTools disclosed that the Warlock ransomware group breached its network by exploiting an unpatched SmarterMail instance, with the incident occurring on 29 January 2026. The attack compromised about 12 Windows servers on the office network and a…
-
Dutch agencies hit by Ivanti EPMM exploit exposing employee contact data
Dutch authorities disclosed that attacks exploiting Ivanti Endpoint Manager Mobile (EPMM) flaws exposed work-related contact data for staff at the Dutch Data Protection Authority (AP) and the Council for the Judiciary (Rvdr). The incidents were reported to…
Security Affairs -
Singapore: Rootkits, Zero-Day Used in Chinese Attack on Major Telecom Firms
Singapore’s cybersecurity agency CSA, with its development agency IMDA, confirmed that China-linked UNC3886 targeted all four of the nation’s major telecom operators—M1, SIMBA Telecom, Singtel and StarHub—but did not disrupt services or access customer…
SecurityWeek -
Smile for the Settings: Windows 11 Update Adds Native Camera Controls and Tired New Emojis
Microsoft has released a nascent Windows 11 update for Dev and Beta Channel participants, delivering enhanced camera controls and refreshed emojis. According to…
SecurityOnline -
The End of the Ad-Free Era: OpenAI Launches ChatGPT “Go” and Sponsored Responses to Fuel GPT-5.3
OpenAI has launched a pilot programme for advertising within ChatGPT, targeting both the free tier and the new ChatGPT Go subscription, with promotional displays appearing at the base of the chat interface and clearly labelled as “Sponsored.” According to…
SecurityOnline
