News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 10 Feb· 61 articles
-
The AI Hectocorn: Anthropic Hits $350B Valuation as Microsoft and NVIDIA Hedge Their Bets
According to Bloomberg, the AI unicorn Anthropic is in the final stages of securing a monumental $20 billion funding round, elevating its market valuation to a staggering $350 billion. The latest influx follows a previous $13 billion round completed five…
SecurityOnline -
Alleged Suno Data, Card Dump, ASUS Records & Air France Access Sale
According to SOCRadar Dark Web Team, several new underground listings include an alleged Suno database and source code sale, a large aggregated credit card dump, and claimed data access related to ASUS systems, with a separate post advertising unauthorized…
SOCRadar -
China-linked APT UNC3886 targets Singapore telcos
According to Cyber Security Agency of Singapore (CSA), in a cyber espionage campaign linked to the China-linked APT UNC3886, Singapore’s telecom sector was targeted by attacks on all four major telcos—M1, SIMBA Telecom, Singtel and StarHub—since July 2025.…
-
Beyond the Battlefield: Threats to the Defense Industrial Base
Introduction In modern warfare, the front lines are no longer confined to the battlefield; they extend directly into the servers and supply chains of the industry that safeguards the nation. Today, the defense sector faces a relentless barrage of cyber…
Google CloudOriginal report -
Dutch Authorities Confirm Ivanti Zero-Day Exploit Exposed Employee Contact Data
According to The Dutch Data Protection Authority (AP) and the Council for the Judiciary, their systems were impacted by cyber attacks that exploited recently disclosed security flaws in Ivanti Endpoint Manager Mobile (EPMM). On January 29, the National Cyber…
-
Critical SAP Alert: Code Injection (CVSS 9.9) Exposes S/4HANA Databases
SAP has released its security update for February 2026, addressing 26 new vulnerabilities across its enterprise ecosystem, with the most severe being a critical code injection flaw in SAP CRM and SAP S/4HANA tracked as CVE-2026-0488, which carries a…
-
RSAC Releases Quantickle Open Source Threat Intelligence Visualization Tool
On 10 February 2026, RSAC announced the availability of Quantickle, an open source threat intelligence visualization tool. Quantickle is a browser-based network graph visualisation tool designed to help threat researchers and cybersecurity analysts visualise…
SecurityWeek -
Fortinet Patches Critical SQLi Flaw Enabling Unauthenticated Code Execution
Fortinet has released security updates to address a critical flaw in FortiClientEMS that could allow unauthenticated code execution. The vulnerability is tracked as CVE-2026-21643 and carries a CVSS score of 9.1/10. According to Fortinet, it involves…
-
HTTP Down: High-Severity Axios Flaw (CVSS 7.5) Crashes Node.js Servers
A high-severity vulnerability in Axios, tracked as CVE-2026-25639 and rated CVSS 7.5, can crash Node[.]js servers that use the library. According to GHSA-43fc-jf86-j433, the flaw lies in Axios’ mergeConfig function, which crashes with a TypeError when it…
-
30-Year-Old Bug: High-Severity libpng Flaw (CVSS 8.3) Exposes Millions of Apps
A high-severity vulnerability has been unearthed in libpng, the PNG image handling library, tracked as CVE-2026-25646 with a CVSS score of 8.3 and having existed in the codebase since its inception, affecting every version released over the past three…
-
Sunset for the Father of Blu-ray: Sony Officially Terminates All Blu-ray Recorder Shipments
Sony has announced the systematic cessation of shipments for its Blu-ray Disc recorders, stating there will be “no successor models” and signalling a definitive withdrawal from the consumer Blu-ray recording hardware market. The discontinued line includes…
SecurityOnline -
March Madness: Apple’s M5 Mac Surge and the Surprising $599 “MacBook SE” Debut
According to Bloomberg correspondent Mark Gurman, Apple is lining up a spring hardware refresh centred on M5 silicon, with an early March unveiling potentially as soon as the week of 2 March to showcase a broad Mac and iPad slate and the iPhone 17e. The plan…
SecurityOnline -
Flagship Power, Budget Price: How Apple’s iPhone 17e Aims to Crush the Mid-Range Market
According to Mark Gurman, Apple is poised to unveil the iPhone 17e, an entry-level offering that will succeed the iPhone 16e released a year earlier, while maintaining an aggressive $599 price point. The device is described as undergoing a profound…
SecurityOnline -
Triple Threat: Critical Gogs Flaws (CVSS 9.3) Allow RCE & 2FA Bypass
A trio of critical Gogs vulnerabilities has been disclosed, with CVSS 9.3 for CVE-2025-64111 marking the highest risk and exposing installations to remote code execution by tampering with the repository’s configuration files. According to the advisory, an…
-
Virtual Invasion: SolarWinds WHD Exploited to Host Hidden QEMU VMs
According to Microsoft Defender Research Team, threat actors exploiting exposed SolarWinds Web Help Desk (WHD) instances deployed hidden QEMU virtual machines to move laterally across corporate networks, with activity observed in December 2025. The campaign…
-
Trust Broken: Critical Keylime Flaw (CVSS 9.4) Disables mTLS Authentication
According to Daily CyberSecurity, a critical vulnerability in Keylime, tracked as CVE-2026-1709, carries a CVSS score of 9.4 and disables mutual TLS (mTLS) authentication in recent versions. Keylime, which uses TPM technology to verify remote systems, relies…
-
Silent Killer: Black Basta Bundles “BYOVD” Driver to Blind Antivirus
According to The Threat Hunter Team, the Black Basta ransomware group has upgraded its toolkit by embedding a defense evasion tool inside the ransomware payload, using a bring-your-own-vulnerable-driver (BYOVD) technique to silently disable security software…
-
CVE-2026-25592: Critical Semantic Kernel Flaw (CVSS 10.0) Allows File Overwrite
CVE-2026-25592 is described as a critical vulnerability in Microsoft's Semantic Kernel .NET SDK, with a CVSS 10.0, that could allow an AI agent to overwrite files on the host system. The flaw lies in the SessionsPythonPlugin, where the DownloadFileAsync and…
-
Poisoned Protocol: dYdX Supply Chain Attack Injects RATs into npm & PyPI
A sophisticated supply chain attack on the dYdX protocol has injected malicious code into official client libraries used by developers, compromising packages on both npm and PyPI. The attack aims to steal cryptocurrency wallets and plant backdoors in trading…
SecurityOnline -
CVE-2026-25544: Critical Payload CMS SQLi (CVSS 9.8) Exposes Admin Tokens
CVE-2026-25544 is a critical SQL injection vulnerability in Payload CMS, rated CVSS 9.8, that allows unauthenticated attackers to perform blind SQL injections and potentially take over administrative accounts. The flaw resides in how Payload handles queries…
-
Marco Stealer: The New “Data Raider” Targeting Crypto & Cloud Storage
Marco Stealer is a new information‑stealing malware described by Zscaler ThreatLabz as first observed in June 2025 and aimed at harvesting data from browsers, cryptocurrency extensions, and local files. It methodically builds a dossier on its victims,…
SecurityOnline
