News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 11 Feb· 67 articles
-
The Data Mercantilism Era: Amazon and Microsoft Battle for the Future of Licensed AI Content
According to exclusive dispatches from The Information and TechCrunch, Amazon is orchestrating the launch of a pioneering AI content exchange that would let publishers license their journalistic and literary assets directly to AI developers, a move announced…
SecurityOnline -
ICS Patch Tuesday: Vulnerabilities Addressed by Siemens, Schneider, Aveva, Phoenix Contact
SecurityWeek reports that on February 11, 2026, industrial giants Siemens, Schneider Electric, Aveva, and Phoenix Contact published Patch Tuesday advisories detailing vulnerabilities in their ICS/OT products. Siemens issued eight new advisories covering…
SecurityWeek -
U.S. CISA adds Microsoft Office and Microsoft Windows flaws to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Microsoft Office and Microsoft Windows flaws to its Known Exploited Vulnerabilities (KEV) catalog. The flaws listed are CVE-2026-21510, CVE-2026-21513, CVE-2026-21514, CVE-2026-21519,…
-
North Korea-Linked UNC1069 Uses AI Lures to Attack Cryptocurrency Organizations
The North Korea-linked threat actor UNC1069 has been observed targeting the cryptocurrency sector to steal data from Windows and macOS systems, with the ultimate aim of facilitating financial theft, according to Google Mandiant. The intrusion relied on a…
The Hacker News -
Sideloading Sidestepped: The UK’s “Light-Touch” Gamble on the Apple-Google Duopoly
On 11 February 2026, the UK’s CMA signalled a markedly different approach from the EU by opting for a light-touch path rather than mandate sideloading or drastic intervention in the Apple-Google duopoly. The CMA has resolved to accept voluntary commitments…
SecurityOnline -
Beyond the Screen: Samsung’s Galaxy S26 Ultra Debuts “Magic Flex” Privacy and Agentic AI
Samsung’s Galaxy S26 Ultra is poised to showcase a new privacy feature dubbed “Magic Flex Pixel,” a panel-level privacy concept described as a software-activated, physical-grade privacy shield that sits within the display substrate rather than a traditional…
SecurityOnline -
Digital Firewall: Google’s New AI Arsenal Targets Deepfake and SSN Leaks
Google has unveiled a suite of privacy tools designed to quickly remove non-consensual explicit imagery from search results and to monitor for exposure of sensitive government credentials. The update expands the existing “Results about you” dashboard to…
SecurityOnline -
Billions at Risk: Critical Windows Notepad Flaw Allows Remote Code Execution
A newly discovered vulnerability in Windows Notepad has been patched by Microsoft on its February 2026 Patch Tuesday, tracked as CVE-2026-20841 with a high-severity CVSS of 8.8. The flaw converts a simple Markdown file into a weapon, allowing remote code…
-
-
Patch Panic: Microsoft Fixes 6 Active Zero-Days in Feb 2026 Update
Microsoft has released its security update for February 2026, addressing 61 vulnerabilities across its ecosystem, with six zero-day vulnerabilities currently being exploited in the wild and a critical flaw in the Windows Desktop Window Manager taking centre…
-
Null Byte Nightmare: Critical WPvivid Backup Flaw (CVSS 9.8) Exposes 800K WordPress Sites
A critical vulnerability has been discovered in WPvivid Backup, a WordPress plugin used by over 800,000 websites, tracked as CVE-2026-1357 with a CVSS of 9.8. The flaw lies in the plugin’s remote transfer feature, specifically the send_to_site() function,…
-
Asia Fumbles With Throttling Back Telnet Traffic in Region
Many devices and consumer-grade routers in the Asia-Pacific region continue to use the insecure Telnet protocol, despite a recent critical vulnerability and the general insecurity of the protocol overall. The problems persist despite recent curtailing of…
Dark Reading -
GitLab Patch Alert: High-Severity Web IDE Flaw Exposes Private Repos
GitLab has released a security update for its Community and Enterprise editions, patching a high-severity Web IDE flaw (CVE-2025-7659) that could allow unauthenticated attackers to steal access tokens and access private repositories. The fix covers versions…
-
Maine House Passes Strong Privacy Bill
According to EPIC, the Maine House of Representatives has passed a strong comprehensive privacy bill, LD 1822, which closely mirrors Maryland’s online data privacy act that was passed in 2024. The measure would extend essential privacy protections to…
DataBreaches -
Under Siege: GTIG Report Exposes North Korean Spies & Russian Drone Hacks in Defense Sector
According to Google Threat Intelligence Group (GTIG), a new report paints a stark picture of the modern battlefield, where the defence industrial base is under a state of constant, multi-vector siege by state-sponsored actors and criminal syndicates. The…
SecurityOnline -
“Fiber” Optic Failure: Predictable UUIDs Expose Go Web Framework to Hijacking
A critical vulnerability has been disclosed in Fiber, the Go web framework, with the flaw tracked as CVE-2025-66630 and a CVSS score of 9.2. The issue arises because Fiber’s UUID generation silently falls back to a zero-valued UUID when secure randomness…
-
Sleeping with the Enemy: Dormant Backdoors Found in Ivanti EPMM
A stealthy new cyber espionage campaign is targeting Ivanti Endpoint Manager Mobile (EPMM), with threat actors quietly deploying dormant, in-memory backdoors since 4 February 2026, likely acting as Initial Access Brokers preparing to sell access later.…
-
Unmasking the Proxy: Silent Push “Traffic Origin” Exposes True Actor Locations
A new report by Silent Push reveals how advanced traffic analysis can strip away the digital masks used by cybercriminals, exposing the true physical locations of threat actors who hide behind proxies and VPNs. The technology, called “Traffic Origin,”…
SecurityOnline -
Sandbox Breakout: Critical SandboxJS Flaw (CVE-2026-25881) Allows Host Takeover
A critical vulnerability in SandboxJS, tracked as CVE-2026-25881, was disclosed on 11 February 2026 and could allow a malicious script to escape the sandbox and modify the host application's core logic, potentially enabling Remote Code Execution. The flaw…
-
Fake CEO, Real Hack: North Korea Uses AI Deepfakes to Steal Crypto
According to Mandiant, North Korean threat actors are elevating their social engineering through AI-generated deepfakes paired with custom malware to target the cryptocurrency sector, with UNC1069 described as a financially motivated group active since 2018.…
SecurityOnline -
Factory Flaw: Critical WAGO Switch Vulnerabilities (CVSS 9.8) Allow Remote Takeover
A cluster of critical vulnerabilities has been identified in WAGO’s 852 series Industrial Managed Switches, exposing OT networks to remote takeover, according to CERT@VDE. The flaws affect the 8052-1322 and 0852-1328 models (Firmware 2.64 and prior) and…
-
Hiding in the Cloud: GuLoader Malware Evolves to Evade Detection
Zscaler ThreatLabz has released a deep-dive analysis of GuLoader, also known as CloudEye, detailing how the long-standing malware family is evolving to outpace defenders. First observed in late 2019, GuLoader has become a staple in the cybercrime world,…
SecurityOnline -
CVE-2026-23906: Authentication Bypass Flaw Hits Apache Druid Analytics Clusters
The article reports that CVE-2026-23906 is an authentication bypass flaw in Apache Druid that arises from how the druid-basic-security extension handles LDAP authentication, specifically when an LDAP server allows anonymous binds. According to The Apache…
-
5 Benefits of Using Automation to Stay in Touch With Customers
Automation is championed as a game-changer for customer engagement, delivering round-the-clock availability with tools like chatbots and auto-responders that provide instant answers, 24 hours a day, 7 days a week. It enables personalized communication at…
SecurityOnline -
Signed” Sealed, Delivered: Cybercriminals Abuse PayPal and Apple to Bypass Email Security
A new DKIM Replay Attack technique is being used by cybercriminals to bypass email security by abusing legitimate invoice and notification systems from PayPal, Apple and others, according to Kaseya, featuring data from INKY. The attack relies on emails that…
SecurityOnline -
Handshake Halt: GnuTLS 3.8.12 Fixes TLS 1.3 Crash & CPU Exhaustion
GnuTLS has released version 3.8.12 to fix two denial-of-service vulnerabilities that could crash servers or exhaust CPU resources, with the update published on 9 February 2026. The more severe issue, CVE-2026-1584, is a high-severity NULL pointer dereference…
-
CVE-2026-24343: Apache HertzBeat Flaw Opens Door to Resource Exhaustion
According to The Apache Software Foundation, a security advisory for HertzBeat warns of a vulnerability that could allow attackers to overwhelm the system with malicious data queries. Tracked as CVE-2026-24343, the flaw is described as an XPath Injection…
