News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Mon 16 Feb· 25 articles
-
Marietta also affected by BridgePay ransomware attack.
Marietta, Georgia, was among numerous entities affected by the BridgePay ransomware attack, with the city posting on 13 February 2026 that online credit card payments were disrupted while a secure alternative was being arranged. The incident was described as…
DataBreaches -
A security flaw at DavaIndia Pharmacy allowed attackers to access customers’ data and more
A security vulnerability at DavaIndia Pharmacy exposed customer order data and granted full administrative control over its platform. The security researcher Eaton Zveare disclosed that an exposed admin subdomain allowed unauthenticated access to super-admin…
Security Affairs -
Infostealer Steals OpenClaw AI Agent Configuration Files and Gateway Tokens
Cybersecurity researchers flagged an information stealer infection that exfiltrated an OpenClaw AI agent’s configuration environment, including OpenClaw gateway credentials. It targeted openclaw[.]json, which contains details of the OpenClaw gateway token…
The Hacker News -
Study Uncovers 25 Password Recovery Attacks in Major Cloud Password Managers
A new study has found that multiple cloud-based password managers, including Bitwarden, Dashlane, and LastPass, are vulnerable to password recovery attacks under certain conditions, with the attacks totalled at 25. According to ETH Zurich and Università…
The Hacker News -
Dior, Louis Vuitton, Tiffany Fined $25 Million in South Korea After Data Breaches
According to the Personal Information Protection Commission (PIPC), Louis Vuitton, Dior and Tiffany were fined a total of 36 billion Korean won ($25 million) after a data breach linked to a SaaS platform intrusion. The regulator said Louis Vuitton’s penalty…
SecurityWeek -
ShinyHunters leaked 600K+ Canada Goose customer records, but the firm denies it was breached
ShinyHunters has published over 600,000 Canada Goose customer records on its data leak site, claiming to have stolen 1.67 GB of data including order information, names, emails, addresses, partial card data, device and browser information, and purchase…
Security AffairsShinyHunters -
260K+ Chrome Users Duped by Fake AI Browser Extensions
260K+ Chrome users have been duped by 30 fake AI browser extensions that imitate AI assistants while secretly siphoning personal information. The Chrome Web Store extensions are carbon copies of one another, differing only in branding, and have collectively…
Dark Reading -
Android 17 Beta Strengthens Secure-by-Default Design for Privacy and App Security
Google announced the first beta version of Android 17, which includes several privacy and security enhancements, according to its developers. Android 17 strengthens a secure-by-default design, with two major changes: the deprecation of the…
SecurityWeek -
CISA Navigates DHS Shutdown With Reduced Staff
CISA is operating at roughly 38% capacity, with 888 of its 2,341 staff remaining at their desks during the DHS shutdown that began on 14 February 2026. The agency will stay functional but with reduced capability, and those recalled would be limited to teams…
SecurityWeek -
Google Chromium5 articles this day · The Hacker News first
CVE-2026-2441: Chrome Zero-Day Enables In-Sandbox Code Execution · Weekly Recap: Outlook Add-Ins Hijack, 0-Day Patches, Wormable Botnet & AI Malware
-
CVE-2026-2441: Chrome Zero-Day Enables In-Sandbox Code Execution
According to SOCRadar Cyber Intelligence Inc., CVE-2026-2441 is a use-after-free flaw in Chrome’s CSS handling that can lead to arbitrary code execution inside the browser sandbox, though it does not by itself guarantee full host compromise. Google has…
-
Weekly Recap: Outlook Add-Ins Hijack, 0-Day Patches, Wormable Botnet & AI Malware
In this week’s recap, The Hacker News reports on an Outlook add-in incident where the legitimate AgreeTo add-in for Outlook was hijacked and turned into a phishing kit that stole more than 4,000 Microsoft account credentials, facilitated by taking control of…
-
Google fixes first actively exploited Chrome zero-day of 2026
Google has patched Chrome zero-day CVE-2026-2441, a high-severity use-after-free flaw in the CSS component that is already being exploited in real-world attacks. The vulnerability was discovered and responsibly reported by security researcher Shaheen Fazim…
-
Google Patches First Actively Exploited Chrome Zero-Day of 2026
Google released an emergency Chrome update to patch the first actively exploited zero-day of 2026, CVE-2026-2441, described as a high-severity use-after-free in the browser’s CSS component. The fixes apply to Chrome 145.0.7632.75/76 for Windows/Mac and…
-
New Chrome Zero-Day (CVE-2026-2441) Under Active Attack — Patch Released
Google on Friday released security updates for its Chrome browser to address a high-severity flaw tracked as CVE-2026-2441, described as a use-after-free in CSS, which has been exploited in the wild. The vulnerability, rated CVSS 8.8, was discovered and…
-
-
ClickFix added nslookup commands to its arsenal for downloading RATs
ClickFix campaigns have adapted nslookup commands to download RATs, with Malwarebytes noting that security software increasingly blocks mshta and PowerShell, prompting this new method. According to Microsoft, these malicious commands start an infection chain…
Malwarebytes -
Operation DoppelBrand: Massive Fortune 500 Brand Impersonation Campaign Uncovered
SOCRadar’s Threat Hunting Team uncovered Operation DoppelBrand, a sophisticated phishing operation targeting Fortune 500 firms and their customers, attributed to a financially motivated actor known as GS7. The campaigns ran between December 2025 and January…
SOCRadar -
He tried to extort the Dutch police. It didn’t work out well for him.
A 40-year-old man from Ridderkerk was arrested on Prinses Beatrixstraat in Ridderkerk for computer hacking after, due to a police error, he had inadvertently gained access to confidential police documents. According to a press release from Dutch police, when…
DataBreaches -
Microsoft alerts on DNS-based ClickFix variant delivering malware via nslookup
Microsoft has warned of a new ClickFix variant that tricks users into running a DNS-based command to fetch a second-stage payload via nslookup, a technique Microsoft Defender researchers describe as an evasion method that uses a DNS lookup and parses the…
Security Affairs -
Microsoft Warns of ClickFix Attack Abusing DNS Lookups
Microsoft has warned users that threat actors are leveraging a new variant of the ClickFix technique to deliver malware, mainly targeting corporate environments, according to Microsoft. The attack involves displaying a fake error message on a compromised…
SecurityWeek -
Safe and Inclusive E‑Society: How Lithuania Is Bracing for AI‑Driven Cyber Fraud
Lithuania is advancing a Safe and Inclusive E-Society as part of a national mission to bolster digital resilience, with the initiative being coordinated by Kaunas University of Technology. The programme’s Safe and Inclusive E-Society strand has a total value…
The Hacker News -
Amazon Scraps Partnership With Surveillance Company After Super Bowl Ad Backlash
Amazon’s smart doorbell maker Ring has terminated a partnership with police surveillance tech company Flock Safety, following backlash to a Super Bowl ad that depicted a network of cameras helping to reunite a lost dog. According to Associated Press, Ring…
SecurityWeek -
New ZeroDayRAT Mobile Spyware Enables Real-Time Surveillance and Data Theft
ZeroDayRAT is a new mobile spyware platform advertised on Telegram that offers real-time surveillance and data theft for Android and iOS devices. It supports Android versions 5 through 16 and iOS versions up to 26, and is distributed via social engineering…
The Hacker News -
Alleged Discord Exploit Sale & WormGPT Database Leak Detected
SOCRadar’s Dark Web Team identified several new underground posts this week, including an alleged Discord RCE 0-day exploit sale, a claimed leak of NOXIPOM ULTIMATE ransomware tool source code, and database breach claims involving Repediu and WormGPT[.]AI.…
SOCRadar -
Japanese sex toys maker Tenga discloses data breach
Tenga Co., Ltd., a Tokyo-based sex toy and wellness company, disclosed a data breach after a hacker accessed an employee’s professional email account. The incident potentially exposed customer names, email addresses, past correspondence, order details, and…
Security Affairs -
A week in security (February 9 – February 15)
A week in security for February 9–15, 2026 rounds up a series of Malwarebytes Labs posts published in mid-February. According to Malwarebytes Labs, topics covered include how to find and remove credential-stealing Chrome extensions (posted February 13, 2026)…
Malwarebytes
