News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 18 Feb· 31 articles
-
Nigerian Man Sentenced to Eight Years in Prison for Computer Intrusion and Theft
A Nigerian national living in Mexico was sentenced in federal court in Boston to eight years in prison for his role in a scheme to break into Massachusetts tax preparation firms’ computer networks and file fraudulent tax returns. Matthew A. Akande, 37, was…
DataBreaches -
Scam Abuses Gemini Chatbots to Convince People to Buy Fake Crypto
Cybersecurity researchers have exposed a scam that uses Google Gemini-branded chatbots on a presale site for a fake cryptocurrency called Google Coin to defraud visitors. Researchers from Malwarebytes Labs discovered the site and its AI assistant, which…
Dark Reading -
French Ministry confirms data access to 1.2 Million bank accounts
A hacker accessed data from 1.2 million French bank accounts using stolen credentials belonging to a government official, according to the French Economy Ministry. The breach involved a national bank account database and allowed the attacker to consult…
Security Affairs -
Grandstream GXP16102 articles this day · The Hacker News first
Critical Grandstream VoIP Bug Highlights SMB Security Blind Spot · Grandstream GXP1600 VoIP Phones Exposed to Unauthenticated Remote Code Execution
-
Critical Grandstream VoIP Bug Highlights SMB Security Blind Spot
A critical security vulnerability in Grandstream’s GXP1600 series VoIP phones has been disclosed as CVE-2026-2329, a buffer-overflow flaw that can give unauthenticated attackers full control of affected devices and enable remote code execution. The flaw…
-
Grandstream GXP1600 VoIP Phones Exposed to Unauthenticated Remote Code Execution
Cybersecurity researchers have disclosed a critical flaw in Grandstream GXP1600 series VoIP phones that could allow unauthenticated remote code execution. The vulnerability, tracked as CVE-2026-2329 with a CVSS score of 9.3, is described as an…
-
-
Dell RecoverPoint for Virtual Machines (RP4VMs)4 articles this day · SecurityWeek first
Dell's Hard-Coded Flaw: A Nation-State Goldmine · China-linked APT weaponized Dell RecoverPoint zero-day since 2024
-
Dell's Hard-Coded Flaw: A Nation-State Goldmine
A China-related attacker has exploited a Dell hard-coded credential vulnerability in RecoverPoint for Virtual Machines, with activity observed since mid-2024 to move laterally, maintain persistent access, and deploy malware. According to Google Cloud’s…
-
China-linked APT weaponized Dell RecoverPoint zero-day since 2024
According to Google Threat Intelligence Group (GTIG) and Mandiant, a suspected China-linked APT exploited a critical Dell RecoverPoint for Virtual Machines zero-day, tracked as CVE-2026-22769, in attacks dating from mid-2024. The vulnerability, which has a…
-
Dell RecoverPoint for VMs Zero-Day CVE-2026-22769 Exploited Since Mid-2024
Dell RecoverPoint for Virtual Machines has been exploited as a zero-day vulnerability, CVE-2026-22769, with activity reported since mid-2024 and a maximum CVSS score of 10.0, affecting versions prior to 6.0.3[.]1 HF1. According to Google Mandiant and Google…
-
Dell RecoverPoint Zero-Day Exploited by Chinese Cyberespionage Group
Dell RecoverPoint for Virtual Machines has a zero-day vulnerability, tracked as CVE-2026-22769, that a China-linked cyberespionage group has been exploiting since at least 2024, according to GTIG and Mandiant. The threat actor, tracked as UNC6201, is said to…
-
-
notepad-plus-plus2 articles this day · The Hacker News first
Notepad++ patches flaw used to hijack update system · Notepad++ Fixes Hijacked Update Mechanism Used to Deliver Targeted Malware
-
Notepad++ patches flaw used to hijack update system
Notepad++ patched a vulnerability that attackers used to hijack its update mechanism and deliver malware to targeted users. In early February, the Notepad++ maintainer revealed that nation-state hackers compromised the hosting provider’s infrastructure,…
-
Notepad++ Fixes Hijacked Update Mechanism Used to Deliver Targeted Malware
Notepad++ has released a security fix to plug gaps exploited by an advanced threat actor from China to hijack the software update mechanism and selectively deliver malware to targets of interest. The version 8.9.2 update introduces a “double lock” design…
-
-
A CISO's Playbook for Defending Data Assets Against AI Scraping
A CISO's Playbook for Defending Data Assets Against AI Scraping frames scraping as a business risk, not just a technical nuisance, and is authored by Areejit Banerjee, Senior Manager of Data Protection Strategy & Product Trust and a researcher in AI…
Dark Reading -
Oklahoma Cheyenne and Arapaho Tribes say ransomware disrupted tribal systems
Oklahoma Cheyenne and Arapaho Tribes say a ransomware attack forced them to shut down tribal computer networks, disrupting email and phone service and temporarily suspending some operations as systems are restored and investigators work the case, according…
DataBreaches -
Citizen Lab Finds Cellebrite Tool Used on Kenyan Activist’s Phone in Police Custody
New research from the Citizen Lab has found signs that Kenyan authorities used a commercial forensic extraction tool manufactured by Israeli company Cellebrite to break into a prominent dissident’s phone while he was in police custody. The device belonged to…
The Hacker News -
Betterment data breach might be worse than we thought
Betterment LLC disclosed a January 2026 incident in which an attacker used social engineering to access a third‑party platform used for customer communications, then abused it to send crypto‑themed phishing messages and exfiltrate contact and identity data…
Malwarebytes -
New Keenadu Android Malware Found on Thousands of Devices
According to Kaspersky, a recently discovered Android backdoor named Keenadu gives its operators full remote control of compromised devices and has been found in the firmware of various Android brands, particularly tablets. The malware has been preinstalled…
SecurityWeek -
CVE-2025-657172 articles this day · The Hacker News first
VS Code extensions with 125M+ installs expose users to cyberattacks · Critical Flaws Found in Four VS Code Extensions with Over 125 Million Installs
-
VS Code extensions with 125M+ installs expose users to cyberattacks
OX Security researchers warn that four widely used VS Code extensions—Live Server, Code Runner, Markdown Preview Enhanced, and Microsoft Live Preview—have flaws that could let attackers steal files or run code remotely, with the extensions collectively…
-
Critical Flaws Found in Four VS Code Extensions with Over 125 Million Installs
Cybersecurity researchers have disclosed four popular VS Code extensions with a combined user base of over 125 million installs harbouring multiple security flaws that could let attackers exfiltrate local files or run remote code. The vulnerable extensions…
-
-
Cogent Security Raises $42 Million for AI-Driven Vulnerability Management
Cogent Security on Wednesday announced raising $42 million in Series A funding to develop autonomous AI agents for vulnerability remediation, with Bain Capital Ventures leading the round and participation from Greylock Partners, Definition, and executives…
SecurityWeek -
Vulnerabilities in Popular PDF Platforms Allowed Account Takeover, Data Exfiltration
Novee researchers identified 16 vulnerabilities across Foxit and Apryse PDF tools that could have been exploited via malicious documents or URLs, potentially enabling account takeover, data exfiltration, and other attacks. The findings, disclosed in…
SecurityWeek -
Job scam uses fake Google Forms site to harvest Google logins
Malwarebytes reports a job-themed phishing campaign that uses a fake Google Forms site to harvest Google logins, with suspicious URLs such as https://forms.google[.]ss-o[.]com/forms/d/e/{unique_id}/viewform?form=opportunitysec&promo= and a corresponding…
Malwarebytes -
Cybersecurity Tech Predictions for 2026: Operating in a World of Permanent Instability
Cybersecurity predictions for 2026 portray a world of permanent instability where AI-driven threats, expanding ecosystems and evolving regulations redefine how security is designed and operated. The piece argues that regulation and geopolitics are now…
The Hacker News -
U.S. CISA adds Google Chromium CSS, Microsoft Windows, TeamT5 ThreatSonar Anti-Ransomware, and Zimbra flaws to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four flaws to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2008-0015 (Ms vidctl DirectShow), CVE-2020-7796 (Zimbra Collaboration Suite SSRF), CVE-2024-7694 (TeamT5…
-
3 Ways to Start Your Intelligent Workflow Program
The Hacker News reports three concrete starting points for an intelligent workflow programme, emphasising that real impact comes from combining automation, AI-driven decisioning and human oversight. On Workflow #1 Automated Phishing Response, it describes…
The Hacker News -
CISA: Hackers Exploiting Vulnerability in Product of Taiwan Security Firm TeamT5
CISA has warned that a vulnerability added to its Known Exploited Vulnerabilities (KEV) catalog affects TeamT5’s ThreatSonar Anti-Ransomware product and has been exploited in the wild, according to SecurityWeek. The flaw, CVE-2024-7694, is a high-severity…
-
Scammers use fake “Gemini” AI chatbot to sell fake “Google Coin”
Scammers have produced a live presale site for a supposed “Google Coin” that uses a fake Gemini AI chatbot to pitch investments, claiming to be the official helper for the Google Coin platform. The bot, which brands itself with Gemini styling and a green…
Malwarebytes -
Cline Supply Chain Attack Detected: cline@2.3.0 Silently Installs OpenClaw
According to GitHub Security Advisory, StepSecurity’s npm monitoring system flagged a suspicious release of cline@2.3.0 on 17 February 2026 at 11:40 UTC, published by the user account clinebotorg with a malicious post-install script. The version 2.3.0 of the…
StepSecurity -
Keenadu backdoor found preinstalled on Android devices, powers Ad fraud campaign
Kaspersky has uncovered Keenadu, a new Android backdoor that can be preinstalled in device firmware, hidden inside system apps, or spread via Google Play, and is used for ad fraud while capable of full remote control. The backdoor embeds itself during the…
Security Affairs -
Palo Alto Networks to Acquire Koi in Reported $400 Million Transaction
Palo Alto Networks announced on 18 February 2026 that it has entered into a definitive agreement to acquire endpoint security company Koi, with financial details not disclosed by the firms but reportedly valued at $400 million according to Calcalist and…
SecurityWeek -
CISA Flags Four Security Flaws Under Active Exploitation in Latest KEV Update
According to CISA, four security flaws have been added to its Known Exploited Vulnerabilities catalog, with active exploitation evidenced in the wild. The quartet comprises CVE-2026-2441, a use-after-free vulnerability in Google Chrome with a CVSS score of…
-
Singapore & Its 4 Major Telcos Fend Off Chinese Hackers
Singapore and its four major telcos—M1, Simba Telecom, Singtel, and StarHub—fought a China-linked cyberthreat actor for 11 months in what the Cyber Security Agency (CSA) described as Cyber Guardian, a multi-agency operation that relied on more than 100…
Dark Reading
