News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 7 Jul· 64 articles
-
UK Launches Cyber Resilience Pledge With 60+ Companies Signed
The UK government has launched a Cyber Resilience Pledge with over 60 businesses signing up, including notable companies like Marks & Spencer, Microsoft UK, and Vodafone. This initiative aims to enhance cybersecurity within organizations by introducing…
Infosecurity -
Linux2 articles this day · Security Affairs first
CVE-2026-53359 Flaw Lets Attackers Break Out of Linux VMs · Key KVM Flaw CVE-2026-53359 Lets Guest VMs Hijack Host Memory
-
CVE-2026-53359 Flaw Lets Attackers Break Out of Linux VMs
A newly disclosed vulnerability in the Linux kernel, tracked as CVE-2026-53359 (Januscape), allows attackers to escape virtual machines (VMs) and execute code on the underlying host. This flaw affects the shadow MMU code in the Linux Kernel-based Virtual…
-
Key KVM Flaw CVE-2026-53359 Lets Guest VMs Hijack Host Memory
The article discusses a critical vulnerability named Januscape (CVE-2026-53359) in the Linux KVM hypervisor, which has existed for 16 years and affects both Intel and AMD systems. This use-after-free vulnerability enables attackers within a guest VM to…
-
-
Tenda firmware2 articles this day · SecurityOnline first
Hidden Tenda Router Backdoor Grants Admin Access, No Patch Available · Tenda routers hit by CVE-2026-11405 backdoor giving admin control
-
Hidden Tenda Router Backdoor Grants Admin Access, No Patch Available
CERT/CC has issued a warning about an unpatched backdoor vulnerability found in multiple versions of Tenda routers, identified as CVE-2026-11405. The flaw allows attackers to bypass login credentials and gain full administrative access to the router's web…
-
Tenda routers hit by CVE-2026-11405 backdoor giving admin control
Tenda routers have a critical vulnerability identified as CVE-2026-11405, which includes a hidden authentication backdoor granting full administrative access to attackers. Currently, there is no confirmed exploitation or public proof-of-concept. Affected…
-
-
AI crafted fake flower seeds dupe shoppers on major marketplaces
Scammers are exploiting AI to market fictitious seeds for flowers that do not exist, featuring bizarre designs like cat heads and butterflies. These scams, appearing on eBay, Amazon, and Etsy, entice buyers with unrealistic visuals generated by AI,…
Malwarebytes -
Keyfactor gets $1bn boost to curb machine identity sprawl
Keyfactor, a company specializing in cryptographic security for organizations, has received over $1 billion in strategic investment to enhance its operations and technology. This funding comes amid growing concerns about 'identity sprawl', where machine…
SecurityWeek -
Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities
The article discusses recent cybersecurity threats linked to suspected China-aligned hackers exploiting vulnerabilities in Roundcube, a webmail client. Universities have been notably affected by these attacks, prompting increased urgency in addressing email…
The Hacker News -
SpaceXAI: Elon Musk’s Orbital Data Centers Vision
Elon Musk's xAI has been rebranded as SpaceXAI, integrating AI technologies into SpaceX's operations. The merger aims to address global electricity demands through plans for orbital data centers, supported by a proposed network of up to one million…
SecurityOnline -
ARToken phishing kit targets M365 users via device code
The ARToken phishing platform, linked to EvilTokens, is targeting Microsoft 365 users, particularly in finance, HR, and logistics, using phishing-as-a-service (PhaaS). Cisco Talos revealed this platform, which employs device code phishing to bypass…
SecurityOnlineEvilTokens -
IBM patches critical HMC flaw letting hackers run system commands
IBM has disclosed a critical vulnerability (CVE-2026-12943) in its Power Hardware Management Console (HMC), rated CVSS 9.8. This vulnerability allows unauthenticated attackers to execute arbitrary OS commands due to improper input validation. Affected…
-
Armored Likho Deploys AI Crafted Malware on Govt and Power Targets
The report details the activities of a new advanced persistent threat (APT) group, Armored Likho (also known as Eagle Werewolf), which employs AI-generated malware to execute campaigns against governments and electric power infrastructures in Russia,…
Security AffairsArmored Likho -
Adobe ColdFusion Users Warned to Patch Critical CVE-2026-48282 Flaw
Adobe ColdFusion customers are urged to patch their systems urgently due to the exploitation of a maximum severity flaw, CVE-2026-48282, which can lead to arbitrary code execution. Adobe released patches for 11 vulnerabilities on June 30, with six classified…
-
RustDuck botnet switches to Rust, exploits weak IoT logins
The RustDuck botnet is a newly identified DDoS malware that utilizes a two-stage loader-and-core design and is notable for shifting its development language from C to Rust. This transition enhances the code's complexity and security, making it harder to…
SecurityOnline -
Microsoft tests cloud based Windows 11 rebuild to revive dead PCs
Microsoft is developing a new cloud rebuild feature in Windows 11 aimed at assisting users in recovery after a system failure. This feature, currently in testing with Windows Insider Preview builds, allows users to download and reinstall the OS image and…
SecurityOnline -
Linux Kernel Vulnerability CVE-2024-26582: Public PoC Reaches Root Shell
TL;DR Researchers have published full technical details and proof-of-concept exploit code for a Linux kernel vulnerability tracked as
SecurityOnline -
AI driven ransomware hides in Chrome via DeepSeek Flask trick
The content discusses a new form of ransomware leveraging AI, particularly through the tool DeepSeek, which operates directly within browsers like Chrome. This attack can impact users of Android and Chromium desktop browsers by encrypting their files without…
SecurityOnline -
CERT/CC warns of hidden admin backdoor in Tenda router firmware
The CERT/CC has issued a warning regarding a hidden administrative backdoor in the firmware of certain Tenda routers, posing significant cybersecurity risks. This vulnerability may allow unauthorized access to devices and potentially compromise user data.…
The Hacker News -
BeyondTrust patches critical auth bypass in Remote Support
BeyondTrust has released critical patches addressing authentication bypass vulnerabilities in its Remote Support and PRA products. These flaws could allow attackers to exploit systems without proper authorization, raising serious security concerns.…
The Hacker News -
Cloudflare Workers Cache speeds up edge content delivery
Cloudflare has introduced Workers Cache, a specialized frontend caching layer designed for Cloudflare Workers, enhancing edge caching efficiency. The two-layer cache architecture includes a lower cache at the edge closest to users and an upper layer that…
SecurityOnline -
Ubuntu 26.04 LTS elevates Arm64 to first class with Livepatch
Canonical is set to enhance the Arm64 architecture in Ubuntu 26.04 LTS, elevating it to 'first-class' status alongside x86 systems. Key updates include a unified package infrastructure, enabling faster and more reliable downloads by merging Arm64…
SecurityOnline -
Microsoft cuts Xbox staff by 20%, sells four game studios
Microsoft plans major layoffs, targeting approximately 20% of its Xbox gaming division workforce, affecting around 1,600 employees. This decision follows CEO Satya Nadella's directive for the division to achieve financial independence, leading to confirmed…
SecurityOnline -
Johannes Ullrich shares ISC update and July 7 Stormcast podcast
The content includes an alert from Johannes Ullrich, who is on duty for the SANS Internet Storm Center. The threat level is currently green. For July 7th, 2026, there is a mention of an ISC Stormcast podcast, as well as links to further resources and classes…
SANS ISC -
Windows 11 storage bug bloats logs to 513GB, patched by KB5095093
A recent Windows 11 bug causes significant storage loss due to the Capability Access Manager service, which generates excessively large database log files (up to 513GB). This impacts versions 24H2 and 25H2, leading to abnormal spikes in 'System & Reserved'…
SecurityOnline
