News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Sat 18 Jul· 14 articles
-
OpenSSL's HollowByte flaw lets tiny payload crash servers
Okta's Red Team has disclosed a critical denial-of-service vulnerability in OpenSSL, named HollowByte, which can be exploited with an 11-byte payload. This flaw allows unauthenticated remote attackers to exhaust server memory, potentially leading to a…
Security Affairs -
DOJ lifts TikTok ban for federal staff after Oracle data deal
The U.S. Department of Justice has lifted the ban on TikTok for federal workers, allowing them to download the app on government devices. This decision follows significant changes in TikTok's business structure, wherein it established the TikTok USDS Joint…
SecurityOnline -
Hugging Face Discloses Production Breach Driven by an Autonomous AI Agent
Hugging Face experienced a data breach on July 16, 2026, caused by a malicious dataset that exploited vulnerabilities in their data-processing pipeline. An autonomous AI agent executed the breach, accessing limited internal datasets and service credentials…
SecurityOnline -
Meta negotiates $10bn AI compute lease with Anthropic
Meta is in early negotiations with AI startup Anthropic to lease computing power from its data centers, potentially valued at around ten billion dollars for a two-year term. This contract would involve flexible monthly payments and exit clauses, reflecting…
SecurityOnline -
Daxin: 13-Year-Old China-Linked Malware Found Still Active on Manufacturer’s Network
The article discusses the discovery of Daxin, a 13-year-old malware linked to China, found active in a Taiwan-based subsidiary of a multinational high-tech manufacturer. Symantec's Threat Hunter Team revealed that Daxin is a Windows kernel-mode rootkit first…
Security Affairs -
42 states settle $18m with 23andMe over 2023 genetic data breach
The New York Attorney General, Letitia James, along with a coalition of 42 state attorneys general, reached an $18 million settlement with genetic testing company 23andMe for failing to protect customer genetic data. This follows a significant data breach in…
DataBreaches -
CISA urges patch of FortiSandbox, SharePoint flaws amid exploits
On July 16, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) included two critical vulnerabilities from Fortinet FortiSandbox and one from Microsoft SharePoint in its Known Exploited Vulnerabilities (KEV) catalog. The vulnerabilities…
-
Anthropic to drop free Claude tier, add credit limits July 2026
Anthropic will implement significant changes to its Claude Fable 5 subscription model, effective July 20, 2026. The free tier will be eliminated, affecting Claude Pro and Claude Team Standard plans, which will require additional credits for continued use. In…
SecurityOnline -
Urgent ServiceNow AI Platform Bug Allows Remote Command Execution
CVE-2026-6875 is a critical vulnerability in the ServiceNow AI Platform with a CVSS score of 9.5, allowing unauthenticated users to execute arbitrary commands, leading to a sandbox escape. It is actively exploited in the wild, requiring immediate patching to…
-
Cloudflare Adds WAF Rule to Block WordPress wp2shell RCE Exploit
Cloudflare has implemented emergency WAF rules to block the critical wp2shell Remote Code Execution (RCE) vulnerability in WordPress, allowing attackers to gain unauthorized administrative access. Following reports from cybersecurity experts, WordPress has…
SecurityOnline -
Microsoft to End Windows 10 21H2 and 22H2, OneDrive Updates Halt
Microsoft has announced that it will gradually end support for Windows 10 versions 21H2 and 22H2 along with updates for OneDrive. Support for Windows 10 version 21H2 will end in August 2026, while version 22H2 will cease support by October 2028. Following…
SecurityOnline -
Ubuntu Pro Client Flaw CVE-2026-11386 Allows Arbitrary Code Execution With Root Privileges
The article discusses a critical vulnerability (CVE-2026-11386) in the Ubuntu Pro Client, reported on July 16, 2026, by Frederick Jerusha. This flaw allows arbitrary code execution with root privileges, scoring 9.0 on the CVSS scale. It affects multiple…
-
WordPress SQLi bug allows remote code execution, update now
The page discusses critical vulnerabilities affecting WordPress, specifically CVE-2026-60137 and CVE-2026-63030, both of which involve SQL injection and a pre-authentication remote code execution risk. The vulnerabilities have a high severity rating, with…
-
APT C60 Targets Japan Using Spear Phishing LNK to Drop SpyGlace
The content reports on recent cyber attacks by the threat group APT-C-60 targeting organizations in Japan, utilizing spear-phishing techniques and malicious LNK files to deploy the SpyGlace backdoor malware. The campaign, linked to JPCERT/CC, involves…
SecurityOnlineAPT-C-60
