News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 59 so far |
Sat 15 Aug· 23 articles
-
Sable Squirrel buys millions in expired domains for malware ops
Attackers are increasingly purchasing expired domains to exploit their historical reputation, traffic, and DNS records for illicit activities like malware distribution. In the first half of 2026, nearly 20% of new domain registrations were previously owned,…
Security AffairsSable Squirrel -
Malware gang uses fake OnlyFans lures to hit US dental offices
CRPx0 is a malware group that gained attention for its tactic of offering free OnlyFans accounts to entice victims into clicking links that deploy malware. Since launching a leak site on August 7, it has listed 47 victims, primarily targeting dental…
DataBreachesCRPx0 -
SAP Commerce Cloud CVE-2026-58231 Exploited in the Wild
A critical vulnerability in SAP Commerce Cloud, tracked as CVE-2026-58231 with a CVSS score of 10.0, is currently being exploited by attackers. This flaw allows unauthenticated users to abuse default authentication methods to execute arbitrary code due to…
-
Apache patches five Struts 2 bugs, warns of remote DoS and leaks
Apache has fixed five vulnerabilities in Struts 2, including three denial-of-service (DoS) flaws and two data leakage issues in the JSON plugin. The DoS flaws allow remote attackers to exploit applications without authentication by sending oversized…
-
UK Watchdog Rebukes ACRO Over GDPR Breach After Data Leak
The Information Commissioner reprimanded ACRO Criminal Records Office for violations of UK GDPR Articles 32(1), 32(1)(b), and 32(1)(d) following a cyber incident affecting up to 10,920 individuals. The breaches included multiple incidents of unauthorized…
DataBreaches -
Sogang breach leaks 180k data, exPresident Park hit
A cyberattack on Sogang University has exposed personal information of approximately 180,000 students, alumni, and staff. The breach, confirmed by the university, involved the leak of student and staff ID numbers, names, affiliations, email addresses, mobile…
DataBreaches -
Ransomware attacks on schools drop as CISA launches defence guide
A recent report indicates a decline in ransomware attacks on K-12 schools for the first half of 2026, while also highlighting ongoing cybersecurity threats targeting educational institutions. The U.S. Cybersecurity and Infrastructure Security Agency (CISA)…
DataBreaches -
Roundcube fixes critical RCE and SSRF flaws in new update
Roundcube released two critical security updates (versions 1.6.18 and 1.7.3), fixing eleven vulnerabilities including a severe Remote Code Execution (RCE) flaw in a spam-training plugin and Security Server Request Forgery (SSRF) issues. These vulnerabilities…
SecurityOnline -
Hackers exploit CVE-2026-65400 to mine Monero on macOS
Hackers are exploiting a critical macOS Screen Sharing vulnerability (CVE-2026-65400) that allows unauthorized access to systems where port 5900 is exposed online. The flaw, confirmed by the Dutch National Cyber Security Centre, enables attackers to gain…
-
Attackers Exploit Zero Day Flaw in GeoServer Immediately
A newly disclosed zero-day vulnerability in GeoServer allows for SQL injection and potential remote code execution (RCE). Discovered by researcher q1uf3ng, the flaw has yet to receive a CVE identifier and is already being actively exploited, with hundreds of…
Security Affairs -
Apple offers 5 to 15% fee for external iOS payments
Apple has submitted a new commission proposal to the U.S. District Court in its ongoing legal dispute with Epic Games, proposing a fee structure for developers that use external website payment links in their apps. The suggested rates range from 5% to 15%,…
SecurityOnline -
Microsoft Halts Win10 Feature Updates, Steers Users Toward Win11
Microsoft is instituting a feature freeze for Microsoft 365 applications on Windows 10, effective with version 2608, which will be the last to feature new updates. Users will continue to receive critical security updates until October 10, 2028, after which…
SecurityOnline -
Critical WordPress Plugin Flaw Lets Hackers Hijack Admin Accounts
A critical vulnerability in the User Profile Builder plugin for WordPress, tracked as CVE-2026-15826, poses a severe risk to over 40,000 sites by allowing unauthenticated attackers to log in as administrators. This security flaw has a maximum CVSS score of…
-
Microsoft Launches Unified Copilot Super App to Boost Engagement
Microsoft plans to merge its consumer and enterprise Copilot applications into a unified platform by the end of Q3, establishing the Copilot Super App. This move aims to integrate various capabilities like AI-driven coding and conversational features to…
SecurityOnline -
Apple Warns Users in 110+ Countries of Targeted Spyware Threats
Apple has warned users in over 110 countries about targeted mercenary spyware attacks, indicating that some users may be compromised. This spyware, developed by private firms like NSO Group, is used for targeted surveillance, primarily affecting high-profile…
SecurityOnline -
Mozilla Rotates Firefox GPG Key After Accidental GitHub Commit
Mozilla has rotated the GPG signing key for Firefox and Thunderbird on Linux due to a previously used subkey being unintentionally committed to a private GitHub repository. Although an audit revealed no unauthorized access to the key, Mozilla has not…
SecurityOnline -
Google's Gemini AI hits 1bn monthly users, fastest growth yet
Google's Gemini AI assistant app has surpassed 1 billion monthly active users, making it the company's fastest-growing product. This accomplishment was announced by CEO Sundar Pichai and follows significant growth in user engagement, with daily active users…
SecurityOnline -
VLC audio stalls on Windows 11 after Defender false positive
Recent issues with VLC media player on Windows 11 have caused audio playback failures, freezing for thirty seconds before showing file-opening options. The VLC development team identified the root cause as an error from Microsoft Defender, which incorrectly…
SecurityOnline -
Delta Air Lines spots fake WiFi on Flight 591 after DEF CON
Delta Air Lines is investigating a fake WiFi network on Flight 591 from Las Vegas to Atlanta, suspected to be created by an attendee of the DEF CON hacker convention. The unauthorized network, named 'Delta WiFi Fast', was identified by the crew, who…
SecurityOnline -
OpenAI releases ChatGPT desktop preview for Linux
OpenAI has launched a preview of the ChatGPT desktop application for Linux, specifically supporting Ubuntu, Debian, and Fedora distributions. Users will have access to features like ChatGPT, Codex, and Work, with data synchronization possible across devices.…
SecurityOnline -
SpaceXAI unveils Grok 4.6 AI, enhancing coding and visual design
SpaceXAI has launched the Grok 4.6 AI model series which enhances capabilities for complex, long-horizon tasks in software engineering and interactive visual projects. The model benefits from extensive training on reasoning pathways, software repositories,…
SecurityOnline -
Firefox Preserves Full uBlock Origin as Chrome Limits Ad Blockers
Recent changes by Microsoft and Google to phase out Manifest V2 (MV2) extensions have led to significant concerns for users relying on ad blockers like uBlock Origin. Firefox, however, retains essential features such as the webRequestBlocking API, allowing…
SecurityOnline -
Google tests AI only search mode, swapping button for chatbot
Google is testing a new AI-exclusive mode for its search engine with select users. This mode replaces the traditional search button with an AI option, prioritizing AI-generated responses for user queries while still displaying conventional search results…
SecurityOnline
