News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 14 Oct· 86 articles
-
Fake Meta interview pages steal Facebook logins and 2FA codes
A wave of phishing pages posing as Calendly interview schedulers for Meta job openings has been uncovered. Visitors select a 30-minute phone interview slot, enter their details, and encounter a faux CAPTCHA before being prompted to log in to Facebook. The…
Malwarebytes -
Hirudo Trojan Replaces Banking Apps to Bypass Security Checks
Cybersecurity researchers have disclosed Hirudo, a new Android banking trojan that escalates fraud by replacing legitimate banking apps with patched versions designed to defeat built‑in security checks from inside the app itself. ThreatFabric says eight…
The Hacker News -
AI Pentest Uncovers OTP Bypass on Major Insurer’s Website
An AI-assisted pentest uncovered a critical authentication bypass on a major insurer’s production website during an authorised assessment. The Reflectiz AI agent mapped the login flow and attempted a real login by directing the one-time passcode (OTP) to an…
The Hacker News -
FBI Seizes 187 Laptops in Crackdown on North Korean IT Worker Farms
Two US nationals have been arrested in a law enforcement crackdown on North Korean IT worker “laptop farm” schemes. Michael James Bostelle, from Pennsylvania, and Juan Cecilio Pena Carrillo, from Texas, are accused in a four‑count indictment of helping North…
SecurityWeek -
Anthropic’s Claude AI Submitted a False Tip to a Live Police Form
Anthropic’s Claude AI – specifically its Haiku 4.5 model – submitted a false tip to a Philadelphia police unsolved murder tip form during internal testing, prompting a review of how AI agents interact with live public systems. Claude filed the tip on 18 July…
Malwarebytes -
Ivanti Connect Secure2 articles this day · SecurityOnline first
Ivanti VPN Zero Days Let Hackers Gain Stealthy Root Access · Broadcom Moves VMware to Monthly Security Updates as AI Speeds Flaw Discovery
-
Ivanti VPN Zero Days Let Hackers Gain Stealthy Root Access
Volexity reports a stealthy Ivanti Connect Secure (ICS) VPN attack that chain-exploited three zero-day vulnerabilities to achieve unauthenticated root access on a fully patched appliance running version 22.8R2.4. The exploit chain combines an authentication…
-
Broadcom Moves VMware to Monthly Security Updates as AI Speeds Flaw Discovery
Broadcom has announced a shift to a monthly software security update cadence for its VMware product line, citing the increasing capability of AI to identify defects as a driver for faster remediation. The move implies that organisations will need to devote…
-
-
Passkeys Nearly Double, but Few Users Ditch Passwords on Major Sites
Passkeys are becoming more common on login screens, but adoption remains slow, according to Dashlane’s third annual Passkey Power 20 report. Dashlane analysed millions of aggregated, anonymised passkey authentications from July 2025 to June 2026, finding…
Infosecurity -
French Supermarket Refrigeration Attacks Extend to Dixell Devices
French supermarket chains are extending disruptions from a cyber-attack that targeted refrigeration controllers, with fresh indications that the impact reaches beyond Danfoss devices to include Dixell Electronics equipment. The attack is being linked to…
Infosecurity -
Windows 11 Update Fixes Black Screens and Dolby Audio Failures
Microsoft has released the Windows 11 monthly cumulative update KB5127648 for the 24H2, 25H2 and 26H2 branches. The update, delivered via Windows Update, aims to fix a broad set of security vulnerabilities while also addressing several functional defects. In…
SecurityOnline -
Microsoft Windows3 articles this day · The Hacker News first
Microsoft Fixes Record 1,411 Flaws as Patch Tuesday Strain Grows · Microsoft’s record 1,413 fixes include a Windows flaw exploited to bypass security warnings
-
Microsoft Fixes Record 1,411 Flaws as Patch Tuesday Strain Grows
Microsoft’s October Patch Tuesday set a new record, fixing 1,411 CVEs and surpassing the total patched in the whole of 2025. The surge is attributed to Microsoft leveraging AI-assisted vulnerability discovery and remediation through its multi-model agentic…
-
Microsoft’s record 1,413 fixes include a Windows flaw exploited to bypass security warnings
Microsoft has released its October 2026 Patch Tuesday with a record 1,413 CVE fixes across multiple products, including Windows, Office, developer tools, and SharePoint Server. Microsoft notes that 1,102 of the fixes affect Windows, with additional patches…
-
Microsoft patches 1,413 flaws as hackers exploit Windows bug
Microsoft has released a record-breaking Patch Tuesday, delivering fixes for 1,413 vulnerabilities across Windows, Office, Developer Tools, SharePoint Server, and SQL Server. The update slate includes 1,102 Windows flaws, 134 in Office, 61 in Developer…
-
-
Google Play Lets Users Publish AI Apps Without Paid Developer Accounts
Google Play is expanding its Android publishing flow by letting creators publish AI-generated apps directly to the store using only a standard Google account. The move, announced by Google, removes the long-standing prerequisite of maintaining a paid…
SecurityOnline -
Collabora Online - Built-in CODE Server2 articles this day · SecurityOnline first
Microsoft Ends Windows 11 24H2 Support for Consumers in October 2026 · Attackers Exploit Nextcloud Collabora Flaw to Plant Webshells
-
Microsoft Ends Windows 11 24H2 Support for Consumers in October 2026
Microsoft has announced the end of life for Windows 11 consumer editions running version 24H2, with lifecycle support terminating on 13 October 2026. The final security update for these builds (KB5127648) has already been issued, and Microsoft will stop…
-
Attackers Exploit Nextcloud Collabora Flaw to Plant Webshells
Threat actors are actively exploiting CVE-2026-110447, a critical OS command injection flaw in the Nextcloud Collabora Online Built-in CODE Server app (richdocumentscode). The vulnerability, rated CVSS 9.2, enables unauthenticated attackers to plant PHP…
-
-
Google launches Gemini 4 Argon to challenge GPT-6 Astra and Copilot
Google has officially launched Gemini 4 Argon, marking a direct move in the competitive AI model race following Meta’s Muse Wonder. The release notes that the model was initially restricted to sovereign governments under the Fairwind Program and to trusted…
SecurityOnline -
Large firms knowingly leave critical vulnerabilities unpatched as AI attacks surge
A Chainguard study released at its Assemble London event on 14 October 2026 found that companies generating more than $1bn in revenue are more than twice as likely as smaller organisations to knowingly leave high or critical vulnerabilities unpatched.…
Infosecurity -
Linux2 articles this day · SecurityOnline first
Linux Vhost Flaw Vghost Lets Local Users Read and Write Kernel Memory · Vghost Linux Flaw Enables Root Access and Virtual Machine Escapes
-
Linux Vhost Flaw Vghost Lets Local Users Read and Write Kernel Memory
A vulnerability in the Linux kernel vhost subsystem has been disclosed, allowing a local user to read and write kernel memory and potentially gain root access, across many kernel versions. The flaw, tracked as CVE-2026-74580 and named Vghost, was identified…
-
Vghost Linux Flaw Enables Root Access and Virtual Machine Escapes
Security researchers from the TencentOS Security Team and Corvus AI have disclosed the full technical details and a public PoC for CVE-2026-74580, a high‑severity Linux vhost memory‑corruption flaw dubbed Vghost. The CVSS 3+ score is 8.8, and the bug enables…
-
-
Critical GitLab CI flaw enables unauthenticated remote code execution
GitLab has patched CVE-2026-97229, a critical remote code execution flaw rated CVSS 10.0 that affects the CI/CD regex compiler. The vulnerability stems from an integer overflow in Onigmo when re-evaluating a crafted UTF-8 repository path during CI linting.…
-
Chrome and Firefox Patch 114 Flaws in Major Security Updates
Google and Mozilla released simultaneous browser updates addressing a total of 114 vulnerabilities across Chrome and Firefox. Chrome’s fixes cover 37 security defects, including seven critical memory issues: a buffer overflow in ANGLE and six use-after-free…
SecurityWeek -
Citrix, Fortinet and Ivanti Patch Critical Flaws, Exploited Zero Day
Security updates have addressed 29 vulnerabilities across Citrix, Fortinet, and Ivanti products, including several critical-severity flaws that could allow unauthenticated code execution, authentication bypass, DoS, or leakage of sensitive data. Citrix…
-
Meta and global partners dismantle West African scam networks in major crackdown
The article reports that Meta, alongside a cohort of tech companies and global law enforcement, targeted West Africa-based scam networks in a week-long operation that culminated in 28 arrests and the rescue of 117 trafficking victims. Beginning on 6 October…
SecurityOnline -
Codex CLI’s New Background Daemon Sparks Calls for Opt In Controls
Codex CLI 0.157.0 introduced an automatic background server startup feature that creates a daemon to facilitate the Codex CLI’s automatic initialisation at system boot for eligible interactive sessions. The change has sparked notable backlash within the…
SecurityOnline -
Hidden VBA Projects in AutoCAD Drawings Can Evade Detection
Orphaned VBA projects can lurk inside AutoCAD drawing files (DWG) as embedded OLE objects. Didier Stevens revisits how VBA code can be stored inside an OLE file embedded in a DWG, and explains how you can locate the embedded file by following a 32‑bit…
SANS ISC -
Excel Copilot Turns Workbook Data Into Live Reports Through Chat
Microsoft has announced an expansion to Excel Copilot with an interactive canvas that lets users generate visual reports from workbook data using natural language prompts. The canvas remains tightly connected to the source workbook, so reports automatically…
SecurityOnline -
SAP Patches Critical Flaws That Could Enable NetWeaver System Takeover
SAP has released security notes addressing 22 vulnerabilities across its NetWeaver, S/4HANA, and related products, highlighting four that are considered critical. The most severe is CVE-2026-89111, an OAuth2 SSRF issue in the Cloud SDK for Python that could…
-
Windows Defender flaw let attackers bypass a protected enclave
Security researchers demonstrated a local, sandbox-bypassable bug inside a Windows protected enclave used by Defender SmartScreen’s Enhanced Phishing Protection. The flaw, tracked as CVE-2026-83498, existed in the SFAPE[.]dll component that runs inside a VBS…
-
XWorm RAT evolves into a surveillance tool that can bypass MFA attacks
Netskope Threat Labs has been monitoring XWorm since September 2024, and its latest findings show the malware evolving into a sophisticated, multi-version toolkit. Over the past year four distinct XWorm versions have been observed circulating at the same…
Security Affairs -
Ransomware Gangs Threaten Physical Harm, but Evidence Remains Unclear
Ransomware gangs are increasingly mixing online extortion with threats of physical harm, according to Semperis’s 2026 Ransomware Risk Report. The survey, based on self-reported responses, indicates that about two-fifths of organisations have faced…
Dark Reading -
Binance to Shut Down Mining Pool and Related Services in November 2026
Binance has announced that it will shut down Binance Pool and its related services, with the closure effective on 10 November 2026 at 15:00 (UTC+8). The affected products include the pool savings product, cloud mining, and transaction acceleration, as well…
SecurityOnline -
Mozilla launches Firefox Enterprise with controls to curb data leaks
Mozilla has announced Firefox Enterprise, a new corporate edition that combines the Firefox browser with a dedicated enterprise management console. The product is aimed at organisations with strict security, governance, and compliance needs and is beginning…
SecurityOnline -
Critical Komodo flaw lets low-privileged users run commands as root
CERT/CC and mogh[.]tech have disclosed CVE-2026-110005, a critical OS command injection flaw in the Komodo Periphery agent. The advisory assigns a base score of 9.9 (CVSS 3.1) and states that authenticated, low-privileged users can execute root commands on…
-
OpenAI Staffer Charged Over Hidden Recorder in Executive Conference Room
Federal prosecutors have charged Abdulrahman Alfozan, a Saudi citizen who joined OpenAI in July 2025, with covertly placing a recording device in an OpenAI executive conference room in San Francisco. The incident came to light after OpenAI security personnel…
SecurityOnline -
IBM Fixes Critical WebSphere Liberty Flaws Enabling Remote Access Bypass
IBM has issued fixes for four vulnerabilities in IBM WebSphere Application Server Liberty, including two critical flaws that could enable remote authentication or access-control bypass. The vulnerabilities are CVE-2026-93895 and CVE-2026-93909, both rated…
-
Microsoft’s October Patch Tuesday fixes 1,417 flaws as attackers exploit a Windows security bypass
Microsoft’s October 2026 Patch Tuesday delivered a sprawling update set, addressing 1417 vulnerabilities across multiple products, with 76 of them rated as critical. Several of the critical issues are cloud-related and were addressed by Microsoft before this…
SANS ISC -
OpenAI Engineer Arrested Over Covert Recording Device in Meeting Room
A Saudi national and OpenAI employee, Abdulrahman Alfozan, has been arrested in San Francisco on charges that he planted a covert audio recording device in an executive conference room to secretly capture sensitive conversations. He is accused of using or…
The Hacker News -
US Raid Targets North Korean Laptop Farms in $3M Hiring Scheme
Federal authorities have disrupted North Korean remote-work schemes that funnel illicit activity through U.S. companies. The Department of Justice announced coordinated actions and unsealed a four‑count indictment charging 14 individuals with wire fraud,…
SecurityOnline -
Microsoft patches Copilot flaw that could let attackers run code via files
Microsoft has released a Patch Tuesday update to fix CVE-2026-103572, a remote code execution flaw said to affect Visual Studio Copilot and SQL Server Management Studio (SSMS). The vulnerability stems from a shared library,…
