News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Sat 24 Oct· 13 articles
-
PHP2Shell Exploitation Began Four Days Before Disclosure
The article presents Pierluigi Paganini’s responses about the PHP2Shell flaws, highlighting that attackers began exploiting the vulnerability four days before it was publicly disclosed. It explains that PHP is a widely used server-side scripting language…
Security Affairs
-
Collabora Online - Built-in CODE Server2 articles this day · The Hacker News first
CISA Flags Exploited Collabora Online Flaw for Urgent Patching · CISA Warns of Active Attacks on Nextcloud and Arista Flaws
-
CISA Flags Exploited Collabora Online Flaw for Urgent Patching
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical flaw in Collabora Online’s Built-in CODE Server to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability, tracked as CVE-2026-110447, is an OS command…
-
CISA Warns of Active Attacks on Nextcloud and Arista Flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two actively exploited vulnerabilities to the Known Exploited Vulnerabilities (KEV) catalog, affecting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO).…
-
-
AI Firms Risk Profits by Ignoring How Customers Use Their Software
AI companies increasingly rely on usage data to align pricing with costs, improve products, identify churn risks, and drive revenue through informed decision-making. The piece frames a paradox: AI firms extract intelligence from data yet often lack…
Security Affairs
-
Leaked LiteLLM Key Fuels Malicious PyPI Release
LiteLLM confirmed that a master key was accidentally published to a public GitHub repository on 27 May 2026, exposing a deployment of the LiteLLM Agent Platform. An unknown attacker used the unrevoked master key on 10 October 2026 to access the Agent…
The Hacker News -
Google Says Gmail and Photos Could Shape AI Search Ads
Google has updated its privacy policy to clarify that personalised AI features in Search or Gemini may access data from other Google services, including Gmail and Google Photos, to tailor content and ads. The company states that users “may choose to allow…
The Hacker News -
Capcom Breach Exposes 11.7 Million Email Addresses and Login Data
Capcom has disclosed a data breach affecting its CAPCOM ID service, with attackers gaining unauthorised access on 19 October and exfiltrating information by 22 October. The company states that 11,774,247 email addresses were stolen, alongside account details…
Security Affairs
-
Popcorn Time flaw exposed millions to SYSTEM level attacks worldwide
Between November 2025 and March 2026, Eye Security uncovered a threat in Time4Popcorn’s Updater.exe, a background updater for a discontinued Popcorn Time variant. The Updater, running with SYSTEM on Windows and root on macOS, queried abandoned web addresses…
-
Brotli Flaw Enables Code Execution in Unpatched Node.js Builds
A memory-corruption flaw in Google's Brotli decoder has been disclosed as CVE-2026-111497, affecting a wide range of software that unpack Brotli-compressed data. The vulnerability can enable crafted Brotli streams to overwrite memory past the end of a…
-
CISA flags exploited Arista VeloCloud flaw that lets attackers impersonate superusers
U.S. CISA has added a critical vulnerability in Arista’s VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV) catalog. The flaw, tracked as CVE-2026-114625 with a CVSS score of 9.4, affects on‑premises VCO deployments and is linked to a…
-
Attackers Swapped OVHcloud CLI Binaries to Steal Credentials
Over a five-release window on 19 October 2026, an attacker swapped binaries for OVHcloud’s official OVHcloud CLI (ovhcloud-cli) across v0.11.0 to v0.15.0, remaining active for about 94 minutes and deleting the evidence before OVHcloud or customers could…
StepSecurityGlassWorm -
Dutch Authorities Extradite Crypto Scam Suspect to Face US Charges
Dutch authorities have extradited Zheng Zhao, a 44-year-old Chinese national, to California to face charges connected with a Cambodia-based cryptocurrency scam that targeted Americans. The Department of Justice announced Zhao’s arraignment in Los Angeles…
SecurityOnline
-
Exposed AI models hijacked to run autonomous cyberattacks and mine crypto
Symantec researchers have documented a self-directed “LLMjacking” operation that hijacks exposed AI models to run its own attack campaigns. The attacker’s autonomous agent can scan the internet, break into servers, steal credentials, and mine cryptocurrency,…
SecurityOnline