News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Fri 9 Oct· 1 article
-
Hackers Earn $562,500 for Three Remote Exploits on Pixel 10
Three teams demonstrated remote exploits against Google’s Pixel 10 at Pwn2Own Ireland on 8 October 2026, with the event confirming patches were required for targets. The Pixel 10 entries were remote exploits, meaning breaches were delivered via web content…
Thu 24 Sep· 1 article
-
Chinese Hackers Exploited Chrome and Windows Zero Days in Espionage Attacks
A suspected Chinese state-sponsored espionage group tracked as UTA0565 used zero-day vulnerabilities in Google Chrome and Microsoft Windows to target Asian government bodies, think tanks and policy researchers. According to Volexity, attacks began in early…
Thu 17 Sep· 1 article
-
CISA Flags Actively Exploited Cisco, Acronis and Pixel Flaws
The US Cybersecurity and Infrastructure Security Agency (CISA) added three vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalogue on 16 September 2026. They are CVE-2026-76460 in Cisco Identity Services Engine (ISE), rated CVSS 10.0;…
Wed 16 Sep· 6 articles
-
Google Android6 articles this day · SecurityOnline first
Actively Exploited Pixel Modem Flaw Bypasses Permission Checks · Google Fixes Exploited Pixel Modem Flaw in September Update
-
Actively Exploited Pixel Modem Flaw Bypasses Permission Checks
CISA added CVE-2026-58704 to its Known Exploited Vulnerabilities (KEV) catalogue on 16 September 2026. The vulnerability affects Google Pixel devices and is an improper authorisation flaw in the cellular modem that may allow attackers to bypass permission…
-
Google Fixes Exploited Pixel Modem Flaw in September Update
Google’s September 2026 Pixel security update fixes CVE-2026-58704, a high-severity cellular modem vulnerability with a CVSS score of 8.0. The flaw is a permission bypass caused by a logic error, potentially allowing remote, proximal or adjacent privilege…
-
Google Patches Pixel Zero Day Exploited in Targeted Attacks
Google has patched a high-severity zero-day in the modem component of Pixel smartphones after observing “limited, targeted exploitation”. Tracked as CVE-2026-58704, the vulnerability results from a logic error that can allow a permission bypass and remote…
-
CISA Warns of Active Exploitation in Google Pixel Vulnerability
CISA added CVE-2026-58704, described as a Google Pixel improper authorisation vulnerability, to its Known Exploited Vulnerabilities (KEV) Catalog on 16 September 2026. The agency said the addition was based on evidence of active exploitation, but did not…
-
Google Patches Pixel Modem Flaw Exploited in Targeted Attacks
Google’s September 2026 Pixel Update Bulletin fixes 110 vulnerabilities, including CVE-2026-58704, which Google says may be under limited, targeted exploitation. The high-severity flaw is in the phones’ cellular modem and results from a logic error that can…
-
Google Patches Pixel Modem Flaw Exploited in Targeted Attacks
Google’s 16 September 2026 Pixel Update Bulletin addresses three Android vulnerabilities, including CVE-2026-58704, which Google says may be undergoing limited, targeted exploitation. The flaw affects the cellular modem firmware and is rated 8.0 under…
-
Tue 15 Sep· 1 article
-
China-Linked Groups Exploited Chrome Patch Gap to Target NGOs
Two China-linked threat groups used the same Chrome and Windows exploit chain against non-governmental organisations (NGOs), according to Volexity. The activity began on 1 September 2026, when UTA0560 sent spear-phishing emails directing targets through a…
Sat 12 Sep· 1 article
-
Chrome Zero Days Fuel BlueMoon Exploit Kit’s Espionage Surge
BlueMoon is an exploit kit that security researchers say was rapidly adopted by multiple espionage groups in opportunistic, rushed campaigns. The China-linked Violet Typhoon (also known as APT31, JungleBamboo, TA412 and Tide Castle) first deployed BlueMoon…
Fri 11 Sep· 1 article
-
China-Linked Hackers Exploit Sogou Flaw to Deploy GRAYRABBIT Backdoor
A China‑linked threat group known as UNC3569 exploited a flaw in Sogou Input Method for Windows to deploy a backdoor, GRAYRABBIT, on victims’ machines. The attack began with a crafted link issued via email or chat that instructed Sogou’s settings program to…
Thu 10 Sep· 5 articles
-
CISA Flags Four Actively Exploited Flaws Including Cisco Zero Day
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four flaws from Cisco, Google Chromium V8, Fortinet and Citrix NetScaler to its Known Exploited Vulnerabilities (KEV) catalog. The entries are CVE-2025-25249 (Fortinet multiple…
-
Google Chromium V82 articles this day · Security Affairs first
Chrome Zero Day Chain Targeted NGOs Before Google’s Patch Arrived · Chrome and Windows Zero Days Fuel BlueMoon Espionage Campaigns
-
Chrome Zero Day Chain Targeted NGOs Before Google’s Patch Arrived
Security researchers have traced a Chrome-focused zero-day chain used by two Chinese espionage cohorts, UTA0560 and JungleBamboo (APT31), to target NGOs and public policy institutes across borders. The attackers carried out spear-phishing campaigns…
-
Chrome and Windows Zero Days Fuel BlueMoon Espionage Campaigns
Proofpoint, with corroboration from Google Threat Intelligence, MSTIC and Volexity, identifies four espionage groups adopting a Chrome-and-Windows exploit kit named BlueMoon within roughly two weeks of its first appearance. The initial cluster, TA412 (aka…
-
-
Google Chrome2 articles this day · CISA first
Chrome Patches 230 Flaws as Hackers Exploit V8 Bug · CISA Warns of Actively Exploited Chromium Flaw Enabling Code Execution
-
Chrome Patches 230 Flaws as Hackers Exploit V8 Bug
Chrome has begun rolling out a security update for its desktop browser, addressing 230 fixes, including one that is known to be actively exploited. The stable channel is updated to 153.0.8010.36/37 for Windows and macOS, and 153.0.8010.36 for Linux. Users…
-
CISA Warns of Actively Exploited Chromium Flaw Enabling Code Execution
CISA has added CVE-2026-87491 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Google Chromium V8 and is an out-of-bounds write flaw that can allow remote code execution inside the browser sandbox through a crafted HTML page.…
-
Wed 9 Sep· 7 articles
-
Google Chromium V83 articles this day · SecurityOnline first
BlueMoon Exploit Kit Races to Exploit Fresh Chrome and Windows Flaws · Chrome Zero-Day Chain BlueMoon Drops Espionage Backdoors on Windows
-
BlueMoon Exploit Kit Races to Exploit Fresh Chrome and Windows Flaws
Proofpoint reports that a chrome-and-windows exploit kit, dubbed BlueMoon, has been deployed rapidly by at least four groups after chaining three vulnerabilities to install malware of choice. The chain exploits two Chromium vulnerabilities in the V8 engine…
-
Chrome Zero-Day Chain BlueMoon Drops Espionage Backdoors on Windows
Four espionage-linked clusters are openly deploying a previously undocumented Chrome/Windows exploit chain, dubbed BlueMoon, within days of each other. The first attribution goes to APT31 (China-aligned) on 28 August 2026, with subsequent activity from other…
-
Chinese-Linked Spies Exploit Chrome and Windows Zero-Days
Proofpoint threat researchers have tracked a new BlueMoon exploit kit used in espionage campaigns, chaining Chrome/Chromium browser flaws with a Windows kernel privilege escalation to breach targeted networks. The operation, active from late August into…
-
-
Google Chrome4 articles this day · SecurityOnline first
Google Patches Chrome’s Seventh Zero Day of 2026 Under Attack · Google Fixes Exploited Chrome Zero Day Among 230 Flaws in Version 153
-
Google Patches Chrome’s Seventh Zero Day of 2026 Under Attack
Google has released a Chrome update to address a string of actively exploited vulnerabilities in 2026, including the seventh zero-day cased in the wild. The standout flaw is CVE-2026-87491, an out-of-bounds write in the V8 engine with a CVSS score of 8.8,…
-
Google Fixes Exploited Chrome Zero Day Among 230 Flaws in Version 153
Google released Chrome 153 to the stable channel on 9 September 2026, delivering fixes for 230 vulnerabilities and notably addressing a zero-day that is already being exploited in the wild. The CVE tracked as CVE-2026-87491 is described as an out-of-bounds…
-
Chrome Patches Exploited V8 Zero Day Allowing Code Execution
Google Chrome has patched a zero‑day vulnerability in its V8 JavaScript and WebAssembly engine that has been exploited in the wild. The flaw, CVE-2026-87491, is described as an out-of-bounds write in V8 that could let a remote attacker run arbitrary code…
-
Chrome 153 Patches Exploited V8 Zero Day and 229 Flaws
Google has released Chrome 153 to address 230 security flaws, including a zero-day vulnerability in the V8 JavaScript engine that is already being exploited in the wild. The flaw, CVE-2026-87491, is described as an out-of-bounds write in V8 that could allow…
-
Mon 7 Sep· 2 articles
-
Google Patches Chrome V8 Zero Day Exploited in Active Attacks
Google has issued security updates for Chrome after confirming active exploitation of a V8 type-confusion bug tracked as CVE-2026-85046, patched in the latest stable release. The fix is part of a broader set of patches addressing multiple Chrome zero-days…
-
CISA KEV Missed Four Actively Exploited AI and WordPress Flaws
Daily Cybersecurity’s weekly briefing contrasts active exploitation with the official CISA KEV catalog for the period 31 August to 6 September 2026. The CVE WATCHTOWER tracker logged 2,316 new disclosures in that week, including 271 rated critical and 708…
Sat 5 Sep· 2 articles
-
Google Chromium V82 articles this day · SecurityOnline first
US Offers $10 Million Reward for IRGC Cyber Commander Yaryab · Google Expands Gemini Live Voice Features Across Workspace Apps
-
US Offers $10 Million Reward for IRGC Cyber Commander Yaryab
The United States has announced a reward of up to $10 million for actionable intelligence on Amir Yaryab, described by American authorities as a senior IRGC cyber commander and head of the IRGC’s cyber operations command. The Rewards for Justice programme…
-
Google Expands Gemini Live Voice Features Across Workspace Apps
Google has announced a wide rollout of Gemini Live features within Google Workspace, expanding live, voice-based capabilities across Gmail, Docs and Keep. The update, which follows earlier beta testing, makes Gmail Live, Docs Live and Keep Live generally…
-
Fri 4 Sep· 12 articles
-
Google Chromium V812 articles this day · SecurityOnline first
CISA Flags Actively Exploited Chrome Flaw as Sixth 2026 Zero-Day · CISA Flags Chrome V8 Flaw Affecting Major Chromium Browsers
-
CISA Flags Actively Exploited Chrome Flaw as Sixth 2026 Zero-Day
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added Google Chromium to its Known Exploited Vulnerabilities (KEV) catalog, specifically CVE-2026-85046. Described as a type confusion flaw in V8, the JavaScript and WebAssembly engine, the…
-
CISA Flags Chrome V8 Flaw Affecting Major Chromium Browsers
CISA’s Known Exploited Vulnerabilities (KEV) catalog lists CVE-2026-85046 as a Google Chrome/Chromium V8 type confusion vulnerability. It allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. The KEV entry notes that…
-
CISA Flags Actively Exploited Google Chrome V8 Flaw as High Risk
CISA has added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. The newly listed CVE is CVE-2026-85046, described as a Google Chromium V8 Type Confusion Vulnerability. The KEV entry notes that…
-
Google Patches Chrome V8 Zero Day Exploited in the Wild
Google has released Chrome 152 security updates that patch 12 vulnerabilities, including a zero‑day that was exploited in the wild. The most notable flaw is CVE-2026-85046, described as a high‑severity type confusion issue in Chrome’s V8 JavaScript and…
-
Trezor Warns 80,000 Customers After ShipMonk Data Breach
Trezor says a data breach at its fulfilment partner ShipMonk has exposed customer order data for about 80,000 individuals. The initial wave affected 13,689 people across seven countries, with 11,742 showing full exposure and 1,947 partial exposure. On 4…
-
FreeSWITCH api-chat Flaw Exploited via SIP Messages on FusionPBX
SecurityOnline[.]info reports that FreeSWITCH api-chat has an in-the-wild remote code execution (RCE) vulnerability, with patching urged. The article’s lead and accompanying image describe an active exploitation scenario “via SIP MESSAGE on FusionPBX…
-
Google Patches Actively Exploited Chrome V8 Zero Day
Google has issued a Chrome security update addressing 12 flaws, including CVE-2026-85046, a actively exploited Type Confusion flaw in the V8 JavaScript and WebAssembly engine. The vulnerability could allow a remote attacker to execute arbitrary code inside…
-
AWS Root Accounts Hit in Password Spraying Campaign Across 150 Firms
Datadog Security Research has described an active AWS password spraying campaign that targeted root user accounts across more than 150 organisations. The attack occurred between 24 July and 23 August 2026, with attackers attempting to log into highly…
-
Google Patches Chrome Zero Day Exploited in V8 Attacks
Google has issued a desktop Chrome security update to fix 12 vulnerabilities, including CVE-2026-85046, a high-severity type-confusion bug in the V8 engine that is already being exploited in the wild. The flaw could allow a remote attacker to execute…
-
Microsoft Teams Vishing Campaign Tricks 150 Workers Into Malware Attacks
Security researchers have highlighted a vishing campaign, dubbed the Spring Ring, that targets Microsoft Teams and has affected more than 150 employees across 10 or more companies between January and April 2026. The operation relies on attackers using…
-
Sneaky 2FA Phishing Campaign Targets Healthcare with AiTM Attacks
Security researchers have identified an active AiTM phishing operation targeting healthcare organisations, including hospitals, medical schools and related institutions. The campaign stole session tokens by compromising university accounts that sent…
-
OpenAI Drops Long Context Charges for GPT-6 Astra in Codex
OpenAI’s GPT-6 Astra within Codex now supports a context window of up to one million tokens, with the notable change that users are no longer charged surplus for content exceeding 272,000 tokens. The article clarifies that this revised billing policy applies…
-