News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Wed 21 Oct· 1 article
-
Google Chrome 156 Fixes 353 Security Flaws, Including Six Critical Bugs
Google released Chrome 156 to the stable channel on 20 October 2026, fixing 353 security issues. The update includes six vulnerabilities described in the article as critical, affecting Skia, Accessibility, CSS, Paint and WebRTC. Most involve memory…
Fri 16 Oct· 1 article
-
Google fixes critical Chrome Prerender flaw in 10 vulnerability patch
Google has released Chrome 155.0.8059.84/85 on 15 October 2026, delivering fixes for ten security vulnerabilities, including a critical use-after-free flaw in Prerender and seven high‑severity flaws. Google reports that there has been no confirmed…
Wed 14 Oct· 1 article
-
Google Fixes 37 Chrome Flaws, Including Seven Critical Bugs
Google released Chrome 155.0.8059.79/80 on 13 October 2026, delivering fixes for 37 security flaws and addressing a cluster of memory corruption issues, including seven rated as critical. The leading fix is a buffer overflow in the ANGLE graphics layer…
Wed 7 Oct· 1 article
-
Google Chrome 155 fixes 247 flaws, including four critical bugs
Google has pushed Chrome 155 to the Stable channel, delivering a substantial security update that fixes 247 flaws, including four critical use-after-free (UAF) bugs. The release addresses a total of six CVEs, with the four critical UAFs ranked at the top of…
Fri 2 Oct· 1 article
-
Chrome Update Fixes Critical WebGL Flaw Enabling Sandbox Escape
Google has released Chrome 154.0.8037.97 (and 154.0.8037.98 on the Stable channel) to address a raft of 11 security bugs, led by a critical WebGL flaw that could allow remote code execution outside the browser sandbox. The bug, CVE-2026-103628, is an…
Tue 29 Sep· 1 article
-
Google Patches Critical Chrome Flaw Among 33 Security Bugs
Google has issued a Chrome security update, bumping to version 154.0.8037.92/.93, to fix 33 flaws. The standout issue is CVE-2026-102331, described as a critical ANGLE buffer overflow that could corrupt memory during rendering crafted content. The update…
Thu 24 Sep· 1 article
-
Chinese Hackers Exploited Chrome and Windows Zero Days in Espionage Attacks
A suspected Chinese state-sponsored espionage group tracked as UTA0565 used zero-day vulnerabilities in Google Chrome and Microsoft Windows to target Asian government bodies, think tanks and policy researchers. According to Volexity, attacks began in early…
Tue 22 Sep· 1 article
-
Android Telecom Flaw Lets Apps Execute Code in the System Server
CVE-2026-49881 is a high-severity vulnerability in Android’s Telecom service, affecting Android 16 QPR3 and later releases, including stable Android 17 builds from the Android Open Source Project. The flaw is rated CVSS 7.8. According to the report, an…
Fri 18 Sep· 1 article
-
Google Patches Two Critical Chrome Flaws That Enable Code Execution
Google released Chrome security updates on 17 September 2026 to address 16 vulnerabilities. The flaws include two described as critical: CVE-2026-93374, a use-after-free issue in the Dawn graphics library, and CVE-2026-93372, a buffer overflow in WebGL. Both…
Wed 16 Sep· 2 articles
-
Google Patches Pixel Modem Flaw Exploited in Targeted Attacks
Google’s 16 September 2026 Pixel Update Bulletin addresses three Android vulnerabilities, including CVE-2026-58704, which Google says may be undergoing limited, targeted exploitation. The flaw affects the cellular modem firmware and is rated 8.0 under…
-
Google Chrome 153 Fixes Critical WebGL Flaw Enabling Code Execution
Google has released Chrome version 153, fixing 42 security defects, including three vulnerabilities highlighted in the report. CVE-2026-91749 is rated critical with a CVSSv3 score of 9.6 and involves an out-of-bounds read in the WebGL component.…
Thu 10 Sep· 2 articles
-
Chrome Zero Day Chain Targeted NGOs Before Google’s Patch Arrived
Security researchers have traced a Chrome-focused zero-day chain used by two Chinese espionage cohorts, UTA0560 and JungleBamboo (APT31), to target NGOs and public policy institutes across borders. The attackers carried out spear-phishing campaigns…
-
Android 17 Exploit Chain Gives Untrusted Apps Kernel Control
Researchers have disclosed the LSPromise exploit chain, which they say can take an untrusted local Android app through to full kernel control. The chain affects the initial official release of Android 17 and was successfully tested on a Pixel 10; it did not…
Wed 9 Sep· 3 articles
-
Chinese-Linked Spies Exploit Chrome and Windows Zero-Days
Proofpoint threat researchers have tracked a new BlueMoon exploit kit used in espionage campaigns, chaining Chrome/Chromium browser flaws with a Windows kernel privilege escalation to breach targeted networks. The operation, active from late August into…
-
Google Fixes Critical Android Flaws Enabling Remote Code Execution
Google’s September 2026 Android security bulletin fixes a set of critical flaws across System, Framework and Kernel components, addressing remote code execution and privilege escalation risks. The bulletin confirms five CVEs in total, with one…
-
Chrome 153 Patches Exploited V8 Zero Day and 229 Flaws
Google has released Chrome 153 to address 230 security flaws, including a zero-day vulnerability in the V8 JavaScript engine that is already being exploited in the wild. The flaw, CVE-2026-87491, is described as an out-of-bounds write in V8 that could allow…
Mon 7 Sep· 1 article
-
CISA KEV Missed Four Actively Exploited AI and WordPress Flaws
Daily Cybersecurity’s weekly briefing contrasts active exploitation with the official CISA KEV catalog for the period 31 August to 6 September 2026. The CVE WATCHTOWER tracker logged 2,316 new disclosures in that week, including 271 rated critical and 708…
Sat 5 Sep· 2 articles
-
Google Chromium V82 articles this day · SecurityOnline first
US Offers $10 Million Reward for IRGC Cyber Commander Yaryab · Google Expands Gemini Live Voice Features Across Workspace Apps
-
US Offers $10 Million Reward for IRGC Cyber Commander Yaryab
The United States has announced a reward of up to $10 million for actionable intelligence on Amir Yaryab, described by American authorities as a senior IRGC cyber commander and head of the IRGC’s cyber operations command. The Rewards for Justice programme…
-
Google Expands Gemini Live Voice Features Across Workspace Apps
Google has announced a wide rollout of Gemini Live features within Google Workspace, expanding live, voice-based capabilities across Gmail, Docs and Keep. The update, which follows earlier beta testing, makes Gmail Live, Docs Live and Keep Live generally…
-
Fri 4 Sep· 6 articles
-
Google Chromium V86 articles this day · SecurityOnline first
Trezor Warns 80,000 Customers After ShipMonk Data Breach · FreeSWITCH api-chat Flaw Exploited via SIP Messages on FusionPBX
-
Trezor Warns 80,000 Customers After ShipMonk Data Breach
Trezor says a data breach at its fulfilment partner ShipMonk has exposed customer order data for about 80,000 individuals. The initial wave affected 13,689 people across seven countries, with 11,742 showing full exposure and 1,947 partial exposure. On 4…
-
FreeSWITCH api-chat Flaw Exploited via SIP Messages on FusionPBX
SecurityOnline[.]info reports that FreeSWITCH api-chat has an in-the-wild remote code execution (RCE) vulnerability, with patching urged. The article’s lead and accompanying image describe an active exploitation scenario “via SIP MESSAGE on FusionPBX…
-
AWS Root Accounts Hit in Password Spraying Campaign Across 150 Firms
Datadog Security Research has described an active AWS password spraying campaign that targeted root user accounts across more than 150 organisations. The attack occurred between 24 July and 23 August 2026, with attackers attempting to log into highly…
-
Microsoft Teams Vishing Campaign Tricks 150 Workers Into Malware Attacks
Security researchers have highlighted a vishing campaign, dubbed the Spring Ring, that targets Microsoft Teams and has affected more than 150 employees across 10 or more companies between January and April 2026. The operation relies on attackers using…
-
Sneaky 2FA Phishing Campaign Targets Healthcare with AiTM Attacks
Security researchers have identified an active AiTM phishing operation targeting healthcare organisations, including hospitals, medical schools and related institutions. The campaign stole session tokens by compromising university accounts that sent…
-
OpenAI Drops Long Context Charges for GPT-6 Astra in Codex
OpenAI’s GPT-6 Astra within Codex now supports a context window of up to one million tokens, with the notable change that users are no longer charged surplus for content exceeding 272,000 tokens. The article clarifies that this revised billing policy applies…
-
Thu 3 Sep· 1 article
-
Google Rushes Out Chrome Patch for Exploited V8 Zero Day
Google has issued an emergency Chrome update after a critical zero‑day vulnerability, CVE-2026-85046, was exploited in the wild. The flaw is a V8 JavaScript engine type confusion that can allow an attacker to read memory out-of-bounds and execute arbitrary…
Wed 2 Sep· 1 article
-
Critical Google Chrome Vulnerabilities Patched in New Update
A critical alert has been issued regarding recent vulnerabilities in Google Chrome, with version 152.0.7977.75 addressing 26 security flaws. Key vulnerabilities include CVE-2026-84353, which allows memory corruption and code execution. Users are urged to…
Thu 20 Aug· 1 article
-
Google patches Chrome zero‑day use‑after‑free flaw in Chromoting
Google has issued a Chrome update addressing seven security vulnerabilities, the most critical being CVE-2026-76017, a use-after-free flaw in Chromoting. This vulnerability poses a significant risk as Chrome is widely used globally. The update protects users…
Wed 19 Aug· 2 articles
-
Google patches Android ContactsProvider2 SQLi high severity bug
The report details four critical vulnerabilities detected today, including CVE-2026-33824, CVE-2026-59310, CVE-2026-55040, and CVE-2026-65400, affecting various services such as Microsoft and Apple. Additionally, it highlights CVE-2026-0075, an Android…
-
Google patches Chrome WebGL flaw CVE-2026-76034 in urgent update
Google released a Chrome security update on August 26, 2026, addressing 15 vulnerabilities, including two critical buffer overflow flaws related to graphics (WebGL and Dawn). These critical issues (CVE-2026-76034 and CVE-2026-76036) have not been exploited…
Sun 26 Jul· 1 article
-
Google plans to block local ADB connections to fix CVE-2026-0073
Google engineers have proposed restricting local ADB (Android Debug Bridge) connections to address a security concern associated with vulnerability CVE-2026-0073. This change could impact tools like Shizuku and aShell, which rely on local ADB for…
Fri 24 Jul· 1 article
-
Google fixes Chrome memory bugs that may allow sandbox escape
On July 23, 2026, Google released a significant security update for Chrome (version 150.0.7871.186/.187), addressing four high-severity memory vulnerabilities, including use-after-free and out-of-bounds write bugs that could lead to potential sandbox escapes…
Fri 26 Jun· 1 article
-
Chrome patches three high severity flaws, urges swift update
A security update for Google Chrome, released on June 10, 2026, addresses three high-severity vulnerabilities (CVE-2026-13281, CVE-2026-13282, CVE-2026-13283) with a CVSS score of 6.8. The flaws include use-after-free and integer overflow issues that could…
Thu 25 Jun· 1 article
-
Chrome patches critical WebGL, Blink and Autofill flaws in update
Google has released a security update for Chrome's Stable channel, version 149.0.7827.196, addressing 18 vulnerabilities, with four classified as critical. Key issues involve memory errors in WebGL, Autofill, and Blink. Critical CVEs include CVE-2026-13028,…
Wed 17 Jun· 1 article
-
Google fixes 33 Chrome bugs, including critical CVE-2026-12437
Google has released a major security update for Chrome, addressing 33 vulnerabilities, including seven rated as critical. These critical flaws primarily involve use-after-free errors that may allow remote code execution. Key vulnerabilities include…
Fri 12 Jun· 1 article
-
Chrome 149 Patches 28 Flaws, Several Critical UAF Bugs
Google has released a significant security update for Chrome, version 149.0.7827.114/.115, covering 28 vulnerabilities, with critical flaws that can allow attackers to execute arbitrary code. Key critical vulnerabilities include CVE-2026-12007,…
Wed 10 Jun· 4 articles
-
Google Chromium V84 articles this day · SecurityOnline first
Critical Check Point VPN Flaw Under Active Attack Amid New CVEs · Architectural Exposure: Developers Extract Apple’s Subterranean Core Prompts for Siri AI
-
Critical Check Point VPN Flaw Under Active Attack Amid New CVEs
The page discusses critical alerts regarding active exploits, focusing on several vulnerabilities identified today, including CVE-2026-11645, CVE-2026-7473, and CVE-2026-20245. It highlights a significant exploit (CVE-2026-50751) affecting Check Point VPN,…
-
Architectural Exposure: Developers Extract Apple’s Subterranean Core Prompts for Siri AI
The article discusses critical cybersecurity alerts, highlighting active exploits including vulnerabilities in Google Chromium (CVE-2026-11645), Arista’s operating system (CVE-2026-7473), Cisco Catalyst SD-WAN (CVE-2026-20245), and Check Point VPN…
-
Havoc Stager Uses Fake Invoices to Hit South American Firms
The content highlights three critical vulnerabilities detected today: CVE-2026-11645 (Google Chromium), CVE-2026-7473 (Arista Operating System), and CVE-2026-20245 (Cisco Catalyst). It focuses on a dangerous Havoc stager campaign exploiting fake electronic…
-
CISA warns of critical flaws in Chromium, Arista and Cisco gear
The Cybersecurity and Infrastructure Security Agency (CISA) has issued critical alerts regarding three newly detected vulnerabilities: CVE-2026-11645 affecting Google Chromium V8, CVE-2026-7473 in Arista Extensible Operating System, and CVE-2026-20245 in…
-