News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Sun 25 Oct· 1 article
-
OpenAI Agents Expose VM Escapes and Sandbox Weaknesses
OpenAI has disclosed that its frontier-model training programme, conducted with no live internet access, was resumed after a period of restrictions and red-teaming. The company said reinforcement learning and internal inference for its most capable models…
Sat 24 Oct· 1 article
-
Brotli Flaw Enables Code Execution in Unpatched Node.js Builds
A memory-corruption flaw in Google's Brotli decoder has been disclosed as CVE-2026-111497, affecting a wide range of software that unpack Brotli-compressed data. The vulnerability can enable crafted Brotli streams to overwrite memory past the end of a…
Fri 23 Oct· 1 article
-
Node.js Brotli flaw enables remote code execution in Linux arm64 builds
Researchers have demonstrated a remote code execution (RCE) flaw in the Brotli decoder bundled with official Node[.]js builds, by feeding crafted Brotli data that exploits a mismatch in the decoder’s handling of a Brotli stream. The PoC, created by Imperva,…
Wed 14 Oct· 1 article
-
AI Agents Build Chrome Exploit in Six Days, Putting 1bn Users at Risk
Researchers at XBOW used a public OpenAI model to assemble a Chrome full-chain exploit in six days, chaining three then-unknown Chrome bugs into a single attack that could run code on Windows simply by loading a webpage. The team deployed AI agents running…
Fri 9 Oct· 1 article
-
Hackers Earn $562,500 for Three Remote Exploits on Pixel 10
Three teams demonstrated remote exploits against Google’s Pixel 10 at Pwn2Own Ireland on 8 October 2026, with the event confirming patches were required for targets. The Pixel 10 entries were remote exploits, meaning breaches were delivered via web content…
Fri 11 Sep· 1 article
-
China-Linked Hackers Exploit Sogou Flaw to Deploy GRAYRABBIT Backdoor
A China‑linked threat group known as UNC3569 exploited a flaw in Sogou Input Method for Windows to deploy a backdoor, GRAYRABBIT, on victims’ machines. The attack began with a crafted link issued via email or chat that instructed Sogou’s settings program to…
Thu 10 Sep· 1 article
-
Android Update Fixes Critical Wi-Fi Flaw Amid Rising Attack Risks
ThreatsDay’s current bulletin aggregates a broad spectrum of security incidents and research highlights from the week, underscoring a common thread: the path of least resistance is often a familiar, trusted vector. The piece flags multiple notable cases,…
Wed 9 Sep· 2 articles
-
Chrome Zero-Day Chain BlueMoon Drops Espionage Backdoors on Windows
Four espionage-linked clusters are openly deploying a previously undocumented Chrome/Windows exploit chain, dubbed BlueMoon, within days of each other. The first attribution goes to APT31 (China-aligned) on 28 August 2026, with subsequent activity from other…
-
Chrome Patches Exploited V8 Zero Day Allowing Code Execution
Google Chrome has patched a zero‑day vulnerability in its V8 JavaScript and WebAssembly engine that has been exploited in the wild. The flaw, CVE-2026-87491, is described as an out-of-bounds write in V8 that could let a remote attacker run arbitrary code…
Mon 7 Sep· 1 article
-
Google Patches Chrome V8 Zero Day Exploited in Active Attacks
Google has issued security updates for Chrome after confirming active exploitation of a V8 type-confusion bug tracked as CVE-2026-85046, patched in the latest stable release. The fix is part of a broader set of patches addressing multiple Chrome zero-days…
Fri 4 Sep· 1 article
-
Google Patches Chrome Zero Day Exploited in V8 Attacks
Google has issued a desktop Chrome security update to fix 12 vulnerabilities, including CVE-2026-85046, a high-severity type-confusion bug in the V8 engine that is already being exploited in the wild. The flaw could allow a remote attacker to execute…
Tue 9 Jun· 1 article
-
Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild - Patch Now
The article discusses the exploitation of a zero-day vulnerability (CVE-2026-11645) in Chrome's V8 engine, urging users to apply patches immediately. It highlights the critical nature of this vulnerability and the risks associated with not addressing it…
Tue 14 Apr· 1 article
-
Google integrates Rust DNS parser into Pixel 10 modem firmware
Google has announced the integration of a Rust-based Domain Name System parser into Pixel 10 modem firmware to strengthen security by pushing memory-safe code down to the baseband level. The company says the Rust parser significantly reduces security risk by…
Wed 1 Apr· 1 article
-
New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation — Patch Released
Google has released security updates for Chrome to address 21 vulnerabilities, including a zero-day flaw, CVE-2026-5281, that is being exploited in the wild. The flaw concerns a use-after-free in Dawn, the WebGPU implementation, and Google says,…
Thu 19 Mar· 1 article
-
DarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero-Days for Full Device Takeover
DarkSword is a full iOS exploit chain, reportedly used by multiple threat actors since at least November 2025, with six vulnerabilities employed to deliver three payloads, two of which were zero-days at the time. According to GTIG, three zero-days were…
Mon 16 Mar· 1 article
-
⚡ Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents & More
In this week’s recap, Google has released Chrome security updates patching two actively exploited zero‑days, CVE-2026-3909 in Skia and CVE-2026-3910 in the V8 engine, with exploits already known in the wild and patches rolled out across Windows, macOS and…
Fri 13 Mar· 1 article
-
Google Fixes Two Chrome Zero-Days Exploited in the Wild Affecting Skia and V8
Google fixed two Chrome zero-days that were being exploited in the wild, affecting the Skia and V8 components. The vulnerabilities are CVE-2026-3909, an out-of-bounds write in Skia, and CVE-2026-3910, an inappropriate implementation in V8, both rated with a…
Wed 18 Feb· 1 article
-
CISA Flags Four Security Flaws Under Active Exploitation in Latest KEV Update
According to CISA, four security flaws have been added to its Known Exploited Vulnerabilities catalog, with active exploitation evidenced in the wild. The quartet comprises CVE-2026-2441, a use-after-free vulnerability in Google Chrome with a CVSS score of…
Mon 16 Feb· 2 articles
-
Google Chromium2 articles this day · The Hacker News first
Weekly Recap: Outlook Add-Ins Hijack, 0-Day Patches, Wormable Botnet & AI Malware · New Chrome Zero-Day (CVE-2026-2441) Under Active Attack — Patch Released
-
Weekly Recap: Outlook Add-Ins Hijack, 0-Day Patches, Wormable Botnet & AI Malware
In this week’s recap, The Hacker News reports on an Outlook add-in incident where the legitimate AgreeTo add-in for Outlook was hijacked and turned into a phishing kit that stole more than 4,000 Microsoft account credentials, facilitated by taking control of…
-
New Chrome Zero-Day (CVE-2026-2441) Under Active Attack — Patch Released
Google on Friday released security updates for its Chrome browser to address a high-severity flaw tracked as CVE-2026-2441, described as a use-after-free in CSS, which has been exploited in the wild. The vulnerability, rated CVSS 8.8, was discovered and…
-
Thu 12 Feb· 1 article
-
Apple Fixes Exploited Zero-Day Affecting iOS, macOS, and Apple Devices
Apple has issued updates across iOS, iPadOS, macOS Tahoe, tvOS, watchOS and visionOS to fix a zero‑day vulnerability that it says has been exploited in sophisticated attacks. The flaw, tracked as CVE-2026-20700, is a memory corruption issue in dyld, and…
No older articles match these filters.