XO Cyber

China-Linked UAT-8099 Targets IIS Servers in Asia with BadIIS SEO Malware.

China-Linked UAT-8099 Targets IIS Servers in Asia with BadIIS SEO Malware Cisco Talos links China-based UAT-8099 to IIS server attacks using BadIIS malware for regional SEO fraud, targeting Thailand and Vietnam.

Google Introduces AI-Powered Side Panel in Chrome to Automate Browsing.

CySecurity News - Latest Information Security and Hacking Incidents: Google Introduces AI-Powered Side Panel in Chrome to Automate Browsing The update is designed to help users interact with websites more efficiently.

US wants to push its view of AI cybersecurity standards to the rest of the world.

US wants to push its view of AI cybersecurity standards to the rest of the world The U.S. is urging global adoption of American AI cybersecurity standards and norms, aligning diplomacy efforts with its AI agenda and upcoming national cybersecurity strategy.

Cybersecurity can be America’s secret weapon in the AI race.

Cybersecurity can be America's secret weapon in the AI race The U.S. won’t win the AI race with China on models alone. Trust, transparency, and AI-powered cloud cybersecurity can be America’s decisive edge—if policy helps it scale globally.

Google Targets Residential Proxy Services Fueled by Malware Operations.

CySecurity News - Latest Information Security and Hacking Incidents: Google Targets Residential Proxy Services Fueled by Malware Operations Google dismantles a massive residential proxy network that covertly exploited consumer devices to enable global cybercrime and espionage.

Fortinet Patches CVE-2026-24858 After Active FortiOS SSO Exploitation Detected.

Fortinet Patches CVE-2026-24858 After Active FortiOS SSO Exploitation Detected Fortinet released updates for an actively exploited FortiOS SSO authentication bypass flaw, CVE-2026-24858, now listed by CISA in KEV.

Microsoft links Windows 11 boot failures to failed December 2025 update.

Microsoft links Windows 11 boot failures to failed December 2025 update Microsoft has linked recent reports of Windows 11 boot failures after installing the January 2026 updates to previously failed attempts to install the December 2025 security update, which left systems in an "improper state."

If you don’t control your keys, you don’t control your data.

If you don’t control your keys, you don’t control your data Microsoft may provide BitLocker recovery keys under warrants—raising data sovereignty risks. If providers hold keys, you may not control your data.

Fake Tax Emails Used to Target Indian Users in New Malware Campaign.

CySecurity News - Latest Information Security and Hacking Incidents: Fake Tax Emails Used to Target Indian Users in New Malware Campaign The attack begins with emails that appear to originate from the Income Tax Department of India.

Two High-Severity n8n Flaws Allow Authenticated Remote Code Ex*****on.

Two High-Severity n8n Flaws Allow Authenticated Remote Code Ex*****on Researchers disclosed two n8n vulnerabilities that let authenticated users bypass JavaScript and Python sandboxes to run arbitrary code.

New WhatsApp lockdown feature protects high-risk users from hackers.

New WhatsApp lockdown feature protects high-risk users from hackers Meta has started rolling out a new WhatsApp lockdown-style security feature designed to protect journalists, public figures, and other high-risk individuals from sophisticated threats, including spyware attacks.