CYBERSIXT
Signal Over Noise
Live threat intelligence
Latest Cybersecurity News
Breaking threat intelligence, CVE analysis, and active-threat coverage.
95
Articles · 24h
368
KEV CVEs tracked
Filters
All publications
Newest
Oldest
Favourites
This box filters the last 24h — search the full archive →
Live
SECURITYONLINE.INFO — Apache Pulsar Flaws Enable Token Bypass and Cross Tenant Access
SECURITYONLINE.INFO — Cisco Patches Root Access Flaw in Expressway Gateways
ISC.SANS.EDU — ISC Stormcast For Thursday, October 22nd, 2026…
SECURITYONLINE.INFO — HTTP/3 Header Attack Can Amplify Memory Use 4,000 Times in Bun
SECURITYONLINE.INFO — Apache Traffic Server Fixes 15 Flaws, Including Unauthenticated RCE Risk
SECURITYONLINE.INFO — AI Assisted PaperCut Campaign Breaches 395 Organisations Worldwide
SECURITYONLINE.INFO — Cisco fixes critical Unified CM flaws that could expose networks
SECURITYONLINE.INFO — Oracle Fixes Critical MySQL Flaws That Could Allow System Takeover
SECURITYONLINE.INFO — Apache bRPC 1.18.0 fixes 35 flaws enabling authentication bypass and DoS
SECURITYONLINE.INFO — Duplicator WordPress Flaw Lets Hidden Payloads Take Over Sites
SECURITYONLINE.INFO — GitLab Patches Critical Flaw That Could Let Attackers Run Code
SECURITYAFFAIRS.COM — Russian Satellite Came Within Metres of Ukraine-Linked ICEYE Craft
DARKREADING.COM — TiDB Breach Exposes Customer Data Despite No Database Access
DARKREADING.COM — Marvell, Microsoft and Oracle plan open in server HSM specification work
SECURITYONLINE.INFO — Apache Pulsar Flaws Enable Token Bypass and Cross Tenant Access
SECURITYONLINE.INFO — Cisco Patches Root Access Flaw in Expressway Gateways
ISC.SANS.EDU — ISC Stormcast For Thursday, October 22nd, 2026…
SECURITYONLINE.INFO — HTTP/3 Header Attack Can Amplify Memory Use 4,000 Times in Bun
SECURITYONLINE.INFO — Apache Traffic Server Fixes 15 Flaws, Including Unauthenticated RCE Risk
SECURITYONLINE.INFO — AI Assisted PaperCut Campaign Breaches 395 Organisations Worldwide
SECURITYONLINE.INFO — Cisco fixes critical Unified CM flaws that could expose networks
SECURITYONLINE.INFO — Oracle Fixes Critical MySQL Flaws That Could Allow System Takeover
SECURITYONLINE.INFO — Apache bRPC 1.18.0 fixes 35 flaws enabling authentication bypass and DoS
SECURITYONLINE.INFO — Duplicator WordPress Flaw Lets Hidden Payloads Take Over Sites
SECURITYONLINE.INFO — GitLab Patches Critical Flaw That Could Let Attackers Run Code
SECURITYAFFAIRS.COM — Russian Satellite Came Within Metres of Ukraine-Linked ICEYE Craft
DARKREADING.COM — TiDB Breach Exposes Customer Data Despite No Database Access
DARKREADING.COM — Marvell, Microsoft and Oracle plan open in server HSM specification work
Daily Briefing
loading…
Read the full briefing
→
Latest analysis
Apache Pulsar Flaws Enable Token Bypass and Cross Tenant Access
Cisco Patches Root Access Flaw in Expressway Gateways
ISC Stormcast For Thursday, October 22nd, 2026 https://isc.sans.edu/podcastdetail/10146, (Thu, Oct 22nd)
HTTP/3 Header Attack Can Amplify Memory Use 4,000 Times in Bun
Apache Traffic Server Fixes 15 Flaws, Including Unauthenticated RCE Risk
AI Assisted PaperCut Campaign Breaches 395 Organisations Worldwide
Cisco fixes critical Unified CM flaws that could expose networks
Oracle Fixes Critical MySQL Flaws That Could Allow System Takeover
Apache bRPC 1.18.0 fixes 35 flaws enabling authentication bypass and DoS
Duplicator WordPress Flaw Lets Hidden Payloads Take Over Sites
GitLab Patches Critical Flaw That Could Let Attackers Run Code
Russian Satellite Came Within Metres of Ukraine-Linked ICEYE Craft
TiDB Breach Exposes Customer Data Despite No Database Access
Marvell, Microsoft and Oracle plan open in server HSM specification work
Survey finds DLP blocked just 16% of major data loss incidents
OpenAI Says GPT-6 Agents Bypassed Safety Monitoring During Coding Tasks
Critical PHP Flaws Enable Unauthenticated Code Execution on Servers
GitLab patches critical flaw enabling unauthenticated code execution
WhatsApp AI Hid Privacy Regulator Advice from Users Seeking Help
AI-powered Storm-0940 attacks breached cloud environments in under three hours
Compromised LiteLLM release steals developer credentials and installs a backdoor
Chrome adds new scam warnings and blocks deceptive ClickFix tricks
PHP Patches PHP2Shell Flaws After Attack Attempts Target Servers
OVHcloud GitHub Attack Replaced CLI Releases with Malware for 93 Minutes
Dormant AI Agents Keep Working Credentials and Unsecured Triggers
OpenAI Reveals AI Agents Disabled Misalignment Monitoring During Coding Tasks
Critical PHP Flaws Trigger Emergency Patches as Attacks Begin
ISC Patches Four BIND 9 Flaws, Including a Remote Code Execution Risk
Node.js fixes Brotli flaw that could enable remote code execution
Optiv Launches Free Cybersecurity Lessons for Schools and Communities
Security Leaders Warn Digital Exposure Is Putting Executives at Risk
PHP Zero Days Put Millions of Websites at Risk of Remote Takeover
Critical PHP Flaws Enable Remote Code Execution Without Login
Critical PHP flaws enable unauthenticated remote code execution across versions 5 to 8
Malicious LiteLLM Release Steals Cloud, AI and Developer Credentials
Critical PHP flaws enable remote code execution as exploit PoCs emerge
Tracebit’s Context Bombs Trick AI Attack Agents Into Abandoning Targets
AI Powered Athena Phishing Platform Uses Cloaking to Evade Detection
Ransomware attackers exploit severe flaws within three days, Rapid7 warns
Weak eMudhra CA Keys Let Attackers Forge Trusted TLS Certificates
PHP Fixes Two Critical Flaws That Could Let Attackers Run Code
Cloudflare WAF Now Blocks Responses That Reveal Successful Exploits
Backdoored LiteLLM release steals credentials and enables remote code execution
AI-assisted cybercriminal used DeepSeek to steal university data and credentials
AI Agent Ran 100,000 Autonomous Actions in Cyber-Attack Campaign
PHP Patches Critical Unauthenticated Flaws That Expose Web Servers
Cloudflare blocked php2shell attacks before PHP flaws were disclosed
Critical PHP Flaws Enable Remote Code Execution Across Web Servers
Asymptote Labs raises $5.5m to secure enterprise AI agents
Chrome Adds ClickFix Defences to Stop Malicious Commands Before They Run
Fake Amazon CAPTCHA Uses Decades Old Windows Tool to Deploy Malware
Cloudflare Brings AI Shopping Tools to Nearly 100,000 Online Stores
Chrome 156 patches 353 flaws, including six critical vulnerabilities
Fake Amazon Music Deal Targets YouTube Creators’ Google Logins
OpenAI Coding Agents Disabled Misalignment Monitoring During Tasks
US Bars Federal Agencies from Using DeepSeek AI Over Security Risks
China Aligned Bronze Sandcastle Uses DLL Sideloading to Spy on Organisations
Ransomware Attacks Jump 50% as Data Theft Replaces Encryption
AI Erases Phishing Tells as Attackers Personalise BEC at Scale
Signal Flaw Could Keep Calls Listening After Users Hang Up
Weak eMudhra keys let attackers forge trusted HTTPS certificates
SafePay Ransomware Hits 600 Critical Infrastructure Organisations
US Orders Federal Agencies to Remove DeepSeek AI Tools Over Security Concerns
PHP2Shell Flaws Put PHP Servers at Risk of Remote Code Execution
PHP Warns Two Critical PHP2Shell Flaws Need Patching, Not Workarounds
AI Pentesting Is Only as Safe as Its Security Harness
Attackers Hijacked 333 Tor Relays to Steal SSH Passwords
Atlassian patches 176 flaws across Jira and Confluence products
PHP2Shell flaws threaten remote code execution across PHP websites
NCSC urges PHP users to patch flaws that could enable server takeover
PHP Prepares Emergency Fix for Critical php2shell RCE Flaws
Study Finds Qwen3 Coder Wrote Riskier Apps for US Defence Firms
Chrome Adds Scam Warnings and ClickFix Protection for Users
Lazarus Targets South Korean Firms Through Fake CV Websites
Oracle Patches Critical E-Business Suite Flaw That Could Enable Takeover
cURL to Publish Low-Risk Vulnerability Reports as GitHub Issues
Ransomware Attack Exposed Welsh Children’s Data Through ‘Password1’ Test Account
Updraft Breach Exposed Keys That Could Install WordPress Backdoors
Apple Blocks WebKit Identity Tracking, Forcing Advertisers to Rethink Targeting
Hackers Hijacked 333 Tor Exit Nodes to Steal SSH Credentials
UK Watchdog Moves to Open iPhone Payments to Rival Wallets
Perplexity brings its Computer AI workflows to Apple Silicon Macs
US Orders Civilian Agencies to Remove DeepSeek From IT Systems
Aoki Infostealer Targets Credentials for AI Coding Tools and Cloud Services
State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web
CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws
Hackers targeted government Linux servers to steal passwords and hijack official accounts
Critical PHP2Shell flaws could expose servers to remote code execution
ConnectWise Backup Breach Exposed More Than 300 Microsoft Tenants
Belarusian Hackers Hid in Russian Healthcare Network for Two Years
Compromised GitHub account slipped secret stealer into OVHcloud CLI releases
Pegasus Spyware Infected Serbian Rector’s iPhone Before Election
PHP Prepares Emergency Fixes for Two Critical RCE Flaws
Accenture, Dragos and SANS launch $10m cyber fund for US utilities
Critical CouchDB Flaw Lets Admins Run Shell Commands, Apache Warns
The Feed
Last 24 hours
Load more
X