News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Fri 2 Oct· 1 article
-
Warlock Ransomware Expands SharePoint Attacks Against Critical Sectors
Warlock, a ransomware operation tied to the China-based groups Longlegs and Storm-2603, is again exploiting SharePoint vulnerabilities to target critical infrastructure, government, and educational sectors. Symantec’s assessment states that the group has…
Sun 27 Sep· 1 article
-
Attackers Exploit Patched Microsoft SharePoint Flaw to Deploy Webshells
Microsoft SharePoint vulnerability CVE-2026-65660 is being exploited in attacks, about six weeks after Microsoft issued patches and days after researchers published technical details. Microsoft fixed the flaw in its August 2026 Patch Tuesday updates and…
Fri 25 Sep· 4 articles
-
Microsoft SharePoint Enterprise Server 20164 articles this day · SecurityOnline first
CISA Warns of Active MikroTik RouterOS Attacks and SharePoint Flaw · CISA Warns of Actively Exploited Microsoft SharePoint Code Flaw
-
CISA Warns of Active MikroTik RouterOS Attacks and SharePoint Flaw
The US Cybersecurity and Infrastructure Security Agency (CISA) added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalogue on 25 September 2026: CVE-2026-65660, a Microsoft SharePoint code-injection flaw with a CVSS score of 8.8, and…
-
CISA Warns of Actively Exploited Microsoft SharePoint Code Flaw
CISA added CVE-2026-65660 to its Known Exploited Vulnerabilities (KEV) catalogue on 25 September 2026. The vulnerability affects Microsoft SharePoint and is identified as the Microsoft SharePoint Code Injection Vulnerability. It could allow an authorised…
-
CISA Flags Actively Exploited SharePoint and MikroTik Flaws
CISA added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog on 25 September 2026, citing evidence that both are being actively exploited. The entries are CVE-2026-65660, a Microsoft SharePoint code injection vulnerability, and…
-
Attackers Exploit SharePoint Flaw to Deploy Stealthy Web Shells
Threat actors are actively targeting on-premises Microsoft SharePoint servers by exploiting the remote-code-execution vulnerability CVE-2026-65660. The flaw has a CVSSv3 score of 8.8 and affects SharePoint Server 2013, 2016, 2019 and Subscription Edition,…
-
Thu 24 Sep· 1 article
-
Chinese Hackers Exploited Chrome and Windows Zero Days in Espionage Attacks
A suspected Chinese state-sponsored espionage group tracked as UTA0565 used zero-day vulnerabilities in Google Chrome and Microsoft Windows to target Asian government bodies, think tanks and policy researchers. According to Volexity, attacks began in early…
Mon 21 Sep· 2 articles
-
AI Agents Expose New Attack Paths Through Skills and Memory
Research published during February 2026 indicates that AI agents, rather than standalone models, are becoming a broader cybersecurity target because they combine persistent memory with skills, external tools, protocols and the ability to act on connected…
-
NightEagle Hackers Target Russian Firms With GhostContainer Backdoor
Kaspersky’s Global Emergency Response Team has identified a cyber-espionage campaign attributed to NightEagle, also known as APT-Q-95, targeting businesses in Russia. The group, active since at least 2023 and previously focused on Asia, reportedly gained…
Fri 18 Sep· 1 article
-
Microsoft Fixes 18 Azure and Copilot Flaws, Urges Windows Update
Microsoft has released fixes for 18 vulnerabilities across its Azure cloud portfolio and Copilot-branded AI products. Most were elevation-of-privilege flaws affecting Azure ARC, Azure AI Foundry, Azure Logic Apps, Azure Billing, Azure HorizonDB, Azure Cosmos…
Wed 16 Sep· 2 articles
-
Browser Extensions Hijacked AI Assistants in Five Major Browsers
On 16 September 2026, Forever Security disclosed BragJack, a proof-of-concept attack that hijacks built-in AI assistants in five browsers: Google Chrome with Gemini, Microsoft Edge, Opera Neon, Perplexity Comet and Claude in Chrome. Researcher Gal Weizman…
-
NightEagle Hackers Hide Exchange Backdoor Behind Stolen VPN Access
Kaspersky’s Global Emergency Response Team says the NightEagle group, also known as APT-Q-95, has targeted businesses in Russia after previously focusing on organisations in Asia. In most investigated incidents, the attackers used stolen valid credentials to…
Tue 15 Sep· 2 articles
-
China-Linked Groups Exploited Chrome Patch Gap to Target NGOs
Two China-linked threat groups used the same Chrome and Windows exploit chain against non-governmental organisations (NGOs), according to Volexity. The activity began on 1 September 2026, when UTA0560 sent spear-phishing emails directing targets through a…
-
Microsoft Fixes Windows 11 RDS Failures and CVE-2026-62721
Microsoft has released the out-of-band Windows 11 KB5129195 update for versions 24H2 and 25H2. The update addresses instability introduced by the recent September patch, including failures affecting Remote Desktop Services (RDS). Microsoft said RDS could…
Sat 12 Sep· 1 article
-
Chrome Zero Days Fuel BlueMoon Exploit Kit’s Espionage Surge
BlueMoon is an exploit kit that security researchers say was rapidly adopted by multiple espionage groups in opportunistic, rushed campaigns. The China-linked Violet Typhoon (also known as APT31, JungleBamboo, TA412 and Tide Castle) first deployed BlueMoon…
Thu 10 Sep· 6 articles
-
Microsoft Malware Protection Engine2 articles this day · SOCRadar first
Windows Defender Patch Bypass Exposes SYSTEM Files to Attackers · Public ShieldCrash PoC Claims to Bypass Microsoft Defender Fix
-
Windows Defender Patch Bypass Exposes SYSTEM Files to Attackers
The Dark Reading article reports that the security researcher Nightmare-Eclipse has released a new Windows zero-day exploit, ShieldCrash, described as a patch bypass for CVE-2026-69414, known as ShieldBreak, which is a privilege escalation flaw in the…
-
Public ShieldCrash PoC Claims to Bypass Microsoft Defender Fix
Microsoft has been alerted to a new PoC called ShieldCrash, linked to CVE-2026-69414 (ShieldBreak), the High severity elevation-of-privilege flaw in the Microsoft Malware Protection Engine that Microsoft recently fixed. Nightmare Eclipse’s ShieldCrash claim…
-
-
Google Chromium V82 articles this day · Security Affairs first
Chrome Zero Day Chain Targeted NGOs Before Google’s Patch Arrived · Chrome and Windows Zero Days Fuel BlueMoon Espionage Campaigns
-
Chrome Zero Day Chain Targeted NGOs Before Google’s Patch Arrived
Security researchers have traced a Chrome-focused zero-day chain used by two Chinese espionage cohorts, UTA0560 and JungleBamboo (APT31), to target NGOs and public policy institutes across borders. The attackers carried out spear-phishing campaigns…
-
Chrome and Windows Zero Days Fuel BlueMoon Espionage Campaigns
Proofpoint, with corroboration from Google Threat Intelligence, MSTIC and Volexity, identifies four espionage groups adopting a Chrome-and-Windows exploit kit named BlueMoon within roughly two weeks of its first appearance. The initial cluster, TA412 (aka…
-
-
CISA Warns of Exploited Magento Flaw Enabling Remote Code Execution
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four newly observed exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalogue. The entries are CVE-2026-75650, CVE-2026-81963, CVE-2026-85880 and…
-
Microsoft Defender Zero Day Bypasses Patches to Expose Windows Systems
Security researchers have disclosed a new Microsoft Defender zero-day exploit, dubbed ShieldCrash, that can achieve full System privileges on fully patched Windows systems. The PoC reportedly demonstrates arbitrary file read at System level, with the…
Wed 9 Sep· 11 articles
-
Google Chromium V83 articles this day · SecurityOnline first
BlueMoon Exploit Kit Races to Exploit Fresh Chrome and Windows Flaws · Chrome Zero-Day Chain BlueMoon Drops Espionage Backdoors on Windows
-
BlueMoon Exploit Kit Races to Exploit Fresh Chrome and Windows Flaws
Proofpoint reports that a chrome-and-windows exploit kit, dubbed BlueMoon, has been deployed rapidly by at least four groups after chaining three vulnerabilities to install malware of choice. The chain exploits two Chromium vulnerabilities in the V8 engine…
-
Chrome Zero-Day Chain BlueMoon Drops Espionage Backdoors on Windows
Four espionage-linked clusters are openly deploying a previously undocumented Chrome/Windows exploit chain, dubbed BlueMoon, within days of each other. The first attribution goes to APT31 (China-aligned) on 28 August 2026, with subsequent activity from other…
-
Chinese-Linked Spies Exploit Chrome and Windows Zero-Days
Proofpoint threat researchers have tracked a new BlueMoon exploit kit used in espionage campaigns, chaining Chrome/Chromium browser flaws with a Windows kernel privilege escalation to breach targeted networks. The operation, active from late August into…
-
-
Microsoft Patches 964 CVEs as Two Windows Zero-Days Face Attacks
Microsoft’s September 2026 Patch Tuesday delivers what the vendor describes as the largest ever batch of fixes, addressing 964 CVEs, with 104 rated Critical and 860 rated Important. Microsoft notes 974 CVEs in total for the release, but ten affect cloud…
-
Microsoft Windows3 articles this day · The Hacker News first
Microsoft Patches Record 974 CVEs Amid Exploited Windows Zero-Days · Microsoft Fixes Nearly 1,000 Flaws in Record Patch Tuesday Update
-
Microsoft Patches Record 974 CVEs Amid Exploited Windows Zero-Days
Microsoft has reported a record-breaking 974 CVEs addressed in its September 2026 Patch Tuesday, shattering the previous high of 570 CVEs. The August–September trend shows a sharp rise in patched flaws, with Windows accounting for 723 CVEs and Office for…
-
Microsoft Fixes Nearly 1,000 Flaws in Record Patch Tuesday Update
Microsoft’s September 2026 Patch Tuesday set another record, with Microsoft stating fixes for up to 974 CVEs across Windows, Exchange, SharePoint, SQL Server and other services. The update slate includes two zero-days exploited in the wild and 20 wormable…
-
Microsoft Patches 974 Flaws as Two Windows Zero Days Exploited
Microsoft’s September Patch Tuesday set a new record, with fixes for 974 vulnerabilities across its software stack, including two flaws that were already being exploited in the wild. The breakdown cited by Microsoft shows 723 in Windows, 111 in Office and…
-
-
Microsoft Malware Protection Engine3 articles this day · SecurityOnline first
ShieldCrash PoC Revives Microsoft Defender SYSTEM File Read Flaw · Microsoft Defender Zero Day Bypasses Patch to Read Windows Files as SYSTEM
-
ShieldCrash PoC Revives Microsoft Defender SYSTEM File Read Flaw
Security researcher Chaotic Eclipse (INFINITE NIGHTMARE, MSNightmare, Nightmare-Eclipse) released a new zero-day exploit named ShieldCrash, a PoC that demonstrates an arbitrary file read as SYSTEM in Microsoft Defender. The PoC targets a vulnerability…
-
Microsoft Defender Zero Day Bypasses Patch to Read Windows Files as SYSTEM
A security researcher going by Chaotic Eclipse has released a proof-of-concept demonstrating a new zero-day in Microsoft Defender, named ShieldCrash. The PoC suggests it bypasses the previously patched ShieldBreak vulnerability, CVE-2026-69414 (CVSS 7.8), by…
-
Microsoft Defender 0day PoC Exposes SYSTEM Files on Windows
A publicly available 0day in Microsoft Defender, dubbed ShieldCrash, has been disclosed with a working PoC that can read arbitrary files as SYSTEM on all supported Windows versions. The flaw is associated with CVE-2026-69414 and follows an initial…
-
-
CVE-2026-41870: Unauthenticated RCE in Apache Nutch
The page reports on four critical vulnerabilities detected in various software. Key points include: 1. **CVE-2026-75650**: An Adobe Commerce and Magento vulnerability concerning improper neutralization of special template elements. 2. **CVE-2026-81963**: A…
Tue 8 Sep· 10 articles
-
Microsoft Windows3 articles this day · CISA first
Microsoft Fixes 974 Flaws Including Two Exploited Windows Zero Days · Microsoft’s Record 972-Flaw Patch Haul Includes Two Zero-Days
-
Microsoft Fixes 974 Flaws Including Two Exploited Windows Zero Days
Microsoft has released a record-breaking Patch Tuesday, issuing updates to fix at least 974 security holes across Windows and related software. The batch dwarfs July’s previous record of 570 vulnerabilities and brings the year’s total to more than 2,600. The…
-
Microsoft’s Record 972-Flaw Patch Haul Includes Two Zero-Days
Microsoft’s September patch release is described as a record by Ars Technica, fixing about 972 vulnerabilities, with 112 rated as high-severity critical. The piece notes that two months earlier Microsoft set a prior record with 570 fixes. When including the…
-
CISA Warns Attackers Are Exploiting Windows Update Privilege Flaw
CISA added CVE-2026-81963 to its Known Exploited Vulnerabilities (KEV) catalogue on 8 September 2026. The vulnerability affects Microsoft Windows and is named the Microsoft Windows Link Following Vulnerability. It allows a local attacker to escalate…
-
-
Microsoft Windows4 articles this day · SecurityWeek first
Microsoft’s Record Patch Tuesday Fixes Two Exploited Windows Zero-Days · Microsoft Fixes 974 Flaws as Two Windows Zero Days Face Exploitation
-
Microsoft’s Record Patch Tuesday Fixes Two Exploited Windows Zero-Days
Microsoft's September 2026 Patch Tuesday update disclosed a total of 999 vulnerabilities, including 974 related to Microsoft products, marking a historic high for the company. Key issues include a zero-day elevation of privilege vulnerability in Windows ALPC…
-
Microsoft Fixes 974 Flaws as Two Windows Zero Days Face Exploitation
Microsoft released fixes for 974 unique vulnerabilities in its September Patch Tuesday, a figure that would once have represented a full year’s worth of CVEs. Of these, two zero‑days are already under active exploitation, and 58 further flaws are considered…
-
CISA Flags Actively Exploited Windows Flaw Enabling Privilege Escalation
CISA has added CVE-2026-85880 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Microsoft Windows and is a heap-based buffer overflow in Windows Advanced Local Procedure Call that enables local privilege escalation. The flaw…
-
Microsoft Fixes 974 Flaws in Record Patch Tuesday Update
Microsoft has issued a record September Patch Tuesday, fixing 974 CVEs across its product range, including two zero-days that have seen exploitation in the wild. The first exploited zero-day, CVE-2026-85880, is a heap buffer overflow in the Windows ALPC…
-
-
Adobe and Microsoft Patch 997 Flaws as Exploited Threats Mount
Adobe released a September 2026 patch set spanning 10 bulletins and 172 unique CVEs across products including Commerce, Campaign Classic, ColdFusion, Experience Manager, Photoshop, Illustrator, Animate and Acrobat/Reader. The standout is APSB26-146 for Adobe…