News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Mon 19 Oct· 11 articles
-
Laravel Fixes Critical TokenGuard Flaw That Could Enable Account Takeovers
Laravel has disclosed two security advisories on 19 October 2026, including a high-severity authentication bypass in TokenGuard that could enable account takeover without any login or valid token. The flaw, rated CVSS 9.2, allows an unauthenticated attacker…
SecurityOnline -
AI Fuzzer Uncovers High-Severity Flaws in 45% of Projects Tested
Bright Security has launched STAR Fuzzer, an agentic fuzzing mode that automatically identifies security-critical functions, generates per-function harnesses, and issues byte-exact payloads to reproduce every confirmed finding. In its initial open-source…
-
Roundcube Patches 20 Flaws, Including IMAP Injection and XSS Attacks
Roundcube has released security updates for versions 1.6.20 and 1.7.5 on 19 October 2026, addressing a total of 20 vulnerabilities spanning IMAP command handling, header processing, and several webmail-specific flaws. The advisory notes that these fixes…
SecurityOnline -
Attackers Hijack AOMEI Updates to Deploy Backdoors on Enterprises
Between April and July 2026, UNC7017 attackers tampered with AOMEI’s official update infrastructure for brief windows of five to ten minutes, delivering the CROSSROAD downloader and SHINYROAD backdoor to enterprise systems during those moments. They modified…
SecurityOnlineUNC7017 -
Microsoft links Exchange server failures to a new Windows memory cap
Microsoft warns that Exchange Server instability observed after October 2026 Patch Tuesday is linked to Windows updates, not an Exchange patch. Since 13 October 2026, some on‑premises Exchange servers under heavy load have begun experiencing failures, with…
SecurityOnline -
Critical Linux Flaw Could Let Virtual Machines Write to Host Memory
PWNAI Research has disclosed PwnEscape, a critical Linux kernel VM escape flaw tracked as CVE-2026-99999, which was demonstrated in lab tests to leak host memory from a guest VM and could potentially allow root activity on the host. The vulnerability…
-
CISA warns of critical flaws in medical archives and EseeCloud cameras
CISA has issued two advisories detailing nine vulnerabilities in the dcm4chee-arc-light medical archive and in Guangzhou Juan IoT Technology’s EseeCloud IP cameras, with three critical flaws in EseeCloud and six in the dcm4chee archive. For…
-
Six Linux Kernel Flaws Have Public PoCs for Root Access and Escape
Researchers have publicised six Linux kernel vulnerabilities, collectively dubbed “Infinity Core,” with full PoCs that can lead to local privilege escalation and container escape. Hyunwoo Kim’s write-up includes public PoCs for five flaws that reportedly…
-
Actively Exploited Flaws Hit Cisco, BeyondTrust and WordPress Plugin
Between 12 and 18 October 2026, CVE Watchtower logged 5,499 new vulnerabilities, with this weekly review tracking 12 exploited flaws. Six of those were flagged by Daily Cybersecurity’s intelligence sources, and three of the exploited flaws are not yet…
-
Apache Kylin’s Critical SQL Injection Flaw Prompts Urgent Upgrade
Apache has disclosed a set of vulnerabilities across its Kylin, Airflow and related components, with the most severe being a critical SQL injection in Apache Kylin. The overall advisory covers 12 Kylin flaws and three Airflow provider issues, plus notes on…
-
Attackers Exploit Plex Flaws to Run Cryptominers and Proxy Tools
Attackers have begun exploiting Plex Media Server vulnerabilities in the wild, following a full write-up and PoC by researcher Zach Main on 17 October 2026. The exploit chain, dubbed Plex2Shell, combines four CVEs to achieve unauthenticated remote code…
Sat 17 Oct· 1 article
-
Compromised Rank Math SEO Plugin Left WordPress Sites Backdoored
Rank Math SEO PRO for WordPress has been affected by a supply-chain compromise in a subset of its 3.0.123 distribution files, with malicious code embedded in trojanised downloads between 15 October 2026 at 20:02 UTC and 16 October 2026 at 07:12 UTC. The flaw…
SecurityOnline
Fri 16 Oct· 14 articles
-
Fake traffic fine apps use GhostBat RAT to steal UPI PINs and OTPs
Cyble Research and Intelligence Labs, along with independent researcher Karan Dhillon and Indian police advisories, have documented a new Android campaign attributed to GhostBat RAT operating within the broader GhostX ecosystem. The attackers use…
SecurityOnlineGhostBat -
BeyondTrust Patches Remote Access Flaw Exploited to Steal Credentials
BeyondTrust disclosed a critical remote-access vulnerability in its BeyondTrust Remote Support product, tracked as CVE-2026-102764, with a CVSS of 9.3. The flaw allows unauthenticated remote attackers to bypass origin validation in internal messaging…
-
Espionage Group Exploits WinRAR Flaw to Target CIS Governments
Security researchers have publicised an active espionage campaign attributed to the UAT-6275 group (also tracked as TAG-193) targeting CIS governments and allied institutions. The campaigns ran from June 2025 to August 2026, culminating in four distinct…
-
Hirudo Trojan Replaces Banking Apps to Steal Credentials and PINs
ThreatFabric researchers have identified a new Android banking trojan, Hirudo, that goes beyond traditional overlays by uninstalling legitimate banking apps and replacing them with patched copies. Once a victim installs a lure app (for example Shopora, 1V1…
SecurityOnline -
Google fixes critical Chrome Prerender flaw in 10 vulnerability patch
Google has released Chrome 155.0.8059.84/85 on 15 October 2026, delivering fixes for ten security vulnerabilities, including a critical use-after-free flaw in Prerender and seven high‑severity flaws. Google reports that there has been no confirmed…
-
Anthropic Replaces Git With Scion as AI Code Activity Surges
Anthropic has replaced Git with a proprietary internal version control system named Scion, designed to cope with its large monorepo and the heavy output from Claude-style AI development. The migration, completed over five months, involved a small team of…
SecurityOnline -
Windows 11 Update Blocks Remote Desktop Logins for Standard Users
Microsoft has flagged a remote desktop connectivity issue affecting Windows 11 devices that have installed cumulative updates KB5124010 (and later). The problem causes Remote Desktop connections from non-administrator users to be rejected, with the handshake…
SecurityOnline -
Android 17 Build Introduces a Bionic Flaw That Breaks Wide Strings
Select September builds of Android 17 harbour a critical wide-character parsing flaw in the Bionic C library. The vulnerability affects the wcscspn() and wcspbrk() functions, which prematurely terminate string scans when they encounter non-ASCII characters.…
SecurityOnline -
Mitsubishi Patches Critical Flaws in Industrial Software, but Some Products Remain Exposed
Mitsubishi Electric has issued a security advisory dated 15 October 2026 outlining four critical and high-severity flaws in the ICONICS Suite and related GENESIS64/GENESIS products. The vulnerabilities enable a range of attacker actions, including…
-
Progress Patches 12 High Severity Flaws in MOVEit Transfer
Review the Progress security bulletin fixing 12 MOVEit Transfer vulnerabilities, including high-severity flaws CVE-2026-87093 and CVE-2026-89067. Related Posts: Mitsubishi Electric Patches Four Critical ICONICS Suite Vulnerabilities Backuply WordPress Plugin…
-
Yandex Outage Cut Bot Traffic, but Russian Operators Quickly Adapted
Independent telemetry and Cloudflare’s analysis contest claims that Russian bot activity was crippled by strikes on data centre infrastructure. The article notes that Ukrainian President Volodymyr Zelenskyy asserted precision drone strikes degraded hostile…
SecurityOnline -
Backuply SQL Flaw Lets Subscribers Gain WordPress Admin Access
SecurityOnline[.]info reports a high-severity SQL injection vulnerability in the Backuply WordPress plugin, tracked as CVE-2026-93953. Wordfence disclosed the flaw on 15 October 2026, with a CVSS v3 score of 8.0 (High). The vulnerability affects all versions…
-
AWS Patches Critical Neptune Flaw That Could Enable Engine Abuse
AWS has released a security bulletin confirming a critical vulnerability in Amazon Neptune, tracked as CVE-2026-110812, with a CVSS score of 9.9 (v3). The flaw stems from unsafe deserialization of untrusted data within the Apache TinkerPop Gremlin query…
-
Google Cuts AI Plus Users Off from Gemini Pro Models in November
Google has restructured its consumer AI tiers, limiting access to higher‑end Pro models for AI Plus subscribers. Under the new framework, free-tier users stay on the lightweight Gemini Flash‑Lite model, while more capable reasoning architectures require a…
SecurityOnline
Thu 15 Oct· 21 articles
-
cURL Fixes High Severity HTTP/2 Flaw That Could Crash Upload Clients
The cURL CVE-2026-92392 vulnerability enables remote code execution during HTTP/2 uploads. Update to cURL 8.23.0 or disable HTTP/2 to protect systems. Related Posts: Next.js Fixes Two Critical Unauthenticated RCE Flaws in Out-of-Band Update Citrix Patches…
SecurityOnline -
Windows 11 Update Breaks Enterprise Wi-Fi Authentication
Microsoft has flagged that the Windows 11 cumulative update KB5127648, released on 15 October 2026, can disrupt enterprise Wi-Fi authentication. Reports from network administrators indicate that WPA2-Enterprise, 802.1X, and PEAP authentication fail during…
SecurityOnline -
Torvalds Tests AI-Written Linux Patch That Triples Read Throughput
Linus Torvalds has experimented with Claude Code, an AI-assisted coding tool, to craft patches for a key Linux memory management subsystem. The eight patches, produced with Claude Code, aim to speed up small-block reads from the page cache by changing how…
SecurityOnline -
Fake WatchGuard VPN site steals credentials before serving genuine installer
A WatchGuard VPN phishing operation was uncovered in October 2026 that steals credentials directly in the browser rather than dropping malware onto endpoints. The campaign uses lookalike WatchGuard domains and an SEO-poisoned search result to lure IT…
SecurityOnline -
CodeAudit VS Code Extension Sends Pasted Code Over Unencrypted HTTP
Akamai researchers have uncovered that the CodeAudit AI extension for Visual Studio Code operates a background activity listener that monitors developer workspace edits from startup and remains active for the entire VS Code session. The extension, published…
SecurityOnline -
Vercel patches critical Next.js flaws that let attackers run code remotely
Vercel released out-of-band security updates for Next[.]js on 14 October 2026, delivering versions 16.4.1 and 15.5.28 to address two critical unauthenticated remote code execution flaws and a high-severity denial-of-service issue. The fixes cover…
-
Citrix Patches XenServer Flaws That Could Let Guests Crash Hosts
A Citrix security update fixes seven XenServer and UniconOS flaws, including guest-to-host and privilege escalation bugs. Patch hosts and thin clients. Related Posts: SiteGuard Server Edition Flaw CVE-2026-106931 Exploited in the Wild for Root Access Juniper…
-
Windows 11 KB5127648 aims to fix long-running mouse lag in games
Microsoft has released Windows 11 KB5127648, addressing a long-running issue that caused mouse input lag during gaming sessions. The update is officially documented as the first time Microsoft has described this particular remediation in its release notes,…
SecurityOnline -
Attackers Exploit SiteGuard Flaw to Seize Server Control as Root
A SiteGuard Server Edition vulnerability, CVE-2026-106931, is exploited in the wild and grants root or SYSTEM access. Update to Ver8.00 Update 5 now. Related Posts: Citrix Patches XenServer Host Escape Risks and UniconOS Privilege Escalation Flaws Juniper…
-
Google quadruples Chrome memory bug bounties, offering up to $20,000
Google restructures its Chrome VRP rewards, raising baseline payouts for memory corruption bugs to $2,000 and offering up to $20,000 for critical exploits. Related Posts: npm Trusted Publishing Now Expires After 48 Hours Google Play AI Apps Revolutionize…
SecurityOnline -
Epic’s rebuilt Launcher brings Linux support but sparks Vibe Coding backlash
Epic Games’ newly rebuilt Epic Games Launcher has sparked a significant backlash centred on the company’s marketing framing, even as the release itself delivers notable technical improvements. The update is described as lightweight and highly responsive,…
SecurityOnline -
Windows 11 will block removable ReFS drives by default from 2027
Microsoft is tightening how ReFS (Resilient File System) volumes on removable or external storage are supported in Windows 11 and Windows Server. Starting with the October 13, 2026 monthly security update, Windows will audit removable ReFS volumes by…
SecurityOnline -
GitHub Closes npm Publishing Flaw Exploiting Reused Repository Names
GitHub has tightened its npm trusted publishing rules after researchers exposed a flaw tied to repository name reuse. A new requirement means that a trusted publishing configuration must complete its first successful publish within 48 hours of creation; if…
SecurityOnline -
Google brings Gemini AI scam protection to more Android phones
Google has announced a broad upgrade to Android scam protections, leveraging Gemini AI to tackle increasingly personalised telecom fraud and social engineering. The update brings real-time scam warnings into the notification shade for a wide range of Android…
SecurityOnline
