Skip to content
Sign in

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Articles per day, last 14 days

Most articles on Wed 21 Oct (96); 13–17 on weekend days.

21 Oct9623252729312Today1 so faravg 63
  • On CISA KEV CVEs
  • Other coverage
  • Closed-day average
Show as table
Articles per day, last 14 days
DayArticlesOn CISA KEV CVEs
Wed 21 Oct9618
Thu 22 Oct8411
Fri 23 Oct6816
Sat 24 Oct134
Sun 25 Oct132
Mon 26 Oct7621
Tue 27 Oct9518
Wed 28 Oct8716
Thu 29 Oct7817
Fri 30 Oct6910
Sat 31 Oct143
Sun 1 Nov170
Mon 2 Nov807
Tue 3 Nov904
Today, Wed 4 Nov1 so far0

Developing

Exploited only
108 articles · 12–13 May

Latest days

Wed 13 May52 articles

  1. Over Half of US and UK CISOs Would Pay Ransomware, Survey Finds

    Published on 13 May 2026, the Infosecurity Magazine report notes that in the event of a ransomware attack, over half of CISOs would consider paying the ransom to end the incident and restore systems faster. According to Absolute Security, 58% of CISOs would…

    Infosecurity
  2. Keymous+ group fuels surge in global DDoS hacktivist attacks

    Keymous Plus, also known as Keymous+ threat group, markets itself as a hacktivist collective, but researchers describe it as a North African hybrid actor blending political performance with a commercial DDoS-as-a-Service platform and an alliance network…

    SOCRadarKeymous+
  3. ShinyHunters

    2 articles this day · Security Affairs first · 2 outlets

    Congress Demands Details on Canvas Cyberattack Affecting Millions · Instructure settles Canvas breach, ShinyHunters return dataShow 2 articles
  4. [Webinar] Why Your AppSec Tools Miss the "Lethal Path" (and How to Fix It)

    According to The Hacker News, a webinar titled “[Webinar] Why Your AppSec Tools Miss the “Lethal Path” (and How to Fix It)” brings together experts from Wiz and ex-Okta/GitLab/Auth0 to explain how attackers chain together tiny flaws to form a lethal path to…

    The Hacker News
  5. Most Remediation Programs Never Confirm the Fix Actually Worked

    Security teams have long struggled to prove that patches actually remove risk rather than just marking a ticket as done. The Mandiant’s M-Trends 2026 report puts the mean time to exploit at an estimated negative seven days, while Verizon’s 2025 DBIR notes a…

    The Hacker News
  6. OpenLoop Health breach leaks 716k patients' personal data

    The SecurityWeek article reports that 716,000 individuals were affected by a January 2026 data breach at the telehealth platform OpenLoop Health, with personal information exfiltrated from its systems. Hackers had access to OpenLoop Health systems between 7…

    SecurityWeek
  7. May 2026 Patch Tuesday: 137 Vulnerabilities, No Zero-Days

    May 2026 Patch Tuesday saw Microsoft release updates addressing 137 vulnerabilities across Windows and many Microsoft products, with no zero-day vulnerabilities for this month. Of these, 30 are rated Critical, with Elevation of Privilege vulnerabilities…

    SOCRadarCVE-2026-42826
  8. Microsoft 365 Apps for EnterpriseCVE-2026-40361

    2 articles this day · SecurityWeek first · 2 outlets

    Patch Tuesday Updates Fix 137 Flaws, Including Critical Word Bug · Attackers can exploit CVE-2026-40361 via zero click Outlook flawShow 2 articles
  9. G7 cyber agencies publish AI SBOM minimum elements guidance

    Multiple government cyber agencies have a new resource defining the minimum elements for software bills of materials (SBOMs) for AI to strengthen the AI-supply chain. The paper, Software Bill of Materials (SBOM) for Artificial Intelligence - Minimum…

    Infosecurity
  10. Microsoft fixes 138 bugs, flags critical DNS heap overflow

    Microsoft on Tuesday patched 138 security vulnerabilities across its product portfolio, with 30 rated Critical, 104 Important, three Moderate and one Low. Of these, 61 are privilege escalation bugs and 32 are remote code execution flaws, including…

    The Hacker NewsCVE-2026-41096
  11. Fortinet FortiAuthenticatorCVE-2026-44277

    2 articles this day · Security Affairs first · 2 outlets

    Fortinet and Ivanti patch 18 flaws, including three critical bugs · Fortinet patches critical RCE flaws in FortiAuthenticator, FortiSandboxShow 2 articles
  12. UK cyber sector hits £14.7bn revenue as jobs and firms rise

    The UK government has hailed the continued growth of its burgeoning cybersecurity sector, which generated revenues of £14.7bn ($19.9bn) last year, according to The UK government. The update published on 13 May stated that the cybersecurity industry…

    Infosecurity
  13. Intel and AMD patch 70 flaws, including critical GPU driver bugs

    Chipmaker Patch Tuesday: Intel and AMD Patch 70 Vulnerabilities reports that on 13 May 2026, SecurityWeek detailed more than two dozen advisories addressing 70 vulnerabilities across Intel and AMD product portfolios. According to SecurityWeek, Intel…

    SecurityWeekCVE-2026-20794
  14. Microsoft Windows Server 2012CVE-2026-41089

    2 articles this day · Rapid7 first · 2 outlets

    Microsoft patches 120 bugs, flags critical Netlogon and DNS RCEs · Microsoft Patch Tuesday patches Netlogon and DNS RCE flawsShow 2 articles
  15. GemStuffer Campaign Hijacks RubyGems to Exfiltrate UK Council Data

    Cybersecurity researchers have highlighted a campaign dubbed GemStuffer that targeted the RubyGems repository with more than 150 gems acting as data exfiltration channels rather than for malware distribution. The campaign purportedly fetches pages from U.K.…

    The Hacker News
  16. RubyGems pauses new accounts after 500+ malicious gem push

    Hundreds of malicious packages prompted RubyGems to suspend new registrations. The SecurityWeek report notes that more than 500 junk packages were pushed by bot accounts during a spam campaign, with the apparent target the RubyGems service itself rather than…

    SecurityWeek
  17. Google rolls out opt in logging for Android spyware defence

    Google revealed a new opt‑in Android feature called Intrusion Logging, designed for storing forensics logs to help analyse sophisticated spyware attacks, and it was developed in partnership with Amnesty International and Reporters Without Borders. The logs…

    The Hacker News
  18. Siemens issues 18 advisories patching critical OT flaws

    Siemens has published 18 new security advisories, with several describing critical vulnerabilities across products such as Sentron 7KT PAC1261 Data Manager, Simatic S7 PLC web server, Ruggedcom Rox, ROS#, Simatic CN4100, and Opcenter RDnL. The company also…

    SecurityWeek
  19. AI Driven SEO Scam Fuels Fake Marketplaces to Steal Payment Data

    A guest diary by Joshua Nikolson on the SANS ISC platform describes using AI-assisted fraud campaigns and SEO poisoning to drive traffic to fake marketplaces that copy real product listings. The author notes that a VirusTotal page for the target URL showed…

    SANS ISC
  20. ISC Stormcast For Wednesday, May 13th, 2026 https://isc.sans.edu/podcastdetail/9930, (Wed, May 13th)

    ISC Stormcast for Wednesday, May 13th, 2026 is published with the Threat Level shown as green. The diary notes that the Handler on Duty is Rob VandenBrink, and it directs readers to a page to learn more about Johannes Ullrich’s SANS classes. It includes a…

    SANS ISC
  21. How Proxifier Lets You Monitor Windows App Traffic via Burp Suite

    In a recent ISC diary, Rob VandenBrink explains how to make Windows executable traffic visible by directing it through a proxy using Proxifier, a tool that lets you create rules such as “send traffic from abc[.]exe to proxy A” or “send everything else…

    SANS ISC

Tue 12 May56 articles

  1. Microsoft AI builds synthetic logs to improve threat detection

    The article discusses the use of AI-assisted synthetic attack log generation to enhance detection engineering in cybersecurity. It highlights the challenges of obtaining high-quality attack logs due to the abundance of benign activity and the difficulty in…

    Microsoft
  2. MDASH AI tool spots 16 Windows bugs, RCE in tcpip.sys

    Microsoft’s security post reveals that its new multi-model agentic scanning harness, codename MDASH, helped researchers uncover 16 CVEs across the Windows networking and authentication stack, including remote code execution flaws in tcpip[.]sys and an…

    Microsoft
  3. Patch Tuesday, May 2026 Edition

    Artificial intelligence platforms are becoming adept at identifying security vulnerabilities in software, evident in recent updates from major companies like Microsoft, Apple, Mozilla, and Oracle. In the latest Patch Tuesday, Microsoft addressed 118…

    Krebs on SecurityCVE-2026-41089
  4. Microsoft Patch May 2026 fixes 137 bugs, zero day free

    It's Patch Tuesday for Microsoft and Not a Zero-Day In Sight, with Microsoft reporting no actively exploited zero-days, marking the first such lull in nearly two years. The May 2026 update fixes 137 CVEs, of which Microsoft considers 13 as likely candidates…

    Dark ReadingCVE-2026-42898
  5. Hackers accessed BWH Hotels reservation system for months

    BWH Hotels reported a data breach where hackers accessed guest reservation data from October 2025 to April 2026, compromising names and contact information of an unknown number of guests. The breach affected multiple brands under BWH, which operates over…

    Security Affairs
  6. The May 2026 Security Update Review

    The May 2026 Security Update Review highlights significant security patches recently released by Adobe and Microsoft. Adobe issued 10 bulletins addressing 52 unique CVEs across various products, with a focus on Adobe Commerce and Adobe Connect due to their…

    thezdi.com
  7. Microsoft Confluence SAML SSO pluginCVE-2026-41103

    2 articles this day · SecurityWeek first · 2 outlets

    Microsoft May 2026 Patch Tuesday, (Tue, May 12th) · Microsoft Patches 137 VulnerabilitiesShow 2 articles
  8. Exaforce Raises $125 Million for Agentic SOC Platform

    According to SecurityWeek News, Exaforce has raised a total of $200 million after unveiling a $125 million Series B round, with the new funds earmarked for product development and international expansion. The latest investment comes from HarbourVest, Peak…

    SecurityWeek
  9. Adobe fixes 52 flaws, patches Connect code execution bugs

    Adobe on Tuesday announced patches for 52 vulnerabilities across 10 products, with several flaws capable of arbitrary code execution and privilege escalation. According to Adobe, more than half of the weaknesses addressed could be exploited for arbitrary…

    SecurityWeekCVE-2026-34659
  10. New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution

    The article discusses a newly discovered vulnerability in Exim's BDAT functionality that affects GnuTLS builds, potentially allowing remote attackers to execute arbitrary code. This issue poses a significant risk to email security for users of affected Exim…

    The Hacker News
  11. Defending consumer web properties against modern DDoS attacks

    If you own online services and web portals, you’re likely noticing a dramatic upswing in DDoS attacks, with modern campaigns becoming multi-vector and increasingly tailored to stress specific applications and user flows. Microsoft notes that DDoS activity…

    Microsoft
  12. Claude chat scam lures Mac users to steal credentials, crypto

    Researchers have found that criminals are using sponsored search results and shared Claude chats to lure Mac users into a ClickFix attack, a social‑engineering technique that covertly installs malware on the device. The technique involves ads that appear to…

    Malwarebytes
  13. French AI Security Startup White Circle Bags $11M Seed Funding

    French cybersecurity startup White Circle today announced raising $11 million in seed funding from multiple angel investors. Founded in 2025, Paris-based White Circle has built a platform that functions as a control layer for AI, unifying safety, evaluation,…

    SecurityWeek
  14. US bank admits customer data shared with unauthorised AI app

    A US commercial bank has disclosed to the Securities and Exchange Commission that it revealed customer data to an unauthorized AI application, according to the report published on 12 May 2026. Community Bank, which operates in southwestern Pennsylvania, Ohio…

    DataBreaches
Show older articles
CyberSIXTSignal over noise
Updated AboutDevelopersSign in