News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Mon 2 Nov | 80 | 7 |
| Today, Tue 3 Nov | 15 so far | 2 |
Developing
Tue 2 Jun73 articles
5 articles this day · SecurityOnline first · 3 outlets
CISA adds Oracle WebLogic flaw CVE-2024-21182 to exploited list · CISA Alerts to Active Exploits of Unpatched Oracle WebLogic FlawShow 5 articlesHide 5 articles
- CISA adds Oracle WebLogic flaw CVE-2024-21182 to exploited list15:18Security Affairs
- CISA Alerts to Active Exploits of Unpatched Oracle WebLogic Flaw11:39SecurityWeek
- CVE-2024-21182 Fuels SilentCryptoMiner Attack on Streaming Sites08:11SecurityOnline
- Grandoreiro Banking Trojan Evades Defense via Lookalike Software06:00SecurityOnline
- The Shai-Hulud Infiltration: Red Hat Exploited in Sovereign Supply Chain Breach04:35SecurityOnline
- CISA adds Oracle WebLogic flaw CVE-2024-21182 to exploited list
- Microsoft 365 Android apps leak tokens via debug flag flaw
Six Microsoft 365 Android apps, including Word, PowerPoint, and Excel, were found to have a serious security flaw due to a debug flag left enabled in production code. This oversight could allow attackers to exploit these apps and access sensitive user tokens…
SecurityWeek - Joe Slowik urges AI to outpace fast moving cyber threats
At Infosecurity Europe, Joe Slowik emphasized the necessity for cybersecurity teams to leverage AI to counter rapidly evolving threats, stating that without this technology, they face imminent failure. Slowik highlighted that traditional human-centric…
Infosecurity - Google patches Android zero day CVE‑2025‑48595 among 124 fixes
Google announced a new Android update aimed at patching 124 vulnerabilities, including a critical zero-day exploit (CVE-2025-48595) linked to privilege escalation in Android's Framework. Though exploitation details remain scarce, it indicates targeted…
- Anthropic's AI Finds 23,000 Flaws in Critical Software Projects
Anthropic is expanding Project Glasswing, a collaborative initiative aimed at enhancing cybersecurity for critical software using AI. Initially begun with 50 partners, it now includes 150 more organizations across 15 countries, including significant players…
SecurityWeek - Bayer rolls out psychology focused training to block AI scams
At Infosecurity Europe 2026, Bayer's CISO, Kevin Jones, unveiled a new security awareness training focused on psychology to counter AI-driven threats. The traditional technical approach was abandoned in favor of teaching employees to recognize psychological…
Infosecurity - XCharge C6 EV chargers face critical firmware and access flaws
The article reports on significant security vulnerabilities found in XCharge C6 electric vehicle chargers, impacting global charging networks. Key vulnerabilities include: 1. **CVE-2026-9037**: A critical firmware update flaw with a CVSS score of 9.3,…
SecurityOnlineCVE-2026-9037 - ActiveMQ bugs let attackers run code and bypass defences
Recent vulnerabilities have been detected in the ActiveMQ messaging system, which could allow for complete remote compromise. Key vulnerabilities include: 1. **Remote Code Execution (RCE)**: Exploitable by attackers leveraging a flawed Jolokia bridge that…
SecurityOnlineCVE-2026-42588 - AI empowers low skill hackers, widening threat to small firms
The rise of AI in cybersecurity has given birth to 'zero-knowledge threat actors'—individuals with minimal technical skill but significant malicious intent. These actors can exploit AI to turn limited expertise into effective cyber-attacks. AI has…
SecurityWeek - Critical Vulnerability in HP VoIP Phones Enables Enterprise Network Breaches
A critical vulnerability tracked as CVE-2026-0826 affects multiple HP Poly Voice VoIP phone models, allowing remote code execution (RCE) with root privileges. The vulnerability is a stack-based buffer overflow occurring during the parsing of Session…
SecurityWeekCVE-2026-0826 - Hackers Simply Asked Meta AI to Give Them Access to High-Profile Instagram Accounts. It Worked
Hackers exploited Meta's AI support chatbot to hijack several high-profile Instagram accounts, including those of Barack Obama’s White House and the Chief Master Sergeant of Space Force. By simply asking the support bot to change the email for the targeted…
DataBreaches - Halo Security Honored with 2026 MSP Today Product of the Year Award
Halo Security has won the 2026 MSP Today Product of the Year Award for its attack surface management platform, marking its second consecutive win. The award recognizes products that reshape managed services, emphasizing innovative features, performance, and…
SecurityOnline - Wardriving assessment across Mexico: Preparing for the 2026 World Cup
The article presents a thorough wardriving assessment conducted in Mexico's major cities (Mexico City, Guadalajara, Monterrey) ahead of the 2026 FIFA World Cup. It details the infrastructure and security configurations of public Wi-Fi networks, highlighting…
securelist.com - Dark Reading Marks 20 Years With AI Driven Cybersecurity Forecast
Dark Reading celebrates its 20th anniversary by forecasting the future of cybersecurity, emphasizing significant trends shaping enterprise defense. The key predictions include: 1) **Microspheres**: Transitioning to assume-breach models with…
Dark Reading - Organisations Must Adapt Defences to Rising AI Powered Exploits
The article discusses the challenges faced in vulnerability management due to the rise of AI-driven exploitation techniques. It emphasizes the need for organizations to adapt their security strategies to effectively counteract these new threats. Key points…
The Hacker News - Threat Actor Uses AI to Build EDR Evasion Tools
A threat actor has been observed using AI coding tools to create malware that can evade endpoint detection and response (EDR) systems. This was discovered by Sophos X-Ops when abnormal activity was detected in a customer's system. The AI-assisted development…
Infosecurity - Meta AI recovery flaw lets hackers hijack Instagram accounts
Last week, multiple high-profile Instagram accounts were compromised by attackers exploiting a flaw in Meta’s AI-powered account recovery assistant. By leveraging this flaw, attackers linked their email addresses to the targeted accounts, effectively taking…
SecurityWeek - EDR Evolves Into Operational Resilience for Modern Threats
The article discusses how leading organizations are redefining Endpoint Detection and Response (EDR) into operational resilience. It highlights the increasing role of EDR in enhancing cybersecurity frameworks and ensuring organizations can adapt to evolving…
The Hacker News - CVE-2026-8206: Kirki flaw lets attackers hijack WordPress admins
A critical vulnerability (CVE-2026-8206) in the Kirki plugin for WordPress has been identified, allowing unauthenticated privilege escalation with a CVSS score of 9.8. This flaw can lead to account takeovers, affecting approximately 150,000 out of over…
SecurityOnlineCVE-2026-8206 - BlackToad Uses Remcos RAT and Network Blackout in Phishing Attack
Recent cybersecurity investigations have uncovered a dangerous phishing campaign using Remcos RAT (Remote Access Trojan) targeting corporate networks. The attackers initiate contact via urgent emails, tricking users into downloading compressed archives…
SecurityOnlineBlackToad - FlutterShell backdoor targets macOS through malvertising ads
The article discusses an active cybercrime campaign named Operation FlutterBridge, which targets macOS users via malvertising. This campaign introduces a new backdoor malware named FlutterShell, capable of masquerading as legitimate applications while…
Unit 42 - Attackers Hijack Red Hat npm Scope to Steal Cloud Secrets
On June 1, 2026, Red Hat's npm namespace was hijacked, leading to the distribution of malicious packages designed to steal developer credentials and cloud secrets. The attack involved publishing 32 compromised packages within 72 seconds, leveraging Red Hat's…
Infosecurity - UK firms consider AI powered attacks their top cyber threat
The article reports on a study by ManageEngine which reveals that AI-powered cyber-attacks are the greatest concern for UK organizations, with 43% of respondents prioritizing investment in AI threat preparedness over traditional threats like ransomware and…
Infosecurity - 23andMe exposed genetic information of millions, lawsuit says
A lawsuit has been filed against 23andMe by the California Attorney General for allegedly failing to secure sensitive genetic data after a 2023 breach that exposed information from nearly seven million users. The breach was attributed to old…
Malwarebytes - Red Hat NPM supply chain attack spreads credential stealing worm
On Monday, Red Hat's NPM repository suffered a supply chain attack where hackers maliciously published 32 compromised packages aimed at distributing a credential-stealing worm. The attack likely involved automation, compromising the CI/CD pipeline using…
SecurityWeek - SideCopy targets Afghan finance ministry using Xeno RAT
The article discusses a cyber espionage incident involving a group linked to Pakistan called SideCopy, which has targeted the Finance Ministry of Afghanistan using a malware known as Xeno RAT. The group is noted for exploiting various cyber tactics to gain…
The Hacker NewsSideCopy - Mobile Game Fake Virus Alerts Trick Users Into Malware Scams
The article discusses the prevalence of fake virus alerts in mobile games, which are often used by cybercriminals as scams to trick users into divulging personal information or downloading malicious software. Examples of common scams include fake alerts…
Malwarebytes - Leaders overlook threat intel gaps, putting firms at risk
A new study presented at Infosecurity Europe 2026 reveals that business leaders struggle with understanding threat intelligence, which may leave organizations vulnerable to cyber threats. The report highlights an 'intelligence-stakeholder gap' where valuable…
Infosecurity - EU sectors improve cyber defence but health, water lag
The ENISA NIS360 2026 report highlights improvements in cybersecurity across EU critical sectors, noting that while overall progress is being made, some vital areas remain vulnerable. The banking, electricity, and telecommunications sectors rank highest in…
Security Affairs - Dashlane thwarts brute force 2FA attack, under 20 vaults hit
Dashlane, a password management and credential security provider, reported a brute-force attack that targeted its accounts starting May 31. The attackers used automated software to guess two-factor authentication (2FA) codes in an attempt to register their…
SecurityWeek - SVG Phishing Emails Use Base64 JavaScript to Redirect Users
Xavier Mertens reports a recent surge in phishing emails that utilize SVG files to deliver malicious content. These SVG files, while simplistic and lacking graphical elements, contain JavaScript designed to redirect victims to phishing sites. The payload is…
SANS ISC - Oracle launches first monthly security patch, fixes 77 flaws
Oracle has released its first monthly Critical Security Patch Update (CSPU) addressing 77 vulnerabilities, including 12 critical issues. The CSPU is designed to provide quicker fixes for high-priority vulnerabilities, supplementing the quarterly Critical…
SecurityWeek - Fake RVTools installer uses Sectigo cert to deliver Python RAT
A recent cybersecurity alert highlights a sophisticated espionage campaign targeting virtualization administrators through a fake RVTools installer. This malicious payload uses a valid Sectigo code-signing certificate to bypass security measures, allowing it…
SecurityOnline - Malware Hides C2 in Steam Comments to Hijack WordPress Sites
GoDaddy researchers discovered malware affecting around 1,980 WordPress sites that utilizes Valve’s Steam platform as a command-and-control (C2) infrastructure. The malware hides its C2 instructions within Steam Community profile comments using invisible…
Security Affairs - High-Severity Ivanti ITSM Vulnerability Exposes IT Systems
A critical vulnerability (CVE-2026-9614) has been identified in the Ivanti IT Service Management platform, scoring 8.8 on the CVSS scale, allowing unauthorized administrative access. The issue impacts both cloud and on-premise systems, with urgent updates…
SecurityOnlineCVE-2026-9614 - Twill Typhoon RAT hits Asia Pacific firms via cloud mimic malware
A new cyber espionage operation known as the Twill Typhoon RAT campaign is targeting organizations in the Asia-Pacific region, employing sophisticated tactics to gain access to corporate environments. The attackers utilize a strategy that includes mimicking…
SecurityOnline
