Skip to content
Sign in

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Articles per day, last 14 days

Most articles on Wed 21 Oct (96); 13–17 on weekend days.

19 Oct21962325272931Today67 so faravg 61
  • On CISA KEV CVEs
  • Other coverage
  • Closed-day average
Show as table
Articles per day, last 14 days
DayArticlesOn CISA KEV CVEs
Mon 19 Oct6012
Tue 20 Oct8616
Wed 21 Oct9618
Thu 22 Oct8411
Fri 23 Oct6816
Sat 24 Oct134
Sun 25 Oct132
Mon 26 Oct7621
Tue 27 Oct9518
Wed 28 Oct8716
Thu 29 Oct7817
Fri 30 Oct6910
Sat 31 Oct143
Sun 1 Nov170
Today, Mon 2 Nov67 so far7

Developing

Exploited only
84 articles

Latest days

Tue 9 Jun84 articles

  1. WinRAR flaw used by Russia linked hackers to spy on Ukraine

    The article discusses the exploitation of a vulnerability in WinRAR software by groups aligned with Russia to deploy stealing malware in Ukraine. It highlights concerns around cybersecurity, particularly in conflict zones, illustrating how vulnerabilities…

    The Hacker News
  2. SAP_SE SAP NetWeaver AS ABAP and ABAP PlatformCVE-2026-44748

    2 articles this day · SecurityOnline first · 2 outlets

    SAP issues urgent patch for critical SAML flaw CVE-2026-44748 · SAP SAML bug lets attackers bypass login, urgent patch called forShow 2 articles
  3. Check Point Security GatewayCVE-2026-50751Exploited

    4 articles this day · SecurityOnline first · 4 outlets

    U.S. Agencies Ordered to Patch CVE-2026-50751 in Check Point VPN · Check Point VPN Zero-Day Exploited in Qilin Ransomware AttacksShow 4 articles
  4. Self replicating AI worm spreads using local open weight models

    Researchers have developed a self-replicating AI worm that utilizes local, open-weight models, posing significant cybersecurity risks. The worm is capable of operating independently without external components and raises concerns about its potential for…

    The Hacker News
  5. Google Chromium V8CVE-2026-11645Exploited

    5 articles this day · SecurityWeek first · 5 outlets

    Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild - Patch Now · Google patches Chrome V8 flaw CVE-2026-11645 amid 74 fix updateShow 5 articles
  6. Supply chain malware Shai-Hulud targets NPM and PyPI packages

    Security researchers have reported new iterations of the Shai-Hulud supply chain attack, which have affected over 100 packages across the NPM and PyPI ecosystems since September 2025. The malware, demonstrated by the hacking group TeamPCP, has resulted in…

    SecurityWeekTeamPCP
  7. The Hidden Security Risk in Modern Networks: The Work Between Tools

    The article discusses the cybersecurity risks arising from the interaction between different automated security tools in modern networks. It emphasizes that while automation can enhance security, it also creates vulnerabilities due to poor communication and…

    The Hacker News
  8. Will AI Kill the Bug Bounty Industry?

    AI's rapid adoption in cybersecurity affects both attackers and defenders, significantly influencing bug bounty programs and offensive security. Anthropic’s AI model, Claude Mythos, enhances vulnerability detection but threatens traditional bounty systems by…

    SecurityWeek
  9. Hades PyPI attack hijacks dev secrets through trojanized wheels

    The Shai-Hulud Hades PyPI Campaign involved the compromise of 19 Python packages through malicious wheel artifacts, enabling a trojanized attack that executes code without importing the affected packages. Researchers identified 37 malicious wheels that use…

    SOCRadar
  10. Frost attack uses SSD timing to monitor other sites activity

    The article discusses a new cybersecurity threat known as the FROST attack, which enables websites to track the usage of different sites and applications based on SSD timing. This development raises significant privacy concerns as it allows for detailed…

    The Hacker News
  11. BerriAI LiteLLMCVE-2026-42271Exploited

    13 articles this day · SecurityOnline first · 3 outlets

    LiteLLM, Check Point Flaws Hit as MagicAd Trojan Surges · Check Point VPN flaw under attack as Google slashes AI Plus priceShow 13 articles
  12. Hades PyPI Attack Spreads Bun Malware via 19 Packages

    The article discusses a significant cybersecurity incident involving the Hades PyPI attack, where 19 Python packages were compromised to facilitate the auto-execution of a credential-stealing malware known as Bun. This supply chain attack highlights…

    The Hacker News
  13. JLR Orders In Person Password Resets After £1.9B Cyber Attack

    Jaguar Land Rover (JLR) implemented in-person password resets for over 30,000 staff following a significant cyber-attack in September 2025. Ashish Shrestha, then CISO of JLR, emphasized this action to ensure identity trust post-breach, stating it was crucial…

    InfosecurityScattered Spider
  14. WhatsApp sues NSO Group over new spearphishing attempts

    WhatsApp has filed a motion in a US court against the NSO Group, highlighting new spearphishing attempts linked to the blacklisted spyware firm. After receiving user complaints, WhatsApp disrupted attempts to trick users into clicking malicious links, a…

    InfosecurityNSO Group
  15. CVE-2026-23111 flaw in Linux nf_tables lets local users gain root

    The article discusses CVE-2026-23111, a Linux kernel nf_tables bug that allows local users to gain root privileges via a use-after-free vulnerability. Discovered by researcher Oliver Sieber in 2025, the flaw originates from a logical error in the nf_tables…

    Security AffairsCVE-2026-23111
  16. Argamal Trojan hides in adult game torrents, hijacks ffmpeg.dll

    The article discusses critical vulnerabilities and exploits related to cybersecurity threats, particularly focusing on the Argamal Trojan campaign targeting individuals downloading adult video games. It details how this malware is distributed through…

    SecurityOnline
  17. TA4922 Gang Targets Europe With New Stealth Loader Tactics

    The content details the recent rise of the TA4922 cybercrime group, which has expanded its operations beyond East Asia to Europe and Africa. Their sophisticated attacks employ advanced social engineering techniques, often migrating conversations away from…

    SecurityOnlineTA4922
  18. ISC Stormcast June 9 2026: Xavier Mertens Sees Green Threat Level

    The content provides a brief overview of the daily ISC Stormcast for June 9th, 2026, alongside key resources from the Internet Storm Center (ISC). The handler on duty is Xavier Mertens, and the current threat level is green. Additionally, there are links to…

    SANS ISC
  19. ABB Patches Critical T-MAC Plus Terminal System Flaws

    The article alerts about two critical vulnerabilities detected today: CVE-2026-42271 for BerriAI LiteLLM and CVE-2026-50751 for Check Point Security Gateway, the latter being actively exploited in the wild. Additionally, ABB issued an urgent update regarding…

    SecurityOnlineCVE-2025-14771
  20. Jupyter Gateway Vulnerabilities: Severe CVSS 10 Exploits Uncovered

    This alert details critical exploits discovered in the Jupyter Enterprise Gateway ecosystem, with two vulnerabilities (CVE-2026-44182 and CVE-2026-44181) rated CVSS 10, allowing attackers to execute malicious commands and bypass standard security measures.…

    SecurityOnlineCVE-2026-44182
Show older articles
CyberSIXTSignal over noise
Updated AboutDevelopersSign in