News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Today, Mon 2 Nov | 64 so far | 7 |
Developing
Thu 11 Jun67 articles
- OnyxC2 stealer rents for £250 a month, steals data from 210 apps
The OnyxC2 stealer, available for rent on a cybercrime network, starts at $250 per month and is notable for its stealth and extensive capabilities. Developers provide different pricing tiers, including options for premium features and even outright purchases…
SecurityWeek - Security Teams Struggle to Fit Threat Training Into Schedules
A recent study by ISC2 reveals that many cybersecurity teams struggle to find time for training on emerging cyber threats, despite increased budgets for training. The study surveyed nearly 1,000 cybersecurity leaders from large enterprises and found that 73%…
Infosecurity - Automated Remediation: Microsoft Resolves Cumulative Update Rollback Failures
Microsoft released routine security updates for Windows 11, which led to installation anomalies for some enterprise endpoints. Issues arose primarily for users upgrading to Windows 11 versions 24H2 or 25H2, generating specific error codes such as 0x80073712…
SecurityOnline - Brickcom Cameras Expose Live Feeds to Remote Hackers, CISA Warns
The ICS Advisory ICSA-26-162-03, released on June 11, 2026, addresses vulnerabilities in several Brickcom Cameras, specifically versions 3.2.3.5.6 of the Cube, Dome, Bullet, and Box models. Key points include: 1. Vulnerabilities allow remote, unauthenticated…
CISA - Naxclow IoT Platform flaws open devices to remote hijack
The advisory discusses security vulnerabilities in the Naxclow IoT Platform, released on June 11, 2026, with the alert code ICSA-26-162-02. Specifically, several versions of Naxclow devices, including the Smart Doorbell X3 and the X Smart Home, are at risk…
CISA - Hard coded credentials in Yarbo app put robot telemetry at risk
The CISA advisory (ICSA-26-162-01) highlights critical vulnerabilities in the Yarbo Android/iOS mobile application and its cloud infrastructure, exposing users to risks like unauthorized access to telemetry data and command issuance of robots. Key points…
CISA - Hackers Exploit Langflow Vulnerability for Remote Code Execution
A high-severity vulnerability, tracked as CVE-2026-5027, has been identified in the low-code AI development platform Langflow, which has a CVSS score of 8.8. The flaw is a path traversal issue that allows attackers to write files to arbitrary locations on…
SecurityWeekCVE-2026-5027 - Siemens says Desigo CC patches trigger false malware alerts
Siemens has alerted customers that patch files for its Desigo CC building management system are being incorrectly flagged as malware by various antivirus engines. The patches for Desigo CC versions 7 to 9 include a PowerShell script, which Siemens suspects…
SecurityWeek - VRChat breach exposes 2.4M users’ emails, login history
VRChat, Inc. disclosed a data breach affecting over 2.4 million users, revealing unauthorized access to user profile and login data between May 10 and 12, 2026. Exposed information may include usernames, email addresses, login history, and VRChat+…
Malwarebytes - AI drives CISOs to shift funds to breach attack simulations
The article discusses how artificial intelligence (AI) has disrupted traditional vulnerability management practices, leading Chief Information Security Officers (CISOs) to redirect their budgets towards Breach and Attack Simulation (BAS) strategies. It…
The Hacker News - Interpol Busts SniperDz Phishing Service, Leading to 200 Arrests
Interpol has dismantled a phishing-as-a-service platform called SniperDz, which had been operational since at least 2015. This crackdown was part of Operation Ramz, conducted from October 2025 to February 2026 across 13 MENA countries, resulting in 201…
Infosecurity - FBI shuts down fake job sites targeting US clearance holders
The U.S. FBI has seized 13 fraudulent websites linked to a Chinese operation aimed at targeting American workers with security clearances. These fake sites posed as consulting firms with bogus job listings to recruit individuals for sensitive information.…
SecurityWeek - GreatXML flaw lets attackers bypass BitLocker after Defender scan
On June 10, 2026, security researcher Chaotic Eclipse revealed a new exploit named GreatXML that bypasses BitLocker encryption after running a Microsoft Defender Offline Scan. The exploit allows attackers to gain SYSTEM privileges in Recovery Mode, requiring…
Security Affairs - UK tells Apple, Google to block nude images on phones by 2026
The UK government has mandated that Apple and Google must implement device-level protections to block nude images on smartphones and tablets sold in the UK by September 2026. If they fail to comply, legislation including fines and possible criminal charges…
Malwarebytes - Palo Alto fixes Cortex flaw: Splunk patches Enterprise bug
On Wednesday, Splunk and Palo Alto Networks released patches addressing multiple vulnerabilities across their products, including critical and high-severity issues. Palo Alto identified a significant flaw in its Cortex platforms (CVE-2026-0274) that could…
- Extortion-Only Attacks Increase, With Data Theft Dominating Ransomware Claims
The article discusses a recent surge in extortion-only cyber attacks, noting that 65% of related claims handled did not involve data encryption. In 2025, data theft accounted for 87% of ransomware claims, while only 13% involved encryption. Insurers…
Infosecurity - Most Third‑Party AI Skills Differ From Their Docs, Study Shows
The article discusses the security risks associated with third-party skills used by AI agents, emphasizing the need for Behavioral Integrity Verification (BIV). BIV audits the claims of a skill against its actual behavior across metadata, executable code,…
Unit 42 - ‘GreatXML’ Zero-Day Exploit Bypasses BitLocker
A new exploit named GreatXML has been released by security researcher Nightmare Eclipse, allowing users to bypass Windows BitLocker and gain SYSTEM privileges through Recovery Mode. This vulnerability exploits Microsoft Defender’s offline scan functionality,…
SecurityWeek - Fortinet patches CVE-2026-25089 in FortiSandbox command injection
Fortinet has released patches for a critical vulnerability in its FortiSandbox products, specifically CVE-2026-25089, which has a CVSS score of 9.8. This OS command injection flaw allows unauthenticated attackers to execute arbitrary commands through…
- OceanLotus Hits Vietnam Investors With SPECTRALVIPER in FireAnt Attack
The article discusses a cybersecurity breach where the OceanLotus hacking group targeted Vietnamese investors using the SPECTRALVIPER malware in a FireAnt attack. This incident exemplifies supply chain attacks and cyber espionage tactics prevalent in the…
The Hacker NewsAPT32 - AI coding agents hit by Sentry flaw in ‘agentjacking’ attack
A new form of attack termed 'agentjacking' has been identified, which compromises AI coding agents by exploiting a vulnerability in the Sentry app. This method allows attackers to inject malicious commands disguised as legitimate error messages into Sentry's…
Infosecurity - Google launches DiffusionGemma, a fast open AI model for edge
Google has launched DiffusionGemma, a groundbreaking open-model framework for text generation that utilizes a diffusion mechanism instead of traditional autoregressive models. This innovation enables significantly faster on-device inference speeds, achieving…
SecurityOnline - University of Nottingham Confirms Breach After Hackers Leak Data
The University of Nottingham in the UK has confirmed a data breach involving the theft of files by the ShinyHunters hacker collective. The leaked data purportedly includes financial information and personal details of current students and alumni, affecting…
SecurityWeekShinyHunters - Spring GraphQL patches address CVE-2026-41699 deserialization risk
The page discusses recent Spring GraphQL security patches addressing multiple severe vulnerabilities in the Java ecosystem, emphasizing critical flaws such as unsafe deserialization, session hijacking, and input validation defects. Key vulnerabilities…
SecurityOnlineCVE-2026-41699 - Office 2019 for Mac will turn readonly from July 2026 for users
Microsoft Office 2019 for Mac will enter a read-only mode on July 13, 2026, due to the expiration of digital licensing tokens, severely limiting functionality for users. Applications such as Word, Excel, and PowerPoint will allow users to open and print…
SecurityOnline - JDY Botnet Returns, Targeting Military Networks with IoT Scans
The JDY botnet has resurfaced, targeting military networks and leveraging small office/home office (SOHO) and Internet of Things (IoT) devices. First identified in late 2023 as part of the KV-botnet, JDY has evolved to consist of over 1,500 devices, more…
Security Affairs - iOS 27 Adds On Device Recovery Mode to Fix Issues Without PC
The page discusses the introduction of Recovery Mode in iOS 27, allowing users to diagnose and fix system issues directly on the device without needing a computer. Key features of the Recovery Matrix include: 1. **Recovery Assistant**: Automatically fixes…
SecurityOnline 5 articles this day · SecurityOnline first · 1 outlet
CVE-2026-50751 Hits Check Point VPN as OpenAI Considers Price Cut · Check Point VPN under attack as Splunk issues urgent patchesShow 5 articlesHide 5 articles
- CVE-2026-50751 Hits Check Point VPN as OpenAI Considers Price Cut07:15SecurityOnline
- Check Point VPN under attack as Splunk issues urgent patches03:47SecurityOnline
- Check Point VPN exploited, GreatXML bypasses BitLocker protection03:27SecurityOnline
- Important GitLab Security Updates Address 12 Vulnerabilities02:24SecurityOnline
- Check Point VPN and NVIDIA DALI flaws let attackers execute code01:43SecurityOnline
- CVE-2026-50751 Hits Check Point VPN as OpenAI Considers Price Cut
- Microsoft fixes active Exchange bug CVE-2026-42897.
Microsoft released Patch Tuesday updates that address an actively exploited vulnerability in Exchange Server, tracked as CVE-2026-42897. This vulnerability is a spoofing and XSS flaw affecting Exchange Server Subscription Edition and versions 2016 and 2019.…
- EU Opens Antitrust Case Against Meta Over WhatsApp API
The European Union has launched an antitrust investigation against Meta, mandating that the company allow free access for external developers to its WhatsApp Business API, which had previously been restricted. This order follows Meta's controversial October…
SecurityOnline - GitHub to block npm install scripts to curb supply chain attacks
GitHub is set to disable npm install scripts by default to combat supply chain attacks, a growing concern in software development. This change aims to enhance security by preventing potentially harmful scripts from running automatically during package…
The Hacker News - Oracle warns of critical PeopleSoft RCE flaw CVE-2026-35273
A critical vulnerability, CVE-2026-35273, affecting PeopleSoft RCE has been discovered, presenting an immediate threat to enterprises. This flaw has a CVSS score of 9.8, allowing unauthorized remote attackers to exploit the system without authentication via…
- Dahua Product Vulnerabilities: Patch 3 Critical CVEs
A recent security bulletin highlights critical vulnerabilities affecting Dahua's IP cameras and network video recorders, necessitating immediate action from network administrators. Three significant issues have been identified: 1. CVE-2026-29114, a…
SecurityOnlineCVE-2026-29114 - Critical CVE-2026-46316 Lets Guests Break Out of KVM Arm64 Hosts
A critical security vulnerability, CVE-2026-46316, has been identified in ITScape KVM that allows untrusted guest virtual machines in KVM/arm64 environments to escape their isolation and execute commands on the host with root privileges. Discovered by…
SecurityOnlineCVE-2026-46316 - Jenkins advisory flags critical deserialization flaw and bugs
The Jenkins security advisory 2026 outlines several critical vulnerabilities that pose significant risks to development pipelines. Key issues include: 1. **CVE-2026-53435**: A deserialization flaw that allows unauthorized execution of commands, enabling…
SecurityOnlineCVE-2026-53435 - Jan Kopriva on Duty as ISC Stormcast Notes Green Threat Level
The content features the following key information: **Handler on Duty**: Jan Kopriva, with a link to his profile. **Threat Level**: Currently at green, indicating low threat status. **ISC Stormcast**: Related to a podcast episode dated June 11th, 2026.…
SANS ISC
