News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 16 so far | 0 |
Developing
Thu 25 Jun75 articles
- Why Traditional Defences Fail Against AI Powered Cyber Attacks
The article explores insights from Richard Bejtlich on the importance of Network Detection and Response (NDR) in countering advanced AI-driven cyber threats. Emphasis is placed on the limitations of traditional security measures against evolving threats…
The Hacker News - GitLab fixes critical XSS flaws in Analytics dashboard
GitLab released security updates for Community Edition (CE) and Enterprise Edition (EE) addressing 13 vulnerabilities, including three high-severity issues. The most critical, CVE-2026-10086, is an XSS flaw in the Analytics dashboard allowing authenticated…
SecurityWeekCVE-2026-10086 2 articles this day · SecurityOnline first · 2 outlets
Google patches Chrome after critical WebGL flaw CVE-2026-13028 · Chrome patches critical WebGL, Blink and Autofill flaws in updateShow 2 articlesHide 2 articles
- Google patches Chrome after critical WebGL flaw CVE-2026-1302811:04Malwarebytes
- Chrome patches critical WebGL, Blink and Autofill flaws in update01:49SecurityOnline
- Google patches Chrome after critical WebGL flaw CVE-2026-13028
- Apple stops Siri fetching web links in iOS 27 beta 2 for safety
Apple's Siri, in the iOS 27 Developer Beta 2, has been updated to refuse to process external URLs due to safety issues. If a user asks Siri to summarize a URL, the assistant will decline, citing a need to avoid potential security threats from malicious…
SecurityOnline - macOS XPC flaw lets standard users disable EDR and MDM tools.
A new security flaw has been identified in macOS that allows standard users to disable enterprise security tools like EDR and MDM. This vulnerability, discovered by XM Cyber, takes advantage of the XPC service, which is used for inter-process communication.…
Infosecurity - Enterprises limit AI after Accenture finds wasteful PDF tasks
Major enterprises, initially enthusiastic about adopting artificial intelligence (AI) tools, are now limiting access due to significant wastage of resources. Notably, Accenture discovered that non-technical staff were using AI for trivial tasks, such as…
SecurityOnline - Ransomware attacks in Europe surge 55% as Qilin variant dominates
A recent report by Black Kite reveals a significant rise in ransomware attacks across Europe, increasing by 55.1% in early 2026 compared to the previous year, with an average of 171 incidents per month. The report identifies Germany, the UK, France, Italy,…
Infosecurity - Fake domain renewal emails lead to Renovarix phishing site
The article discusses a scam involving fake domain renewal emails that target website owners, aiming to trick them into sharing personal and payment information. The scam begins with a convincing email suggesting that a domain is about to expire, directing…
Malwarebytes - Kaspersky warns SMBs of AI driven phishing surge in 2026
The Kaspersky SMB Threat Report 2026 highlights significant cyber threats targeting small and medium-sized businesses (SMBs), revealing over 33,300 detected cyberattacks in early 2026, primarily using popular AI tools as lures. Key findings include a…
securelist.com - Ransomware surges 55% across Europe, exploiting supply chain gaps
The article discusses the surge in ransomware attacks across Europe, indicating a shift in focus from the US to the EU due to oversaturation in the US market and the availability of unpatched vulnerabilities in Europe. Researchers recorded a 55% increase in…
Dark Reading - Apache Kvrocks Vulnerabilities Fix Five Severe Flaws
The article discusses critical vulnerabilities in Apache Kvrocks, a distributed NoSQL database. Two main vulnerabilities have been identified: CVE-2026-46752 (stack buffer overflow) with a CVSS score of 10, and CVE-2026-41566 (improper permissions) with a…
SecurityOnlineCVE-2026-46752 - 25-Year-Old Vulnerability Patched in Curl
The open-source tool curl has been updated to address 18 vulnerabilities, including one that has persisted for 25 years. Of the 18 flaws, four are classified as medium severity and fourteen as low severity, with the most notable being CVE-2026-8932, which…
SecurityWeekCVE-2026-8932 - Gaslight macOS malware hijacks AI analysis via prompt injection
The article discusses a new type of macOS malware known as 'Gaslight' that employs prompt injection techniques to disrupt AI-assisted analysis processes. This malware targets AI systems, manipulating their analysis capabilities and posing a significant…
The Hacker News 3 articles this day · The Hacker News first · 3 outlets
Cisco Catalyst SDWAN zero day exploited months before fix · Cisco SDWAN flaw lets attackers run root commands, Mandiant warnsShow 3 articlesHide 3 articles
- Cisco Catalyst SDWAN zero day exploited months before fix09:17Security Affairs
- Cisco SDWAN flaw lets attackers run root commands, Mandiant warns06:08SecurityWeek
- CVE-2026-20245 exposes Cisco Catalyst SD WAN zero day flaw05:46The Hacker News
- Cisco Catalyst SDWAN zero day exploited months before fix
- Dialog network hack leaks personal data of military officials
The exclusive network Dialog, founded by Peter Thiel, was reportedly hacked after exposing personal data of its high-profile members in plaintext on its app distribution site. The incident occurred due to misconfiguration, allowing anyone to access internal…
Malwarebytes - New Mistic Backdoor Fuels KongTuke and ModeloRAT Ransomware Ops
The article discusses a newly identified backdoor, named Mistic, associated with the KongTuke and ModeloRAT campaigns. The initial access broker is highlighted as a significant player in ransomware operations. The Mistic backdoor is indicative of evolving…
The Hacker News - AutoGen Studio flaw lets attackers run code via malicious pages
The recent discovery by Microsoft Security Research unveils a critical vulnerability in the AutoGen Studio known as the AutoJack AI agent exploit, which can lead to remote code execution (RCE) through local agents visiting malicious webpages. This flaw…
SecurityOnline - NIST Asks Public to Shape New IoT Security Rules for Federal
The National Institute of Standards and Technology (NIST) is seeking public feedback on updated guidelines for Internet of Things (IoT) security. The draft of SP 800-213 Revision 1 aims to enhance cybersecurity measures for IoT products used by federal…
SecurityWeek - Microsoft warns of USB spread crypto malware stealing wallets
Microsoft Threat Intelligence has identified a new cryptocurrency stealer malware named Win32/CryptoBandits.A, affecting Windows users since February 2026. This malware primarily targets cryptocurrency users by stealing financial assets through malicious USB…
SecurityOnline - Google patches 18 Chrome flaws, half are use after free bugs
Google released a Chrome update (version 149.0.7827.196/197) that addresses 18 vulnerabilities, including 4 critical and 14 high-severity issues. Key points include: 1) Over half of the vulnerabilities involve use-after-free flaws, potentially leading to…
SecurityWeek - Malicious npm Packages Steal GitHub Tokens from Leo Platform
On June 24, 2026, a coordinated attack released malicious versions of 20 npm packages within the Leo Platform ecosystem, all equipped with a CI/CD attack toolkit that targets GitHub Actions runners, steals credentials, and exfiltrates them through the user's…
StepSecurity - GitLab releases urgent patches for critical security flaws
GitLab released critical security patches on June 24, 2026, addressing 13 vulnerabilities in both the Community and Enterprise Editions. Administrators must update to versions 19.1.1, 19.0.3, or 18.11.6. The vulnerabilities include high-risk flaws with CVSS…
SecurityOnline - Jenkins patches 22 flaws, warns of RCE via CVE-2026-57281
On June 24, 2026, Jenkins released a security advisory detailing 22 vulnerabilities across 18 plugins, several of which may allow remote code execution (RCE). The most critical issue involves a sandbox bypass in the Script Security Plugin, which could enable…
SecurityOnlineCVE-2026-57281 - DraftKings Credential Stuffing Hacker Gets 18 Month Sentence
Nathan Austad has been sentenced to 18 months in prison following his guilty plea in a hacking scheme against DraftKings, where he participated in a credential-stuffing attack that compromised 1,600 accounts and resulted in the theft of approximately…
Security Affairs - Vidar ABE Bypass Technique Steals Browser Keys
Gen Digital researchers have identified a new technique used by Vidar infostealer malware to bypass Application-Bound Encryption (ABE) in web browsers. Vidar extracts the master key from memory to decrypt sensitive data, targeting user credentials…
SecurityOnline - Rokarolla Android Trojan Takes Devices, Steals Crypto & Bank Data
The Rokarolla Android banking trojan is a malware that executes complete device takeovers, targeting 217 cryptocurrency and banking applications. It is spread through malicious websites impersonating legitimate apps, tricking users into installing a dropper…
SecurityOnline - Gemini in Chrome gains Select from Screen for smarter AI help
Google has introduced a new feature for Gemini in Chrome called 'Select from Screen', allowing users to select specific text or images from web pages and directly send them to the AI model. This feature cuts down the effort for users when describing…
SecurityOnline - Google Gemini 3.5 Flash Introduces Computer Use Capabilities
Google has launched the Gemini 3.5 Flash model, integrating a native 'Computer Use' tool that enables artificial intelligence to analyze complex tasks and manipulate graphical user interfaces across various platforms. This tool allows AI to inspect…
SecurityOnline - Zoho patches critical SSO ticket flaw in ManageEngine AD360 suite
Zoho Corporation has disclosed a critical vulnerability in ManageEngine, tracked as CVE-2026-11374, with a CVSS score of 9.0. This flaw allows unauthenticated attackers to predict single sign-on (SSO) tickets, potentially leading to account takeover in…
SecurityOnlineCVE-2026-11374 - Google Wallet launches TSA PreCheck touchless ID for travellers.
Google has partnered with the TSA to introduce a streamlined TSA PreCheck Touchless ID experience through Google Wallet, making it the first digital wallet to do so. This initiative aims to reduce the hassle of entering passport details manually for frequent…
SecurityOnline - Canonical Livepatch adds Arm64 support for zero downtime updates
Canonical's Livepatch service now supports the Arm64 platform, allowing crucial kernel security updates to be applied without downtime or rebooting. This service is critical for long-running servers. Arm64 support is available on Ubuntu Core 26 and later…
SecurityOnline - Anthropic debuts Claude Tag AI for Slack with persistent memory
Anthropic has introduced "Claude Tag," a cutting-edge tool designed for enterprise clients that enhances collaborative AI interactions within Slack. Unlike traditional chatbots, Claude Tag features persistent memory and operates in two modes: Task…
SecurityOnline - Laravel Livewire Vulnerability Exposes Over 6,000 Apps
The article discusses a critical vulnerability in Laravel Livewire, identified as CVE-2025-54068, which allows unauthenticated remote code execution and has been actively exploited in the wild. This vulnerability, affecting Livewire versions from…
- Operation Endgame Takes Down SocGholish, Amadey, and StealC Malware
Operation Endgame, led by Europol on June 24, 2026, disrupted the SocGholish malware network and two associated groups, Amadey and StealC. This extensive operation targeted 326 servers and 142 domains, recovering approximately EUR 41 million in flagged…
SecurityOnlineAmadey - Critical IBM Langflow flaws let attackers run code remotely
IBM Langflow OSS has two critical vulnerabilities (CVE-2026-10561 and CVE-2026-7664) that allow unauthenticated remote code execution and authorization bypass, with a maximum CVSS score of 10.0. These flaws arise from missing trust boundaries and risky…
SecurityOnlineCVE-2026-10561 - simonecorsi/mawesome GitHub Action has been compromised
On June 24, 2026, the simonecorsi/mawesome GitHub repository was compromised by an attacker who force-pushed malicious commits and altered version tags. This resulted in the execution of the attacker's code in workflows utilizing those tags. This incident is…
StepSecurity - BreachForums Clone Breached[.hn] Shuts Down After Failed Bid
BreachForums has announced the closure of its clone, breached.hn, which was for sale at a reduced price of $1,500, without successful transactions. The announcement revealed that there is no official BreachForums left, emphasizing that the prior claimants…
DataBreaches
