News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 16 so far | 0 |
Developing
Fri 26 Jun59 articles
- curl 8.21.0 fixes 18 security flaws, adds HTTP/3 proxy support
The recent release of curl v8.21.0 addresses 18 security vulnerabilities, marking a significant update for the utility used on over 30 billion devices. Notable improvements include support for HTTP/3 proxy connections, enhanced SSH host verification, and…
SecurityOnline - PTC Windchill flaw spotted; Claude Fable 5 hints at AWS return
The content reports on two active vulnerabilities detected today: CVE-2026-12569 affecting PTC Windchill and FlexPLM due to improper input validation, and CVE-2026-20230 linked to a server-side request forgery vulnerability in Cisco Unified Communications…
- Apple hikes prices on Macs and iPads amid memory chip crunch
Apple has raised prices on various products due to a memory chip shortage exacerbated by increased demand in AI data centers. The price hike affects 14 product lines, with notable increases in devices like the HomePod mini, iPad, and MacBook. CEO Tim Cook…
SecurityOnline - Cisco and PTC flaws under active attack, CISA adds to KEV list
The page discusses two critical vulnerabilities that have been added to the CISA KEV Catalog on June 25, 2026. These vulnerabilities are affecting Cisco Unified Communications Manager and PTC Windchill, both of which are reportedly being actively exploited.…
- Critical RCE flaw CVE-2026-52813 hits Gogs, patch out
The security alert highlights three critical remote code execution (RCE) vulnerabilities in Gogs, identified as CVE-2026-52813, CVE-2026-52806, and CVE-2026-52811, which have CVSS scores ranging from 9 to 10. These vulnerabilities allow attackers to exploit…
SecurityOnlineCVE-2026-52813 - Chrome patches three high severity flaws, urges swift update
A security update for Google Chrome, released on June 10, 2026, addresses three high-severity vulnerabilities (CVE-2026-13281, CVE-2026-13282, CVE-2026-13283) with a CVSS score of 6.8. The flaws include use-after-free and integer overflow issues that could…
SecurityOnlineCVE-2026-13281 - FFmpeg MagicYUV flaw lets hackers run code via crafted files
The content discusses a critical vulnerability (CVE-2026-8461) in FFmpeg's MagicYUV decoder that allows for heap out-of-bounds write, posing a high risk (CVSS score 8.8). This flaw can enable attackers to execute arbitrary code through specially crafted…
SecurityOnlineCVE-2026-8461 - Critical flaws in Langflow allow data theft and DoS, patch urged
Three critical vulnerabilities have been detected in Langflow software, affecting versions prior to 1.9.2. The vulnerabilities include: 1. **CVE-2026-55255** - An Insecure Direct Object Reference (IDOR) bug allows attackers to hijack flows belonging to other…
- Red Hat Ansible flaw leaks credentials via websocket API
An alert has been issued regarding a critical vulnerability in the Red Hat Ansible Automation Platform, identified as CVE-2026-11807, which has a CVSS score of 9.6. The flaw allows unauthorized credential access through a websocket API due to missing…
SecurityOnlineCVE-2026-11807
Thu 25 Jun75 articles
- Hospitality hit by ZIP LNK PowerShell phishing campaign
Microsoft Threat Intelligence identified a multi-stage intrusion campaign targeting the hospitality industry since April 2026. The campaign deploys photo-themed ZIP archives containing malicious LNK files that trigger a PowerShell attack leading to a Node.js…
Microsoft 2 articles this day · Dark Reading first · 2 outlets
CISA Adds Cisco UC Manager SSRF Flaw to KEV Catalog · Cisco CUCM flaw allows hackers to gain root access in 24 hoursShow 2 articlesHide 2 articles
- Critical PTC Windchill flaw CVE-2026-12569 under active attack
CISA has added CVE‑2026‑12569 to its Known Exploited Vulnerabilities catalogue. The flaw affects PTC’s Windchill and FlexPLM products and is described as an improper input validation vulnerability that allows an unauthenticated, remote attacker to execute…
- Chinese threat actors use TinyRCT against SE Asian governments
The article discusses the CL-STA-1062 cyber activity targeting governments and critical infrastructure in Southeast Asia, primarily by Chinese-speaking attackers. This group has been active since March 2022 and used a hybrid toolkit, introducing the custom…
Unit 42 - Gamaredon refines cyber espionage using USB malware and cloud
The article discusses the advancements made by the Russian APT group, Gamaredon, which has refined its tactics, techniques, and procedures (TTPs) in a bid to enhance its cyber espionage effectiveness, particularly against Ukraine. Key highlights include: 1.…
Dark ReadingGamaredon Group - Man jailed 18 months for DraftKings credential stuffing fraud
Nathan Austad has been sentenced to 18 months in prison for his involvement in a hacking scheme targeting the DraftKings fantasy sports and betting website, which lead to the theft of approximately $600,000 from 60,000 user accounts. He pleaded guilty to…
DataBreaches - Tata Electronics Confirms Data Breach After 630GB Leak Claim Targets Apple and Tesla
Tata Electronics confirmed a data breach after hackers claimed to have stolen 630GB of data, including documents related to Apple and Tesla. The breach affected parts of their IT infrastructure, but the company stated that operations remained unaffected. The…
Security AffairsWorld Leaks - Hackers hit Canvas, PowerSchool vendors, endangering school data
The article discusses the increasing cyber threats faced by educational institutions and their reliance on educational technology (edtech) vendors. Attacks have shifted focus from individual schools to edtech companies, with cybercriminals targeting tools…
Dark Reading - Curl fixes 18 bugs including 25 year old CVE-2026-8932 in libcurl
Curl has released a significant update addressing 18 vulnerabilities, including one that has persisted for 25 years. These issues cover problems such as authentication bypass, memory safety, and improper host validation affecting libcurl, which serves over…
Security AffairsCVE-2026-8932 - Asia's scam centres thrive despite crackdowns, costing $40bn
The article discusses the ongoing issues of cybercrime in Asia, particularly focusing on the resilience of scam centers in the region despite law enforcement crackdowns. Criminal organizations profiting from online scams generate substantial illegal revenue,…
Dark Reading - Police Warn of 'Parcel Expert' Job Scams Affecting Remote Workers
The article warns about "Parcel Expert" job offers, classifying them as parcel mule scams designed to exploit unsuspecting individuals into participating in fraudulent activities involving stolen goods. These scams often present attractive remote job offers,…
Malwarebytes - Nation state hackers target UK water systems, report warns
The report analyzes the increasing targeting of water and wastewater systems by nation-states, driven by their vulnerability and strategic importance. It highlights recent cyber activities linked to Iran, Russia, and China. Iran's attacks focus on public…
dti.domaintools.com - CHN delays breach notice, raising HIPAA compliance concerns
In August 2025, a data breach at the Colorado Health Network (CHN) was reported after the threat group Cephalus claimed to have obtained 900 GB of data. Although Cephalus vanished shortly after making this claim and did not leak any data publicly, CHN had…
DataBreachesCephalus - Microsoft Leads Forrester Wave for Endpoint Management Q2 2026
Microsoft has been recognized as a Leader in the Forrester Wave for Endpoint Management Platforms as of Q2 2026. The report highlights the shift in endpoint management, emphasizing the need for connected platforms rather than mere device inventory and policy…
Microsoft - Maven support added to GitHub Checks blocks compromised Java deps
StepSecurity has introduced support for Maven in GitHub Checks and OSS Package Search, enabling enhanced security by blocking compromised Java dependencies in pull requests. This update aims to protect Java developers from supply chain attacks, similar to…
StepSecurity - KongTuke uses stealthy Mistic backdoor via DLL sideloading
The article discusses 'Mistic,' a stealthy backdoor used by the hacking group KongTuke, known for financially motivated ransomware attacks since April 2026. Mistic utilizes DLL sideloading, camouflaging itself as a legitimate Microsoft process to gain access…
Security AffairsKongTuke - Google warns Cisco flaw exploited months before June 2026 patch
A Google report reveals that a severe vulnerability (CVE-2026-20245) in Cisco products was exploited months prior to its disclosure on June 4, 2026. This vulnerability, stemming from improper validation in the command-line interface of Cisco Catalyst SD-WAN…
- Chrome ad blocker with 10m+ installs poses script‑injection risk
A recent investigation has revealed that a Chrome ad blocker, which has over 10 million installations, possesses dormant script injection capabilities. This alarming discovery highlights vulnerabilities in popular browser extensions, raising concerns about…
The Hacker News - Google flags Turla’s STOCKSTAY backdoor aimed at Ukraine, Europe
Google Threat Intelligence Group (GTIG) published an analysis on STOCKSTAY, a .NET backdoor utilized by the Russian cyber espionage group Turla since December 2022. This backdoor targets Ukrainian government and military organizations, displaying code…
Google CloudTurla - Over 20 Million US Home IPs Hijacked for Proxy Cybercrime: Report
A report by the Digital Citizens Alliance reveals that over 20 million residential IP connections in the US are unknowingly used for proxy services, primarily benefiting cybercriminals. The report highlights that many households remain unaware of their…
Infosecurity - Cloudflare Workflows gains saga rollback for safer transactions
The article discusses the introduction of saga rollbacks in Cloudflare Workflows, which allow developers to define rollback logic directly within each step of a workflow. This feature aims to address inconsistencies when a step fails, particularly in…
Cloudflare - Google to allow external payments in Play Store from June 2026
Google is set to launch a revised billing structure on June 30, 2026, which allows eligible developers in the U.S., U.K., and EEA to integrate their payment systems while also directing users to external sites for purchases. This change follows an antitrust…
SecurityOnline - Dialog Member Data Exposed Amid Hack Claim Dispute
The article discusses the security failure of Dialog, an exclusive network founded by Peter Thiel, which had personal information of its elite members publicly exposed on its app distribution site. Despite this data being readily accessible, Dialog claimed…
DataBreaches - Runlayer bags $30m Series A to secure AI tools for enterprises
Runlayer, an AI enablement and control platform based in New York, has successfully raised $30 million in its Series A funding round, increasing its total funding to $42 million. Founded in 2025, Runlayer offers a secure control layer for AI tools in…
SecurityWeek - Smart TVs face proxyware threat as 24 year curl bug resurfaces
The article "ThreatsDay Bulletin" discusses various cybersecurity threats and incidents reported on June 25, 2026. Key highlights include: 1) The emergence of proxyware on smart TVs which compromises user privacy, 2) A 24-year-old bug in the curl library…
The Hacker News - Handala hack claim against Cal Water yields only minor data leak
California Water Service (Cal Water) investigated a claimed cyberattack by the Iranian hacker group Handala and found no evidence of impact on its operational technology. Handala, believed to be linked to Iranian government actions, alleged access to Cal…
SecurityWeekHandala - Ukrainian Postal Service Hit by Cyberattack, Systems Disrupted
Ukrposhta, Ukraine's national postal service, experienced system malfunctions due to a cyberattack on its IT systems. They are currently working to restore operations and promise to provide updates. The nature of the cyberattack and details on the damage or…
DataBreaches - Cobalt Report: Trust in AI Vulnerability Scanners Drops to 9%
A recent study from Cobalt reveals a significant decline in trust for automated AI vulnerability scanning tools, dropping from 29% to 9% among cybersecurity professionals. The Cobalt State of Pentesting Report 2026 found that over three-quarters of…
Infosecurity - CISA urges US agencies to adopt SASE for zero trust security
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released a new guide to assist federal agencies in adopting Secure Access Service Edge (SASE) technology, facilitating a transition from the outdated perimeter-based Trusted Internet…
Infosecurity - Lantronix Serial-to-IP Converter Flaw Exploited in Attacks After OT Threat Warning
The cybersecurity agency CISA has reported an exploited vulnerability tracked as CVE-2025-67038 affecting Lantronix EDS5000 serial-to-IP device servers, allowing unauthenticated attackers to execute arbitrary OS commands with root privileges. This…
