Skip to content
Sign in

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Articles per day, last 14 days

Most articles on Wed 21 Oct (96); 10–13 on weekend days.

17 Oct19219623252729Today14 so faravg 60
  • On CISA KEV CVEs
  • Other coverage
  • Closed-day average
Show as table
Articles per day, last 14 days
DayArticlesOn CISA KEV CVEs
Sat 17 Oct101
Sun 18 Oct100
Mon 19 Oct6012
Tue 20 Oct8616
Wed 21 Oct9618
Thu 22 Oct8411
Fri 23 Oct6816
Sat 24 Oct134
Sun 25 Oct132
Mon 26 Oct7621
Tue 27 Oct9518
Wed 28 Oct8716
Thu 29 Oct7817
Fri 30 Oct6910
Today, Sat 31 Oct14 so far3

Developing

Exploited only
145 articles · 14–15 Jul

Latest days

Wed 15 Jul63 articles

  1. CrashStealer macOS steals passwords via fake CrashReporter

    A new macOS infostealer named CrashStealer has been discovered, masquerading as Apple's CrashReporter application. This malware uses a notarized installer, allowing it to bypass Apple's Gatekeeper, and tricks users into inputting their passwords through a…

    Malwarebytes
  2. SonicWall SMA1000 AppliancesCVE-2026-15409Exploited

    2 articles this day · SecurityWeek first · 2 outlets

    SonicWall Warns of Active Exploitation of SMA 1000 Zero Days · SonicWall patches critical zero day flaws in SMA1000 appliancesShow 2 articles
  3. Nigeria rolls out cybersecurity framework as fraud losses rise

    Nigeria is enhancing its cybersecurity efforts due to increasing cybercrime profits, reporting a 46% decrease in fraud incidents but rising losses. The country is creating a new cybersecurity framework mandating incident reporting and investments, while also…

    Dark Reading
  4. Google and Mozilla Patch Critical Flaws in Chrome 150 Firefox 152

    Google and Mozilla have released updates for their browsers, Chrome (version 150) and Firefox (version 152), addressing critical vulnerabilities. Firefox's update fixes two critical issues (CVE-2026-15718 and CVE-2026-15719) with public exploit code, while…

    SecurityWeekCVE-2026-15718
  5. SonicWall SMA 1000 zero day bug may allow admin command execution

    On July 15, 2026, it was reported that two zero-day vulnerabilities in the SonicWall SMA 1000 could be exploited, with one allowing potential admin command execution. The content highlights the importance of addressing such vulnerabilities promptly in the…

    The Hacker News
  6. ISC’s July 15 Report Shows Green Threat Level Under Guy Bruneau

    The content provides information about the Internet Storm Center (ISC) report for July 15th, 2026, managed by Guy Bruneau. The threat level is currently rated 'green', indicating a stable threat environment. It includes links to previous reports and…

    SANS ISC
  7. DShield SIEM updated with ELK 8.19.15, TTY and Suricata logs

    Guy Bruneau shares the latest update on the DShield SIEM, highlighting enhancements such as the integration of ELK stack version 8.19.15, additional dashboards, and new log collection functionalities. Key features added include the capability to collect TTY…

    SANS ISC

Tue 14 Jul82 articles

  1. Microsoft Active Directory Federation ServicesCVE-2026-56155Exploited

    5 articles this day · thezdi.com first · 5 outlets

    Microsoft patches 570 flaws, two zero days actively exploited · Records Are Made to Be Broken: Patch Tuesday Raises Triage StakesShow 5 articles
  2. Unrevoked firmware shims expose Microsoft Secure Boot flaw

    Microsoft's Secure Boot, designed to protect Windows and Linux devices from firmware attacks, has been vulnerable for most of its 14-year existence. Researchers at ESET found that 11 defective firmware images, also known as shims, remained unrevoked despite…

    Ars Technica
  3. Patch Tuesday - July 2026

    In July 2026, Microsoft published 622 vulnerabilities, a record 416 of which are for Windows. Among the critical vulnerabilities are two exploited in the wild: CVE-2026-55040, an authentication bypass in SharePoint, and CVE-2026-56164, an elevation of…

    Rapid7ExploitedCVE-2026-55040
  4. xAI to Delete All User Data After Grok Build CLI Code Leak

    xAI, founded by Elon Musk, is taking emergency measures due to a controversy involving unauthorized uploads of users' private code via the Grok Build CLI tool. The company announced it will permanently delete all uploaded user data for security reasons after…

    DataBreaches
  5. Patch Tuesday security updates for July 2026, the largest update ever. 621 CVEs in one month

    In July 2026, Microsoft released its largest Patch Tuesday update, addressing 621 vulnerabilities (CVEs), surpassing all previous yearly totals. This includes critical flaws such as two actively exploited zero-days—CVE-2026-56155 in Active Directory and…

    Security AffairsCVE-2026-57092
  6. D1R

    2 articles this day · SecurityWeek first · 2 outlets

    D1R ransomware claims Synopsys breach, threatens 40k data leak · Synopsys refutes D1R ransomware claim of Bosch data breachShow 2 articles
  7. Finnish Police Hunt Aleksanteri Kivimäki Over Vastaamo Breach

    The Finnish police have issued a wanted notice for Aleksanteri Kivimäki, a convicted hacker, after the Supreme Court rejected his appeal, allowing authorities to proceed with his imprisonment for nearly seven years. Kivimäki was sentenced for hacking the…

    DataBreaches
  8. U.S. offers $10 million bounty on Russian bulletproof host

    Rewards for Justice announced a $10M reward for information regarding the Russian bulletproof hosting company Media Land and its affiliate ML.Cloud, including key staff members Aleksandr Alexandrovich Volosovik, Kirill Andreevich Zatolokin, and Yuliya…

    DataBreaches
  9. Microsoft patches 622 flaws, two zero days exploited in the wild

    On July 14, 2026, Microsoft announced it patched a record 622 vulnerabilities, including two zero-day flaws currently under active attack, highlighting the significant cybersecurity challenges faced by enterprises today. The article emphasizes the importance…

    The Hacker News
  10. CISA Adds SonicWall SMA1000 Code Injection Flaw to KEV Catalog

    CISA has added CVE‑2026-15410 to its Known Exploited Vulnerabilities catalogue, affecting SonicWall’s SMA1000 Appliances. The vulnerability is a code injection flaw that, under specific conditions, allows a remote authenticated attacker with administrator…

    CISAExploitedCVE-2026-15410
  11. CISA KEV Catalog Highlights SonicWall SMA1000 Flaw CVE-2026-15409

    CISA added CVE-2026-15409 to the KEV catalogue, identifying SonicWall’s SMA1000 Appliances as the affected product and naming the flaw SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability. The vulnerability is a server-side request forgery…

    CISAExploitedCVE-2026-15409
  12. CISA KEV Flags SharePoint Privilege Escalation Bug CVE-2026-56164

    CISA has added CVE‑2026-56164, named Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability, to its Known Exploited Vulnerabilities catalogue. The affected vendor is Microsoft and the product is SharePoint Server. The…

    CISAExploitedCVE-2026-56164
  13. Researchers Warn of Flaws in 6 GHz WiFi Frequency Coordination

    Research from Pennsylvania State University and Idaho National Laboratory highlights security vulnerabilities in 6 GHz Wi-Fi systems due to automated frequency coordination (AFC) trusting client-side data. Potential attacks include location spoofing that…

    Dark Reading
  14. US sanctions VPN provider 1VPNS and hacker for ransomware aid

    The U.S. Treasury has sanctioned a VPN provider, 1VPNS, and an individual, Yegeniy Vladimirovich Silayev, for facilitating ransomware operations that have resulted in billions of dollars in losses to U.S. businesses and critical infrastructure. The sanctions…

    Security Affairs
  15. Microsoft patches 570+ flaws, AI drives surge in Windows updates

    Microsoft has released updates addressing over 570 security vulnerabilities in its Windows operating systems and other software, nearly three times more than last month. Among these, 60 bugs are rated as 'critical,' allowing remote control over devices. The…

    Krebs on Security
  16. Microsoft patches 622 flaws, 62 critical, three already exploited

    The Microsoft Patch Tuesday for July 2026 addressed 622 vulnerabilities in its products, including 427 in Chromium affecting Edge. Notably, 62 vulnerabilities are rated critical, with three already exploited. The report highlights key vulnerabilities,…

    SANS ISC
  17. Microsoft warns vishing attacks on misconfigured Salesforce access

    Microsoft's Security Research Team identified threat actor activities between mid-2025 and mid-2026, highlighting tactics aligned with ShinyHunters, such as voice phishing (vishing), supply chain compromises, and exploitation of misconfigured guest access in…

    DataBreachesShinyHunters
  18. SAP issues critical patch for NetWeaver ABAP flaw rated CVSS 9.9

    SAP has released critical patches addressing a severe vulnerability in NetWeaver ABAP, rated CVSS 9.9, that poses risks of data exposure or modification. This flaw allows unauthorized access to data, potentially with serious implications for organizational…

    The Hacker News
  19. Boards Can Tackle Third Party Vendor Risk With Clear Governance

    The article discusses effective management of third-party vendor risk through structured governance strategies. It emphasizes the importance of measuring and understanding risks associated with vendor relationships, validating risks, benchmarking against…

    Dark Reading
  20. Claude for Chrome flaw lets rogue extensions read your Gmail

    The article discusses a security flaw in the Claude for Chrome extension that allows malicious extensions to read Gmail messages without user consent. This vulnerability poses significant privacy risks and highlights the need for improved browser security…

    The Hacker News
  21. Welshman jailed for swatting spree after Doxbin admin role

    Callum Dare, a 26-year-old Welshman, was sentenced to prison for his involvement in multiple swatting incidents across the UK, US, and Canada. As an administrator of Doxbin, a dark web site known for exposing personal information to facilitate harassment, he…

    DataBreaches
  22. Adobe patches critical ColdFusion flaws in latest security update

    Adobe released updates for 12 products addressing 88 vulnerabilities, including critical issues in ColdFusion, Commerce, Experience Manager, and Illustrator. Key vulnerabilities in ColdFusion could lead to arbitrary code execution and privilege escalation.…

    SecurityWeek
  23. LabubaRAT malware poses as NVIDIA software to hijack Windows PCs

    The article discusses the emergence of LabubaRAT malware, which disguises itself as legitimate NVIDIA software to control Windows hosts. This type of malware is indicative of a growing trend where cyber threats are increasingly employing sophisticated…

    The Hacker News
  24. Tego AI flags security flaw in Anthropic’s Claude Tag Slack bot

    Tego AI, a cybersecurity start-up, has identified a significant security vulnerability in Claude Tag, Anthropic’s integration with Slack. The risk arises from Claude Tag responding to messages with the text ‘@Claude’ without needing a proper Slack mention,…

    SecurityOnline
  25. US States Enact AI Safety Laws as Ransomware Threats Rise

    The article discusses the emergence of regulations surrounding frontier artificial intelligence (AI) as state governments in Illinois, New York, and California enact laws to ensure transparency and safety in AI deployment. Illinois has introduced the…

    Dark Reading
  26. ClickFix turns malware as a service, dodging antivirus shields

    The article discusses the evolution of ClickFix, a malware ecosystem that exploits social engineering techniques to effectively bypass traditional security defenses like antivirus and endpoint detection systems. Researchers highlight the need for new…

    Dark Reading
  27. DoD halts CMMC Phase II, orders review of defence cyber standards

    The US Department of Defense (DoD) announced the suspension of Cybersecurity Maturity Model Certification (CMMC) Phase II requirements, initially scheduled for implementation on November 10, 2026. This decision comes as the DoD aims to review the program to…

    Infosecurity
Show older articles
CyberSIXTSignal over noise
Updated AboutDevelopersSign in