News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Today, Sat 31 Oct | 14 so far | 3 |
Developing
Wed 15 Jul63 articles
- UK pushes for sovereign AI defence amid US model restrictions
The article discusses increasing concerns in the UK regarding technological sovereignty in the face of US restrictions on AI models from companies like Anthropic and OpenAI. The UK government, alongside the private sector, is advocating for reduced reliance…
Dark Reading - LegacyHive Windows zero day enables privilege escalation
Chaotic Eclipse has revealed a new Windows zero-day exploit named LegacyHive that targets the Windows User Profile Service, allowing privilege escalation on fully patched Windows systems. This vulnerability does not yet have a CVE and requires valid user…
Security Affairs 2 articles this day · Security Affairs first · 2 outlets
SonicWall SMA1000 flaws exploited, urgent patch advised · CISA Flags SonicWall SMA1000 and Microsoft Flaws in KEV CatalogShow 2 articlesHide 2 articles
- SonicWall SMA1000 flaws exploited, urgent patch advised16:19Rapid7
- CISA Flags SonicWall SMA1000 and Microsoft Flaws in KEV Catalog10:49Security Affairs
- SonicWall SMA1000 flaws exploited, urgent patch advised
- Microsoft Launches Tailored Threat Intelligence and MDR Services
Microsoft has announced new services aimed at enhancing cybersecurity through better threat intelligence and expert support. The key offerings include Microsoft Defender Experts Threat Intelligence, which provides tailored insights on emerging threats based…
Microsoft - OkoBot Malware Tricks Ledger/Trezor Users to Reveal Seed Phrases
The article discusses the OkoBot malware framework, which targets users of cryptocurrency hardware wallets by injecting phishing prompts for seed phrases into Ledger and Trezor applications. This new threat emphasizes the importance of cybersecurity measures…
The Hacker News - PromptFiction Flaw in Claude Desktop Enables Silent Data Theft
The article discusses a critical vulnerability found in Anthropic's Claude Desktop application, known as "PromptFiction." This flaw allowed attackers to submit malicious prompts to the AI assistant without any user interaction, potentially leading to severe…
Dark Reading - Microsoft, SonicWall bugs found; RabbitMQ patches auth flaws
The article discusses the detection of four critical vulnerabilities in cybersecurity: 1. CVE-2026-56155 (Microsoft Active Directory Federation Services): Insufficient access control. 2. CVE-2026-56164 (Microsoft SharePoint Server): Missing authentication…
- SeasonalInvite uses fake eCards to deliver RMM malware
A phishing campaign named SeasonalInvite has been active since January 2026, targeting Windows and macOS users by disguising remote monitoring and management (RMM) tools as legitimate eCards. The campaign uses themes that rotate with the calendar, employing…
Infosecurity - Cursor AI IDE Allows Code Execution via Malicious git.exe
A significant vulnerability has been identified in Cursor, an AI-assisted development environment with over 7 million users, allowing for code execution through a malicious git.exe binary when users open a repository. Discovered by Mindgard, this flaw does…
SecurityWeek - ClaudeBleed flaw lets rogue Chrome extensions hijack Gmail access
The article discusses a vulnerability in the 'Claude for Chrome' browser extension, known as ClaudeBleed, which could allow malicious extensions to control the assistant and access users' Gmail and other services without their knowledge. This flaw enables…
Malwarebytes - CISA urges swift patching of SharePoint after zero day exploits
The US Cybersecurity and Infrastructure Security Agency (CISA) has urged immediate strengthening of Microsoft SharePoint servers following the discovery of zero-day vulnerabilities, notably CVE-2026-56164, which allows remote privilege escalation without…
- Malicious NuGet Package Steals Payment Data From .NET Developers
The page details four critical cybersecurity vulnerabilities detected today, including issues in Microsoft Active Directory and SharePoint Server, as well as vulnerabilities in SonicWall appliances. It also highlights a malicious NuGet package named…
SecurityOnline - Microsoft pulls decade old UEFI shims after Secure Boot bypass
Researchers from ESET have discovered that 11 vulnerable UEFI shim bootloaders, which have been signed by Microsoft and date back over a decade, can permit attackers to bypass the UEFI Secure Boot feature on many systems. The vulnerabilities allow untrusted…
Infosecurity - Google Cloud Run bugs let attackers read files and run commands
The article highlights vulnerabilities in publicly exposed serverless applications, focusing on the security risks associated with Google Cloud Run services. Key points include: 1. **Vulnerability Exposure**: Serverless applications can be compromised…
Google Cloud - Firefox, Chrome, Adobe and VMware roll out urgent security patches
The article discusses significant updates from Firefox, Chrome, Adobe, and VMware that address multiple critical security vulnerabilities. Highlighting the importance of timely software updates for maintaining cybersecurity, it notes that these updates were…
The Hacker News - Cursor AI flaw lets hackers run commands via two click attack
The article discusses a security vulnerability in Cursor AI, an AI coding tool used by developers. Researchers revealed that malicious actors can exploit this 2-click vulnerability to execute arbitrary commands on developers' environments by disguising their…
Dark Reading - Attackers abuse Windows bind links to hide malware from EDR tools
Bitdefender's research reveals three attack techniques exploiting Windows bind links to evade endpoint detection and response (EDR) systems. Bind links, used for mapping file paths, can be manipulated by attackers to redirect to malicious files, effectively…
SecurityWeek - Cloud & Data Security Summit 2026 Sets AI, Identity Focus July 15
The article promotes the **2026 Cloud & Data Security Summit** taking place on July 15th, aimed at sharing strategies and best practices for cloud security. Key topics include identity security, AI application security, and overcoming challenges in cloud…
SecurityWeek - Compromised Logins Fuel 79% of Ransomware Attacks, Sophos Reports
A recent report by Sophos reveals that compromised logins have become the leading entry point for ransomware attacks, accounting for 79% of incidents. Initially, malicious emails were the entry point in 26% of cases, a rise from 19% in 2025. Phishing…
Infosecurity - Nayax refutes Syndicate breach claims after SEC filing
The article discusses a significant cybersecurity incident involving Israeli fintech company Nayax and a hacking group called The Syndicate, which claims to have exfiltrated over 100 TB of sensitive data, including 1 billion card records and KYC data. Nayax…
DataBreachesThe Syndicate - Microsoft patches 622 flaws, fixes three critical zero day bugs
In July 2026, Microsoft addressed a significant security update during Patch Tuesday, fixing 622 CVEs, including three critical zero-day vulnerabilities—CVE-2026-50661, CVE-2026-56155, and CVE-2026-56164. These updates highlight a trend towards larger…
- Progress restores ShareFile Storage Zones after four day alert
Progress Software has restored access to its ShareFile Storage Zones Controller after a four-day suspension due to a credible external security threat that was identified on July 10, 2026. The threat was linked to the exploitation of a high severity path…
Infosecurity - CISA issues guide on coordinated vulnerability disclosure
The publication titled "Establishing a Coordinated Vulnerability Disclosure Program to Work With Security Researchers" was developed by CISA and the NSA, along with international partners. It provides best practices for software manufacturers and online…
CISA - US DOJ charges Russians over bulletproof hosting cybercrime ring
The US Justice Department has indicted three Russian nationals—Aleksandr Volosovik, Kirill Zatolokin, and Yulia Pankova—and two companies, ML.Cloud and Media Land, for allegedly facilitating cybercrime services. These services provided 'bulletproof' hosting…
SecurityWeek - AsyncAPI npm breach spreads info stealing malware via IPFS
A supply chain attack on AsyncAPI npm packages has been disclosed, affecting four packages with over 2 million weekly downloads. The malware, which includes capabilities for info-stealing, crypto-theft, and remote access, was injected into packages widely…
Security Affairs - SASE needs AI boost to stop modern cyber threats effectively
The article discusses the limitations of Secure Access Service Edge (SASE) in cybersecurity, highlighting that merely inspecting data packets is insufficient for effective protection. It emphasizes the importance of integrating advanced AI solutions…
The Hacker News - Partnered Health breach leaks patient data from 16 clinics
A cyber breach at Partnered Health, a major healthcare chain in Australia, has exposed patient data, including treatment information. Sixteen clinics are confirmed affected, with ongoing investigations into other locations. The company reported the breach to…
DataBreaches - Zero day PoC for Windows appears after Patch Tuesday
A researcher has publicly released a proof of concept (PoC) for a new Windows zero-day vulnerability shortly after a Microsoft Patch Tuesday. This vulnerability poses significant risks to enterprise security by potentially allowing unauthorized access and…
The Hacker News - Webinar tackles AI ad tech approval gap, strengthens web security
The Hacker News highlighted a new webinar on mitigating the approval gap in AI-era ad tech. It features discussions on security improvements, particularly in web and supply chain sectors. The website promotes various resources including studies on IP…
The Hacker News - Fortinet, Ivanti and ServiceNow patch unauth RCE and other flaws
On Tuesday, Fortinet, Ivanti, and ServiceNow released patches addressing 15 vulnerabilities across their products. Notably, ServiceNow fixed a critical remote code execution flaw (CVE-2026-6875) with a CVSS score of 9.5, which could be exploited without…
SecurityWeekCVE-2026-6875 - Cloned Git Repos Exploit Cursor Flaw to Run Windows Code
A vulnerability has been identified that allows malicious cloned repositories to trigger code execution on Windows systems through a cursor flaw. This security issue poses a significant risk as it can lead to unauthorized actions by exploiting the cloning…
The Hacker News - White House rolls out Gold Eagle for critical infra defence
The White House has introduced the Gold Eagle initiative, aimed at enhancing the coordination for detecting, prioritizing, and patching vulnerabilities in critical infrastructure. This initiative connects open source software maintainers with critical…
SecurityWeek - LLM crafted TuxBot IoT botnet shows promise despite critical bugs
The article discusses the TuxBot v3 Evolution, a newly identified modular IoT botnet framework. It highlights the developers' use of a large language model (LLM) to generate parts of the code, which resulted in both functional elements and numerous bugs. The…
Unit 42 - OkoBot Malware Uses SSH Tunnels to Steal Crypto Data Worldwide
The article discusses the OkoBot malware framework, which targets cryptocurrency users by utilizing a complex infection chain that consists of various malicious payloads delivered through SSH tunnels. Initially identified in January 2026, it activates via…
securelist.com - Progress Software fixes zero day flaw after ShareFile service outage
Progress Software confirmed a zero-day vulnerability was responsible for the disruption of its ShareFile Storage Zones Controller service. Access to the service was disabled due to a credible security threat, and the company has since restored access…
SecurityWeek - Microsoft Patch Tuesday 2026 Fixes Record 570 CVEs Using AI
Microsoft has addressed a record number of vulnerabilities—570 CVEs—during the July 2026 Patch Tuesday. This surge in updates stems from the implementation of AI in detecting security flaws, leading to an expected increase in such updates. Key…
Infosecurity - Siemens Schneider Rockwell Warn of Critical ICS Flaws July 2026
In July 2026, Siemens, Schneider Electric, and Rockwell Automation issued advisories related to critical vulnerabilities in their ICS products. Siemens announced nine advisories, including a critical token invalidation vulnerability in Opencenter X, which…
SecurityWeek - Compromised AsyncAPI npm packages spread botnet malware
The article discusses the recent discovery of compromised AsyncAPI npm packages that have been delivering multi-stage botnet malware. This malware poses significant threats to software security, highlighting the vulnerabilities within package management…
The Hacker News - UK adds cyber threats to water, data centres in risk register
The UK government has updated its National Risk Register to include new cyber threats that could lead to mass casualties. Key additions involve potential cyber-attacks on digital infrastructure, water systems, and policing, with specific scenarios assessing…
Infosecurity
