News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Today, Sat 31 Oct | 11 so far | 2 |
Developing
Tue 21 Jul80 articles
- CISA warns of critical Langflow RCE flaw CVE-2026-0770
CISA has added CVE-2026-0770 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Langflow’s Langflow product and is described as the Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability. In one sentence, the…
- CISA Warns of Critical WordPress Flaw CVE‑2026-63030 in KEV
CISA has added CVE‑2026-63030 to its Known Exploited Vulnerabilities catalogue. The entry concerns WordPress Core and describes an interpretation conflict vulnerability that could enable an attacker to perform SQL injection and achieve remote code execution,…
- CISA flags critical WordPress SQLi flaw in KEV, urges patch
CISA has added CVE‑2026-60137 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects the WordPress Core product and is described as a SQL injection vulnerability that can be chained with CVE‑2026-63030 to permit an unauthenticated attacker…
- Google launches Gemini 3.5 Flash AI to catch software flaws
Google has announced the release of Gemini 3.5 Flash Cyber AI, an advanced tool designed to identify and remediate software vulnerabilities using artificial intelligence. This development reflects a significant advancement in software security, leveraging…
The Hacker News - SharePoint flaw CVE-2026-50522 under active attack after PoC leak
The article addresses the critical security vulnerability in SharePoint identified as CVE-2026-50522, which is currently being exploited. A proof of concept (PoC) has been made public, escalating the urgency for organizations to patch this flaw to prevent…
- TELEPUZ Malware Spreads Through ClickFix and VIDAR Attacks
The TELEPUZ malware, tracked by Elastic Security Labs, employs a ClickFix social engineering attack to infect Windows users. Initially, victims are lured to a compromised webpage which prompts them to execute a shell command that retrieves the VIDAR loader,…
SecurityOnline - wp2shell WordPress flaw lets attackers steal visitor data
The article discusses the wp2shell vulnerabilities in WordPress, highlighting the dangers posed to visitors of compromised sites. Hacked sites can facilitate scams, malware delivery, and credential theft, as attackers can gain full control without needing…
Malwarebytes - Cloudflare’s R2 goes GA globally with zero egress fees
Cloudflare's R2 is now generally available, offering developers cost-effective object storage without egress fees. Launched in open beta in May 2022, R2 attracted over 12,000 developers with diverse use cases. Key features include S3 compatibility for easy…
Cloudflare - ASUS Patches Router and PC Software Flaws, Including a CVSS 9.5 Command Execution Bug
ASUS has released five security advisories addressing seven vulnerabilities affecting router firmware, MyASUS driver components, Aura Wallpaper, and GameSDK. The critical vulnerability, CVE-2026-13385 (CVSS 9.5), allows machine-in-the-middle attackers to…
SecurityOnlineCVE-2026-13385 - Qilin ransomware exploits PAN-OS auth bypass to breach networks
The article discusses a recent ransomware attack attributed to Qilin hackers, who exploited a vulnerability in PAN-OS, specifically an authentication bypass, to gain initial access to networks. The cyberattack highlights the evolving tactics of ransomware…
The Hacker NewsQilin - Russian hacker sells AI tool bypassing Claude safety filters
A Russian-speaking cybercriminal, known as 'Trim', transitioned from sharing a jailbreak tutorial on a Russian forum to selling a commercial AI pentest platform called 'AI Pentest Checker' within three months. This platform utilizes techniques outlined in his…
InfosecurityTrim - How Windows, Apple and Browsers Detect WiFi Captive Portals
The article by Johannes Ullrich discusses the detection of captive portals encountered when connecting to public WiFi networks. It explains that captive portals are splashes screens requiring user acknowledgment or login, which modern browsers and operating…
SANS ISC - Windows privilege escape bug CVE-2026-42980 patched by Microsoft
CVE-2026-42980 is a high-severity privilege escalation vulnerability in Microsoft Windows, affecting several versions of Windows 10. Assigned a CVSS score of 7.8, it allows low-privileged users to gain SYSTEM level access due to an integer underflow in the…
SecurityOnlineCVE-2026-42980 - Over 12% of Military Apps Contain Foreign Code Raising Data Risks
A study found that over 12% of mobile apps targeted at US military personnel contain code from companies in China, Russia, or other foreign nations, raising data security concerns. Researchers examined over 220 apps, revealing that many incorporate…
Ars Technica - Zimbra patches critical SNMP command injection and four XSS flaws
The article discusses Zimbra's recent patch that addresses a critical SNMP command injection vulnerability and four cross-site scripting (XSS) vulnerabilities. The update aims to enhance email security by mitigating risks associated with unauthorized code…
The Hacker News - Apache fixes three SQLi bugs in Fineract core banking software
Apache has fixed three SQL injection vulnerabilities in the open-source core banking platform Fineract, identified as CVE-2026-57821, CVE-2026-56287, and CVE-2026-35152. Each of these flaws exploits unvalidated query parameters and requires an authenticated…
SecurityOnlineCVE-2026-57821 - Zimbra fixes SNMP command injection and XSS bugs in 10.1.20
Zimbra released Collaboration Suite 10.1.20 on July 20, 2026, addressing critical vulnerabilities, including a high-severity SNMP command injection flaw and multiple XSS bugs. These vulnerabilities pose risks to email and collaboration servers, especially…
SecurityOnline - Hackers Hijack Printers and BitLocker in New Extortion Scheme
The article examines a new extortion scheme involving cybercriminals exploiting vulnerabilities in corporate printers and the BitLocker encryption system to demand ransoms from organizations. It details two incidents: one in Colombia where attackers…
securelist.com - Anthropic AI models beat OpenAI in code security, study shows
AI-generated code typically introduces an average of 15 vulnerabilities per codebase, largely influenced by the choice of development framework rather than the AI model itself. The AI Trust Index, created by Secure Code Warrior with RMIT University, assessed…
Dark Reading - Black Kite Report Finds 146 Ransomware Groups Active in 2026
The report titled "Black Kite Ransomware Report 2026" reveals a rapid emergence of ransomware groups, with 146 groups active as of June 2026, up from 105 the previous year. It notes that 61 new groups have appeared in 2026 alone, averaging over one new group…
Infosecurity - World Cup 2026 Alters Global Internet Traffic, Cloudflare Reports
The 2026 World Cup showcased its unique capacity to unite global audiences, reshaping online engagement patterns. Cloudflare analyzed traffic data, noting significant deviations during match times compared to normal activity baselines established by a month…
Cloudflare - South Korea Foreign Ministry hit by diplomatic data breach
A significant cyberattack on South Korea's Foreign Ministry has led to the compromise of the personal data of nearly all diplomatic personnel. The breach of the Korea National Diplomatic Academy's data system, which occurred between April and May of the…
DataBreaches - NY DFS Fines Swedbank $50 Million for Panama Papers Cover up
In 2016, the Panama Papers leak exposed significant compliance failures by financial institutions, including Swedbank. Following the leak, the New York Department of Financial Services (DFS) conducted investigations and issued two information requests to…
DataBreaches - AI music platform Suno leaks 55 million emails and payment data
In November 2025, the AI music generation tool Suno suffered a significant data breach that wasn't reported until July 2026. The breach affected over 55 million unique email addresses and included phone numbers for those who signed up using them.…
DataBreaches - Seoul will warn 4.62 million of Ttareungyi bike share data breach
The Seoul Metropolitan Government will notify approximately 4.62 million citizens about a data breach involving their membership information from the Ttareungyi bike-sharing service. Notifications will include specific leaked information and compensation…
DataBreaches - Empirical secures $25m Series A to boost AI cyber risk tools
Empirical, a Chicago-based cybersecurity startup founded in 2024, has secured $25 million in Series A funding, increasing its total funding to $37 million. The investment, led by Brightmind Partners, will expedite the development of its key products:…
SecurityWeek - SecurityWeek launches merit based Critical Impact Awards program
SecurityWeek recently introduced the Critical Impact Awards, a program recognizing significant contributions in industrial cybersecurity. Unlike traditional awards, these honors are based on merit and independent reviews by a panel of cybersecurity experts.…
SecurityWeek - FBI warns of deepfake IC3 scams luring victims to fake sites
The FBI has issued a warning regarding an increase in deepfake videos being used by scammers to impersonate leadership from the Internet Crime Complaint Center (IC3). These videos, combined with spoofed IC3 websites, aim to defraud previous victims by making…
Infosecurity - ClickLock Stealer hijacks Macs with Cloudflare password prompts
The article discusses the newly discovered ClickLock Stealer, a macOS infostealer designed to lock a victim's Mac until they provide their password. Delivered through phishing pages resembling Cloudflare verification, the malware utilizes a shell script to…
Malwarebytes - Android AI agents leak invisible text that runs PC code
The article discusses a serious security vulnerability posed by open-source Android AI agents, which could allow invisible screen text to execute code on host PCs. This vulnerability highlights the need for enhanced safeguards within the AI software supply…
The Hacker News - HollowGraph malware hijacks Microsoft 365 calendar for covert C2
A newly identified malware called HollowGraph utilizes the Microsoft 365 calendar for command-and-control communication, as reported by Group-IB. This malware, linked to the Iran-nexus threat actor Cavern Manticore, obscures its activities by hiding within…
SecurityWeekCavern Manticore - Exploits now strike in hours, rendering patching ineffective
The article "N-day is Becoming N-Hour. Patching Faster Won't Save You" discusses the increasing urgency of addressing cybersecurity vulnerabilities. It emphasizes that traditional methods of patching systems are becoming ineffective against rapidly evolving…
The Hacker News - FBI Alerts to Fake Agent Scams Targeting Past Cybercrime Victims
The FBI's Internet Crime Complaint Center (IC3) warns against scammers impersonating FBI agents on social media and messaging apps, especially targeting previous cybercrime victims. These fraudsters create convincing fake accounts and offer recovery services…
Malwarebytes - Körber AG CISO Andreas Gaetje Shares His Cybersecurity Journey
The article features Andreas Gaetje, the CISO of Körber AG, discussing his unconventional journey into cybersecurity. He began his career focused on economics and public services before transitioning to IT and cybersecurity. Gaetje emphasizes that the…
SecurityWeek - Bit2Watt attack lets cloud users threaten grid stability
A new attack, termed "Bit2Watt," poses a significant threat to cloud infrastructure, enabling cloud tenants to potentially disrupt power grids without exploiting a vulnerability. This emerging threat emphasizes the need for enhanced security measures in cloud…
The Hacker News - Estée Lauder alerts staff after Oracle EBS flaw leaks 870GB
Cosmetics company Estée Lauder has notified employees about a data breach involving their personal information, which was stolen in August 2025 due to a vulnerability in Oracle E-Business Suite (EBS) exploited by the Cl0p cybercrime group. The breach leaked…
SecurityWeekCl0p - CVE-2026-6875 Hits ServiceNow AI Platform
CVE-2026-6875 is a critical pre-authentication vulnerability in the ServiceNow AI Platform that allows unauthenticated attackers to execute code under specific conditions. The vulnerability stems from a sandbox escape, threatening the security of ServiceNow…
SOCRadarCVE-2026-6875 - Researcher pockets $78k Meta bounty for support data flaw
A security researcher, Rony K Roy, received a $78,000 bug bounty from Meta after uncovering a critical vulnerability that exposed customer support data while initially reporting a less severe authorization issue in January 2026. The flaw, which was more…
SecurityWeek - SF Sues Apple, Google to Pull Nudify Apps After Deepfake Worries
The article discusses legal actions taken by San Francisco against Apple and Google regarding 'nudify' apps that create non-consensual nude images from photos. On July 17, 2026, San Francisco's City Attorney David Chiu sent cease-and-desist letters to both…
Malwarebytes - Craneware breach exposes healthcare data amid investigation
Craneware, a healthcare finance software provider, has reported a cyber incident involving unauthorized access to its data environment, resulting in the theft of numerous file names and some employee and customer data. Although most stolen data was…
Infosecurity
