News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 15 |
| Today, Thu 29 Oct | 20 so far | 7 |
Developing
Wed 12 Aug65 articles
- Critical Nuxt DevTools flaw lets hackers run code on dev machines
A critical vulnerability in Nuxt DevTools (CVE-2026-71319) allows attackers to execute arbitrary commands on developer machines, with a CVSS score of 9.6. This issue affects versions prior to 3.3.1 and is primarily relevant during development mode. The…
SecurityOnlineCVE-2026-71319 - Gunra ransomware exploits Fortinet flaws, targets government
Gunra ransomware is exploiting two vulnerabilities in Fortinet products to target critical infrastructure and government entities, as highlighted in a joint advisory from US and South Korean agencies. This ransomware-as-a-service (RaaS) is capable of…
InfosecurityGunra - City-Forum attacks Salesforce guest API, hits telecoms and banks
The City-Forum campaign targets Salesforce and ServiceNow using a custom toolset aimed at telecoms, banks, and public-sector portals. Researchers note it's the first in-the-wild exploitation of Salesforce's UI-API guest surface. Attacks occur through…
SecurityWeek - WhatsApp Unveils New Scam Alert Feature
WhatsApp has launched a beta feature called Scam Alert that employs an on-device machine learning model to identify suspicious messages from non-contacts. The model functions within the bounds of end-to-end encryption, analyzing incoming messages without…
SecurityWeek - Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)CVE-2026-20349Exploited
2 articles this day · SecurityWeek first · 2 outlets
CVE-2026-61515: Unauthenticated Command Injection in Puwell IP Cameras, PoC Exploit Code Publicly Disclosed · Cisco patches critical ASA/FTD zero day as attacks spikeShow 2 articlesHide 2 articles
- Walmart Cybersecurity Shift: Trust, Innovation Under Jason O'Dell
The article discusses how Walmart has transformed its cybersecurity operations under the leadership of Jason O'Dell, who emphasizes trust and innovation. Key points include a shift from fear-based approaches to proactive strategies that prioritize business…
Dark Reading - NIST calls for public input on AI driven NVD modernization
The U.S. National Institute for Standards and Technology (NIST) is seeking public input on modernizing its National Vulnerability Database (NVD) to enhance automation and AI integration. An RFI invites stakeholders to share insights on opportunities and…
Infosecurity - Cloudflare sees 519% rise in >1 Tbps DDoS attacks in H1 2026
Cloudflare's report highlights significant trends in DDoS attacks during the first half of 2026, revealing a 519% increase in attacks exceeding 1 Tbps. Key points include: 1. A surge in network-layer attacks, with 935 mitigated attacks over 1 Tbps. 2. A…
DataBreaches - AI API flaw lets weak models read AI reasoning, experts warn
The article discusses a vulnerability in the APIs of major AI companies like OpenAI, Anthropic, and Google. This flaw allows less sophisticated AI models to decode the reasoning of more advanced models, posing significant security risks. It emphasizes the…
The Hacker News - A serious incident occurred at MyDr, a Polish healthcare system provider
MyDr, a major provider of Electronic Medical Records in Poland, is currently investigating a significant security breach. Hackers claim to have accessed data pertaining to over 18 million individuals, including 18,814,422 unique PESEL numbers linked to…
DataBreaches - Firms boost security using AI validation and zero trust tactics
The article from The Hacker News discusses the recovery and strengthening of enterprise defenses against cybersecurity threats, emphasizing the importance of validation and attack simulation. It highlights recent advancements in cybersecurity strategies such…
The Hacker News - Ceva Logistics Operations Disrupted by Cyberattack
Ceva Logistics, a major shipping and logistics company, experienced a cyberattack on July 29, disrupting operations across eight European warehouses. The company informed affected customers on August 1 that shipments from these locations are halted. Notable…
SecurityWeek - Control Which Package Registries Your CI Jobs and Developer Machines Use
The article discusses the importance of controlling package registries for CI jobs and developer machines to enhance security. It introduces two StepSecurity controls aimed at blocking public registries and ensuring that software installations occur from…
StepSecurity - Adobe patches critical ColdFusion, Campaign Classic flaws
Adobe has released patches for three critical vulnerabilities identified in ColdFusion and Campaign Classic, each with a CVSS score of 10.0, highlighting significant security risks. Organizations using these products are urged to update immediately to…
The Hacker News - Intel, AMD patch 80+ flaws, address privilege escalation risks
Intel and AMD have announced security patches addressing over 80 vulnerabilities in their products. Intel released 42 advisories covering 72 vulnerabilities, fixing several high-severity issues related to privilege escalation and denial-of-service (DoS) in…
SecurityWeek - Supply chain breach hits LiteLLM, exposing secrets at Nvidia, AWS
The LiteLLM supply chain attack impacted over 2,500 organizations and 434,000 CI/CD pipelines, following a compromise of Aqua Security's Trivy vulnerability scanner. Hackers exploited compromised versions of LiteLLM, a Python library pushed to PyPI, which…
SecurityWeek - Sandworm hits Polish power plant via private APN, brief outage
Russian-linked hackers targeted a Polish power plant's operational technology (OT) network through a private Access Point Name (APN) during a cyber campaign in December 2025, as reported by Poland's Cybersecurity Incident Response Team (CERT.PL). This…
InfosecuritySandworm - VMware vCenter flaw lets hackers maintain persistent access
Attackers are exploiting a vulnerability in VMware vCenter to maintain persistent remote access. This vulnerability poses a significant risk as it allows unauthorized users to infiltrate networks, leading to potential data breaches. Cybersecurity experts…
The Hacker News 5 articles this day · SecurityOnline first · 4 outlets
Lazarus uses fake job offers to exploit Windows CVE-2026-68820 · Microsoft Fixes 400 Flaws on August Patch TuesdayShow 5 articlesHide 5 articles
- Lazarus uses fake job offers to exploit Windows CVE-2026-6882008:45SecurityWeek
- Microsoft Fixes 400 Flaws on August Patch Tuesday08:12Infosecurity
- Microsoft patches wormable DNS flaw and critical WinSock zero day06:49Security Affairs
- Lazarus Exploits Windows Zero-Day in Operation Dream Job Attacks02:44SecurityOnline
- Microsoft Patch Tuesday Patches Critical WinSock Exploit02:21SecurityOnline
- Lazarus uses fake job offers to exploit Windows CVE-2026-68820
- Kimwolf v7 Botnet Leverages Ethereum, Chrome for DDoS
The article discusses the newly discovered Kimwolf v7 botnet, identified by Palo Alto Networks on February 3, 2026. This version significantly enhances the DDoS attack capabilities targeting Android TV boxes and introduces sophisticated techniques for…
Security Affairs - Ivanti patches critical EPM flaws, including cleartext data leak
Ivanti has released patches for four vulnerabilities in its Endpoint Manager (EPM) and Neurons for MDM products. The EPM update addresses three high-severity issues, including CVE-2026-18129, which involves cleartext transmission of sensitive information,…
SecurityWeekCVE-2026-18129 2 articles this day · SecurityOnline first · 2 outlets
Proof of concept bypasses Defender patch for CVE-2026-50656 · ShieldBreak Exploit Exposes Defender Patch Flaw CVE-2026-50656Show 2 articlesHide 2 articles
- Proof of concept bypasses Defender patch for CVE-2026-5065608:07Security Affairs
- ShieldBreak Exploit Exposes Defender Patch Flaw CVE-2026-5065604:24SecurityOnline
- Proof of concept bypasses Defender patch for CVE-2026-50656
- Malicious LiteLLM releases linked to Trivy hack hit 2,100 firms
The article discusses how malicious releases of LiteLLM, linked to the Trivy hack, may have compromised over 2,100 organizations. It highlights the importance of cybersecurity in protecting software supply chains and emphasizes the necessity for robust…
The Hacker News - Siemens, Schneider, Phoenix Patch Critical ICS Flaws in August
In August 2026, major industrial companies Siemens, Schneider Electric, and Phoenix Contact released Patch Tuesday advisories addressing critical vulnerabilities in their Industrial Control System (ICS) products. Siemens published 10 advisories, including…
SecurityWeek - Siemens warns of CVE-2026-58115 RCE in SIMATIC IoT2050 devices
Siemens has issued a critical alert for CVE-2026-58115, a severe vulnerability in the SIMATIC IoT2050 Advanced devices, rated 10.0 on the CVSS scale. This flaw allows unauthenticated remote code execution via the Node-RED HTTP interface, posing significant…
SecurityOnlineCVE-2026-58115 - SAP Commerce Cloud flaw lets attackers run arbitrary code
The article discusses a critical vulnerability in SAP Commerce Cloud that allows unauthenticated attackers to execute arbitrary code. This flaw poses significant risks to enterprises using the platform as it could lead to unauthorized access and manipulation…
The Hacker News - SonicWall patches GMS RCE flaws CVE-2026-66147, CVE-2026-66145
SonicWall has released patches for eight vulnerabilities in its products, particularly focusing on two critical remote code execution (RCE) flaws in the Global Management System (GMS) which could allow unauthenticated attackers to execute arbitrary code. The…
SecurityWeekCVE-2026-66147 - Cisco, Windows and Metabase flaws fuel new macOS ClickFix attack
The page discusses a critical alert regarding three active exploits detected today, associated with specific vulnerabilities in Cisco, Microsoft Windows, and Metabase. It highlights a new cyber threat targeting macOS users via a ClickFix campaign, where…
SecurityOnline - ShieldBreak zero‑day bypasses Defender, gives SYSTEM access
The article discusses a zero-day vulnerability known as ShieldBreak, which reportedly bypasses Microsoft Defender's patch, allowing SYSTEM access. Published on August 12, 2026, it highlights the implications for cybersecurity, emphasizing the potential risks…
The Hacker News - Cisco ASA/FTD bug exploited for remote DoS attacks
The article discusses a recently discovered vulnerability in Cisco ASA and FTD devices, which has been actively exploited in the wild to trigger remote denial-of-service (DoS) attacks. The author, Ravie Lakshmanan, emphasizes the urgency for users of these…
The Hacker News - UNC6671 vishing gang rebrands, steals cash from banks, law firms
The page reports on the UNC6671 vishing extortion group's activities, revealing that they have rebranded after the claimed retirement of their BlackFile brand, now operating under names like Redact, Pink, Helix, and Falcon. They utilize voice phishing to…
SecurityOnlineUNC6671 - Critical SharePoint JWT flaw lets attackers bypass authentication
The page discusses a critical security vulnerability (CVE-2026-55040) affecting Microsoft SharePoint, enabling unauthorized users to bypass authentication by forging JSON Web Tokens (JWT). The issue has a CVSS score of 9.1, indicating its severity. Rapid7…
- Chrome patches five high severity use after free flaws in update
The page discusses a new Chrome security update that addresses five high-severity use-after-free vulnerabilities affecting various components of the browser, including V8, Blink, HTML, TabStrip, and Extensions. The vulnerabilities, which allow potentially…
SecurityOnline - Zoom fixes two remote code execution bugs in annotator function
On August 11, 2026, Zoom announced four security vulnerabilities, including two that allow remote code execution. The flaws, identified as CVE-2026-53413 and CVE-2026-53415, are particularly severe with CVSS scores of 8.3. Affected users are urged to update…
SecurityOnlineCVE-2026-53413
