Skip to content
Sign in

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Articles per day, last 14 days

Most articles on Wed 21 Oct (96); 10–13 on weekend days.

14 Oct16182096222426Today10 so faravg 60
  • On CISA KEV CVEs
  • Other coverage
  • Closed-day average
Show as table
Articles per day, last 14 days
DayArticlesOn CISA KEV CVEs
Wed 14 Oct8625
Thu 15 Oct7815
Fri 16 Oct6112
Sat 17 Oct101
Sun 18 Oct100
Mon 19 Oct6012
Tue 20 Oct8616
Wed 21 Oct9618
Thu 22 Oct8411
Fri 23 Oct6816
Sat 24 Oct134
Sun 25 Oct132
Mon 26 Oct7620
Tue 27 Oct9518
Today, Wed 28 Oct10 so far1

Developing

Exploited only
129 articles · 3–4 Sep

Latest days

Fri 4 Sep59 articles

  1. Google Chromium V8CVE-2026-85046Exploited

    7 articles this day · SecurityOnline first · 3 outlets

    FreeSWITCH api-chat Flaw Exploited via SIP Messages on FusionPBX · Google Patches Actively Exploited Chrome V8 Zero DayShow 7 articles
  2. Toy Ghouls

    2 articles this day · securelist.com first · 2 outlets

    Toy Ghouls Deploys Custom Backdoor via WinRM in Russian Attacks · Toy Ghouls Hides Backdoors in HiveMQ and Element Messaging SystemsShow 2 articles
  3. OpenAI Pledges $1 Billion to Bring Daybreak AI to Defenders

    OpenAI has pledged $1 billion to subsidise access to its Daybreak cybersecurity tools for frontline defenders in essential services across the United States and beyond. The initiative, named Daybreak for Frontline Defenders, aims to help critical sectors…

    Infosecurity
  4. Nvidia to Buy Hugging Face for $13 Billion in Open AI Push

    Nvidia has announced it will acquire the AI software platform Hugging Face for $13 billion, in a deal that signals the chipmaker’s strong push to back open-source AI development. Nvidia says Hugging Face currently supports more than 3 million models, 500,000…

    SecurityWeek
  5. G7 Urges Organisations to Begin Post Quantum Cryptography Migration

    The G7 is pressing governments and organisations to accelerate the transition to quantum-safe security, ahead of the realisable threat from quantum computing to widely used public-key cryptography. Under France’s 2026 G7 Presidency, ANSSI chairs the G7…

    Infosecurity
  6. Free SuperBox Streaming Boxes Turn Homes Into Criminal Proxy Hubs

    Researchers have identified a risk tied to certain “free” streaming boxes, notably SuperBox devices and apps such as CyberFlix TV, that can quietly enroll a household’s internet connection in a residential proxy network. This allows third parties to route…

    Malwarebytes
  7. WebRehab Super Forms – Drag & Drop Form BuilderCVE-2026-14894

    2 articles this day · SecurityOnline first · 2 outlets

    Attackers Exploit Two WordPress Flaws to Deploy Web Shells · Hackers Exploit WordPress Form Plugin to Take Over 13,000 SitesShow 2 articles
  8. Plex Patches Undisclosed Flaws in Media Server and Desktop Apps

    Plex has issued a security update urging users to upgrade to the latest releases after patching multiple undisclosed flaws in its Plex Media Server and Plex Desktop products. The company states that the fixes are available in Plex Media Server 1.43.3 and…

    The Hacker NewsCVE-2025-34158
  9. Dark Web Service Offers 153 Million Driver’s Licences in Live Breach

    A dark web identity theft service named Nexus appeared on 1 September 2026 offering searchable access to more than 153 million scanned driver’s licences from the United States and Canada, along with other ID documents. The FBI’s New Orleans field office…

    Security AffairsNexus
  10. OpenAI’s GPT-6 Astra Scores 100% at Exploiting Vulnerabilities

    OpenAI has unveiled GPT-6 Astra, described as the “world’s most intelligent and aligned model,” with the company highlighting exceptional cybersecurity capabilities. In its public briefing, Astra earned a perfect 100% on ExploitBench, the benchmark that…

    The Hacker News
  11. Apache Allura Fixes Four Flaws That Could Expose Repositories

    Apache Allura deployments running version 1.20.0 or earlier have been patched after multiple security vulnerabilities were disclosed. The vendor released Allura 1.21.0 to fix four related flaws: CVE-2026-80180 (stored cross-site scripting via markdown HTML…

    SecurityOnlineCVE-2026-80180
  12. Linux Kernel Flaw Gets Working PoC for Local Root Access

    SecurityOnline[.]info reports that NebuSec researchers published technical details and a functional proof-of-concept exploit for Linux CVE-2026-52924, a high-severity use-after-free in the kernel SCTP handling during stale COOKIE-ECHO events. The PoC…

    SecurityOnlineCVE-2026-52924
  13. TP-Link Patches Archer AX55 Flaws Enabling Code Execution and Password Theft

    TP-Link has disclosed two vulnerabilities affecting the Archer AX55 v4 router. The flaws involve the EasyMesh service and the web login module, with one issue potentially enabling remote code execution and the other exposing the admin password to a local…

    SecurityOnlineCVE-2026-18167
  14. Plex Urges Users to Patch Servers Before Security Flaw Details Emerge

    Plex has issued an urgent security update affecting both its desktop client and the Plex Media Server, urging immediate upgrades to Plex Desktop 1.115.0 or later and Plex Media Server 1.43.3 or newer. The company indicated the vulnerability is serious enough…

    SecurityOnline
  15. CERN Moves 2,200 LHC Control Systems to Debian 13 to Avoid Hardware Costs

    The European Organisation for Nuclear Research (CERN) has announced a major operating-system migration for its accelerator control fleet, moving over 2,200 industrial computers and embedded devices to Debian 13 by the end of 2026. The machines form the…

    SecurityOnline
  16. ISC Stormcast For Friday, September 4th, 2026 https://isc.sans.edu/podcastdetail/10082, (Fri, Sep 4th)

    The content provides information on Guy Bruneau, the current handler on duty, and indicates that the threat level is green. It includes links to various resources such as research journals, diaries, podcasts, data statistics related to TCP/UDP port activity,…

    SANS ISC
  17. WHMCS Patches Critical Flaws Enabling Code Execution and Data Theft

    Two critical vulnerabilities have been identified in WHMCS, the popular billing platform, with a vendor-issued security update now available to address both. The first flaw, CVE-2026-67399, is a remote code execution (RCE) vulnerability that stems from input…

    SecurityOnlineCVE-2026-67399
  18. BraZetsu Malware Maps Networks to Sell Access for Just $5.80

    Group-IB threat intelligence has identified BraZetsu, a Python-based initial access framework attributed to the Brazilian actor Exilware, as an operational tool set sold on an underground marketplace. Described as an initial access broker (IAB) framework,…

    SecurityOnlineExilware

Thu 3 Sep70 articles

  1. French Hospital Fined €500,000 After Patient Data Breach Affects 525,000

    On 3 September 2026, CNIL announced a €500,000 fine against Loire Private Hospital for failing to implement appropriate security measures to protect patients’ health data. The incident occurred in the summer of 2025 when an attacker gained access to the…

    DataBreaches
  2. SonicWall NSM Flaws Enable Authentication Bypass and Command Execution

    SonicWall has released a security bulletin detailing three critical vulnerabilities in its on‑premise Network Security Manager (NSM). The flaws, tracked as CVE-2026-78327, CVE-2026-78328 and CVE-2026-81939, carry a combined CVSSv3 high severity and affect…

    SecurityOnlineCVE-2026-78327
  3. Google Rushes Out Chrome Patch for Exploited V8 Zero Day

    Google has issued an emergency Chrome update after a critical zero‑day vulnerability, CVE-2026-85046, was exploited in the wild. The flaw is a V8 JavaScript engine type confusion that can allow an attacker to read memory out-of-bounds and execute arbitrary…

    SecurityOnlineExploitedCVE-2026-85046
  4. Two Nephrology Practices Hit by Separate Attacks, One Exposed Data

    Two unrelated medical practices named Nephrology Associates suffered cyberattacks this year, but only one has publicly disclosed the breach. In Kansas, Nephrology Associates, M.D., P.A. reported to the US Department of Health and Human Services on 29 July…

    DataBreachesInsomnia
  5. Cloudflare Taps OpenAI Models to Hunt and Patch Live Vulnerabilities

    Cloudflare has announced an early access offering called Vulnerability Discovery and Remediation (VDR), now part of Cloudflare Managed Defense. The service aims to help organisations prioritise and remediate vulnerabilities by combining real‑world context…

    Cloudflare
  6. Student Data Breach Exposes Campus Doors, Labs and Building Systems

    On 3 September 2026, DataBreaches[.]Net highlighted a growing concern where digital identity data used for student records also underpins physical security systems. The article notes that in a May incident, attackers exfiltrated student records, including…

    DataBreaches
  7. Phantom Deal Scammers Target Enterprises With Fake M&A Requests

    A new social engineering campaign, dubbed Phantom Deal, has been targeting large enterprises with highly crafted fake merger and acquisition requests. The attackers studied their targets in great detail, including public corporate histories and internal…

    Dark Reading
  8. Serbian Activists Targeted by Zero-Click Pegasus Spyware Attacks

    Serbian activists were targeted with zero-click Pegasus spyware and NoviSpy across a disclosed wave of infections that Citizen Lab and the SHARE Foundation traced to late 2025 into early 2026. An iPhone belonging to a member of Serbia’s student protest…

    Security Affairs
  9. Senator Urges NSA to Clarify Which VPNs Best Foil Surveillance

    A US senator has urged the National Security Agency to publish public guidance on how ordinary people should use virtual private networks (VPNs) to protect their communications from foreign surveillance. The request, from Senator Ron Wyden, notes a wide…

    Ars Technica
  10. Cisco Patches Critical Root RCE Flaw in Silicon One Switches

    Cisco has patched a critical remote code execution flaw in the Nexus 9000 series switches that use Silicon One hardware. The vulnerability, tracked as CVE-2026-20212, allows an unauthenticated attacker to run code with root privileges, with a CVSS score of…

    Security AffairsCVE-2026-20212
  11. ReliaQuest Says ShinyHunters Phishing Attack Was Contained

    Dark Reading’s discussion on whether ShinyHunters truly breached ReliaQuest centres on a social media flare over a phishing incident. ReliaQuest warned of a “widespread ShinyHunters campaign” using spoofed domains, and an associated post suggested a…

    Dark ReadingShinyHunters
  12. ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories

    The article discusses a series of recent cybersecurity threats, including CEO phishing kits and Dropbox account hacks, highlighting the increasing sophistication of cyber attacks. It emphasizes the importance of awareness and proactive measures in combating…

    The Hacker News
  13. Agentic Ransomware Took Down Enterprise in Ten Hours: AI Left 80-Page Audit

    A recent ransomware attack on an undisclosed corporate victim involved AI agents that swiftly dismantled the company's defenses in just ten hours, producing an extensive 80-page security audit as a follow-up. This attack, reported by Palo Alto Networks’ Unit…

    DataBreaches
  14. StreamRat Android malware spreads through Meta and TikTok ads

    The article discusses the StreamRat Android malware which has been proliferating through ads on Meta (formerly Facebook) and TikTok, with a reach of approximately 570,000 users, mainly targeting Spanish speakers in Spain. The malicious campaign promoted a…

    Malwarebytes
Show older articles
CyberSIXTSignal over noise
Updated AboutDevelopersSign in