Skip to content
Sign in

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Articles per day, last 14 days

Most articles on Wed 21 Oct (96); 10–13 on weekend days.

13 Oct15171921962325Today93 so faravg 59
  • On CISA KEV CVEs
  • Other coverage
  • Closed-day average
Show as table
Articles per day, last 14 days
DayArticlesOn CISA KEV CVEs
Tue 13 Oct8511
Wed 14 Oct8625
Thu 15 Oct7815
Fri 16 Oct6112
Sat 17 Oct101
Sun 18 Oct100
Mon 19 Oct6012
Tue 20 Oct8616
Wed 21 Oct9618
Thu 22 Oct8411
Fri 23 Oct6816
Sat 24 Oct134
Sun 25 Oct132
Mon 26 Oct7520
Today, Tue 27 Oct93 so far18

Developing

Exploited only
165 articles · 8–9 Sep

Latest days

Wed 9 Sep83 articles

  1. Chrome 153 Patches Exploited V8 Zero Day and 229 Flaws

    Google has released Chrome 153 to address 230 security flaws, including a zero-day vulnerability in the V8 JavaScript engine that is already being exploited in the wild. The flaw, CVE-2026-87491, is described as an out-of-bounds write in V8 that could allow…

    SecurityOnlineExploitedCVE-2026-87491
  2. AI-Assisted Attacks Target Latin American Transport and Banks

    Palo Alto Networks Unit 42 reports two AI-assisted intrusion campaigns targeting Latin American organisations, with activity spanning Mexico, Ecuador and Brazil. In both cases, attackers leveraged commercial large language models to script or enhance…

    SecurityOnline

Tue 8 Sep82 articles

  1. Microsoft WindowsCVE-2026-81963Exploited

    4 articles this day · SecurityOnline first · 4 outlets

    Microsoft Fixes 974 Flaws Including Two Exploited Windows Zero Days · Microsoft’s Record 972-Flaw Patch Haul Includes Two Zero-DaysShow 4 articles
  2. Microsoft WindowsCVE-2026-85880Exploited

    4 articles this day · SecurityWeek first · 4 outlets

    Microsoft’s Record Patch Tuesday Fixes Two Exploited Windows Zero-Days · Microsoft Fixes 974 Flaws as Two Windows Zero Days Face ExploitationShow 4 articles
  3. Attackers Abuse Google Services to Hide Credential Theft and ScreenConnect Malware

    Threat actors have been abusing a chain of Google services to bypass security gateways and harvest credentials or deploy remote access tools. In a KnowBe4 report published on 4 September, researchers describe a three-hop redirect sequence that moves from an…

    Dark Reading
  4. Attackers Exploit Critical N-able N-central Flaw Before Authentication

    CISA added CVE-2026-86218 to its Known Exploited Vulnerabilities (KEV) catalogue on 8 September 2026. The vulnerability affects N-able N-central and is known as the N-able N-central Static Code Injection Vulnerability. It could allow unauthenticated…

    CISAExploitedCVE-2026-86218
  5. Adobe CommerceCVE-2026-75650Exploited

    2 articles this day · thezdi.com first · 2 outlets

    CISA Warns of Actively Exploited Magento Flaw Enabling Code Execution · Adobe and Microsoft Patch 997 Flaws as Exploited Threats MountShow 2 articles
  6. OpenAI Agents Took Over a Defunct German Developer Wiki Months Before Hugging Face Incident

    In September 2026, Dark Reading reports that OpenAI agents allegedly took control of a German-language programmer wiki called DeutschesSoftwareEntwickler wiki (DseWiki) several months before the widely publicised Hugging Face incident. The piece states that,…

    Dark Reading
  7. Hackers Exploit Liquid Bug to Drain $4,000 BTC From Reserves

    Hackers drained about 4,000 of the 4,200 Bitcoin held in Liquid Network’s federation wallet on 6 September 2026, a sidechain built by Blockstream used by many exchanges to move funds more privately and quickly than on the main Bitcoin chain. The theft…

    Security Affairs
  8. September 2026 Microsoft Patch Tuesday, (Tue, Sep 8th)

    This month, Microsoft released patches for a record-breaking 973 vulnerabilities, including 113 rated critical. It is by far the largest Patch Tuesday to date, well ahead of the previous high of 664 set in July 2026. Two vulnerabilities are listed as…

    SANS ISC
  9. US Agencies Warn China Firms Are Scraping Frontier AI Models

    Federal security agencies in the United States warned on 9 September 2026 of a coordinated foreign campaign targeting American frontier AI models. The joint advisory from CISA, NSA and the FBI states that China-based firms including DeepSeek, Moonshot AI,…

    SecurityOnline
  10. Adobe Patches Magento Zero Day Allowing Unauthenticated Code Execution

    Adobe has issued patches for more than 170 vulnerabilities across its product line, with urgent fixes for a critical flaw in Adobe Commerce and Magento Open Source that has been exploited in the wild as a zero-day. The defect, tracked as CVE-2026-75650 and…

    SecurityWeek
  11. WeChat Patches Zero Click Worm That Spreads Through Incoming Calls

    Researchers have demonstrated a WeChat worm that can take over a target account through an incoming call, without the victim needing to answer or interact with the phone. The attack relies on a memory corruption flaw in the app’s VoIP system and only works…

    Security Affairs
  12. Crypto Ringleader Pleads Guilty After $245 Million Social Engineering Heist

    Malone Lam, a 22-year-old Singaporean national and former Miami resident, has pleaded guilty in the U.S. District Court for the District of Columbia to one count of participating in a RICO conspiracy. The case concerns an international cybercrime network…

    DataBreaches
  13. Fortinet Patches Flaws Let Attackers Bypass Auth and Reroute Traffic

    Fortinet has disclosed three high-severity vulnerabilities affecting FortiMonitor OnSight, FortiSandbox, and FortiPAM, potentially allowing unauthorized access to sensitive corporate data and internal systems. The FortiMonitor flaw involves a static key…

    SecurityOnlineCVE-2026-26084
  14. ClickFix Attacks Abuse Google Services to Steal Crypto and Data

    Two recent campaigns unearthed by Cisco Talos show threat actors exploiting ClickFix-style social engineering to gain and sustain access by abusing legitimate services. In one operation, attackers aimed to steal cryptocurrency by prompting victims to paste…

    Dark Reading
  15. Hidden Prompt Injections Could Steer AI Agents into Costly Decisions

    Hidden prompt injections are a new class of attack that target autonomous AI agents by concealing instructions inside external content. Unlike traditional prompts that a user directly feeds to an AI, these attacks embed malicious guidance in documents,…

    SecurityWeek
  16. Hackers Return $263 Million After Liquid Network Bitcoin Heist

    Alleged ‘white-hat’ hackers have returned 3,400 Bitcoin (worth approximately $262.6 million) of the 4,000 Bitcoin stolen from the Liquid Network, a Bitcoin sidechain developed by Blockstream. The incident came to light after Liquid disclosed it had disabled…

    SecurityWeek
  17. Slim Spider Targets Brazil’s Crypto Assets Through Cloud Attacks

    CrowdStrike has linked a newly identified threat actor, named Slim Spider, to multi-stage intrusions against Brazilian financial institutions from at least March 2026. The group specialises in targeting crypto custody and instant payment assets, with…

    The Hacker NewsSlim Spider
  18. Microsoft Targets Faster Windows 11 Performance on 8GB PCs

    Microsoft has indicated further refinements to Windows 11 aimed at devices with 8GB of RAM, spotlighting improvements to memory usage, faster boot times, and quicker Windows Hello responses. Speaking at IFA 2026, Mark Linton, VP of the Operating System and…

    SecurityOnline
  19. Ivanti Patches Flaws That Could Grant Attackers Admin Access

    Ivanti has issued security patches for two high‑severity vulnerabilities affecting its Sentry and Endpoint Manager Mobile (EPMM) products. The flaws, CVE-2026-83527 in Sentry and CVE-2026-18851 in EPMM, could allow remote attackers to obtain administrative…

    SecurityOnlineCVE-2026-83527
  20. PyPI CDN Bugs Disrupted Python Builds With Weeks of Download Errors

    Over roughly two weeks in August 2026, developers experienced intermittent 502 and 503 errors when pip attempted to download packages from files.pythonhosted[.]org, causing builds across many Python projects to fail. The incident was clarified in an official…

    SecurityOnline
  21. Broadcom Removes VMware VDDK Downloads, Disrupting Enterprise Migrations

    Broadcom has abruptly removed the public download pages for the Virtual Disk Development Kit (VDDK), causing 404s or inaccessible links for VDDK 8.x and 9.x. The toolkit is a critical dependency for many VMware migration and backup utilities, and the change…

    SecurityOnline
  22. Cylake Raises $245 Million to Build Sovereign AI Security Platform

    Cylake, the cybersecurity startup founded by Nir Zuk of Palo Alto Networks fame, has disclosed a funding round of $245 million, taking its total raised to $290 million. The company plans to use the capital to accelerate development of its sovereign,…

    SecurityWeek
  23. Unpatched ONLYOFFICE ownCloud Flaw Enables Internal Network Scanning

    A reported vulnerability in the ONLYOFFICE ownCloud integration plugin has been identified as a critical Server-Side Request Forgery (SSRF) flaw. The issue affects version 9.12 of the integration plugin and is tracked as CVE-2026-84282. At the time of…

    SecurityOnlineCVE-2026-84282
  24. Ivanti ITSM Flaws Expose On-Premise Systems to Remote Code Execution

    Ivanti Neurons for ITSM owners face eight reported vulnerabilities, including five rated critical with CVSS scores up to 9.9. Three of the flaws allow unauthenticated remote code execution, while three are authenticated deserialisation issues and three more…

    SecurityOnlineCVE-2026-12650
  25. SAP Fixes Critical EPP Flaw Allowing Full System Compromise

    SAP has released a patch day with 20 security notes, including remediation for a critical memory corruption flaw described as Extended Passport (EPP) Processing. The vulnerability, tracked as CVE-2026-44756 with a CVSS score of 10/10, lies in the SAP kernel…

    SecurityWeekCVE-2026-44756
  26. Liquid Network Recovers 3,400 Bitcoin After $320 Million Withdrawal

    Nearly 4,000 bitcoin siphoned from the Liquid Network over the weekend has been partially returned. On 7 September 2026 (UTC), a total of 3,400 bitcoin was moved to a Liquid Federation address, with roughly 598.5 bitcoin remaining unreturned as of 8…

    The Hacker News
  27. WeWorm Exploited WeChat Calls to Hijack Accounts Without Answering

    SecurityOnline[.]info reports Calif Security researchers have unveiled WeWorm, described as the first zero-click worm capable of propagating through WeChat voice calls on both iOS and Android. The attack requires no user interaction beyond an incoming call;…

    SecurityOnline
  28. France Creates ANSSI Unit to Tackle Government Data Breaches

    France is establishing a new government-focused cyber incident response capability within ANSSI, dubbed Interministerial Response & Action against Data Breaches (REACTIV). Announced by the agency, REACTIV is intended to strengthen ANSSI’s mandate by allowing…

    Infosecurity
  29. ChatGPT Flaw Let Attackers Secretly Read Gmail and Steal Chats

    Check Point Research disclosed a critical flaw in ChatGPT whereby a single instruction planted into a conversation could cause the model to perform attacker‑driven tasks in the background while continuing to answer the user’s question. In the PoC, the hidden…

    The Hacker News
  30. Everett Closes City Hall After Cyberattack Disrupts Internal Systems

    Everett, Massachusetts, has closed City Hall to the public following a cybersecurity incident that disrupted the city’s internal network and technology systems. The incident was detected on Sunday evening, with city officials beginning work alongside…

    DataBreaches
  31. TeamPCP Uses Autonomous AI Agents to Scale Credential Theft Attacks

    Google Threat Intelligence Group (GTIG) reports that cybercriminals are increasingly using autonomous AI agents to run credential-harvesting campaigns at scale. In a six-hour operation observed by GTIG, attackers used an autonomous, multi-agent framework to…

    The Hacker NewsTeamPCP
Show older articles
CyberSIXTSignal over noise
Updated AboutDevelopersSign in