News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 75 | 20 |
| Today, Tue 27 Oct | 92 so far | 17 |
Developing
Wed 9 Sep83 articles
- Microsoft Patches 964 CVEs as Two Windows Zero-Days Face Attacks
Microsoft’s September 2026 Patch Tuesday delivers what the vendor describes as the largest ever batch of fixes, addressing 964 CVEs, with 104 rated Critical and 860 rated Important. Microsoft notes 974 CVEs in total for the release, but ten affect cloud…
- OfferLoader Campaign Hides Three Payloads Behind Fake Software Installers
Unit 42’s analysis tracks a pay-per-install (PPI) cybercrime operation dubbed CL-CRI-1171, active for at least two years and targeting a broad set of victims including young gamers, enterprise endpoints and government entities. The operation uses a single,…
Unit 42 - Novel Phishing Campaign Hides Malicious Pages Inside Victims’ Browsers
SecurityWeek reports a novel phishing campaign that defeats traditional page-based defences by rendering the malicious page inside the victim’s browser using blob URLs. The operation starts with a Docusign-themed email that includes a calendar invite to…
SecurityWeek - Proposed ORKS Standard Could Make Leaked API Keys Self-Destruct
A SecurityWeek piece by Matt Honea discusses a proposed open standard to make leaked API keys self-destruct within minutes rather than hours or days. The concept, dubbed ORKS (Open Revocable Key Standard), aims to give every API key a built‑in mechanism for…
SecurityWeek 2 articles this day · The Hacker News first · 2 outlets
Google Fixes Exploited Chrome Zero Day Among 230 Flaws in Version 153 · Chrome Patches Exploited V8 Zero Day Allowing Code ExecutionShow 2 articlesHide 2 articles
- Google Fixes Exploited Chrome Zero Day Among 230 Flaws in Version 15309:45SecurityWeek
- Chrome Patches Exploited V8 Zero Day Allowing Code Execution09:11The Hacker News
- Google Fixes Exploited Chrome Zero Day Among 230 Flaws in Version 153
3 articles this day · The Hacker News first · 3 outlets
Microsoft Patches Record 974 CVEs Amid Exploited Windows Zero-Days · Microsoft Fixes Nearly 1,000 Flaws in Record Patch Tuesday UpdateShow 3 articlesHide 3 articles
- Microsoft Patches Record 974 CVEs Amid Exploited Windows Zero-Days09:40Infosecurity
- Microsoft Fixes Nearly 1,000 Flaws in Record Patch Tuesday Update07:03Security Affairs
- Microsoft Patches 974 Flaws as Two Windows Zero Days Exploited04:41The Hacker News
- Microsoft Patches Record 974 CVEs Amid Exploited Windows Zero-Days
- US Agencies Accuse Chinese AI Firms of Stealing Frontier Model Secrets
US cybersecurity and intelligence agencies have accused China-based AI firms of conducting industrial-scale distillation attacks to extract proprietary functionalities from U.S. frontier models. In a joint bulletin from the NSA, CISA and FBI, the agencies…
The Hacker News - Google Overhauls EU Search Results to Meet DMA Self-Preference Rules
Google has announced a major overhaul of its European search results in response to regulatory pressure under the European Union’s Digital Markets Act (DMA). The move follows a summer where the EU fined Google a total of 890 million euros, with 460 million…
SecurityOnline - Cisco UCS Servers Face Secure Boot Bypass via Public Exploit
Cisco has disclosed a high-severity vulnerability affecting its Unified Computing System (UCS) platform that enables a Secure Boot bypass via the UEFI shell. The flaw, tracked as CVE-2026-20293 with a CVSS v3 score of 7.1, could allow an authenticated user…
SecurityOnlineCVE-2026-20293 2 articles this day · The Hacker News first · 2 outlets
Fileless PoisonedRefresh Rootkit Targets F5 BIG-IP APM Systems · F5 BIG-IP Flaw Hid In-Memory Web Shells from Disk ScansShow 2 articlesHide 2 articles
- Fileless PoisonedRefresh Rootkit Targets F5 BIG-IP APM Systems08:50Security Affairs
- F5 BIG-IP Flaw Hid In-Memory Web Shells from Disk Scans07:36The Hacker News
- Fileless PoisonedRefresh Rootkit Targets F5 BIG-IP APM Systems
- Google Fixes Critical Android Flaws Enabling Remote Code Execution
Google’s September 2026 Android security bulletin fixes a set of critical flaws across System, Framework and Kernel components, addressing remote code execution and privilege escalation risks. The bulletin confirms five CVEs in total, with one…
SecurityOnlineCVE-2026-52993 - Meta launches Muse AI agent to automate shopping, travel and more
Meta has formally launched Muse, its end-to-end personal AI agent designed to act autonomously on a user’s behalf. Unlike prior conversational bots, Muse comes with its own dedicated app and web interface and operates without requiring technical know‑how.…
SecurityOnline - Australia’s ‘My Feed, My Way’ Bill Targets Algorithmic Platforms
Australia is advancing a new Digital Duty of Care that could reshuffle how social platforms present content. The government released draft legislation, labelled by Prime Minister Anthony Albanese as “My Feed, My Way,” which would allow Australians over 16 to…
Malwarebytes 2 articles this day · SecurityOnline first · 2 outlets
Critical cPanel flaw lets email users escalate to root access · cPanel SQL Flaw Lets Privileged Accounts Seize Servers with Root AccessShow 2 articlesHide 2 articles
- Critical cPanel flaw lets email users escalate to root access08:19The Hacker News
- cPanel SQL Flaw Lets Privileged Accounts Seize Servers with Root Access01:46SecurityOnline
- Critical cPanel flaw lets email users escalate to root access
2 articles this day · The Hacker News first · 2 outlets
Over 10,000 SAP Systems Exposed to Critical Kernel Flaw · SAP Patches Critical SAP Flaws Enabling Unauthenticated RCEShow 2 articlesHide 2 articles
- Over 10,000 SAP Systems Exposed to Critical Kernel Flaw08:15Infosecurity
- SAP Patches Critical SAP Flaws Enabling Unauthenticated RCE06:25The Hacker News
- Over 10,000 SAP Systems Exposed to Critical Kernel Flaw
- Fake macOS Installers Hide OtterCookie Backdoor in North Korean Campaign
Security researchers have identified a campaign in which fake macOS installers masquerade as legitimate utilities to deliver a backdoor known as OtterCookie. The attackers have trojanised disk images (DMG) and installer packages (PKG) that impersonate apps…
SecurityOnlineContagious Interview - Microsoft Bets on Local AI to Deliver ‘Unmetered Intelligence’ in Windows 11
Microsoft used the IFA 2026 event to push its vision of “unmetered intelligence” for Windows 11, reviving Bill Gates’ desk‑top promise with a heavy emphasis on local AI processing. The company says frontier AI models will still need substantial cloud…
SecurityOnline - OpenAI’s Images 2.5 Speeds Up Generation and Sharpens Editing
OpenAI has unveiled Images 2.5, the latest iteration of its image-generation model, promising better image detail, more precise editing, improved reference-photo consistency, and faster generation. The firm states that ChatGPT Images and the GPT-Image family…
SecurityOnline 3 articles this day · SecurityOnline first · 3 outlets
ShieldCrash PoC Revives Microsoft Defender SYSTEM File Read Flaw · Microsoft Defender Zero Day Bypasses Patch to Read Windows Files as SYSTEMShow 3 articlesHide 3 articles
- ShieldCrash PoC Revives Microsoft Defender SYSTEM File Read Flaw07:53Security Affairs
- Microsoft Defender Zero Day Bypasses Patch to Read Windows Files as SYSTEM06:47The Hacker News
- Microsoft Defender 0day PoC Exposes SYSTEM Files on Windows00:34SecurityOnline
- ShieldCrash PoC Revives Microsoft Defender SYSTEM File Read Flaw
- Microsoft 365 Flaw Lets Spoofed Internal Emails Bypass Protection
Researchers have identified an active bypass of Microsoft 365’s RejectDirectSend control that enables spoofed internal emails to reach recipients. The flaw uses an empty SMTP envelope sender, allowing external senders to deliver unauthenticated messages that…
SecurityOnline - CISA Warns Attackers Are Exploiting N-able N-central Flaw
CISA has added a highly severe flaw in N-able N-central to its Known Exploited Vulnerabilities catalogue, marking it as a pre-authentication remote code execution (RCE) that could be exploited without user credentials. The issue, CVE-2026-86218 (CVSS 10.0),…
- Windows 11 Previews Tease Automatic Theme Switching at Sunset
Windows 11 preview builds are teasing a long-awaited improvement: automatic light and dark theme switching. The article notes that hidden strings in the latest Windows 11 test builds describe a feature to alternate between light and dark modes, with the…
SecurityOnline - Apache Impala Flaws Let Attackers Seize Analytics Clusters Remotely
Apache Impala has four high-severity vulnerabilities that could let attackers take remote control of large analytics clusters. The flaws include an authentication bypass and remote code execution, along with server-side request forgery (SSRF) issues. The…
SecurityOnlineCVE-2026-56207 - Asahi Linux Brings Apple M3 Support to Kernel 7.2, With Major Gaps
Asahi Linux has announced progress in bringing support for Apple’s M3-series chips, with the first M3 platform code now merged upstream in Linux kernel 7.2. After extensive reverse engineering, developers report that many functions already present on M1 and…
SecurityOnline - Critical Predis Flaw Lets Attackers Smuggle Commands into Redis
Security researchers have disclosed a critical vulnerability in the Predis PHP client for Redis, tracked as CVE-2026-84372. The flaw, rated CVSS 9.8 (Critical), has public PoC exploit code and is tied to a CRLF (carriage return line feed) sequence in the…
SecurityOnlineCVE-2026-84372 - Critical MapLibre Flaw Enables Zero-Click XSS in Map Apps
MapLibre GL JS has a critical XSS flaw, CVE-2026-85061, affecting applications that render untrusted map styles or custom attributions. The vulnerability sits in the library prior to version 6.4.1 and is described as a sanitizer bypass in DOM[.]sanitize()…
SecurityOnlineCVE-2026-85061 - ISC Stormcast For Wednesday, September 9th, 2026 https://isc.sans.edu/podcastdetail/10086, (Wed, Sep 9th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
SANS ISC - Google Doubles Chrome Release Speed With New Biweekly Updates
Google has announced a shift to a two‑week release cadence for Chrome, beginning with Chrome 153 released on 9 September 2026 across Windows, macOS, Android and iOS. The move shortens the previous four‑week cycle introduced in 2021 to a biweekly pattern,…
SecurityOnline - 3,562 Exposed Redis Servers Hijacked in Rogue Replication Attack
Researchers from Hunt[.]io uncovered a Redis-based cryptomining operation that compromised 3,562 internet-facing Redis servers, largely on APAC cloud hosts. The attacker used a rogue replication method to point victims at a fake Redis master, delivering a…
SecurityOnline - CVE-2026-41870: Unauthenticated RCE in Apache Nutch
The page reports on four critical vulnerabilities detected in various software. Key points include: 1. **CVE-2026-75650**: An Adobe Commerce and Magento vulnerability concerning improper neutralization of special template elements. 2. **CVE-2026-81963**: A…
- Siemens Flaws Let Attackers Hijack Accounts and Gain Root Access
Siemens ProductCERT disclosed two critical vulnerabilities affecting Industrial Edge and Siveillance Open Interface Services (OIS) on 8 September 2026. The flaws carry CVSS scores above 9.0. The first, CVE-2026-18963, resides in the password reset flow of…
SecurityOnlineCVE-2026-18963 - Critical Hawtio Operator Flaw Enables Cross Tenant Impersonation and RCE
Red Hat has flagged a critical vulnerability in Hawtio Operator used with Kubernetes and OpenShift. Identified as CVE-2026-78234 and rated CVSS 9.9, the flaw affects Hawtio-operator installations that rely on the OpenShift Service CA for client…
SecurityOnlineCVE-2026-78234
