News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 17 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 15 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 1 |
| Mon 26 Oct | 75 | 13 |
| Today, Tue 27 Oct | 56 so far | 12 |
Developing
Tue 15 Sep68 articles
- LiteSpeed Enterprise Flaw Lets Shared Hosts Gain Root Access
A critical vulnerability in LiteSpeed Enterprise, reported on September 15, 2026, allows a single hosting account to gain root access on shared servers, raising serious security concerns. This flaw could potentially compromise multiple websites hosted on the…
The Hacker News - Hackers Exploit Cisco Secure Email Gateway Flaw to Run Root Commands
The article discusses a security vulnerability found in the Cisco Secure Email Gateway that is actively being exploited in the wild. This flaw allows attackers to execute root commands, posing significant risks to network security. Experts recommend…
The Hacker News - China Linked Hackers Exploit Chrome and Windows Zero Day to Deploy GRIMWEDGE
The article discusses a cybersecurity threat where China-linked hackers exploit a zero-day vulnerability in Chrome and Windows to deploy GRIMWEDGE, a sophisticated malware used for cyber espionage. The piece elaborates on the process of the attack,…
The Hacker News 2 articles this day · SecurityOnline first · 2 outlets
Cisco Secure Email Gateways Hit by Actively Exploited Root Flaw · Cisco Email Gateway Flaw Exploited to Gain Root Access via EmailShow 2 articlesHide 2 articles
- Cisco Secure Email Gateways Hit by Actively Exploited Root Flaw05:18SecurityWeek
- Cisco Email Gateway Flaw Exploited to Gain Root Access via Email02:17SecurityOnline
- Cisco Secure Email Gateways Hit by Actively Exploited Root Flaw
- Microsoft Fixes Windows 11 RDS Failures and CVE-2026-62721
Microsoft has released the out-of-band Windows 11 KB5129195 update for versions 24H2 and 25H2. The update addresses instability introduced by the recent September patch, including failures affecting Remote Desktop Services (RDS). Microsoft said RDS could…
SecurityOnlineCVE-2026-62721 - Cisco Patches Actively Exploited Flaws in Secure Email Appliances
Cisco has fixed five vulnerabilities in Cisco Secure Email Gateway and Cisco Secure Email and Web Manager. Four are rated critical with CVSS 3 scores of 9.8, while the remaining issue is high severity with a score of 7.5. The flaws affect software releases…
SecurityOnlineCVE-2026-76440 - Internet Storm Center Tracks Threat Levels and Port Activity in Daily Report
The content features a report from the Internet Storm Center (ISC) for September 15th, 2026, highlighting the presence of handler Johannes Ullrich, whose threat level is currently green. It includes links to previous entries, information about Ullrich's…
SANS ISC - Chinese-Linked Hackers Exploit Critical Gitea Flaw to Steal Data
Acronis Threat Research Unit says a Chinese-speaking, state-linked actor tracked as Red Heron is exploiting a critical Gitea remote-code-execution flaw, CVE-2026-60004, in attacks against exposed self-hosted instances. The vulnerability affects Gitea…
- Critical WordPress Plugin Flaws Put 600,000 Sites at Risk
The Events Calendar WordPress plugin is affected by two critical vulnerabilities that can enable unauthenticated remote code execution. CVE-2026-78006, rated 9.8, is a PHP object-injection flaw affecting versions up to and including 6.17.4, while…
SecurityOnlineCVE-2026-78006 - Mirai Botnets Exploit Critical KGUARD DVR Flaw to Spread Malware
Security researchers have reported a critical vulnerability in KGUARD digital video recorder firmware, tracked as CVE-2026-87827 and rated 10.0 under CVSSv4. The flaw allows unauthenticated attackers to execute arbitrary system commands remotely, potentially…
SecurityOnlineCVE-2026-87827 - Attackers Scan Vite Servers to Steal Cloud Credentials via CVE-2026-39364
Attackers are mass-scanning internet-exposed Vite development servers to steal environment files, API keys, database passwords and cloud administrator credentials. F5 Labs recorded 807 grouped attacks and approximately 32,000 events during one month,…
- Hackers Exploit WooCommerce Plugin Flaw to Upload PHP Web Shells
A critical vulnerability in the WooCommerce Wholesale Lead Capture WordPress plugin is being actively exploited, according to the report and Wordfence. Tracked as CVE-2026-27540, the flaw has a CVSS v3 score of 9.0 and affects versions up to and including…
SecurityOnlineCVE-2026-27540
Mon 14 Sep59 articles
- Russia-linked hackers exploit Cisco firewall flaws to deploy Cyclops Blink
A likely Russia-linked threat actor is exploiting two vulnerabilities in Cisco Secure Firewall Management Centre (FMC) to deploy an updated version of the Cyclops Blink malware. Sophos and Cisco Talos identified the activity, while Sophos attributed it with…
- ENISA Warns Frontier AI Could Enable “Negative Time-to-Exploit”
ENISA says frontier AI is compressing the cyberattack lifecycle, allowing systems to automate reconnaissance, vulnerability discovery, exploitation, lateral movement and data theft. In its July 2026 paper, *ENISA’s view on Cybersecurity in the Frontier AI…
Security Affairs - CISA Warns of Actively Exploited Cisco Email Gateway Flaw
CISA added CVE-2026-76461 to its Known Exploited Vulnerabilities (KEV) catalogue on 14 September 2026. The vulnerability affects Cisco Secure Email Gateway and is known as the Cisco Secure Email Gateway SQL Injection Vulnerability. It could allow an…
- CISA Warns of Active Exploitation of Critical GitLab File Theft Flaw
GitLab vulnerability CVE-2026-85706 is being actively exploited after its disclosure and patching on 10 September 2026. The path-traversal flaw affects self-hosted GitLab Community Edition and Enterprise Edition instances and has a CVSS score of 10 out of…
- Apple Patches Record 261 Flaws Across New Operating Systems
Apple released its annual operating-system updates on 14 September 2026, including iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27 and visionOS 27. It also issued bug-fix-only updates for the 26-series systems and macOS Sequoia 15.8. According…
- China Rejects Anthropic CEO’s Call to Slow Advanced AI Development
China has rejected Anthropic chief executive Dario Amodei’s proposal to slow the development of advanced artificial intelligence, with Beijing describing it as fearmongering and an attempt by the United States to contain China’s technology sector. In his…
Security Affairs - MeshCentral Backdoor Attack Gives Hacker Root Access to Credentials
A cybersecurity incident involving an attacker exploiting the MeshCentral backdoor has been reported. This attacker gained root access and targeted subscriber credentials on September 14, 2026. The attack highlights vulnerabilities in systems utilizing…
The Hacker News - Telegram Desktop Flaw Lets Hidden JavaScript Steal Exported Messages
A vulnerability in Telegram Desktop has been identified that allows hidden JavaScript to extract messages from HTML exports. This flaw could compromise user privacy and security by enabling unauthorized access to sensitive communications. The article…
The Hacker News - Wisconsin School District Cuts Internet After Possible Security Incident
A possible network security incident disrupted the School District of Monroe in Wisconsin, prompting it to disconnect from the internet. Students were told to shut down computers, the district’s phone service stopped working and a scheduled ACT session was…
DataBreaches - DDRop Attack Threatens Intel TDX and AMD SEV-SNP Confidential Computing
A new cybersecurity vulnerability, the DDRop attack, has been identified, posing significant risks to Intel's TDX and AMD's SEV-SNP confidential computing technologies. This exploitation allows attackers to breach confidential computing environments. The…
The Hacker News - Red Heron Exploits Gitea Flaw in Espionage Campaign Against 13 Organisations
The article discusses the exploitation of a remote code execution (RCE) vulnerability in Gitea by a group known as 'Red Heron'. This cyber espionage campaign has targeted 13 organizations across six countries. The campaign highlights the risks associated…
The Hacker NewsRed Heron - Anthropic Chief Urges Slower AI Progress as Agent Risks Grow
Anthropic chief executive Dario Amodei has urged the artificial intelligence industry to slow the improvement of frontier models, arguing that security and alignment work must be given time to catch up. In an essay published online, Amodei warned that rapid…
Dark Reading - WordPress Adds Automated Checks to Block High Risk Plugins
WordPress has introduced automated plugin reviews to prevent the distribution of high-risk updates, enhancing its security measures. This feature allows for proactive identification and blocking of potentially harmful plugins before they are made available…
The Hacker News - Malicious Twitch Extension Exposed OAuth Tokens From 31,000 Users
A malicious Twitch browser extension, Twitch Enhanced Viewer | JeetBot, reportedly exposed the live OAuth session tokens of about 31,000 users, according to research by Socket published on 11 September 2026. The extension was available through both the…
Infosecurity - Rogue AI Agents and WeChat Worm Lead This Week’s Threats
The article, titled "Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits," covers significant cybersecurity topics as of September 14, 2026. Key points include emerging threats like rogue AI agents and the WeChat worm, as…
The Hacker News - Beijing Hits Back at Anthropic CEO’s Call to Curb China’s AI Development
China's Ministry of Foreign Affairs responded sharply to Anthropic CEO Dario Amodei's call for the U.S. to limit China's AI development, warning that fearmongering harms global cooperation on AI governance. As President Trump and Chinese leader Xi Jinping…
SecurityWeek - Google’s new search redirects make links harder to check before you click
Google has implemented a new search result linking system that uses redirects through a `google.com/goto?url=...` format, obscuring direct access to destination URLs. This change aims to reduce abuse by making it harder to collect URLs in bulk, although…
Malwarebytes - Human Attacker Hits Machine-Speed Exploitation of Marimo RCE
A human attacker successfully exploited a remote code execution flaw (CVE-2026-39987) in Marimo notebooks, moving from a vulnerable device to an SSH bastion host in just eight seconds. This speed, typically attributed to AI, was achieved with a hand-crafted…
- CISA Flags Artifactory, ScreenConnect and GitLab Flaws as Exploited
The US Cybersecurity and Infrastructure Security Agency (CISA) has added four vulnerabilities affecting JFrog Artifactory, ConnectWise ScreenConnect and GitLab to its Known Exploited Vulnerabilities (KEV) catalogue. The entries are CVE-2026-42016 (CVSS 8.1),…
- Anthropic Warns AI Agents Could Threaten Human Control of the Internet
Warnings from within the artificial intelligence industry have renewed debate over whether increasingly capable systems could escape human control or be misused to threaten humanity. Anthropic chief executive Dario Amodei said companies may need to slow…
SecurityWeek - Sophos Finds Cyclops Blink on Cisco Firewall Management Systems
Sophos Counter Threat Unit (CTU) researchers have identified a new 64-bit Linux variant of the Cyclops Blink malware on multiple compromised Cisco Firewall Management Center (FMC) devices. The malware previously focused mainly on 32-bit PowerPC-based…
SecurityOnlineSandworm - Revolut Exposes Customer Data After Impersonated Agency Request
Revolut is notifying a small, unspecified number of users that their personal and financial information was exposed after an unauthorised party impersonated a government agency. The London-based fintech, which provides banking and investment services to more…
SecurityWeek - Ransom Group Claims Greenberg Traurig Breach Exposed 126,000 People
Silent Ransom Group (SRG) has claimed responsibility for an attack on Greenberg Traurig, a New York-headquartered law firm with more than 3,200 lawyers. According to SRG, it first accessed a corporate iPad on 13 August, downloaded an employee’s data and…
DataBreachesLuna Moth - Anthropic Researcher Puts AI Extinction Risk Above 10% by 2036
The article presents an opinion-led debate about whether artificial intelligence will ultimately benefit humanity or create risks beyond human control. Bill Gates’ 26 August 2026 memo argues that the transition to an AI-driven era could be among history’s…
SecurityWeek - Defence Cyber Warfare Market Set to Nearly Double by 2031
Cybersecurity spending in the defence industry is forecast to rise sharply as military networks and mission systems face growing cyber threats. A MarketsandMarkets report published on 14 September 2026 projects that the cyber warfare market will grow from…
Infosecurity - AI Powered Attacks Force Cybersecurity Teams to Rethink Validation
The article discusses how advancements in artificial intelligence (AI) have altered the landscape of security exposures, necessitating a shift in validation methods. Key points include the increased speed and sophistication of AI-powered attacks, the need…
The Hacker News - China-linked hackers exploited Sogou flaw to deploy GrayRabbit backdoor
A critical vulnerability in Tencent’s Sogou Input Method for Windows has been exploited in the wild by a China-linked threat actor, according to Gen Threat Labs. The software is a widely used Chinese-language input method editor, reportedly installed by…
SecurityWeekCVE-2026-51990
