News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 17 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 15 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 1 |
| Mon 26 Oct | 75 | 13 |
| Today, Tue 27 Oct | 37 so far | 8 |
Developing
Wed 16 Sep82 articles
2 articles this day · SOCRadar first · 2 outlets
Attackers Exploit Critical WooCommerce Plugin Flaw to Upload Webshells · Attackers Exploit WooCommerce Plugin Flaw to Upload PHP Web ShellsShow 2 articlesHide 2 articles
- Malicious Extension Hijacks AI Assistants Across Major Browsers
This article discusses a critical vulnerability affecting AI assistants across browsers like Chrome, Comet, Edge, and Opera Neon due to a malicious browser extension. The extension could hijack user interactions, potentially leading to serious security…
The Hacker News - SecurityWeek Summit Shows Defenders How to Tame Expanding Attack Surfaces
SecurityWeek’s 2026 Attack Surface Management Summit is scheduled for 16 September 2026 as a fully virtual event, running from 11am to 3pm. The summit is aimed at cyber defenders and will focus on identifying, understanding and reducing risks across…
SecurityWeek - Von der Leyen Warns AI Could Enable Hacking at Unprecedented Scale
European Commission President Ursula von der Leyen warned in her State of the European Union speech on 16 September 2026 that emerging AI models could enable hacking “on a level we never thought possible”. She said such systems could soon be controlled by…
SecurityWeek 5 articles this day · Malwarebytes first · 4 outlets
Actively Exploited Pixel Modem Flaw Bypasses Permission Checks · Google Fixes Exploited Pixel Modem Flaw in September UpdateShow 5 articlesHide 5 articles
- Actively Exploited Pixel Modem Flaw Bypasses Permission Checks14:01CISA
- Google Fixes Exploited Pixel Modem Flaw in September Update13:43Security Affairs
- Google Patches Pixel Zero Day Exploited in Targeted Attacks13:10SecurityWeek
- CISA Warns of Active Exploitation in Google Pixel Vulnerability12:00CISA
- Google Patches Pixel Modem Flaw Exploited in Targeted Attacks10:39Malwarebytes
- Actively Exploited Pixel Modem Flaw Bypasses Permission Checks
- CISA and NIST Urge One-Hour Limits to Block Cloud Token Theft
CISA and NIST have issued final guidance for protecting cloud identity tokens and assertions from theft, forgery and misuse. Published on 15 September 2026 as NIST Interagency Report 8587, the voluntary guidance is aimed at federal agencies, cloud service…
Infosecurity - Cisco Warns Attackers Are Exploiting Critical Secure Email Gateway Flaw
Cisco has confirmed active exploitation of CVE-2026-76461, a critical SQL injection vulnerability in the email-parsing logic of AsyncOS Software for Cisco Secure Email Gateway. Rated CVSS 9.8 and classified as CWE-89, the flaw can be exploited remotely…
- AIUC Raises $40 Million to Certify Enterprise AI Agent Security
AIUC, a San Francisco-based company founded in 2024, has raised $40 million in a Series A funding round, bringing its total investment to $55 million. The round was led by Ribbit Capital, with additional backing from First Harmonic. The company developed…
SecurityWeek - Hijacked AI Coding Assistant Session Spreads Shai-Hulud to 100 Repositories
In a recent incident reported by The Hacker News, an attacker managed to hijack an AI coding assistant session, leading to the spread of malicious code known as Shai-Hulud across approximately 100 repositories. This raises significant concerns regarding the…
The Hacker News - Parallels Desktop Flaw Gives Mac Users Root Access, Intel Fix Missing
A recent security vulnerability in Parallels Desktop allows non-admin Mac users to gain root access, but the fix is unavailable for Intel-based Macs. The article emphasizes the importance of timely updates in cybersecurity and the potential risks associated…
The Hacker News - Italian Government Email Hack Exposes Data on 680 Revolut Users
A suspected compromise of an Italian government certified email (PEC) account may have enabled attackers to impersonate law enforcement and obtain sensitive information on about 680 Revolut customers, according to the Financial Times as cited by Security…
Security Affairs - Iranian Hackers Use Chosen Brick Malware to Target Dissidents Worldwide
US, UK and Dutch cybersecurity and intelligence agencies have issued a joint advisory about Chosen Brick, a Windows malware family used by Iranian state actors against dissidents, activists and journalists worldwide. The activity has been observed since at…
SecurityWeek - N0va Phishkit Targets US and EU Businesses in Identity Theft Push
The article reports on the emergence of 'N0va Phishkit,' a phishing toolkit targeting businesses in the US and EU, which poses a significant challenge to identity security. The toolkit employs sophisticated techniques to deceive users and extract sensitive…
The Hacker News - Critical WordPress Calendar Flaws Put 200,000 Sites at Risk of Takeover
More than 200,000 WordPress websites may be exposed to takeover attacks through two critical vulnerabilities in The Events Calendar plugin, which has more than 600,000 active installations. Defiant identified the flaws, which affect plugin versions before…
SecurityWeekCVE-2026-78159 - AI-Driven BlackHatSect0r Crew Exposed Millions of Hosts and Secrets
SOCRadar says an internet-exposed operation server linked to the French-speaking crew BlackHatSect0r && DXQRTXX contained 4.9GB across 9,299 files, including a Go-based command-and-control platform, a 16,834-entry credential vault and tooling for scanning,…
SOCRadarBlackHatSect0r - Google Patches Pixel Modem Flaw Exploited in Targeted Attacks
Google has addressed a security vulnerability in its Pixel modem, which has shown signs of limited targeted exploitation. The patch comes as a proactive measure to enhance mobile security for its users, ensuring that potential threats are mitigated…
The Hacker News - Threat Intelligence Alone Cannot Close the Cybersecurity Exploitation Gap
The article discusses the limitations of relying solely on threat intelligence to close the exploitation gap in cybersecurity. It emphasizes the importance of combining threat intelligence with effective security validation methods to accurately gauge what…
The Hacker News - Hackuity Raises $19 Million to Expand AI Vulnerability Operations Platform
French vulnerability management company Hackuity has raised $19 million in a funding round led by Forgepoint Capital, taking its total funding to $38 million. The Lyon-based company said it will use the investment to accelerate development of its…
SecurityWeek - Acronis cPanel Backup Flaw Exploited in Targeted Cyberattacks
The article discusses the recent exploitation of a vulnerability in the Acronis cPanel Backup Plugin, which has led to targeted cyberattacks. Key points include details about the nature of the vulnerability, the potential consequences for affected systems,…
The Hacker News - Hiscox Report Finds Cyber Attacks Hit 29% of Organisations Worldwide
The Hiscox Cyber Readiness Report 2026 found that 29% of organisations worldwide experienced at least one successful cyber-attack in the 12 months covered by the study. Affected organisations reported an average of four incidents, with attacks costing about…
Infosecurity - New York Healthcare Provider PMG Reports Data Breach Affecting 282,075 Patients
New York healthcare provider Premier Medical Group (PMG) is notifying 282,075 individuals that attackers accessed files containing personal and medical information. The incident occurred in June, when some of PMG’s systems were disrupted; the provider said…
SecurityWeek - Google and Mozilla Patch 115 Browser Flaws, Including Critical Bugs
Google and Mozilla have released browser updates addressing 115 security vulnerabilities in total. Chrome 153 fixes 42 defects, including three critical issues: CVE-2026-91726, an out-of-bounds read in WebGL, and CVE-2026-91721 and CVE-2026-91749,…
SecurityWeekCVE-2026-91726 - Axoflow Pre-Processes Sigma Detections to Cut SIEM Data Volumes
Axoflow has announced AxoDetect, a detection component now available in early access. Introduced during Splunk .conf26 on 16 September 2026, it runs Sigma rules within the security-data pipeline, before data reaches a security information and event…
SecurityOnline - NightEagle Hackers Hide Exchange Backdoor Behind Stolen VPN Access
Kaspersky’s Global Emergency Response Team says the NightEagle group, also known as APT-Q-95, has targeted businesses in Russia after previously focusing on organisations in Asia. In most investigated incidents, the attackers used stolen valid credentials to…
- Fake macOS Toolkit Site Uses ClickFix Tactic to Deploy AMOS Stealer
Palo Alto Networks’ Unit 42 has analysed an Atomic macOS (AMOS) stealer infection created in a laboratory on 5 August 2026. The infection began on a website, getmacouscloud[.]com, that claimed to provide instructions for installing a “macOS toolkit”. Users…
Unit 42 - TP-Link Tapo C200 Flaws Expose Camera Feeds to Network Attackers
Security researchers have disclosed two zero-day vulnerabilities in TP-Link’s Tapo C200 security camera, a model used for baby and pet monitoring, home security and small-office environments. OPSWAT said the flaws are CVE-2026-15315 and CVE-2026-15316, both…
InfosecurityCVE-2026-15315 - Microsoft Word Update Crashes Automated Document Workflows
Microsoft has acknowledged an issue affecting Word in Microsoft Office version 2608, build 20326.x. The application can close unexpectedly when third-party document or template-management software creates and populates a document template. Microsoft’s Word…
SecurityOnline - OpenAI Doubles Codex Sponsorship Places for Open Source Maintainers
OpenAI has begun the second round of its Codex for Open Source sponsorship programme, increasing the number of available places from 5,000 to 10,000. Selected open-source maintainers will receive six months of access to ChatGPT Pro 5x, including Codex…
SecurityOnline - Acronis Patches Exploited cPanel Backup Flaw Enabling Privilege Gain
Acronis has released urgent patches for a vulnerability in its Backup plugin for cPanel & WHM after detecting exploitation in limited, targeted attacks. The flaw, tracked as CVE-2026-87886 and rated 7.8 on the CVSS scale, involves insecure file permissions…
- Industrial Devices Hit by Critical Flaws in Shared Firmware
Researchers at Nozomi Networks have identified vulnerabilities in shared firmware used by industrial equipment from Pepperl+Fuchs, Phoenix Contact and Carlo Gavazzi Automation. Affected products include Pepperl+Fuchs ICE2 and ICE3 network modules, Phoenix…
SecurityOnlineCVE-2026-27565 - Attackers Exploit Critical Issabel PBX Flaw to Run Commands Remotely
The Shadowserver Foundation detected active exploitation of a critical Issabel PBX vulnerability on 9 September 2026. Tracked as CVE-2026-89026, the flaw has a CVSSv3 score of 9.8 and affects Issabel Framework versions before commit…
SecurityOnlineCVE-2026-89026 - Octopus Deploy Fixes Flaws That Could Enable Remote Code Execution
Octopus Deploy has patched two high-severity vulnerabilities in Octopus Server, its continuous delivery platform. CVE-2026-91778 has a CVSS v4 score of 7.2 and stems from incorrect permission validation, allowing users with certain scoped permission sets to…
SecurityOnlineCVE-2026-91778 - SE Labs Launches PIVOT to Test Cybersecurity Products Against Hackers
UK security testing provider SE Labs has launched a six-month programme to assess how well cybersecurity products defend against sophisticated threat groups and attack techniques. The PIVOT programme, announced on 15 September 2026, includes Broadcom,…
Infosecurity - Fake Avast Renewal Pages Harvest Details for Follow-Up Scams
Malwarebytes says scammers are using polished, apparently AI-assisted pages to support antivirus renewal scams. The messages claim a subscription has renewed and direct recipients to a cancellation page, even though no payment or subscription exists. The…
Malwarebytes - Critical WSO2 Flaw Exploited to Steal API Credentials and Secrets
A critical WSO2 vulnerability patched earlier this year is being exploited in the wild, according to exposure management firm WatchTowr. Tracked as CVE-2026-5430 and rated 10.0 on the CVSS scale, the flaw affects WSO2 API Manager, API Control Plane, Traffic…
