News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 0 |
| Thu 22 Oct | 84 | 3 |
| Fri 23 Oct | 68 | 8 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 0 |
| Mon 26 Oct | 75 | 5 |
| Today, Tue 27 Oct | 15 so far | 2 |
Developing
Tue 22 Sep83 articles
- Aembit Adds Okta XAA Support to Control AI Agent Access
Aembit has announced support for Okta’s Cross App Access (XAA), an open protocol designed to let an existing enterprise identity authorise access to approved downstream applications without requiring separate user consent for each connection. The…
SecurityOnline - Cloudflare Gives Every Git Branch Its Own Isolated Worker Preview
Cloudflare has launched Worker Previews, giving each Git branch an isolated, production-like environment for testing Cloudflare Workers before changes are merged. Developers can create a Preview with `npx wrangler preview`, or have one created automatically…
Cloudflare - Most Firms Have Not Rehearsed Responses to AI Security Incidents
Most organisations have not rehearsed how they would respond to an AI-related security incident, despite increasing use of artificial intelligence by security teams, according to ISACA’s 2026 State of Cyber report. The research found that 71% had conducted…
Infosecurity - AI Agents Are Reshaping Lateral Movement in Enterprise Networks
The article discusses how AI agents are changing the dynamics of lateral movement in cybersecurity. It highlights the expansion of AI agent capabilities within enterprises and the security challenges that arise due to their growing access to sensitive…
The Hacker News - Critical VeloCloud Orchestrator Flaw Is Being Exploited in Attacks
A critical security vulnerability in the VeloCloud Orchestrator has been identified, with a CVSS score of 10.0, indicating severe risk. The flaw is actively being exploited in certificate-based setups, raising concerns for network security. This highlights…
The Hacker News - Most OT and Medical Devices Share Networks, Forescout Finds
Research from Forescout’s Vedere Labs suggests that most organisations using operational technology (OT) or connected medical devices do not keep those systems on dedicated network segments. The researchers analysed 47,700 segments containing more than 2.5…
SecurityWeek - Rockwell Survey Finds Cyber Incidents Threaten Industrial Growth
A Rockwell Automation report based on survey responses from industrial and manufacturing decision-makers says more than one-third of organisations view cybersecurity risk as one of the biggest external obstacles to growth. The findings, released on 22…
Dark Reading - Forescout Finds OT and Medical Devices Sharing Networks with IT
Nearly half of network segments containing operational technology (OT) or medical devices (IoMT) also include IT and internet of things (IoT) equipment, potentially widening organisations’ attack surfaces and enabling lateral movement, according to security…
Infosecurity - CISA Warns of Critical Siemens Industrial Edge Account Takeover Flaw
CISA has warned of a critical authentication bypass in Siemens Industrial Edge Management that could enable an unauthenticated remote attacker to take over user accounts. Tracked as CVE-2026-18963, the flaw affects the reset-credentials process in the…
CISACVE-2026-18963 2 articles this day · Security Affairs first · 2 outlets
Chinese Hackers Exploit Zyxel Switch Flaw to Steal Credentials · CISA Flags Zyxel Switch Flaw Enabling Unauthenticated Code ExecutionShow 2 articlesHide 2 articles
- Chinese Hackers Exploit Zyxel Switch Flaw to Steal Credentials11:55SecurityWeek
- CISA Flags Zyxel Switch Flaw Enabling Unauthenticated Code Execution09:13Security Affairs
- Chinese Hackers Exploit Zyxel Switch Flaw to Steal Credentials
- DORA Year Two Puts SOC Visibility Under the Spotlight
The article titled "DORA Year Two: Can Your SOC Actually See the Attack?" published on September 22, 2026, discusses the importance of visibility for Security Operations Centers (SOCs) in detecting cyberattacks. It emphasizes the need for advanced monitoring…
The Hacker News - Linux Kernel Flaw Lets ARM64 KVM Guests Access Host Memory
A recent vulnerability has been discovered in the Linux kernel, allowing ARM64 KVM guests unauthorized read-write access to the host memory. This flaw poses significant risks for virtualization security as it can potentially be exploited by malicious…
The Hacker News - Malicious NPM Package Hits 2 Million Downloads in Supply Chain Attack
The NPM ecosystem has been hit by an ongoing supply-chain campaign involving the malicious package `indexed-btree`, according to Checkmarx. The package imitates the legitimate `sorted-btree` utility and reached 2 million weekly downloads before detection.…
SecurityWeek - Critical SharePoint Flaw Lets Authenticated Attackers Run Code Remotely
The article discusses a critical vulnerability in SharePoint, initially identified as a spoofing issue by Microsoft, which allows authenticated remote code execution (RCE). The update highlights the potential security risks associated with this flaw and…
The Hacker News - Muse AI Zero Day Could Turn Macs Into Backdoors via Stolen Tokens
Mac security researcher Patrick Wardle has found a zero-day in Meta’s Muse AI assistant that could allow an attacker to turn it into a powerful backdoor. According to Malwarebytes, Muse’s locally running macOS application has an undocumented configuration…
Malwarebytes - AI Drives 300% Bot Surge as API Attacks More Than Double
AI helped drive a 300% increase in bot traffic during the past year, particularly affecting the commerce sector, according to Akamai’s latest *State of the Internet* report, published on 22 September 2026. The report draws on threat intelligence from…
Infosecurity - WordPress Fixes Click2Shell Bug Enabling Theme Based RCE Attacks
WordPress has patched 11 vulnerabilities, including a potentially serious flaw dubbed Click2Shell that could enable remote code execution (RCE). The issue has no CVE identifier. WordPress said specially crafted URLs could automatically install and preview…
SecurityWeek 2 articles this day · SecurityOnline first · 2 outlets
Public Exploit Lets Local Users Gain SYSTEM Access on Veeam Agent · Veeam Windows Agent Flaw Exploited to Gain SYSTEM AccessShow 2 articlesHide 2 articles
- Public Exploit Lets Local Users Gain SYSTEM Access on Veeam Agent10:13Security Affairs
- Veeam Windows Agent Flaw Exploited to Gain SYSTEM Access07:34SecurityOnline
- Public Exploit Lets Local Users Gain SYSTEM Access on Veeam Agent
- Claude-Powered Researchers Used Discourse Flaw to Reach OpenAI Code
Researchers at cybersecurity company Hacktron used Anthropic’s Claude to demonstrate a chain of vulnerabilities that gave them access to an internal OpenAI software repository. The work was conducted as ethical security research, and the researchers say they…
Malwarebytes - Malicious npm Package Hid Its Loader in Runtime Code Before Removal
On September 22, 2026, The Hacker News reported on a malicious npm package named "indexed-btree" which disguised its loader within runtime code prior to its removal. This incident highlights ongoing concerns about supply chain attacks and malware impacting…
The Hacker News - Gartner Urges CISOs to Rethink Incident Plans as Deepfakes Rise
Gartner has warned that chief information security officers (CISOs) need to update incident-response plans to address multimodal deepfakes and AI-driven social engineering. Findings from its *AI-driven Social Engineering Attacks* report, based on a survey of…
Infosecurity - Microsoft Update Disrupts File History Backups on Windows 10 and 11
Microsoft has confirmed that its September update has disrupted File History on Windows 10 and Windows 11. The built-in backup feature can no longer create or update file backups on affected systems, even when the destination drive or network-attached…
SecurityOnline 2 articles this day · Security Affairs first · 2 outlets
North Korean Fake Jobs Infected 30,000 Devices and Stole $10.7m · North Korean Fake Job Interviews Infect 30,000 Devices WorldwideShow 2 articlesHide 2 articles
- North Korean Fake Jobs Infected 30,000 Devices and Stole $10.7m08:37SecurityWeek
- North Korean Fake Job Interviews Infect 30,000 Devices Worldwide06:44Security Affairs
- North Korean Fake Jobs Infected 30,000 Devices and Stole $10.7m
- Amazon Blocks Meta’s Muse AI Assistant Over Shopping Security Risks
Amazon has deployed detection mechanisms to identify Meta’s Muse artificial intelligence assistant and block it when it attempts to shop on a user’s behalf. Blocked users are redirected to a dedicated warning screen, preventing Muse from carrying out…
SecurityOnline - MovieReaper Malware Hides in Torrents to Steal Files Worldwide
Kaspersky has identified MovieReaper, a modular malware framework distributed through malicious torrent downloads. Attackers compromised the itorrents.org repository, meaning booby-trapped files can be delivered through multiple tracker websites. The payload…
SecurityOnline - SideCopy Targets Indian Universities in ReverseRAT Espionage Campaign
The article discusses the recent cybersecurity threats posed by SideCopy, a threat group that has expanded its operations in India by targeting academic institutions through spear-phishing tactics using ReverseRAT malware. It emphasizes the rise of cyber…
The Hacker NewsSideCopy - APT36 Uses Fake News Sites to Target India and Afghanistan Governments
APT36, also known as Transparent Tribe, has launched a campaign dubbed Operation RapidRust against government and defence organisations in India and Afghanistan, according to Zscaler ThreatLabz. The suspected Pakistan-nexus group used typosquatted domains…
SecurityOnlineOperation C-Major - Critical Meta Muse Flaw Could Turn AI Assistant Into a Backdoor
The article discusses a critical vulnerability in AI assistants, specifically the Meta Muse setting that could allow attackers to exploit the AI as a backdoor for unauthorized access. It emphasizes the increasing risk associated with AI technologies and…
The Hacker News - Iran-Linked Handala Hack Uses HEAVYGRAM to Hijack Telegram Accounts
Group-IB researchers have identified 29 new samples of HEAVYGRAM, a malware family targeting Iranian dissidents, Farsi-language journalists and academics. The campaign is associated with Handala Hack, which analysts assess with moderate confidence to be an…
SecurityOnlineVoid Manticore - WordPress Comment2Shell Flaw Lets Anonymous Users Execute Code
The article discusses a security vulnerability in WordPress's Comment2Shell feature, allowing anonymous comments to lead to Remote Code Execution (RCE) through an admin session. The flaw, identified on September 22, 2026, presents significant risks for…
The Hacker News - Attackers Exploit Zyxel and Veeam Flaws for SYSTEM Access
The article discusses the active exploitation of vulnerabilities identified in Zyxel and Veeam systems, highlighting their severity that allows command and SYSTEM-level access. It emphasizes the importance of cybersecurity measures to prevent such…
The Hacker News - ISC Stormcast Reviews September’s Green-Level Cyber Threats
The page provides information about the ISC Stormcast for September 22nd, 2026, featuring handler Didier Stevens and indicating a current threat level of green. It includes links to previous diaries, discussions, and SANS classes taught by Johannes Ullrich,…
SANS ISC - Arista Warns Attackers Are Exploiting Critical VeloCloud Flaw
On 22 September 2026, Arista Networks warned that attackers were actively exploiting CVE-2026-93952, a critical vulnerability in on-premises VeloCloud Orchestrator. The flaw has a CVSS score of 10.0. Arista said it was discovered externally and was being…
- OpenAI plans AI agents to rival Grok Bot and Meta’s Muse
SecurityOnline, citing a report from The Information, says OpenAI is developing new features in response to competition from SpaceXAI’s Grok Bot and Meta’s Muse. The report says Grok Bot, launched in August, has dedicated cloud-computing resources and can…
SecurityOnline - Suspected Chinese Actor Exposed 18,566 Government Records in Campaign
GreyNoise and Acronis researchers have linked a suspected Chinese-speaking threat actor to a campaign exploiting WordPress and other internet-facing systems. On 22 July 2026, the operator reportedly used a two-stage chain involving CVE-2026-63030 and…
- X Sues Bitcoin Content Farm Over $278,000 Engagement Fraud
X is suing operators of a Bitcoin-focused content farm, alleging that they manipulated engagement metrics to obtain $278,000 in creator revenue. According to the company’s complaint, numerous accounts were coordinated to repost and like one another’s posts,…
SecurityOnline - Google Fined €403 Million Over Unlawful Location Data Processing
Ireland’s Data Protection Commission (DPC) has fined Google €403 million (approximately US$463 million) over its processing of users’ location data and ordered the company to change its practices within six months. The decision follows a six-year…
SecurityOnline