News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 66 so far |
Thu 1 Oct· 79 articles
-
Apache WSS4J Flaws Let Attackers Forge Authenticated Messages
Developers have disclosed six critical vulnerabilities in Apache WSS4J, prompting a call to urgent action for administrators. The flaws affect the WS-Security library across multiple release lines and include authentication bypass and denial-of-service…
-
Python Fixes Critical SSL Flaws Threatening TLS Security
On 30 September 2026, the Python Software Foundation disclosed two critical flaws in CPython’s SSL module (CVE-2026-19445 and CVE-2026-19553) that could lead to memory corruption and a bypass of certificate hostname verification. The first issue is a…
-
CISA Warns Viidure Dashcam Flaws Could Expose Global Cloud Data
CISA has warned about two critical flaws in the Viidure dashcam Android app, disclosed in advisory ICSA-26-272-07 dated 29 September 2026. The most severe issue, CVE-2026-96587, scores CVSS 10.0 and involves hardcoded cloud storage credentials embedded in…
-
Active NetScaler Zero Days Expose Devices to Remote Code Execution
Citrix NetScaler ADC and Gateway were found to be vulnerable to a pre-authentication memory overflow, tracked as CVE-2026-88772, with a companion flaw CVE-2026-88771 also exploitable in the wild. The issues were actively exploited as a zero‑day, leading CISA…
Wed 30 Sep· 79 articles
-
FTC Probes OpenAI and Anthropic Over AI Consumer Risks
The U.S. Federal Trade Commission has opened an investigation into OpenAI, Anthropic and other artificial intelligence companies over potential risks their technology could pose to consumers. An FTC spokesperson confirmed the inquiry but did not provide…
SecurityWeek -
Internet Society Launches Free Multilingual Hub to Combat Online Scams
The Internet Society has launched the Online Trust and Safety Hub, a free, multilingual global resource designed to help people stay safer online. The Hub sits at the centre of the organisation’s Safer Internet Initiative and provides practical tools such as…
SecurityOnline -
Attackers Abuse OpenAI’s Trusted Domains to Deliver RAT Malware
A new ClickFix-style campaign is abusing legitimate domains tied to OpenAI and Google to deliver a remote access Trojan (RAT) via malicious Custom GPTs. Researchers from Huntress have described attackers creating Custom GPTs that imitate real ChatGPT…
Dark Reading -
AI Giants Sign Voluntary White House Accord on Frontier AI Safety
The leaders of six major AI companies—OpenAI, Google, Meta, Nvidia, xAI and Anthropic—have signed a voluntary agreement with President Trump to strengthen safety measures around frontier AI systems. The White House Accord on Super Intelligence asks these…
Dark Reading -
Synacor Zimbra Collaboration Suite (ZCS)4 articles this day · Microsoft first
Attackers Exploit Zimbra Flaw to Steal Emails and Authentication Data · Attackers Exploit Zimbra Flaw to Steal Mail and Maintain Access
-
Attackers Exploit Zimbra Flaw to Steal Emails and Authentication Data
Attackers have been exploiting a critical flaw in Zimbra Collaboration Suite to steal emails and back up authentication data. The vulnerability, CVE-2026-73570, allows remote, unauthenticated command execution via a crafted email that targets the ZCS SNMP…
-
Attackers Exploit Zimbra Flaw to Steal Mail and Maintain Access
Threat actors have weaponised a now-patched Zimbra Collaboration Suite (ZCS) flaw to deploy web shells, harvest mailbox data and credentials, and establish persistent access. The vulnerability, CVE-2026-73570, is an unauthenticated OS command-injection flaw…
-
Unpatched Zimbra Servers Exposed to Shells and Credential Theft
Microsoft Threat Intelligence has tracked attacks exploiting Zimbra CVE-2026-73570, an unauthenticated command-injection flaw in the SNMP notification path, that can give attackers a shell on exposed, unpatched servers. The article notes that exploitation…
-
Attackers Exploit Zimbra Flaw to Deploy Web Shells and Steal Mail
Microsoft Threat Intelligence has tracked exploitation of CVE-2026-73570, an unauthenticated OS command-injection vulnerability in the Zimbra Collaboration Suite SNMP notification path. A crafted SMTP request can reach SNMP notification processing and inject…
-
-
Microsoft Ignite 2026 Puts Agentic AI at the Heart of Security
Microsoft’s Ignite 2026 security coverage frames the event around an agentic, AI-enabled security platform designed to protect identities, devices, data, apps, clouds, infrastructure, and AI agents that operate alongside human teams. The article emphasises…
Microsoft -
WatchGuard Fireware OS2 articles this day · SecurityWeek first
WatchGuard Patches Firebox Flaw That Grants Attackers Root Access · WatchGuard Patches Critical Firebox Flaw Enabling Root RCE
-
WatchGuard Patches Firebox Flaw That Grants Attackers Root Access
WatchGuard has issued security updates for Fireware OS addressing 15 vulnerabilities, including a critical code-injection flaw that could give attackers root access to vulnerable Firebox appliances. The primary issue, CVE-2026-86131, stems from a code…
-
WatchGuard Patches Critical Firebox Flaw Enabling Root RCE
WatchGuard has issued patches for 15 vulnerabilities across Fireware OS, including a highly critical remote code execution flaw tracked as CVE-2026-86131 (CVSS 9.2). The code-injection weakness affects how Fireware OS handles BOVPN over TLS client…
-
-
AI Boosts SOC Job Satisfaction but Makes Entry-Level Skills Harder to Build
Swimlane has released findings from a survey of 500 security professionals and leaders across the United States and the United Kingdom, examining how AI is reshaping the SOC career ladder. The research suggests a paradox: AI can boost capacity and job…
Dark Reading -
Virginia City of Radford Suffers Internet Outage After Data Breach
The City of Radford in Virginia says it is experiencing an internet outage after a potential data breach. The incident prompted the city to engage cybersecurity professionals and legal counsel, with both state and federal law enforcement notified and…
DataBreaches -
Cisco Catalyst SD-WAN Manager4 articles this day · Rapid7 first
CISA Warns of Active Exploitation in Cisco SD-WAN Manager Flaw · Cisco Warns of Active Exploitation in Critical SD-WAN Flaw
-
CISA Warns of Active Exploitation in Cisco SD-WAN Manager Flaw
CISA added CVE-2026-76504 to its Known Exploited Vulnerabilities (KEV) catalogue on 30 September 2026. The vulnerability affects Cisco Catalyst SD-WAN Manager and is known as the Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability. It could allow an…
-
Cisco Warns of Active Exploitation in Critical SD-WAN Flaw
Cisco says attackers are exploiting a critical authentication bypass in the Cisco Catalyst SD-WAN Manager, potentially allowing remote unauthenticated access via the Manager’s API. The flaw is tracked as CVE-2026-76504 and scores 9.8 out of 10 on CVSS. It…
-
Cisco Patches Exploited SD-WAN Flaw Enabling Unauthenticated Admin Access
Cisco has identified and patched a critical authentication bypass in Cisco Catalyst SD-WAN Manager, tracked as CVE-2026-76504. The flaw, rated CVSS 9.8, lies in the API session-based authentication logic and stems from improper handling of URI encoding in an…
-
Cisco SD-WAN Flaw Exploited to Grant Attackers Admin Access
Rapid7 reports that Cisco Catalyst SD-WAN Manager is being exploited in the wild for CVE-2026-76504, a critical API authentication bypass affecting the SD-WAN Manager. The flaw stems from improper handling of URL encoding (CWE-177), enabling an…
-
-
Microsoft Warns of Dual RMM Attack Using MSP360 and ScreenConnect
Microsoft has flagged a multi-stage phishing campaign that abuses the MSP360 Remote Monitoring and Management (RMM) tool to gain initial footholds on Windows devices, then deploy a ScreenConnect client for a second, redundant remote-access channel. The…
The Hacker News -
Arizona Courts Breach Exposes 150,000 Foster Care Reports
Hackers accessed Arizona courts’ systems after a phishing email containing a malicious link was clicked by a court employee, leading to the copying of backup files that contained records related to protective orders and foster care cases. The breach was…
Malwarebytes -
Callisto2 articles this day · SecurityOnline first
Russia-Linked Star Blizzard Expands Phishing with Faster RedFlick Malware Attacks · Russian Star Blizzard Expands Phishing Campaign Against Ukraine’s Allies
2 outlets-
Russia-Linked Star Blizzard Expands Phishing with Faster RedFlick Malware Attacks
A Russia-linked APT group, known as Star Blizzard (also ColdRiver or Callisto), is widening its phishing operations after a significant disruption two years ago by Microsoft and US officials. In a Microsoft Threat Intelligence blog post published on 29…
Dark Reading -
Russian Star Blizzard Expands Phishing Campaign Against Ukraine’s Allies
Microsoft Threat Intelligence attributes the campaigns to Star Blizzard (also known as COLDRIVER, SEABORGIUM), a Russian state-linked group tied to FSB Centre 18. Since January 2026, the group has shifted from one‑to‑one spear phishing to mass mailings,…
SecurityOnline
-
-
Attackers Abuse ChatGPT Custom GPTs to Deliver Remote Access Trojans
Threat actors have been abusing ChatGPT Custom GPTs to masquerade as legitimate product offerings, directing users to malicious sites that deploy ClickFix lures to drop malware. Huntress observed the activity in late September 2026, marking another abuse of…
The Hacker News -
BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)3 articles this day · Infosecurity first
Google Finds AI Discovered Flaws Are More Likely to Enable RCE · Google Finds AI Discovered Flaws Are Nearly Twice as Likely to Enable RCE
-
Google Finds AI Discovered Flaws Are More Likely to Enable RCE
Google Threat Intelligence Group (GTIG) has analysed vulnerability disclosures from January 2025 to August 2026 and found that AI-enabled discovery is accelerating both the pace and the focus of security flaws. Monthly disclosures more than double from 5,045…
-
Google Finds AI Discovered Flaws Are Nearly Twice as Likely to Enable RCE
AI-found vulnerabilities are disproportionately linked to remote code execution (RCE), according to Google Threat Intelligence Group (GTIG) analysis published on 30 September 2026. The researchers compared AI-discovered vulnerabilities with other CVEs and…
-
Google Warns N Day Flaws Are Driving a Surge in Exploitation
Google Threat Intelligence Group (GTIG) says vulnerability disclosures and exploitation both increased sharply in 2026, based on data covering 1 January 2025 to 31 August 2026. Monthly disclosures rose from 5,045 in January 2026 to 10,477 in July and 10,740…
-
-
DOJ Alleges Russian-Owned Oxygen Forensics Misled US Agencies
A Justice Department indictment has spotlighted Oxygen Forensics, a company run by Russian nationals, alleging it concealed Russian ownership while selling its digital forensics tools to U.S. agencies and European customers for years. The DOJ claims CEO Lee…
Security Affairs -
Cloudflare’s Free Security Shields 3,500 Public Interest Groups
Cloudflare’s Impact programs are set to reach $100 million in donated services, marking a notable milestone in the company’s effort to shield public-interest organisations from cyber threats. The donation figure underscores the scale of protection provided…
Cloudflare -
Cloudflare Helps Teams Spot AI Model Overkill and Cut Costs
Cloudflare has updated its AI Gateway User Insights to add much-needed context to AI traffic analysis. Since the initial launch, User Insights now helps teams understand not just which models and request counts are being used, but also the kind of work…
Cloudflare -
Cloudflare Streamlines Domain Buying With Live Search and CLI Tools
Cloudflare has expanded its domain offering to make finding and buying domains simpler across more extensions. The new search now displays every extension supported by Cloudflare Registrar, responds as you type, and allows sorting, filtering, and transparent…
Cloudflare -
Cloudflare Opens Beta for Agent Paywalls Using USDC Payments
Cloudflare has announced a closed beta for its Monetization Gateway, a system that lets domain owners charge AI agents for access to resources behind Cloudflare’s network on a per-use basis. The gateway uses HTTP 402 Payment Required responses to prompt…
Cloudflare -
Cloudflare Launches Pay Per Use to Help Publishers Monetise AI Use
Cloudflare has launched a beta for Pay Per Use, a mechanism to turn downstream use of published content by AI products into revenue. The approach lets buyers propose a price for a defined use of content, publishers decide whether to accept, and Cloudflare…
Cloudflare -
Trump Secures Voluntary AI Safety Accord From Six Tech Giants
The White House has secured a voluntary safety commitment from six major AI firms, with the signatories agreeing to implement internal controls, independent audits and board-level oversight for frontier models. President Donald Trump and the executives…
Infosecurity -
Cloudflare’s AI Gateway Auto Router Cuts Model Costs by 30%
Cloudflare has publicly released its AI Gateway Auto Router in public beta. The feature automatically routes each user request to an appropriate model, selecting the one that is capable enough for the task without requiring end users to choose models…
Cloudflare -
Cloudflare Issues Automates Worker Error Triage With Coding Agents
Cloudflare has introduced a real-time, built-in error monitoring feature for Cloudflare Workers called Issues, currently in open beta. The service aims to streamline how production failures are handed off to an agent by automatically grouping repeated…
Cloudflare -
Cloudflare Says AI Agents Are Creating a Second Internet Audience
Cloudflare argues that the Internet now has a second audience: agents—software acting on behalf of people. This shift means more than half of Internet traffic is non-human, with AI-driven requests increasing traffic dramatically. Cloudflare cites that at the…
Cloudflare -
Cloudflare Speeds Up Agent Sandboxes With Runtime Container Control
Cloudflare has rebuilt its Containers offering to better support on-demand, fast-starting agent sandboxes. The update introduces a durable_object scheduling policy that lets the agent code decide which sandbox image and compute resources to use at runtime,…
Cloudflare
