CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 10–13 on weekend days.

12 Oct1314151617181920Busiest · 96212223242562Today
  • On CISA KEV CVEs
  • Other coverage
Show as table
Articles published per day
DayArticles published
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Sun 25 Oct13
Today, Mon 26 Oct62 so far
Developing
Exploited only
145 articles · 1–2 Oct

Latest days

Fri 2 Oct· 66 articles

  1. Sharp Printer Flaw Exposes Files and Credentials Without Login

    A Sharp printer vulnerability, tracked as CVE-2024-58388, allows unauthenticated attackers to read files on affected devices through the web manual download page. The flaw is a local file inclusion (LFI) issue in the installed_emanual_down.html pathway,…

    SecurityOnlineCVE-2024-58388CVE-2024-58388

  2. Apache Fixes 20 Flaws Including Critical mod_vhost_alias Bug

    Apache HTTP Server has been updated to version 2.4.69 to fix 20 security flaws, with five rated as moderate or higher and one critical issue highlighted as mod_vhost_alias stack overflow. The advisory notes that there are no confirmed attacks in the wild at…

    SecurityOnlineCVE-2026-63292CVE-2026-63292

  3. Critical Foreman Flaws Put Red Hat Satellite Deployments at Risk

    Red Hat has disclosed a critical set of Foreman flaws that affect Red Hat Satellite deployments and, in the case of 389-ds-base, LDAP clients. The most severe bug, CVE-2026-96658, enables an authenticated user with minimal permissions to achieve remote code…

    SecurityOnlineCVE-2026-96658CVE-2026-96658

  4. cPanel Fixes Flaws That Could Let Hackers Seize Servers as Root

    Three cPanel/WHM security advisories detail critical flaws across supported server platforms, enabling stored cross-site scripting (XSS) alongside potential root-level command execution. The vulnerabilities are CVE-2026-93029 (stored XSS via the Manage SSL…

    SecurityOnlineCVE-2026-93029CVE-2026-93029

  5. OpenBao Fixes Critical Flaws Allowing Code Execution and Token Forgery

    OpenBao maintainers have issued security updates for two critical vulnerabilities in the secrets-management platform. According to the available article content, the flaws could allow attackers to execute arbitrary code or create authentication tokens…

    SecurityOnline

  6. Attackers Turn Legitimate Remote Tools and AI Into Phishing Weapons

    In this SANS Internet Storm Center Stormcast, the host explains how attackers abuse legitimate remote administration tools to gain remote access without using malware. In one case, they email a copy of Screen Connect preconfigured to automatically connect…

    SANS ISC

  7. CISA Warns Monta EV Chargers Face Unauthorised Control Risks

    CISA has issued an advisory warning that Monta EV charging networks may be exposed to unauthenticated access due to multiple vulnerabilities in the Monta monta[.]app platform. The four flaws—CVE-2026-95102, CVE-2026-97363, CVE-2026-97212 and…

    SecurityOnlineCVE-2026-95102CVE-2026-95102

  8. Dell Patches Critical CSM Flaws Enabling Storage Admin Takeover

    Dell has fixed two CVSS 10 flaws in its Container Storage Modules (CSM) that would allow unauthenticated attackers to gain full administrative control of the storage layer. The company urges users to upgrade to version 1.18.0 or later. The advisory also…

    SecurityOnlineCVE-2026-63688CVE-2026-63688

Thu 1 Oct· 79 articles

  1. Fortinet FortiMail2 articles this day · CISA first

    FortiMail Flaw Exploited in the Wild, Exposing Corporate Networks · CISA Flags Fortinet FortiMail Flaw Under Active Exploitation

    2 outletsCVE-2026-104286CVE-2026-104286Exploited

  2. KillSec5 articles this day · SecurityWeek first

    Teen Allegedly Ran KillSec Ransomware Operation Behind 500 Attacks · International Sweep Dismantles KillSec Ransomware Operation and Seizes Data

    5 outlets

  3. Pentagon Breach Exposes Data on 2.8 Million Personnel

    Two U.S. federal breaches within a month have exposed a large trove of sensitive data. The Pentagon has disclosed that hackers accessed a Defence Department network used by the Defence Manpower Data Center, compromising personnel records stored there for…

    Ars Technica

  4. Zero Trust Can Still Stop Rogue AI Agents, Its Policy Engine Must Hold

    John Kindervag, the founder of the zero trust model, argues that the approach remains effective in the AI era but only if its implementation is correct. The SecurityWeek piece covers his new book, Cyber Resilience at Machine Speed: The Zero Trust Model for…

    SecurityWeek

  5. Osavul Raises $10 Million to Predict Hybrid Attacks Before They Strike

    Osavul, a hybrid risk intelligence company, has secured $10 million in a Series A funding round led by 33N Ventures, with Balnord, G+D Ventures, and 42CAP also participating. The Luxembourg-based startup says the funding will help expand its AI platform,…

    SecurityWeek

  6. Crypto Phishing Sites Trick Users Into Authorising Token Theft

    Malwarebytes confirms a large-scale phishing operation that imitates well-known crypto projects, including xStocks, Pendle, Zama, Kinetiq, Yield Basis, Firelight and others. In nearly all cases the fake pages invite visitors to vote on the date of a…

    Malwarebytes

  7. Leaked Russian Projects Reveal an Automated Cyber Espionage Ecosystem

    The Spetsvuzavtomatika leak on the dark web exposes a broad Russian cyber development programme rather than a single intrusion operation. Seven named projects are described, including Felix-23 and HAD for target discovery, scanning, enrichment and active…

    dti.domaintools.com

  8. AI Fuels Exploitation as Model Flaw Enables Remote Code Execution

    A weekly ThreatsDay bulletin highlights how ordinary components can become attack paths when misused, with AI and automation accelerating both discovery and exploitation. The piece surveys a wide range of incidents and research, from model inspection…

    The Hacker NewsCVE-2025-4632CVE-2025-4632Exploited

  9. McMinnville Data Breach Exposes Tax Returns and Police Records

    A cybersecurity specialist told KOIN 6 News that the McMinnville data breach left a “treasure trove” of sensitive records exposed online, accessible after just three clicks. The attacker, identified as RansomHouse, leaked data that purportedly includes tax…

    DataBreachesRansomHouse

  10. Cloudflare Launches Open Source AI Models for Faster Decisions

    Cloudflare has announced Clef, a new family of open‑source decision models, and Clef-flash, with an accompanying RL fine‑tuning platform. The models, hosted on Workers AI and released under Apache 2.0 on Hugging Face, are designed to produce deterministic,…

    Cloudflare

  11. WordPress Backdoor Uses Self-Healing Mesh to Survive Cleanup

    Security researchers have disclosed a highly persistent WordPress infection that uses a “self-healing mesh” backdoor, codenamed SC, to ensure the final payload remains accessible even after apparent cleanup. The backdoor operates across eight locations…

    The Hacker NewsCVE-2026-1581CVE-2026-1581

  12. Organisations Struggle to Defend Against Rising AI and Quantum Threats

    PwC’s Global Digital Trust Insights 2027 survey, which polled nearly 4,000 leaders across more than 70 countries, highlights a wide gap between the pace of AI and quantum threats and organisations’ preparations. The report notes a surge in AI-assisted…

    SecurityWeek

  13. Cisco SD-WAN Zero Day Exposes Internet Facing Systems to Attackers

    Cisco has released an urgent security update for Cisco Catalyst SD-WAN Manager after the discovery of a zero-day vulnerability that is already being exploited in the wild. The flaw, tracked as CVE-2026-76504, affects the API session-based authentication…

    InfosecurityCVE-2026-76504CVE-2026-76504Exploited

  14. Mimecast Chief Juncker Turned Childhood Hacking Into Cyber Defence

    Rob Juncker, chief product and technology officer at Mimecast, describes himself as a hacker, a claim he frames as important for security leadership. The piece traces his early curiosity to a ten-year-old with an Apple IIc, where he taught himself BASIC…

    SecurityWeek

  15. Shadow AI Is Putting UK Workplace Data at Risk, Studies Warn

    Shadow AI is defined as AI technology used at work that isn’t captured in an organisation’s approved systems and processes. The article emphasises that employees may turn to AI tools to get work done faster, such as summarising long email threads or drafting…

    Malwarebytes

  16. China Aligned Hackers Impersonate AI Experts to Steal Microsoft 365 Sessions

    A China-aligned threat group, TA419, has been impersonating prominent AI policy figures and economists to harvest login credentials from AI policy specialists at US think tanks, universities and law firms. Proofpoint notes the activity has been ongoing since…

    InfosecurityTA419

  17. Microsoft warns AI agents are widening the attack surface for enterprises

    Microsoft’s 2026 Digital Defense Report, released on 1 October 2026, builds a picture of an increasingly interconnected security environment. The briefing notes that threat activity now spans infrastructure, identities, applications, cloud environments, and…

    Microsoft

  18. Governments Became Cyber Threats’ Top Target as Phishing Soared

    Governments emerged as the sector most affected by cyber threats in 2026, accounting for 27% of observed activity and increasingly targeted by nation‑state actors. The Microsoft Digital Defense Report highlights that governments sit at the centre of networks…

    blogs.microsoft.com

  19. Google’s Gemini 4 Argon Hunts Critical Flaws in Healthcare Software

    Google has unveiled Gemini 4 Argon, described as a frontier AI model built for coding, enterprise work and autonomous cybersecurity defence. The company is rolling Argon out first to a trusted cohort through its Fairwind Program rather than a public release.…

    Security Affairs

  20. Fake Zoom Installer Hides CloudSyncD Backdoor Behind Password Prompt

    A new macOS backdoor, dubbed CloudSyncD, has been found hidden inside a fake Zoom installer that asks users to enter their login password before launching a second-stage payload. Jamf Threat Labs first observed CloudSyncD on 15 September in a development…

    Infosecurity

  21. TeamViewer Fixes Flaw Allowing Remote Attackers to Bypass Permissions

    TeamViewer has patched five high-severity vulnerabilities across its Full Client and Host applications for Windows, Linux and macOS, with the September 29, 2026 security bulletin TV-2026-1010 rating the issues as Important. The most serious, CVE-2026-92370…

    SOCRadarCVE-2026-92370CVE-2026-92370

  22. AI Speeds Up Attacks, but Security Fundamentals Still Matter

    The SecurityWeek piece argues that while Frontier AI and similar tools have accelerated the pace at which vulnerabilities are identified and exploits developed, this does not change the need for strong security fundamentals. The author emphasises that…

    SecurityWeek

  23. Cloudflare Brings Europe’s Open AI Models to Workers AI

    Cloudflare marks a year since its Sovereign AI initiative by highlighting two European open models now accessible on Workers AI: EuroLLM and Apertus. EuroLLM covers 35 languages, including all 24 official EU languages, and was developed with Horizon Europe,…

    Cloudflare

  24. Warlock Ransomware Exploits SharePoint to Target Spanish-Speaking Regions

    Warlock ransomware, linked to the China-nexus threat actor known as Longlegs and Microsoft as Storm-2603, has re-emerged targeting organisations in the Spanish- and Portuguese-speaking world. First observed in mid-2025, the operation has evolved into a…

    Dark ReadingStorm-2603

  25. Cloudflare’s AI Search Adds Native Image Retrieval and OCR

    Cloudflare has announced that AI Search is now generally available, expanding a platform that combines Workers AI, Vectorize, R2 and Browser Run into a managed index and retrieval pipeline. The GA release includes native multimodal embedding and retrieval,…

    Cloudflare

  26. Cloudflare Workers Opens Access to Post Quantum ML KEM and ML DSA

    Cloudflare has begun enabling post-quantum cryptographic primitives in Cloudflare Workers through Web Crypto, giving developers first‑class access to ML-KEM and ML-DSA algorithms. The public API additions are opt‑in via the webcrypto_modern_algorithms…

    Cloudflare

  27. Cloudflare’s KV Instant Brings Sub-2ms Global Reads to Workers Apps

    Cloudflare has announced Workers KV Instant, a new mode for Workers KV that runs on the Quicksilver globally distributed key-value store. KV Instant provides the same API as the existing Workers KV but is powered by Quicksilver to deliver instant global…

    Cloudflare

  28. Cloudflare Opens Managed Agent Workspace for Code and Gmail

    Cloudflare has announced Cloudflare OS, described as an “agent workspace” for organisations that is now available with a fully managed option and a waitlist for deployments. The open-source project remains available for self-hosted use, but the managed…

    Cloudflare

  29. Cloudflare Unveils K2 for Durable Serverless Event Streaming at Scale

    Cloudflare has announced Cloudflare K2, a public beta offering a durable, serverless event streaming primitive built on the developer platform. K2 lets you send events to a stream that is stored as an ordered log, with consumers able to read in different…

    Cloudflare

  30. Cloudflare Reimagines Git for Thousands of Collaborating AI Agents

    Cloudflare is inviting developers to reimagine Git for an “agentic era,” built on its Artifacts platform and Workers. The company argues that the next generation of software will be produced by many agents working on the same codebase, raising questions…

    Cloudflare

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device