News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Wed 14 Oct· 86 articles
-
Critical GitLab CI flaw enables unauthenticated remote code execution
GitLab has patched CVE-2026-97229, a critical remote code execution flaw rated CVSS 10.0 that affects the CI/CD regex compiler. The vulnerability stems from an integer overflow in Onigmo when re-evaluating a crafted UTF-8 repository path during CI linting.…
-
Chrome and Firefox Patch 114 Flaws in Major Security Updates
Google and Mozilla released simultaneous browser updates addressing a total of 114 vulnerabilities across Chrome and Firefox. Chrome’s fixes cover 37 security defects, including seven critical memory issues: a buffer overflow in ANGLE and six use-after-free…
SecurityWeek -
Citrix, Fortinet and Ivanti Patch Critical Flaws, Exploited Zero Day
Security updates have addressed 29 vulnerabilities across Citrix, Fortinet, and Ivanti products, including several critical-severity flaws that could allow unauthenticated code execution, authentication bypass, DoS, or leakage of sensitive data. Citrix…
-
Meta and global partners dismantle West African scam networks in major crackdown
The article reports that Meta, alongside a cohort of tech companies and global law enforcement, targeted West Africa-based scam networks in a week-long operation that culminated in 28 arrests and the rescue of 117 trafficking victims. Beginning on 6 October…
SecurityOnline -
Codex CLI’s New Background Daemon Sparks Calls for Opt In Controls
Codex CLI 0.157.0 introduced an automatic background server startup feature that creates a daemon to facilitate the Codex CLI’s automatic initialisation at system boot for eligible interactive sessions. The change has sparked notable backlash within the…
SecurityOnline -
Microsoft Windows4 articles this day · CISA first
Microsoft’s record 1,413 fixes include a Windows flaw exploited to bypass security warnings · Microsoft patches 1,413 flaws as hackers exploit Windows bug
-
Microsoft’s record 1,413 fixes include a Windows flaw exploited to bypass security warnings
Microsoft has released its October 2026 Patch Tuesday with a record 1,413 CVE fixes across multiple products, including Windows, Office, developer tools, and SharePoint Server. Microsoft notes that 1,102 of the fixes affect Windows, with additional patches…
-
Microsoft patches 1,413 flaws as hackers exploit Windows bug
Microsoft has released a record-breaking Patch Tuesday, delivering fixes for 1,413 vulnerabilities across Windows, Office, Developer Tools, SharePoint Server, and SQL Server. The update slate includes 1,102 Windows flaws, 134 in Office, 61 in Developer…
-
Microsoft Fixes Actively Exploited Windows Flaw in Record Patch Release
Microsoft’s October 2026 Patch Tuesday fixes a record 1,414 vulnerabilities, including 78 rated critical, making it the largest Microsoft release to date. The update slate includes three zero-day flaws, with one already being actively exploited. CISA has…
-
CISA flags actively exploited Windows flaw with 16 October patch deadline
CISA added CVE-2026-96951 to its Known Exploited Vulnerabilities (KEV) catalogue on 13 October 2026. The vulnerability affects Microsoft Windows and is a command injection flaw in Windows Shell that allows an unauthorised attacker to bypass a security…
-
-
Hidden VBA Projects in AutoCAD Drawings Can Evade Detection
Orphaned VBA projects can lurk inside AutoCAD drawing files (DWG) as embedded OLE objects. Didier Stevens revisits how VBA code can be stored inside an OLE file embedded in a DWG, and explains how you can locate the embedded file by following a 32‑bit…
SANS ISC -
Excel Copilot Turns Workbook Data Into Live Reports Through Chat
Microsoft has announced an expansion to Excel Copilot with an interactive canvas that lets users generate visual reports from workbook data using natural language prompts. The canvas remains tightly connected to the source workbook, so reports automatically…
SecurityOnline -
Broadcom Moves VMware to Monthly Security Updates as AI Speeds Flaw Discovery
Broadcom has announced a shift to a monthly software security update cadence for its VMware product line, citing the increasing capability of AI to identify defects as a driver for faster remediation. The move implies that organisations will need to devote…
-
SAP Patches Critical Flaws That Could Enable NetWeaver System Takeover
SAP has released security notes addressing 22 vulnerabilities across its NetWeaver, S/4HANA, and related products, highlighting four that are considered critical. The most severe is CVE-2026-89111, an OAuth2 SSRF issue in the Cloud SDK for Python that could…
-
Windows Defender flaw let attackers bypass a protected enclave
Security researchers demonstrated a local, sandbox-bypassable bug inside a Windows protected enclave used by Defender SmartScreen’s Enhanced Phishing Protection. The flaw, tracked as CVE-2026-83498, existed in the SFAPE[.]dll component that runs inside a VBS…
-
XWorm RAT evolves into a surveillance tool that can bypass MFA attacks
Netskope Threat Labs has been monitoring XWorm since September 2024, and its latest findings show the malware evolving into a sophisticated, multi-version toolkit. Over the past year four distinct XWorm versions have been observed circulating at the same…
Security Affairs -
Ransomware Gangs Threaten Physical Harm, but Evidence Remains Unclear
Ransomware gangs are increasingly mixing online extortion with threats of physical harm, according to Semperis’s 2026 Ransomware Risk Report. The survey, based on self-reported responses, indicates that about two-fifths of organisations have faced…
Dark Reading -
Binance to Shut Down Mining Pool and Related Services in November 2026
Binance has announced that it will shut down Binance Pool and its related services, with the closure effective on 10 November 2026 at 15:00 (UTC+8). The affected products include the pool savings product, cloud mining, and transaction acceleration, as well…
SecurityOnline -
Mozilla launches Firefox Enterprise with controls to curb data leaks
Mozilla has announced Firefox Enterprise, a new corporate edition that combines the Firefox browser with a dedicated enterprise management console. The product is aimed at organisations with strict security, governance, and compliance needs and is beginning…
SecurityOnline -
Attackers Exploit Nextcloud Collabora Flaw to Plant Webshells
Threat actors are actively exploiting CVE-2026-110447, a critical OS command injection flaw in the Nextcloud Collabora Online Built-in CODE Server app (richdocumentscode). The vulnerability, rated CVSS 9.2, enables unauthenticated attackers to plant PHP…
-
Vghost Linux Flaw Enables Root Access and Virtual Machine Escapes
Security researchers from the TencentOS Security Team and Corvus AI have disclosed the full technical details and a public PoC for CVE-2026-74580, a high‑severity Linux vhost memory‑corruption flaw dubbed Vghost. The CVSS 3+ score is 8.8, and the bug enables…
-
Critical Komodo flaw lets low-privileged users run commands as root
CERT/CC and mogh[.]tech have disclosed CVE-2026-110005, a critical OS command injection flaw in the Komodo Periphery agent. The advisory assigns a base score of 9.9 (CVSS 3.1) and states that authenticated, low-privileged users can execute root commands on…
-
OpenAI Staffer Charged Over Hidden Recorder in Executive Conference Room
Federal prosecutors have charged Abdulrahman Alfozan, a Saudi citizen who joined OpenAI in July 2025, with covertly placing a recording device in an OpenAI executive conference room in San Francisco. The incident came to light after OpenAI security personnel…
SecurityOnline -
IBM Fixes Critical WebSphere Liberty Flaws Enabling Remote Access Bypass
IBM has issued fixes for four vulnerabilities in IBM WebSphere Application Server Liberty, including two critical flaws that could enable remote authentication or access-control bypass. The vulnerabilities are CVE-2026-93895 and CVE-2026-93909, both rated…
-
Microsoft’s October Patch Tuesday fixes 1,417 flaws as attackers exploit a Windows security bypass
Microsoft’s October 2026 Patch Tuesday delivered a sprawling update set, addressing 1417 vulnerabilities across multiple products, with 76 of them rated as critical. Several of the critical issues are cloud-related and were addressed by Microsoft before this…
SANS ISC -
OpenAI Engineer Arrested Over Covert Recording Device in Meeting Room
A Saudi national and OpenAI employee, Abdulrahman Alfozan, has been arrested in San Francisco on charges that he planted a covert audio recording device in an executive conference room to secretly capture sensitive conversations. He is accused of using or…
The Hacker News -
US Raid Targets North Korean Laptop Farms in $3M Hiring Scheme
Federal authorities have disrupted North Korean remote-work schemes that funnel illicit activity through U.S. companies. The Department of Justice announced coordinated actions and unsealed a four‑count indictment charging 14 individuals with wire fraud,…
SecurityOnline -
Microsoft patches Copilot flaw that could let attackers run code via files
Microsoft has released a Patch Tuesday update to fix CVE-2026-103572, a remote code execution flaw said to affect Visual Studio Copilot and SQL Server Management Studio (SSMS). The vulnerability stems from a shared library,…
-
SuiteCRM Patches Critical Flaw That Could Enable Persistent Server Takeover
SuiteCRM has disclosed eight security advisories for flaws in versions 7 and 8, including a high‑risk remote code execution (RCE) bug. The fixes cover SuiteCRM 8.10.1 and earlier, and 7.15.1 and earlier. Upgrading to SuiteCRM 8.10.2 or 7.15.2 is advised,…
-
Unpatched Shopware Flaw Could Let Attackers Steal Admin Tokens and Run Code
A stored cross-site scripting flaw in Shopware 6.7, designated CVE-2026-104937, has been disclosed by CERT/CC. The vulnerability could allow an attacker with media upload rights to plant a malicious HTML file that is later served as a page without essential…
-
Google Fixes 37 Chrome Flaws, Including Seven Critical Bugs
Google released Chrome 155.0.8059.79/80 on 13 October 2026, delivering fixes for 37 security flaws and addressing a cluster of memory corruption issues, including seven rated as critical. The leading fix is a buffer overflow in the ANGLE graphics layer…
-
Unauthenticated TanStack flaw lets attackers run scripts through malicious links
TanStack CVE-2026-102989 is a high-severity, unauthenticated reflected XSS flaw affecting TanStack Start and its underlying Router. The advisory describes an ability for an attacker to craft a link that, when opened on a vulnerable app, returns…
Tue 13 Oct· 85 articles
-
NVIDIA AIStore flaw scores CVSS 10 and risks remote code execution
NVIDIA has released six security advisories on 13 October 2026, addressing 18 vulnerabilities across its AI software stack. The most critical entry is CVE-2026-65162, rated CVSS 10.0, which affects NVIDIA AIStore and could allow remote code execution. Eight…
-
Microsoft Windows3 articles this day · Rapid7 first
Microsoft fixes over 1,400 flaws, including a Windows zero day · Microsoft patches actively exploited Windows flaw that bypasses security checks
-
Microsoft fixes over 1,400 flaws, including a Windows zero day
Microsoft has issued a sweeping patch batch fixing more than 1,400 security vulnerabilities across Windows operating systems and related software. The roll-up dwarfs September’s near-1,000 fixes and underscores an unusually large month for Microsoft’s patch…
-
Microsoft patches actively exploited Windows flaw that bypasses security checks
On 13 October 2026, Dark Reading reports Microsoft’s October Patch Tuesday as the largest update yet, with 1,413 Microsoft CVEs disclosed. The haul includes 80 critical flaws and two zero-day bugs, one of which is actively exploited. The patched issues span…
-
Microsoft Patches Windows Shell Zero Day Exploited in the Wild
Microsoft’s October 2026 Patch Tuesday swells to a much larger cycle than last month, with 1,413 disclosed vulnerabilities across its own products, of which 1,102 are in Windows.
-
-
OpenAI Engineer Arrested After Hidden Recording Device Found in Office
An OpenAI engineer, Abdulrahman Alfozan, a 35-year-old Saudi national, has been arrested and terminated after a recording device was found in a conference room. The device, concealed in toilet paper and connected via a USB port at the back of a television,…
SecurityWeek -
Weak VPN controls let attacker probe a European bank for months
An investigation by Unit 42 recounts a European bank’s security incident that began with unauthorized VPN-based access attempts to its central IT system over several months. The intrusion stemmed from gaps in basic security controls rather than novel…
unit42.paloaltonetworks.com -
North Korean Hackers Target Ukraine With Reply Bait Phishing
North Korean state-sponsored actors have been conducting spear-phishing campaigns aimed at Ukrainian government, policy, and academic circles to prise out war-related intelligence. Researchers describe the operation as a relatively crude but ongoing effort…
Dark ReadingTA406 -
South African Lab Ampath Probes Attack After 80 Million Records Claim
Ampath Laboratories, one of South Africa’s largest pathology service providers, says it was the target of a cyberattack with the attacker claiming that more than 80 million patient records were exfiltrated. The claim comes from ByteToBreach, a threat actor…
DataBreachesByteToBreach -
Researchers Show AI Worm Could Spread Across Insecure Android Devices
Anthropic researchers William Zhou and Daniel Freeman explored the theoretical and practical steps by which an AI-based worm might propagate across insecure devices and networks. In a set of experiments, they used a network of inexpensive Android TV boxes…
Dark Reading
