News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Today, Wed 28 Oct | 33 so far | 7 |
Developing
Fri 17 Jan 202559 articles
- Vulnerabilities in SimpleHelp Remote Access Software May Lead to System Compromise
Three vulnerabilities in SimpleHelp could allow attackers to compromise the remote access software’s server and the client machine.
SecurityWeek - CISA Releases Guidelines For Closing Software Understanding Gap
The Cybersecurity and Infrastructure Security Agency (CISA) has released a pivotal report calling for urgent action to address the “software understanding gap.” This comprehensive document highlights the significant disparity between the rapid advancement in…
gbhackers.com - Hackers Deploy Web Shell To Abuse IIS Worker And Exfiltrate Data
An attacker exploited a vulnerability in the batchupload.aspx and email_settings.aspx pages on the target server that allowed them to upload a malicious web shell to the IIS worker process (w3wp.exe). They initially attempted to upload a web shell to another…
gbhackers.com - European Privacy Group Sues TikTok and AliExpress for Illicit Data Transfers to China
Austrian privacy non-profit None of Your Business (noyb) has filed complaints accusing companies like TikTok, AliExpress, SHEIN, Temu, WeChat, and Xiaomi of violating data protection regulations in the European Union by unlawfully transferring users' data to…
The Hacker News - Russian APT Phishes Kazakh Gov't for Strategic Intel
A highly targeted cyber-intelligence campaign adds fuel to the increasingly complex relationship between the two former Soviet states.
Dark Reading - Russian Threat Actor “Star Blizzard” Exploit WhatsApp Accounts Using QR Codes
Microsoft Threat Intelligence has identified a concerning strategic shift by the notorious Russian threat actor group “Star Blizzard.” Known for its spear-phishing campaigns targeting government, diplomatic, and civil society sectors, the group has now…
gbhackers.com - CVE-2024-53691: PoC Exploit Released for Severe QNAP RCE Flaw
Security researcher c411e published a proof-of-concept (PoC) exploit code for a severe vulnerability in QNAP NAS devices, identified
SecurityOnline - Yubico Addresses Authentication Bypass Vulnerability CVE-2025-23013 in pam-u2f Package
Yubico, a leading provider of security keys and authentication solutions, has issued a security advisory to address an
SecurityOnline - The Rise of AI Search: Google Search Market Share Dips Below 90%
There is no doubt that Google Search has long been the dominant force in the search engine landscape.
SecurityOnline - Microsoft 365 Drops Windows 10: What You Need to Know Before the Deadline
According to the latest announcement on Microsoft’s document, Microsoft 365 applications will cease supporting Windows 10 starting October
SecurityOnline - HPE Aruba Networking Addresses Security Vulnerabilities in AOS Systems
HPE Aruba Networking has issued a security advisory addressing multiple vulnerabilities in its ArubaOS (AOS) systems, which are
SecurityOnline - AWS Patches Vulnerabilities in WorkSpaces, AppStream 2.0, and DCV Clients
Amazon recently issued a security advisory regarding two vulnerabilities affecting specific versions of its native clients for Amazon
SecurityOnline - CVE-2024-52281: Rancher Vulnerability Exposes Users to Stored XSS Attacks
A severe vulnerability (CVE-2024-52281) has been discovered in Rancher, an open-source container management platform widely used for Kubernetes
SecurityOnline - Is Google Too Big? CMA Investigates Search Giant
Following the U.S. Department of Justice’s demand for Google to divest its Chrome browser business and potentially its
SecurityOnline - NVIDIA Releases Security Update for Container Toolkit and GPU Operator
NVIDIA has released a security update to address multiple vulnerabilities in its Container Toolkit and GPU Operator software.
SecurityOnline - North Korean Hackers Linked to Crowdfunding Scam
In a recent investigation, Secureworks Counter Threat Unit (CTU) researchers have uncovered a link between North Korean IT
SecurityOnline - CVE-2024-9636: Popular WordPress Plugin ComboBlocks Exposes Thousands of Sites to Complete Takeover
A critical vulnerability in the popular WordPress plugin, formerly known as Post Grid and now ComboBlocks, has left
SecurityOnline - TikTok’s Last Dance: Inside the U.S. Ban
Although there were earlier rumors that ByteDance was evaluating the sale of TikTok’s operations to Elon Musk to
SecurityOnline - Cybercriminals Exploit Fake Google Ads to Ransack Advertiser Accounts
In a campaign uncovered by security researcher Jérôme Segura from Malwarebytes, cybercriminals have been using fraudulent Google Ads
SecurityOnline