Skip to content

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Articles per day, last 14 days

Most articles on Wed 21 Oct (96); 10–13 on weekend days.

15 Oct17192196232527Today7 so faravg 60
  • On CISA KEV CVEs
  • Other coverage
  • Closed-day average
Show as table
Articles per day, last 14 days
DayArticlesOn CISA KEV CVEs
Thu 15 Oct7815
Fri 16 Oct6112
Sat 17 Oct101
Sun 18 Oct100
Mon 19 Oct6012
Tue 20 Oct8616
Wed 21 Oct9618
Thu 22 Oct8411
Fri 23 Oct6816
Sat 24 Oct134
Sun 25 Oct132
Mon 26 Oct7620
Tue 27 Oct9518
Wed 28 Oct8715
Today, Thu 29 Oct7 so far3

Developing

Exploited only
95 articles

Latest days

Thu 22 May 202595 articles

  1. Privilege Escalation Flaws in Cisco Unified Intelligence Center Threaten User Data Integrity

    Cisco has released security updates addressing two privilege escalation vulnerabilities—CVE-2025-20113 and CVE-2025-20114—in its Unified Intelligence Center (UIC) platform.

    SecurityOnline
  2. Unauthenticated Attacker Can Read Sensitive Files in Mitel OpenScape Xpressions

    Mitel has issued a security advisory warning of a high-severity path traversal vulnerability (CVE-2025-48026) in its OpenScape Xpressions

    SecurityOnline
  3. Google Chrome Update: 8 Security Fixes Including High-Severity Flaw

    Google has released a Stable Channel update to version 137.0.7151.40/.41 for Windows and Mac as part of an

    SecurityOnline
  4. Unpatched 0-Days (CVSS 10): Versa Concerto Flaws Threaten Enterprise Networks

    Versa Concerto, a popular SD-WAN and network orchestration platform used by large enterprises and governments, is under fire

    SecurityOnline
  5. RADIUS Risk: Unauthenticated Remote Attacker Can Crash Cisco ISE by Default

    Cisco has published a security advisory for a high-severity vulnerability impacting its Identity Services Engine (ISE) product. Tracked

    SecurityOnline
  6. Grafana Zero-Day? Emergency Patch Released ‘One Day Ahead of Schedule’ for XSS Flaw

    Grafana Labs issued an unscheduled security release—Grafana 12.0.0+security-01—alongside patches for all supported versions, addressing a high-severity cross-site scripting

    SecurityOnline
  7. GitLab Patches High-Severity Flaws: DoS and 2FA Bypass Fixed

    GitLab announced the release of versions 18.0.1, 17.11.3, and 17.10.7 for both its Community Edition (CE) and Enterprise

    SecurityOnline
  8. Docker Containers Under Attack: New Self-Replicating Dero Cryptominer

    Kaspersky Labs has uncovered a disturbing new malware campaign that turns exposed Docker containers into self-replicating Dero cryptocurrency

    SecurityOnline
  9. NIST Proposes New Metric to Predict “Likely Exploited” Vulnerabilities

    The U.S. National Institute of Standards and Technology (NIST) is proposing a metric to address one of the

    SecurityOnline
  10. Langroid Flaws (CVSS 9.8) Expose LLM Apps to RCE

    Researchers have disclosed two critical vulnerabilities in Langroid, a popular Python framework designed for building large language model

    SecurityOnline
  11. Beyond Detection: PyBitmessage Protocol Used for Covert Monero Mining Campaign

    In a new and deeply evasive malware campaign, cybercriminals are leveraging the PyBitmessage protocol to hide a backdoor

    SecurityOnline
  12. Critical Flaws in AI Browse Agents: Exposed to Credential Theft and Hijacking

    As AI-powered browsing agents increasingly automate complex web tasks—from booking travel to managing emails—they’re becoming both indispensable tools

    SecurityOnline
  13. Industrial Alert: AutomationDirect MB-Gateway Flaw Rated CVSS 10, No Software Fix

    In a newly disclosed advisory, the Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical alert about

    SecurityOnline
  14. Beyond Ads: Malvertising Campaign Leverages Google APIs to Redirect Shoppers to Fake Payments

    Threat actors are now turning the very trust consumers place in legitimate e-commerce sites against them. A new

    SecurityOnline
Updated AboutDevelopersSign in