CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 10–13 on weekend days.

  • On CISA KEV CVEs
  • Other coverage
Show as table
Articles published per day
DayArticles published
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Sun 25 Oct13
Today, Mon 26 Oct5 so far
Exploited only
85 articles

Latest days

Wed 5 Nov 2025· 85 articles

  1. CISA KEV Alert: Two Critical Flaws Under Active Exploitation, Including Gladinet LFI/RCE and CWP Admin Takeover

    According to The U.S. Cybersecurity and Infrastructure Security Agency (CISA), two vulnerabilities have been added to the Known Exploited Vulnerabilities (KEV) catalog after evidence of active exploitation. The first, CVE-2025-11371 (CVSS 7.5), affects…

    SecurityOnline
  2. Google Translate Debuts Gemini-Powered “Advanced” Mode for Higher Accuracy Translations

    Google has begun integrating deeper Gemini model capabilities into its Google Translate service, with a new translation model option that lets users choose between the standard “Fast” mode and the Gemini-powered “Advanced” mode. According to Google, the Fast…

    SecurityOnline
  3. Global Spies Use ZipperDown and Android Zero-Days for 1-Click Email Client RCE and Account Takeover

    According to RedDrip, the RedDrip team at QiAnXin Threat Intelligence Center released a report detailing a multi-year series of zero-day exploitation campaigns by Advanced Persistent Threat actors operating from Northeast Asia, targeting both desktop and…

    SecurityOnline
  4. Critical React Native CLI Flaw (CVE-2025-11953, CVSS 9.8) Allows Unauthenticated RCE via Exposed Metro Server

    A newly disclosed critical vulnerability in the React Native Community CLI, CVE-2025-11953 with CVSS 9.8, allows unauthenticated remote code execution via the Metro development server, which binds to external interfaces by default. According to the CVE…

    SecurityOnline
  5. Critical WooCommerce Plugin Flaw (CVE-2025-12493, CVSS 9.8) Allows Unauthenticated RCE, 100,000+ Sites Affect

    A critical Local File Inclusion flaw in the ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution (formerly WooLentor) exposes unauthenticated attackers to include and execute attacker-supplied PHP files on affected…

    SecurityOnline

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device