News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Sat 13 Dec 2025· 10 articles
-
Germany calls in Russian Ambassador over air traffic control hack claims
Germany summoned Russia’s ambassador after accusing Moscow of cyber attacks against its air traffic control authority and of running a disinformation campaign ahead of February’s election. The government says it has clear evidence linking the August 2024…
Security Affairs -
CISA Adds Actively Exploited Sierra Wireless Router Flaw Enabling RCE Attacks
According to CISA, the agency on Friday added a high-severity flaw affecting Sierra Wireless AirLink ALEOS routers to its Known Exploited Vulnerabilities catalog after reports of active exploitation in the wild. The vulnerability, CVE-2018-4063 (CVSS score:…
The Hacker News -
U.S. CISA adds Google Chromium and Sierra Wireless AirLink ALEOS flaws to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added Google Chromium Out-of-Bounds Memory Access Vulnerability (CVE-2025-14174) and Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability…
Security Affairs -
React2Shell: Max-Score RCE (CVSS 10.0) Triggers Widespread Exploitation by Espionage Groups & Miners
The React2Shell vulnerability, CVE-2025-55182, carries a maximum CVSS score of 10.0 and allows unauthenticated attackers to execute arbitrary code on a server with a single crafted HTTP request, prompting a rapid global scramble to patch. According to Google…
SecurityOnline -
Apple Issues Security Updates After Two WebKit Flaws Found Exploited in the Wild
Apple on Friday released security updates for iOS, iPadOS, macOS, tvOS, watchOS, visionOS and Safari to address two flaws that it said have been exploited in the wild, one of which is the same flaw that Google patched in Chrome earlier this week, according…
The Hacker News -
Linux Kernel io_uring UAF Flaw Used to Cheat BPF Verifier and Achieve Container Escape, PoC Releases
SecurityOnline -
Apache Airflow Flaws Leak Sensitive Credentials in UI via DAG Tracebacks & Template Rendering
The maintainers of Apache Airflow have released version 3.1.4 to fix two vulnerabilities that could expose sensitive credentials in the UI. The more severe issue, CVE-2025-65995, is rated Moderate and concerns error reporting during DAG parsing, where…
SecurityOnline -
Urgent: Apple Patches Two Critical WebKit Zero-Days Under Active Exploitation Against High-Risk Targets
Apple has issued an urgent security intervention for iPhone and iPad users, releasing patches for two critical WebKit zero-days that are currently being exploited in the wild against high-risk targets, according to Apple’s advisory. The vulnerabilities are…
SecurityOnline -
Google and Apple roll out emergency security updates after zero-day attacks
On 12 December 2025, Google and Apple rolled out emergency security updates after a zero-day attack targeted an unknown number of their users. Google released patches for a handful of security bugs in its Chrome browser, noting that one of the bugs was being…
DataBreaches -
Emergency fixes deployed by Google and Apple after targeted attacks
According to Apple, the company issued emergency security updates for iPhones, iPads, Macs and other devices, patching two WebKit bugs tracked as CVE-2025-14174 and CVE-2025-43529 that are likely exploited in targeted, sophisticated attacks on iOS systems…
Security Affairs
