News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Tue 6 Jan· 49 articles
-
Aiohttp Patches Seven Vulnerabilities Including High-Severity DoS Risks
Maintainers of aiohttp have released version 3.13.3 to patch seven vulnerabilities, spanning high-severity Denial of Service risks to information leaks and request handling flaws. The two high-severity issues could cripple servers: CVE-2025-69228 allows an…
SecurityOnline -
Apache SIS Patch Blocks XML Attack That Leaks Server Files
The Apache Software Foundation has issued a security advisory for the Apache Spatial Information System (SIS), detailing a newly discovered vulnerability tracked as CVE-2025-68280 that exposes systems to XML External Entity (XXE) attacks and could allow…
SecurityOnline -
CVE-2025-66518: High-Severity Flaw in Apache Kyuubi Exposes Local Server Files
CVE-2025-66518 is described as a high-severity flaw in Apache Kyuubi that could allow unauthorized access to a server’s local file system, with a CVSS score of 8.8. The vulnerability lies in how the Kyuubi Server handles file paths, where missing path…
SecurityOnline -
Attacking from Within: How Adobe ColdFusion Admins Can Weaponize Remote Shares
Adobe has issued critical updates for ColdFusion after a security researcher uncovered a logic flaw in the ColdFusion Archive (CAR) deployment mechanism that lets authenticated admins weaponise remote shares to load malicious code, tracked as CVE-2025-61808.…
SecurityOnline -
MediaTek Kicks Off 2026 with Major Security Overhaul for Mobile Chipsets
MediaTek kicked off 2026 with a security bulletin that patches a range of high‑severity flaws across its mobile and IoT chipsets, including the Dimensity line used in many high‑end smartphones. The January 2026 update, published on 5 January 2026, addresses…
SecurityOnline -
macOS Developers in the Crosshairs: GlassWorm’s Wave 4 Exploits VS Code to Trojanize Hardware Wallets
The GlassWorm threat actor, long known for embedding malicious code in Visual Studio Code extensions, has launched a fourth wave targeting macOS developers, with encrypted payloads designed to compromise software wallets and hardware wallets such as Ledger…
SecurityOnline -
-
New TCC Bypass (CVE-2025-43530) Exposes macOS to Unchecked Automation
Security researchers have disclosed CVE-2025-43530, a TCC bypass that allows unchecked automation on macOS by leveraging a flaw in the ScreenReader[.]framework and the private com.apple[.]scrod service. The report explains that the gatekeeper is broken…
SecurityOnline -
The Chromebook Killer Fails: Microsoft to Kill Windows 11 SE in 2026
Microsoft has now confirmed that support for Windows 11 SE will be discontinued at the end of 2026, with official end-of-support on 13 October 2026 after which security updates and bug fixes will stop and technical support will be terminated. The operating…
SecurityOnline
