News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 5 so far |
Wed 7 Jan· 50 articles
-
CVE-2026-0625: Critical Actively Exploited RCE Hits Unpatchable D-Link Routers
CVE-2026-0625 is a critical remote code execution vulnerability in legacy D-Link DSL routers that is being actively exploited in the wild, leaving thousands of unpatchable devices wide open to total compromise. The flaw resides in the router’s DNS…
SecurityOnline -
Veeam Patches Critical RCE Flaws in Latest Backup & Replication Release
Veeam has rolled out urgent security updates for its Backup & Replication software, addressing a cluster of high-severity vulnerabilities discovered in its latest version. The patches fix four flaws that could allow lower-level operators to execute remote…
SecurityOnline -
Microsoft Warns of Surge in Internal Domain Spoofing
A wave of sophisticated phishing attacks is hitting organisations by exploiting the trust users place in emails that appear to come from their own colleagues, according to Microsoft Threat Intelligence. The report details how threat actors are using complex…
SecurityOnline -
CVE-2025-14026: Forcepoint DLP Flaw Lets Attackers Unchain Restricted Python
CVE-2025-14026 is a high-severity vulnerability in the Forcepoint One DLP Client, disclosed in early January 2026, with a CVSS of 7.8. The flaw affects the client, specifically version 23.04.5642 and potentially others, which ships a bundled Python 2.5.4…
SecurityOnline -
Google Patches High-Severity “WebView” Flaw in Chrome 143
Google has announced a high-severity patch for the Stable channel of Chrome, rolling out to Windows, Mac and Linux users to address CVE-2026-0628, described as “Insufficient policy enforcement in WebView tag.” The update lifts Chrome to version…
SecurityOnline -
NordVPN Hack Claim Firmly Refuted by NordVPN
NordVPN’s alleged security breach claims were firmly refuted, with the attacker using the name 1011 claiming on 4 January to have brute-forced a misconfigured NordVPN development server and to have provided sample SQL dumps and screenshots. According to…
DataBreaches -
Zero-Day Chronomaly Exploit Grants Root Access to Vulnerable Linux Kernels
Zero-Day Chronomaly Exploit Grants Root Access to Vulnerable Linux Kernels describes how a publicly released exploit named “Chronomaly” targets the Linux kernel flaw CVE-2025-38352, a high-severity Elevation of Privilege bug with a CVSS of 7.4. The…
SecurityOnline -
The ClickFix Trap: PHALT#BLYX Targets Hotels with Fake Blue Screens and DCRat
A new cyber-espionage campaign dubbed PHALT#BLYX is targeting the hospitality sector, with researchers noting a blend of social engineering and living-off-the-land techniques to deploy remote access trojans. The operation uses a “click-fix” tactic that…
SecurityOnline -
Popular Chinese Utility Hijacked to Deploy Browser Malware
The RedDrip Team at QiAnXin Technology’s Threat Intelligence Center has uncovered a widespread malware campaign hiding inside a popular productivity tool called Office Assistant, which has been loading malicious components to deliver a browser-hijacking…
SecurityOnline -
CVE-2025-67732: Dify Patch Fixes High-Severity Plaintext API Key Exposure
CVE-2025-67732: Dify patch fixes a high-severity plaintext API key exposure in the open‑source platform used for LLM applications and RAG pipelines. The flaw, rated with a CVSS of 8.4, drives the frontend to reveal private API keys by returning the full…
SecurityOnline
