News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Thu 12 Feb· 53 articles
-
-
CVE-2026-1603: Remote Unauthenticated Attacker Can Steal Ivanti EPM Secrets
CVE-2026-1603 is described as a high-severity authentication bypass in Ivanti Endpoint Manager (EPM) before version 2024 SU5, allowing a remote unauthenticated attacker to leak specific stored credential data and potentially broaden compromise across a…
-
-
Unauthenticated Attacker Can Trap Palo Alto Firewalls in Maintenance Mode Loop (CVE-2026-0229)
Palo Alto Networks has issued a vulnerability notice for a denial-of-service flaw in PAN-OS, tracked as CVE-2026-0229, that could allow an unauthenticated attacker to force firewalls into a reboot loop and, ultimately, maintenance mode. The issue stems from…
-
Chrome 145 Patches 3 High-Severity Flaws in CSS & Codecs
Google has officially promoted Chrome 145 to the stable channel, rolling out a fresh wave of defences for billions of users across Windows, Mac and Linux. The update brings the browser to version 145.0.7632.45 for Linux and 145.0.7632.45/.46 for Windows and…
-
Apple Zero-Day (CVE-2026-20700) Exploited in the Wild
Apple has issued an emergency security update for its mobile ecosystem to close a critical zero-day vulnerability tracked as CVE-2026-20700, which is described as being used in an extremely sophisticated attack against specific targeted individuals. The flaw…
-
CVE-2026-26007: Python Cryptography Flaw (CVSS 8.2) Leaks Private Keys
CVE-2026-26007 is a high-severity flaw in the Python cryptography package, rated CVSS 8.2, which could enable attackers to recover private keys through a Subgroup Attack on Elliptic Curve Cryptography. The issue stems from how the library handles public…
-
The Rise of Vibecoding: AI-Generated Malware Exploits React2Shell
A new class of cyberattack has been caught in the wild, where the code is AI-generated, with Darktrace releasing a report detailing an intrusion into its CloudyPots honeypot network that revealed a fully AI-generated malware sample designed to exploit the…
-
CVE-2026-25993: Critical EverShop SQL Injection (CVSS 9.3) Exposes Stores
A critical vulnerability has been identified in EverShop, described as a Second-Order SQL Injection with a CVSS v4 score of 9.3, potentially exposing stores running vulnerable versions. The flaw centres on the url_key field, which defines product category…
SecurityOnline -
VoidLink Rising: New “AI-Ready” Malware Framework Targets Linux & IoT
VoidLink Rising describes a modular attack framework branded as “AI-Ready” that Cisco Talos researchers say is aimed at Linux systems, the backbone of IoT and critical infrastructure. The threat group UAT-9921, active since 2019, is now deploying VoidLink as…
SecurityOnline -
Excel Trap: New Phishing Campaign Deploys Fileless XWorm RAT
A FortiGuard Labs investigation has revealed a new phishing campaign that exploits an old vulnerability to deploy the XWorm Remote Access Trojan (RAT) via malicious Excel files. The attack uses an attached Excel add-in (.XLAM) and targets victims with…
-
5G Core Breach: Critical HPE Aruba Flaw Allows Unauthenticated Admin Takeover
HPE Aruba Networking has issued a critical security alert for its Private 5G Core platform, rushing to patch a cluster of vulnerabilities that could allow attackers to bypass authentication and seize control of the network infrastructure. Discovered by the…
-
Weaponized Code: LTX Stealer Abuses Node.js to Bypass Antivirus
A new CYFIRMA report details a sophisticated credential-stealing campaign known as LTX Stealer, a Windows-based malware that hides inside a heavily obfuscated installer to bypass security. The campaign weaponises legitimate developer tools by embedding a…
SecurityOnline
