CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 9–13 on weekend days.

Show as table
Articles published per day
DayArticles published
Sun 11 Oct9
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Today, Sun 25 Oct12 so far
Exploited only
7 articles

Sat 21 Mar· 7 articles

  1. WorldLeaks ransomware group breached the City of Los Angels

    WorldLeaks, an extortion-focused ransomware group, claimed on 20 March 2026 that it had breached the City of Los Angeles and its Metro system, adding the city to its data leak site and stating it had stolen 159.9 GB across 779 files. According to NBC Los…

    Security Affairs
  2. FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks

    According to the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI), threat actors affiliated with Russian Intelligence Services are carrying out phishing campaigns aimed at commercial messaging apps such as…

    The Hacker News
  3. Critical Quest KACE Vulnerability Potentially Exploited in Attacks

    SecurityWeek reports that the education sector may be targeted via CVE-2025-32975, a critical authentication bypass flaw in unpatched Quest KACE Systems Management Appliance instances exposed to the internet. Arctic Wolf has detected suspicious activity in…

    SecurityWeekCVE-2025-32975CVE-2025-32975Exploited
  4. Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager

    Oracle has released security updates to address a critical flaw in Identity Manager and Web Services Manager, tracked as CVE-2026-21992, which carries a CVSS score of 9.8. The vulnerability is described as remotely exploitable without authentication and…

    The Hacker NewsCVE-2026-21992CVE-2026-21992Exploited
  5. PolyShell flaw exposes Magento and Adobe Commerce to file upload attacks

    Sansec found a Magento and Adobe Commerce REST API flaw, named PolyShell, which allows unauthenticated file uploads and possible XSS in older versions. The issue affects versions up to 2.4.9-alpha2 and could also enable XSS in releases prior to 2.3.5,…

    Security Affairs
  6. CISA Flags Apple, Craft CMS, Laravel Bugs in KEV, Orders Patching by April 3, 2026

    According to The Hacker News, on 21 March 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five security flaws affecting Apple, Craft CMS and Laravel Livewire to its Known Exploited Vulnerabilities catalog and urged federal…

    The Hacker NewsCVE-2025-31277CVE-2025-31277Exploited
  7. Trivy Supply Chain Attack Triggers Self-Spreading CanisterWorm Across 47 npm Packages

    The Hacker News reports that the Trivy supply chain attack has spawned a self-spreading worm, dubbed CanisterWorm, which compromised 47 npm packages, including 28 in the @EmilGroup scope and 16 in the @opengov scope, along with several others. The infection…

    The Hacker News

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device