News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 14 Apr· 49 articles
-
ShowDoc2 articles this day · The Hacker News first
ShowDoc Flaw CVE-2025-0520 Exposes Thousands to RCE Attacks · ShowDoc flaw CVE-2025-0520 exploited, hackers drop web shells
-
ShowDoc Flaw CVE-2025-0520 Exposes Thousands to RCE Attacks
A critical remote code execution flaw, tracked as CVE-2025-0520, in ShowDoc is under active exploitation in the wild, with a CVSS score of 9.4. ShowDoc is an online tool that helps IT teams share documents and improve collaboration and communication…
-
ShowDoc flaw CVE-2025-0520 exploited, hackers drop web shells
ShowDoc has a critical vulnerability, CVE-2025-0520 (also CNVD-2020-26585), rated 9.4 out of 10, which involves unrestricted file uploads due to improper validation of file extensions and can enable remote code execution. According to Vulhub’s advisory, in…
-
-
Organizations Warned of Exploited Windows, Adobe Acrobat Vulnerabilities
According to CISA, on 14 April 2026 seven vulnerabilities were added to its Known Exploited Vulnerabilities (KEV) catalog, including two Windows flaws. The first Windows defect is CVE-2023-36424, described as a common log file driver issue that could lead to…
-
Researchers say 108 Chrome extensions steal Google account data
Cybersecurity researchers have uncovered a campaign of 108 Google Chrome extensions that all communicate with a single command-and-control setup to steal data and enable browser abuse. The extensions, published under five publisher identities—Yana Project,…
The Hacker News -
CISA Adds Critical Adobe, Microsoft, Fortinet Flaws to KEV Catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a set of flaws from Adobe, Fortinet, Microsoft Exchange Server and Microsoft Windows to its Known Exploited Vulnerabilities catalog, underscoring the urgency for organisations to patch.…
-
Apache Tomcat Tribes flaw exposes cluster to unauthenticated RCE
CVE-2026-34486 is a regression in Apache Tomcat Tribes that can convert an exposed cluster receiver into an unauthenticated remote code execution opportunity, according to SOCRadar Vulnerability Intelligence. The issue stems from a decryption failure that no…
-
Fake Claude AI installer delivers PlugX via DLL sideloading
A fake Claude AI installer has been found delivering the PlugX remote access trojan by abusing DLL sideloading, according to Malwarebytes. The rogue site offers a ZIP archive presented as a “pro version” installer for Claude, which drops an MSI that mimics a…
Security Affairs -
CISA adds six KEV flaws amid active Fortinet exploits
According to The U.S. Cybersecurity and Infrastructure Security Agency (CISA), six vulnerabilities have been added to the Known Exploited Vulnerabilities (KEV) catalog, with evidence of active exploitation cited. The list includes CVE-2026-21643, a…
-
SANS Stormcast: EncystPHP Shell, CPUID, OpenAI Mac, Axios Issues
SANS[.]edu Internet Storm Center has published its SANS Stormcast for Tuesday, 14 April 2026, which highlights four topics: EncystPHP Webshell, CPUID Compromise, OpenAI Mac Cert Issue, and Axios Vulnerability.
SANS ISC
