News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 21 Apr· 55 articles
-
Vercel confirms breach after employee Google Workspace hijack
Vercel has confirmed a cyber-incident on 21 April 2026, described as being conducted by a “highly sophisticated” attacker who targeted a third‑party tool used by an employee. According to Infosecurity Magazine, the attacker used that access to take over the…
Infosecurity -
Lazarus linked to $293m KelpDAO heist via LayerZero flaw
State-backed hackers are the most likely perpetrators of the year’s largest crypto heist after liquid restaking protocol KelpDAO was struck over the weekend, with the Lazarus Group feature prominently in expert commentary. The DeFi firm said it identified…
InfosecurityLazarus Group -
Bluesky faces 24 hour DDoS attack, service disrupted for a day
Bluesky suffered a 24-hour DDoS attack that disrupted its services for about a day, beginning on 15 April 2026. Bluesky is described as a decentralised, open‑source microblogging platform similar to X (formerly Twitter), allowing users to post short messages…
Security Affairs313 Team -
Attackers hide malware inside innocent looking WAV audio files
There have been reports of threat actors using a WAV file as a vector for malware. It’s a proper .wav file, but they didn’t use staganography; the WAV will play with only noise because the bytes that encode the sound have been replaced with the BASE64…
SANS ISC -
PaperCut NG/MF2 articles this day · CISA first
CISA adds eight KEV flaws, Cisco SDWAN bugs actively exploited · PaperCut NG/MF CVE-2023-27351 flaw added to CISA KEV catalog
-
CISA adds eight KEV flaws, Cisco SDWAN bugs actively exploited
According to CISA, eight new vulnerabilities were added to the Known Exploited Vulnerabilities catalog, including three flaws affecting Cisco Catalyst SD-WAN Manager and evidence of active exploitation. The newly listed CVEs are CVE-2023-27351 (PaperCut…
-
PaperCut NG/MF CVE-2023-27351 flaw added to CISA KEV catalog
CISA has added CVE‑2023‑27351 to its Known Exploited Vulnerabilities catalogue. The flaw affects PaperCut NG/MF and is described as an improper authentication vulnerability that could allow remote attackers to bypass authentication on affected installations…
-
-
ISC Stormcast April 21 2026: Threat Level Green, Resources Shared
ISC Stormcast for Tuesday, 21 April 2026 notes the ongoing ISC event with a threat level set to green. The diary lists the Handler on Duty as Xavier Mertens. It also references a podcast detail at sans[.]edu and invites readers to click to learn more about…
SANS ISC -
CISA Adds Critical JetBrains TeamCity Flaw to KEV Catalogue
CISA has added CVE‑2024‑27199 to its Known Exploited Vulnerabilities (KEV) catalogue. The entry concerns JetBrains TeamCity, which contains a relative path traversal vulnerability that could allow limited administrative actions to be performed. The flaw is…
-
Quest KACE SMA flaw lets attackers bypass authentication
CISA has added CVE‑2025‑32975 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Quest’s KACE Systems Management Appliance (SMA) and is named the Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability. In…
-
Cisco SD-WAN Manager bug exposes passwords to local attackers
CISA has added CVE‑2026‑20128 to its Known Exploited Vulnerabilities catalogue. The entry concerns Cisco’s Catalyst SD‑WAN Manager and is titled *Cisco Catalyst SD‑WAN Manager Storing Passwords in a Recoverable Format Vulnerability*. An authenticated, local…
-
Synacor Zimbra XSS Flaw (CVE-2025-48700) Exposes User Sessions
CISA has added CVE‑2025‑48700 to its Known Exploited Vulnerabilities (KEV) catalogue. The entry covers Synacor’s Zimbra Collaboration Suite (ZCS) and identifies a cross‑site scripting vulnerability that could allow attackers to execute arbitrary JavaScript…
-
CISA adds Kentico Xperience path traversal flaw to KEV catalog
On 20 April 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2025‑2749 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Kentico Xperience, a digital experience platform from Kentico, and is titled the…
-
Cisco SD-WAN flaw leaks data, CISA urges urgent patching
CISA has added CVE‑2026‑20133 to its Known Exploited Vulnerabilities catalogue. The entry concerns Cisco’s Catalyst SD‑WAN Manager and is titled “Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability”. The…
-
CISA KEV Catalog Aids Firms Prioritise Real World Exploits
CISA has added CVE‑2026‑20122 to its Known Exploited Vulnerabilities catalogue. The entry concerns Cisco’s Catalyst SD‑WAN Manager and is titled “Cisco Catalyst SD‑WAN Manager Incorrect Use of Privileged APIs Vulnerability”. The flaw stems from improper file…
-
Void Dokkaebi Turns Repos Into Worm Like Supply Chain Attack
Void Dokkaebi, also tracked as Famous Chollima and described as a North Korea-aligned intrusion set, has evolved from targeting single developers to a worm-like supply-chain threat that uses compromised repositories as infection vectors. Our analysis shows…
trendmicro.comWageMole
