CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 9–13 on weekend days.

Show as table
Articles published per day
DayArticles published
Sun 11 Oct9
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Today, Sun 25 Oct12 so far
Exploited only
7 articles

Sat 25 Apr· 7 articles

  1. CISA Adds KEV Entries for Samsung, SimpleHelp, DLink Flaws

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added four flaws from Samsung, SimpleHelp and D-Link to its Known Exploited Vulnerabilities (KEV) catalog. The newly listed CVEs are CVE-2024-7399 for Samsung MagicINFO 9 Server (CVSS 8.8),…

    Security AffairsCVE-2024-7399CVE-2024-7399Exploited
  2. Over 400k WordPress sites hit by Breeze Cache flaw CVE-2026-3844

    Over 400,000 websites running the Breeze Cache WordPress plugin are at risk after hackers exploited a critical flaw tracked as CVE-2026-3844, which Wordfence researchers say has a CVSS score of 9.8. Attacks exploiting the vulnerability have already been…

    Security AffairsCVE-2026-3844CVE-2026-3844
  3. China-Linked APT GopherWhisper Abuses Legitimate Services in Government Attacks

    SecurityWeek reports that the China-linked APT group GopherWhisper has been abusing legitimate services for command-and-control and data exfiltration, with ESET warning that the operation has been active since at least November 2023. The group is said to…

    SecurityWeekSilent Chollima
  4. Lua based fast16 malware hit Iran's uranium work before Stuxnet

    According to SentinelOne, cybersecurity researchers uncovered a Lua-based malware framework nicknamed fast16, created years before Stuxnet and aimed at sabotaging Iran’s uranium enrichment effort by corrupting high-precision calculations. The package…

    The Hacker News
  5. Malicious elementary data package hits PyPI via GitHub Actions

    A malicious version of elementary-data (0.23.3) was published to PyPI and is still listed as the latest release, while the same run pushed a multi-arch container image to GitHub Container Registry at ghcr[.]io/elementary-data/elementary, tagged both 0.23.3…

    StepSecurity
  6. CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline

    CISA has added four known exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, citing active exploitation of flaws affecting SimpleHelp, Samsung MagicINFO 9 Server and the D-Link DIR-823X series routers. The entries are…

    The Hacker NewsCVE-2024-57726CVE-2024-57726Exploited
  7. FIRESTARTER backdoor persists on patched Cisco ASA devices

    CISA said a U.S. federal civilian agency’s Cisco Firepower ASA device running ASA software was compromised in September 2025 by the FIRESTARTER backdoor, and that the malware persisted even after security patches were applied. The agency, together with the…

    Security AffairsCVE-2025-20333CVE-2025-20333Exploited

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device