News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Thu 14 May· 57 articles
-
Why Malwarebytes blocks some Yahoo Mail redirects
Malwarebytes has explained that some Yahoo Mail redirects are being blocked because background calls from the Yahoo Mail web interface reach third‑party domains that many security tools classify as risky. The article notes that when you open Yahoo Mail, the…
Malwarebytes -
F5 NGINX Plus2 articles this day · The Hacker News first
CVE-2026-42945: NGINX Rewrite Bug Allows Remote Code Execution · NGINX Rift Bug Lets Attackers Run Code Remotely via Malicious URI
-
CVE-2026-42945: NGINX Rewrite Bug Allows Remote Code Execution
CVE-2026-42945 is a heap-based buffer overflow in NGINX that occurs in ngx_http_rewrite_module and is remotely reachable over HTTP, exploitable without authentication when specific rewrite-rule patterns are present, making it relevant for internet-facing…
-
NGINX Rift Bug Lets Attackers Run Code Remotely via Malicious URI
According to depthfirst, researchers disclosed a heap buffer overflow in the ngx_http_rewrite_module (CVE-2026-42945, CVSS v4 score: 9.2) that could enable unauthenticated remote code execution or a DoS condition, by crafting a specific URI in NGINX Plus or…
-
-
PraisonAI auth bug exploited hours after CVE-2026-44338 reveal
Exploitation started within hours of disclosure of PraisonAI’s authentication bypass vulnerability, tracked as CVE-2026-44338, with first attempts observed less than four hours after the public disclosure. According to Sysdig, PraisonAI versions 2.5.6 to…
-
Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation
An anonymous security researcher has disclosed two new zero-days affecting Windows, one a BitLocker bypass named YellowKey and the other a privilege-escalation flaw tied to Windows Collaborative Translation Framework (CTFMON) called GreenPlasma. YellowKey…
-
AI agents adopted for security as identity risks climb
The findings, published on 14 May 2026, show that the majority (93%) of global organizations use or plan to use AI agents for security tasks such as password resets and VPN access, according to Semperis. The security vendor polled 1100 organizations in the…
Infosecurity -
UK schools scrap pupil pics amid deepfake sextortion CSAM threat
Deepfake sextortion is forcing schools to pull pupil photos from websites, with the issue highlighted in an article published on 14 May 2026. The Guardian reports that UK experts, including the National Crime Agency, the Internet Watch Foundation (IWF), and…
Malwarebytes -
ICO releases five step guide to counter AI powered cyber threats
According to the Information Commissioner's Office (ICO), getting the basics right, understanding the threat and putting in place multi-layered defenses are key to protecting organisations from AI-powered cyber threats. The ICO released a five-step guide on…
Infosecurity -
Broadcom patches Fusion flaw CVE-2026-41702 stops root access
Broadcom announced that a VMware Fusion update has been released to patch a high-severity vulnerability, tracked as CVE-2026-41702 and rated important by the vendor. The advisory describes CVE-2026-41702 as a time-of-check time-of-use flaw that occurs during…
-
Pwn2Own Berlin 2026 Kicks Off with 22 AI, NVIDIA Entries
Day One of Pwn2Own Berlin 2026 featured 22 entries targeting AI Databases, Coding Agents, Local Inferences and a separate category for NVIDIA products, as researchers pushed technology to its limits. The event, dated 14 May 2026 and reported by Dustin…
thezdi.com -
FamousSparrow hits Azerbaijani oil firm via Exchange exploits
Chinese-linked FamousSparrow has conducted a sustained intrusion campaign against an Azerbaijani oil and gas company, returning to the same compromised entry point three times between late December 2025 and late February 2026, according to Bitdefender. The…
Security AffairsGhostEmperor -
Underground forums gamify supply chain attacks in new competition
BreachForums and TeamPCP have promoted a “supply chain competition” that invites threat actors to conduct the “biggest supply chain attack” using open-sourced “Shai-Hulud” tooling, framing cybercrime as a collaborative challenge rather than isolated acts.…
SOCRadarNoName057(16) -
Researcher Drops YellowKey, GreenPlasma Windows Zero-Days
A SecurityWeek report by Ionut Arghire details two Windows zero-day exploits, YellowKey and GreenPlasma, disclosed by a disgruntled security researcher this week. YellowKey is described as a BitLocker bypass that requires physical access, with PoC code…
SecurityWeek -
Fragnesia Linux LPE Flaw CVE-2026-46300 Lets Attackers Gain Root
Details have emerged about a new variant of the recent Dirty Frag Linux local privilege escalation, codenamed Fragnesia, which is the third such bug identified in the kernel within two weeks. The vulnerability is tracked as CVE-2026-46300 (CVSS 7.8) and is…
-
Nitrogen ransomware claims 8TB Foxconn leak, cites Intel data
Nitrogen Ransomware claims massive data theft from Foxconn after the group listed the firm on its Tor data leak site on 12 March, with Foxconn confirming a cyberattack on some North American factories. According to Foxconn, the Nitrogen group claims it stole…
Security AffairsNitro -
Outlook Junk preview fails to show links missing URI scheme
Outlook’s Junk folder can helpfully show where links lead by stripping formatting, but a simple bypass was reported that prevented the preview from displaying certain links. The author found that when a message is placed in Junk, the HREF may be missing a…
SANS ISC -
ISC Stormcast Reports Green Threat Level on 14 May 2026
According to SANS™ Internet Storm Center, the ISC Stormcast for Thursday, 14 May 2026 presents the latest update from the threat intelligence team. The diary notes the Threat Level as green, indicating a lower-than-usual risk posture at the time. The diary…
SANS ISC
