News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Fri 29 May· 51 articles
-
Oracle patches May 2026 flaws, CVE-2026-46840 CVSS 10.0
Oracle has released a significant security patch update for May 2026, addressing critical vulnerabilities across various enterprise product lines. The updates aim to eliminate flaws that could allow attackers to infiltrate corporate data systems. Key areas…
-
Malicious npm packages hijack cloud keys using typosquatting
Microsoft has issued an urgent alert regarding a sophisticated supply chain attack targeting npm packages, which compromises cloud infrastructure. An attacker, vpmdhaj, has published 14 malicious packages that use typosquatting tactics to mimic legitimate…
SecurityOnline -
CVE-2026-7374 flaw lets attackers escape KubeVirt namespaces
A serious security flaw, tracked as CVE-2026-7374, has been identified in KubeVirt, allowing authenticated users to escape namespaces and potentially control entire Kubernetes clusters. This vulnerability has a high CVSS score of 9.9 and is due to improper…
-
Microsoft warns of npm chain attack stealing AWS, Vault data
Microsoft identified a supply chain attack targeting the npm package ecosystem on May 28, 2026, involving a threat actor using the alias vpmdhaj. The actor published 14 malicious packages that typosquatted well-known libraries and, once installed, harvested…
Microsoft -
DuckDuckGo installs surge 30% after Google adds forced AI search
Following Google's announcement to incorporate AI into their search engine, DuckDuckGo has seen a significant rise in user acquisitions, particularly among iOS users in the U.S. This trend aligns with a growing discontent towards Google's enforced generative…
SecurityOnline -
ISC Stormcast For Friday, May 29th, 2026 https://isc.sans.edu/podcastdetail/9950, (Fri, May 29th)
The content provides information about the Internet Storm Center (ISC), specifically noting that Guy Bruneau is the handler on duty. The threat level is currently categorized as green. It includes links to previous diaries and podcasts, as well as resources…
SANS ISC -
Samba Fixes Multiple Flaws with Maximum 10.0 CVSS Scores
The Samba Team has released urgent security patches to address multiple critical vulnerabilities that threaten enterprise file servers globally. Two severe remote code execution flaws, CVE-2026-4480 and CVE-2026-4408, have been identified with perfect CVSS…
-
Jenkins releases urgent patch fixing RCE and file access bugs
The Jenkins project has released a critical patch addressing multiple security vulnerabilities in its automation ecosystem, including remote code execution (RCE) risks and data exposure through flawed plugins. Key findings include: 1. **Remote Code Execution…
SecurityOnline -
Google patches 151 Chrome flaws, including critical memory bugs
Google has released a significant security update for Chrome, version 148.0.7778.216/217, aimed at fixing 151 vulnerabilities, including critical memory corruption issues. Many fixes were contributed by external researchers, earning them substantial rewards.…
SecurityOnline -
New GitLab Security Updates Fix Critical Flaws in Duo AI
GitLab has issued an urgent set of software modifications to safeguard development pipelines. Specifically, these new GitLab security
SecurityOnline -
Critical Patches Fix Synology Chat Server Vulnerabilities
Synology has issued a critical security alert regarding vulnerabilities in the Synology Chat Server, particularly affecting DiskStation Manager (DSM). Key issues include a high-severity vulnerability (CVE-2026-40541) that allows authenticated users to read,…
