News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Fri 5 Jun· 54 articles
-
PCPJack uses 230 cloud servers for covert SMTP relay
The article discusses the PCPJack cyber threat, which has compromised 230 servers across AWS, Google Cloud, and Azure to create a covert SMTP relay network. This threat allows attackers to carry out anonymous email campaigns and other malicious activities by…
The Hacker News -
FreeRADIUS releases patch for critical remote execution flaw
The FreeRADIUS development team has released an emergency maintenance update addressing critical security flaws that expose networks to traffic-based remote execution threats. Key vulnerabilities include unauthenticated buffer overflow issues that could lead…
SecurityOnline -
TP-Link Patches Critical Setup Flaw Across Multiple Tapo Smart Devices
The article discusses a critical vulnerability affecting TP-Link's Tapo smart devices, identified as CVE-2026-34126, which has a high CVSS score of 7.3. The flaw allows unauthorized local attackers to gain control over household appliances due to an…
-
Police close Spanish fake ID workshop, seize 800 forged docs
International law enforcement has dismantled a major counterfeit document production facility in Alicante, Spain, part of a coordinated effort led by French police. The operation uncovered advanced methods for producing fake identification documents used by…
SecurityOnline -
Bulgaria led Europol operation dismantles streaming rings
International law enforcement agencies, led by Bulgaria and supported by Europol, successfully dismantled numerous illegal streaming networks from September 2025 to April 2026. This operation targeted the entire piracy ecosystem, uncovering extensive…
SecurityOnline -
Teamwork Cloud RCE bug leaves modelling open to attackers
A critical remote code execution (RCE) vulnerability in Teamwork Cloud poses a severe risk to corporate modeling architectures, with a CVSS severity score of 9.8. The flaw arises from untrusted deserialization in the platform's core, allowing unauthenticated…
SecurityOnline -
Poly VoIP Phone Vulnerability Revealed with Public Exploit Code Disclosed
A critical vulnerability (CVE-2026-0826) has been identified in Poly VoIP phones, particularly the VVX 450 series, with a high severity CVSS score of 9.2. Discovered by Rapid7, the flaw arises from improper validation in session protocol handling, allowing…
-
CVE-2026-41283 flaw in OpenStack Mistral lets hackers run code
The content details a critical security vulnerability in the OpenStack Mistral workflow service, identified as CVE-2026-41283, which has a CVSS score of 9.9. This flaw arises from insufficient access controls that allow unauthorized users to bypass policies,…
-
Threat Level Stays Green as SANS ISC Stormcast Covers June 5
The content outlines the current threat level as 'green' and indicates the handler on duty is Xavier Mertens. It references a SANS ISC Stormcast for June 5th, 2026, and provides links to various educational classes, journal articles, and community engagement…
SANS ISC -
IBM WebSphere bugs risk remote code execution, patch now
The article addresses critical vulnerabilities in IBM WebSphere that pose significant remote code execution risks. It notes three high-severity flaws: CVE-2026-9311, a security control bypass; CVE-2026-9330, a data deserialization issue; and CVE-2026-9319,…
-
Chrome Desktop Security Update Resolves Hundreds of Vulnerabilities
Massive Stable Channel Rollout Safeguards Web Browsers The Google development team promoted Chrome 149 to the stable channel
SecurityOnline -
Cisco SD-WAN CVE-2026-20245 flaw lets hackers gain root via file upload
A critical security warning has been issued regarding a command injection vulnerability in Cisco SD-WAN, tracked as CVE-2026-20245. This flaw poses significant risks as it allows authenticated attackers to gain root access by uploading malicious files due to…
-
Critical Vitest flaws expose dev setups to remote code execution
Recent vulnerabilities in the Vitest framework, which has over 53 million weekly downloads, expose development setups to remote code execution risks. Key flaws include: 1. **CVE-2026-47428**: An unsanitized query parameter vulnerability allows attackers to…
-
SSHFS flaw CVE-2026-48711 lets attackers run code via rogue SFTP
The article discusses significant vulnerabilities in the SSHFS utility, particularly a command execution exploit denoted as CVE-2026-48711. This flaw allows attackers to execute arbitrary code through improper handling of parameters in the software.…
