CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 9–13 on weekend days.

Show as table
Articles published per day
DayArticles published
Sun 11 Oct9
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Today, Sun 25 Oct12 so far
Developing
Exploited only
84 articles

Tue 9 Jun· 84 articles

  1. Microsoft patches CVE-2026-41091 amid record 208 CVE update

    Microsoft's June 2026 Patch Tuesday released a record 208 CVEs, significantly surpassing the previous monthly record of 177 CVEs. Noteworthy vulnerabilities include CVE-2026-41091, actively exploited and affecting Microsoft Defender; CVE-2026-45657, a…

    Security AffairsCVE-2026-41091CVE-2026-41091Exploited

  2. Microsoft Windows 10 Version 16073 articles this day · SANS ISC first

    Microsoft ships record patch batch amid AI driven vuln surge · Microsoft fixes 200 bugs in June, none exploited, dozens critical

    3 outletsCVE-2026-49160CVE-2026-49160

  3. Attackers Exploit Cloud Logging Weaknesses to Hide Their Tracks

    The article discusses vulnerabilities in cloud logging services, emphasizing their critical role in security monitoring and the potential for attackers to exploit these systems for evasion and visibility. Key points include: 1. **Attack Techniques**:…

    unit42.paloaltonetworks.com

  4. Microsoft June Patch Tuesday hits 206 CVEs, three zero days

    Microsoft's June 2026 Patch Tuesday update introduced a record 206 unique CVEs, highlighting the increasing speed and scale of vulnerability discovery due to AI. This update includes three previously disclosed zero-day bugs and 32 critical-severity…

    Dark Reading

  5. Microsoft patches 200 flaws in June, flags high browser risk

    Microsoft published 200 vulnerabilities in the June 2026 Patch Tuesday, with significant patches addressing an unusually high number of browser vulnerabilities, particularly affecting the Chromium framework. Notably, a researcher named Nightmare Eclipse…

    Rapid7

  6. Microsoft patches CVE-2026-45586 zero day after researcher clash

    Microsoft recently addressed a critical zero-day vulnerability, CVE-2026-45586, disclosed by a researcher known as Nightmare Eclipse, who has had a contentious relationship with the company. This vulnerability enables local privilege escalation, posing…

    Ars TechnicaCVE-2026-45586CVE-2026-45586

  7. Exchange flaw allows email spoofing despite SPF, DKIM, DMARC

    A significant vulnerability termed "Ghost-Sender" in Microsoft Exchange allows attackers to spoof any email address, enabling them to send emails from any user within vulnerable organizations. The flaw specifically affects those using Exchange Online or…

    Dark Reading

  8. Shai Hulud worm hits 73 Microsoft GitHub repos, disrupting CI/CD

    A variant of the Shai-Hulud worm has infiltrated 73 Microsoft GitHub repositories, causing disruptions to CI/CD workflows. This attack, reported on June 5, involved an automated sweep that quickly disabled affected repositories, significantly impacting…

    Dark Reading

  9. CISA Adds Cisco SD WAN Manager Flaw to KEV Following Active Exploit

    CISA has added CVE‑2026‑20245 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Cisco’s Catalyst SD‑WAN Manager (formerly SD‑WAN vManage) and involves an improper encoding or escaping of output that could let an authenticated, local…

    CISACVE-2026-20245CVE-2026-20245Exploited

  10. CISA Adds Arista EOS Flaw to KEV Catalog, Urges Patch

    CISA has added CVE‑2026‑7473 to its Known Exploited Vulnerabilities catalogue. The entry concerns Arista’s Extensible Operating System (EOS) and covers the “Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability.” The…

    CISACVE-2026-7473CVE-2026-7473Exploited

  11. Google Chromium V82 articles this day · SOCRadar first

    CISA warns of actively exploited Chrome V8 flaw CVE-2026-11645 · CVE-2026-11645: Exploited Chrome V8 Bug Enables In-Browser Code Execution

    2 outletsCVE-2026-11645CVE-2026-11645Exploited

  12. Adobe patches 123 flaws, warns on ColdFusion and Campaign Classic

    Adobe recently released updates fixing 123 vulnerabilities across 11 products, including critical flaws in Adobe Campaign Classic and ColdFusion. Key vulnerabilities include XSS flaws in Adobe Experience Manager and multiple issues across Acrobat, Reader,…

    SecurityWeek

  13. Adobe, Microsoft patch record CVEs as AI concerns rise

    The June 2026 Security Update Review provides details on significant security patches released by Adobe and Microsoft. Adobe addressed 123 unique CVEs in various products, including critical updates for Adobe Campaign Classic and ColdFusion. Microsoft…

    thezdi.com

  14. Investigating AI use in Microsoft 365 with new playbook

    The article discusses the challenges of investigating AI-related activities within Microsoft 365 Copilot and Azure AI services. It highlights the necessity for a structured approach to understand and reconstruct activities, using telemetry data generated by…

    Microsoft

  15. StepSecurity launches API for real time OSS supply chain alerts

    StepSecurity has launched a new API for its Threat Center that provides automated access to compromised Open Source Software (OSS) components involved in supply chain incidents. This allows teams to quickly respond to threats by integrating incident data…

    StepSecurity

  16. ZA: Confidential medical records of 3,000 South African Police Service officers leaked

    Genevieve Serra reports a serious privacy breach involving the confidential medical records of nearly 3,000 local police officers in the South African Police Service (SAPS). These records, which have allegedly leaked among staff, contain sensitive…

    DataBreaches

  17. Meta plans to use external data for AI driven personalisation

    Meta is set to utilize off-site business data for enhancing its AI-driven personalization and data feeds. This move aims to improve user engagement by leveraging external data sources, allowing for more tailored and effective content delivery. The strategy…

    The Hacker News

  18. Anthropic launches Claude Fable 5 AI with Opus 4.8 fallback

    Anthropic has launched Claude Fable 5, a high-capacity AI model with enhanced safety measures for sensitive domains like cybersecurity. This is the first model of its kind available for widespread access, featuring built-in restrictions that revert to a less…

    SecurityWeek

  19. Veeam patches critical RCE in Backup & Replication 12.x

    Veeam has addressed a critical remote code execution (RCE) vulnerability, CVE-2026-44963, impacting Backup & Replication version 12.x, allowing low-privileged domain users to potentially take control of backup servers within an Active Directory domain. The…

    Security AffairsCVE-2026-44963CVE-2026-44963

  20. OpenSSL patches critical RCE bug CVE-2026-45447 uncovered by AI

    OpenSSL has released patches for 18 vulnerabilities, including a high-severity flaw (CVE-2026-45447) that could lead to remote code execution. This vulnerability, a heap user-after-free issue, can be exploited through specially crafted PKCS#7 or S/MIME…

    SecurityWeekCVE-2026-45447CVE-2026-45447

  21. Veeam Backup & Replication RCE Flaw Lets Domain Users Run Remote Code

    The article, written by Ravie Lakshmanan and published on June 9, 2026, discusses a Remote Code Execution (RCE) vulnerability discovered in Veeam Backup & Replication software. This flaw allows domain users to execute code remotely, which can lead to severe…

    The Hacker News

  22. Microsoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe Continues

    Microsoft has restored some GitHub repositories while keeping others offline as an investigation into the Miasma security issue continues. This decision affects various projects, potentially impacting developers relying on these repositories. The article…

    The Hacker News

  23. Miasma worm breaches 73 Microsoft GitHub repos via AI tools

    The Miasma worm has compromised 73 Microsoft GitHub repositories, including key Azure infrastructure. This self-replicating malware was spread through AI coding tools, stealing cloud credentials from developers. The attack began after compromising a Red Hat…

    Security Affairs

  24. Russian Attackers Weaponize WinRAR Flaw Against Ukrainian Orgs

    Russian attackers are exploiting a patched WinRAR vulnerability (CVE-2025-8088) in separate campaigns aimed at military and government organizations in Ukraine. Two groups, Shadow-Earth-066 and Earth Dahu, are using malicious emails containing weaponized…

    Dark ReadingCVE-2025-8088CVE-2025-8088Exploited

  25. CISOs choose deadlines over security, leaving firms exposed

    A recent report by Checkmarx reveals that 75% of firms knowingly deploy vulnerable code due to pressure on CISOs to prioritize business deadlines over security concerns. The research highlights that 95% of CISOs feel pressured to delay reporting security…

    Infosecurity

  26. Linux Kernel Bug Lets Unprivileged Users Escalate to Root

    Researchers have uncovered a critical vulnerability in the Linux kernel tracked as CVE-2026-23111, which allows unprivileged users to escalate their permissions to root. The issue arises from a single misplaced character in the nf_tables subsystem, which…

    Ars TechnicaCVE-2026-23111CVE-2026-23111

  27. Anthropic's Claude AI Finds Hundreds of Firefox Flaws Fast

    Anthropic's Claude Mythos Preview model can rapidly exploit known vulnerabilities, raising cybersecurity concerns. The model identified numerous flaws, including 271 in Firefox, and demonstrated the ability to create working exploits for Firefox and Windows…

    SecurityWeek

  28. AI coding tools raise productivity but most teams lack oversight

    A survey revealed that 97% of software development teams use AI coding assistants, yet only 30% implement governance measures to oversee their use. Popular tools include GitHub Copilot and Claude Code, credited with enhancing productivity, allowing…

    Infosecurity

  29. CISA warns of exploits in LiteLLM and Check Point VPN flaws

    On June 8, 2026, CISA added two significant vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-42271 for LiteLLM (CVSS 8.8) and CVE-2026-50751 for Check Point Security Gateway (CVSS 9.3). **CVE-2026-42271** involves a command…

    SOCRadarCVE-2026-42271CVE-2026-42271Exploited

  30. phpBB flaw lets attackers hijack any account with one request

    A critical vulnerability in phpBB forum software allows attackers to hijack any account, including administrator accounts, with a single unauthenticated request. Rated 9.4 on the CVSS scale, this flaw affects all phpBB versions up to 3.3.16 and 4.0.0 alpha…

    Infosecurity

  31. Meta smart glasses' dormant NameTag code revives privacy concerns

    Meta's integration of face-recognition technology in smart glasses has reignited privacy concerns. Reports indicate that a dormant code, nicknamed 'NameTag,' was found in the Meta AI app for glasses, raising fears of potential misuse for biometric…

    Malwarebytes

  32. Lloyds Bank flags Meta platforms as hub for UK fraud surge

    According to a report by Lloyds Bank, scammers are increasingly exploiting Meta platforms like Facebook, Instagram, and WhatsApp, accounting for over 68% of fraud reports from its customers in the UK. Victims have reported losing £66 million annually due to…

    Malwarebytes

  33. Atsign’s AI Architect hides app identities from hackers

    Atsign has introduced AI Architect, a new approach to enhance security by design in app development using a concept of cryptographic invisibility. As AI coding accelerates development, it risks creating insecure applications. Atsign aims to secure…

    SecurityWeek

  34. Spring Framework flaws allow LDAP bypass and DoS on Java clouds

    The article discusses critical vulnerabilities identified in the Spring Framework, specifically targeting Java cloud deployments. Notable vulnerabilities include CVE-2026-41720, an LDAP authentication bypass that allows unauthorized access to directory…

    SecurityOnlineCVE-2026-41720CVE-2026-41720

  35. WinRAR flaw used by Russia linked hackers to spy on Ukraine

    The article discusses the exploitation of a vulnerability in WinRAR software by groups aligned with Russia to deploy stealing malware in Ukraine. It highlights concerns around cybersecurity, particularly in conflict zones, illustrating how vulnerabilities…

    The Hacker News

  36. SAP issues urgent patch for critical SAML flaw CVE-2026-44748

    SAP has issued 15 new security notes, four of which address critical vulnerabilities in its software products, including NetWeaver and Commerce. The most severe, CVE-2026-44748, has a CVSS score of 9.9 and involves XML Signature Wrapping in SAML…

    SecurityWeekCVE-2026-44748CVE-2026-44748

  37. U.S. Agencies Ordered to Patch CVE-2026-50751 in Check Point VPN

    CISA has mandated that U.S. government agencies address a critical vulnerability in Check Point Remote Access VPN and Mobile Access systems, due to its exploitation in zero-day attacks by Qilin ransomware affiliates. The vulnerability, identified as…

    DataBreachesCVE-2026-50751CVE-2026-50751Exploited

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device