News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Wed 10 Jun· 79 articles
-
CVE-2026-10520, CVE-2026-10523 - Multiple critical vulnerabilities affecting Ivanti Sentry
The content discusses the critical vulnerabilities CVE-2026-10520 and CVE-2026-10523 affecting Ivanti Sentry. CVE-2026-10520 is an OS command injection vulnerability (CVSS score 10.0) allowing remote code execution, while CVE-2026-10523 is an authentication…
-
Repeat identity theft rises as device misuse climbs
The Identity Theft Resource Center (ITRC) reports that about 26% of identity crime victims in the U.S. experienced multiple incidents within a year, up from 24% the previous year. The increase is attributed to more complex identity crimes, particularly…
Infosecurity -
ServiceNow patches cloud flaw after attackers exploit it
ServiceNow has patched a vulnerability on its cloud platform that has reportedly been exploited by attackers. The patch, released on June 5, restricts access to authorized users after anomalous activity was detected. Although the company has not disclosed…
SecurityWeek -
RoguePlanet zero‑day in Defender lets attackers gain SYSTEM
Chaotic Eclipse, a security researcher, has released a proof-of-concept (PoC) exploit for a zero-day vulnerability in Microsoft Defender, named RoguePlanet, which can allow attackers to gain SYSTEM privileges on fully patched Windows systems. This exploit is…
Security Affairs -
Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs
Microsoft has released patches for 206 vulnerabilities, including three zero-day flaws and several critical remote code execution (RCE) vulnerabilities. This update is significant as it sets a record for the number of flaws addressed in a single release,…
The Hacker News -
Check Point Security Gateway6 articles this day · SecurityOnline first
Check Point VPN flaw fuels VerdantBamboo espionage campaign · AI Browser Extensions Abuse CVE-2026-50751 to Harvest Chat Data
-
Check Point VPN flaw fuels VerdantBamboo espionage campaign
A critical alert highlights three active exploits detected, including vulnerabilities in Google Chromium V8 and Cisco Catalyst systems. A more serious threat, CVE-2026-50751, involves a Check Point VPN exploit that is currently active in the wild. The…
-
AI Browser Extensions Abuse CVE-2026-50751 to Harvest Chat Data
This article highlights critical vulnerabilities and threats related to browser extensions, particularly those utilizing artificial intelligence (AI). It reports on the discovery of malicious AI extensions that harvest sensitive user data without consent,…
-
Ivanti patches CVE-2026-10520 gateway flaw after urgent alert
This security alert highlights critical vulnerabilities affecting enterprise systems, particularly related to Ivanti's gateway appliances. Three major vulnerabilities are noted: CVE-2026-50751 related to Check Point VPN, CVE-2026-10520 involving OS command…
-
OpenSSL Security Patches Fix Remote Code Execution Risk
The report outlines several critical security vulnerabilities affecting OpenSSL and other software systems. Key points include: 1. **Active Exploits**: Multiple CVEs have been detected, including CVE-2026-50751, a critical Check Point VPN exploit actively…
-
Critical Rclone Command Execution Bug Threatens Cloud Environments
A critical security alert has been issued regarding an active exploit in Check Point VPN (CVE-2026-50751) and several vulnerabilities affecting various systems. Specifically, a severe vulnerability in the rclone synchronization tool (CVE-2026-49980) allows…
-
Check Point VPN exploited; Veeam bug lets attackers run code
The article highlights three critical security vulnerabilities detected today, including the Check Point VPN exploit (CVE-2026-50751) which is actively being exploited. It also discusses a vulnerability in Veeam Backup (CVE-2026-44963), allowing…
-
-
Anthropic releases Claude Fable 5 AI with tight safety
On June 9, 2026, Anthropic released Claude Fable 5, its most advanced AI model yet, which is publicly available under strict safety controls. Key points include: it belongs to the new Mythos class, with the differentiating factors being safety features and…
SOCRadar -
Let's Encrypt updates terms to enforce sanctions on SSL users
The article discusses recent significant updates to the Let’s Encrypt Subscriber Agreement (Version 1.7) that incorporates strict compliance with U.S. sanctions and export control laws. Entities utilizing SSL/TLS cryptographic assets must ensure they are not…
SecurityOnline -
Fortinet FortiSandbox2 articles this day · SecurityOnline first
Critical Vulnerabilities Patched in Fortinet, Ivanti Products · FortiSandbox flaw CVE-2026-25089 lets attackers run commands
-
Critical Vulnerabilities Patched in Fortinet, Ivanti Products
Fortinet and Ivanti released patches for critical vulnerabilities in their products, including an OS command injection flaw (CVE-2026-25089) with a CVSS score of 9.8 in Fortinet’s FortiSandbox. This vulnerability could allow unauthenticated attackers to…
-
FortiSandbox flaw CVE-2026-25089 lets attackers run commands
The content discusses a critical security vulnerability tracked as CVE-2026-25089 affecting the Fortinet ecosystem, specifically the FortiSandbox. This vulnerability allows unauthenticated attackers to execute commands using specially crafted HTTP requests,…
-
-
Microsoft tests low latency CPU boost in Windows 11 via ViveTool
Microsoft has begun testing a low-latency CPU profile framework in Windows 11, now available through the cumulative update KB5094126. This feature allows dynamic frequency elevation upon user interactions with key interface elements like the Start Menu and…
SecurityOnline -
Google Chromium V84 articles this day · SecurityOnline first
Critical Check Point VPN Flaw Under Active Attack Amid New CVEs · Architectural Exposure: Developers Extract Apple’s Subterranean Core Prompts for Siri AI
-
Critical Check Point VPN Flaw Under Active Attack Amid New CVEs
The page discusses critical alerts regarding active exploits, focusing on several vulnerabilities identified today, including CVE-2026-11645, CVE-2026-7473, and CVE-2026-20245. It highlights a significant exploit (CVE-2026-50751) affecting Check Point VPN,…
-
Architectural Exposure: Developers Extract Apple’s Subterranean Core Prompts for Siri AI
The article discusses critical cybersecurity alerts, highlighting active exploits including vulnerabilities in Google Chromium (CVE-2026-11645), Arista’s operating system (CVE-2026-7473), Cisco Catalyst SD-WAN (CVE-2026-20245), and Check Point VPN…
-
Havoc Stager Uses Fake Invoices to Hit South American Firms
The content highlights three critical vulnerabilities detected today: CVE-2026-11645 (Google Chromium), CVE-2026-7473 (Arista Operating System), and CVE-2026-20245 (Cisco Catalyst). It focuses on a dangerous Havoc stager campaign exploiting fake electronic…
-
CISA warns of critical flaws in Chromium, Arista and Cisco gear
The Cybersecurity and Infrastructure Security Agency (CISA) has issued critical alerts regarding three newly detected vulnerabilities: CVE-2026-11645 affecting Google Chromium V8, CVE-2026-7473 in Arista Extensible Operating System, and CVE-2026-20245 in…
-
-
AI worms adapt attacks to target Windows, Linux and IoT devices
Researchers at the University of Toronto have developed a new category of autonomous malware, termed "AI Worms," capable of adapting its attack strategies based on the specific devices it targets, including Windows, Linux, and IoT devices. The malware uses…
Security Affairs -
Chrome Set to Remove Legacy MV2 Extensions by June 2026
The content discusses critical cybersecurity alerts with three active exploits affecting Google Chromium, Arista OS, and Cisco SD-WAN manager. It details the ongoing transition of Google Chrome from the Manifest v2 (MV2) to the Manifest v3 (MV3) framework,…
SecurityOnline -
Framing Headers Slip on Top Sites While Adoption Grows Elsewhere.
The article by Jan Kopriva analyzes the evolution of framing protection security headers, specifically X-Frame-Options and CSP with frame-ancestors, over the past three years. The analysis reveals a decrease in top 1,000 domains implementing these security…
SANS ISC -
COXMO botnet hijacks devices via CVE-2021-27137 flaw worldwide
The page details a critical alert regarding the COXMO botnet variant, which poses a serious threat to internet-connected infrastructure globally. Researchers note the botnet employs advanced tactics including modular propagation to exploit older software…
-
Tchap messaging app breach exposes 650k French govt messages
France's government messaging app Tchap experienced a data breach on June 7, 2026, following the compromise of a single user account via social engineering. The breach exposed approximately 650,000 messages and data related to over 73,000 accounts, including…
Security Affairs -
Microsoft Windows 10 Version 16072 articles this day · SecurityOnline first
Microsoft patches 200 flaws, zero day BitLocker bypass urgent · Microsoft Patch Tuesday fixes 206+ flaws amid zero day exploits
-
Microsoft patches 200 flaws, zero day BitLocker bypass urgent
On June 10, 2026, Microsoft addressed 200 vulnerabilities in its latest Patch Tuesday updates, including three critical zero-days. Notable issues include CVE-2026-49160 (the "HTTP/2 Bomb"), which poses a denial of service risk, CVE-2026-50507 related to…
-
Microsoft Patch Tuesday fixes 206+ flaws amid zero day exploits
The page outlines critical cybersecurity alerts and updates for June 2026, particularly focusing on vulnerabilities addressed in Microsoft's Patch Tuesday. Key points include: 1. Detection of three active exploits, including vulnerabilities in Google…
-
-
Siemens, Schneider patch multiple ICS flaws in new advisories
The latest ICS Patch Tuesday advisories have been released by Siemens, Schneider Electric, and Phoenix Contact. Siemens issued four advisories, addressing vulnerabilities including command execution, information disclosure, privilege escalation, and a CVE…
SecurityWeek -
Anthropic releases Claude Fable 5 AI with stronger cyber defence
Anthropic has introduced Claude Fable 5, their most powerful AI model to date, emphasizing enhanced cyber safeguards to ensure user safety and security. The release highlights the company's commitment to AI safety, showcasing advancements in handling…
The Hacker News -
ServiceNow flaw lets attackers steal data, urgent patch needed
The article discusses a security flaw in ServiceNow that has been exploited to gain unauthorized access to customer instances. The vulnerability allows attackers to bypass security measures, potentially compromising sensitive customer data. The urgency of…
The Hacker News -
Arista zero day EOS flaw exploited, CISA urges mitigation
Hackers are exploiting a vulnerability in Arista's Extensible Operating System (EOS), tracked as CVE-2026-7473, which has a CVSS score of 6.9. This zero-day flaw allows incorrect processing of tunnel traffic in specific configurations, affecting models…
-
Flaw in Microsoft Defender lets hackers gain SYSTEM on Windows
The article discusses a zero-day vulnerability in Microsoft Defender known as RoguePlanet, which allows attackers to gain SYSTEM access on updated Windows systems. It emphasizes the risks posed by this vulnerability and underlines the importance of…
The Hacker News -
Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoS
The article discusses six vulnerabilities found in protobuf.js, a popular library used in Node.js applications. These vulnerabilities can lead to remote code execution (RCE) and denial of service (DoS) attacks, posing significant risks for developers and…
The Hacker News -
Check Point VPN attacked as Chromium, Arista, Cisco flaws emerge
The page highlights critical cybersecurity alerts, including three active exploits within the Google Chromium, Arista, and Cisco systems. It emphasizes the discovery of a significant vulnerability in Check Point VPN that is being actively exploited.…
SecurityOnline -
WordPress Critical Error Triggers Official Troubleshooting Guide
The content indicates that a critical error has occurred on a website, specifically a WordPress site. It provides a link to a troubleshooting guide on the WordPress documentation site to assist users in resolving the issue.
SecurityOnline -
ISC Stormcast June 10 2026: Threat Level Green, Resources Shared
The ISC Stormcast on June 10, 2026, features handler Jan Kopriva, with a current threat level indicated as green. Additional resources include information about SANS courses taught by Dr. Johannes Ullrich, links to join discussions, and access to various…
SANS ISC -
High-Severity Vulnerabilities Addressed in Endpoint Manager Mobile
The content indicates that there is a critical error on the website and provides a link to WordPress documentation for troubleshooting.
SecurityOnline -
TinyMCE Flaws Allow Remote Script Injection, Patches Urged
A critical security alert highlights active exploits in various software systems, particularly the TinyMCE text editor, which has vulnerabilities allowing remote script injection. Key vulnerabilities include CVE-2026-47761 (stored XSS in media plugins),…
-
Critical flaws in MBS GmbH gateway let attackers gain root access
The content outlines critical software vulnerabilities found in MBS GmbH's industrial communication appliances, specifically in their Universal Gateway firmware versions V6_0_0_5 and earlier. Key vulnerabilities include CVE-2026-35075, which involves…
