News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Thu 11 Jun· 67 articles
-
‘GreatXML’ Zero-Day Exploit Bypasses BitLocker
A new exploit named GreatXML has been released by security researcher Nightmare Eclipse, allowing users to bypass Windows BitLocker and gain SYSTEM privileges through Recovery Mode. This vulnerability exploits Microsoft Defender’s offline scan functionality,…
SecurityWeek -
Fortinet patches CVE-2026-25089 in FortiSandbox command injection
Fortinet has released patches for a critical vulnerability in its FortiSandbox products, specifically CVE-2026-25089, which has a CVSS score of 9.8. This OS command injection flaw allows unauthenticated attackers to execute arbitrary commands through…
-
OceanLotus Hits Vietnam Investors With SPECTRALVIPER in FireAnt Attack
The article discusses a cybersecurity breach where the OceanLotus hacking group targeted Vietnamese investors using the SPECTRALVIPER malware in a FireAnt attack. This incident exemplifies supply chain attacks and cyber espionage tactics prevalent in the…
The Hacker NewsAPT32 -
AI coding agents hit by Sentry flaw in ‘agentjacking’ attack
A new form of attack termed 'agentjacking' has been identified, which compromises AI coding agents by exploiting a vulnerability in the Sentry app. This method allows attackers to inject malicious commands disguised as legitimate error messages into Sentry's…
Infosecurity -
Google launches DiffusionGemma, a fast open AI model for edge
Google has launched DiffusionGemma, a groundbreaking open-model framework for text generation that utilizes a diffusion mechanism instead of traditional autoregressive models. This innovation enables significantly faster on-device inference speeds, achieving…
SecurityOnline -
University of Nottingham Confirms Breach After Hackers Leak Data
The University of Nottingham in the UK has confirmed a data breach involving the theft of files by the ShinyHunters hacker collective. The leaked data purportedly includes financial information and personal details of current students and alumni, affecting…
SecurityWeekShinyHunters -
Spring GraphQL patches address CVE-2026-41699 deserialization risk
The page discusses recent Spring GraphQL security patches addressing multiple severe vulnerabilities in the Java ecosystem, emphasizing critical flaws such as unsafe deserialization, session hijacking, and input validation defects. Key vulnerabilities…
-
Office 2019 for Mac will turn readonly from July 2026 for users
Microsoft Office 2019 for Mac will enter a read-only mode on July 13, 2026, due to the expiration of digital licensing tokens, severely limiting functionality for users. Applications such as Word, Excel, and PowerPoint will allow users to open and print…
SecurityOnline -
JDY Botnet Returns, Targeting Military Networks with IoT Scans
The JDY botnet has resurfaced, targeting military networks and leveraging small office/home office (SOHO) and Internet of Things (IoT) devices. First identified in late 2023 as part of the KV-botnet, JDY has evolved to consist of over 1,500 devices, more…
Security Affairs -
iOS 27 Adds On Device Recovery Mode to Fix Issues Without PC
The page discusses the introduction of Recovery Mode in iOS 27, allowing users to diagnose and fix system issues directly on the device without needing a computer. Key features of the Recovery Matrix include: 1. **Recovery Assistant**: Automatically fixes…
SecurityOnline -
Check Point Security Gateway5 articles this day · SecurityOnline first
CVE-2026-50751 Hits Check Point VPN as OpenAI Considers Price Cut · Check Point VPN under attack as Splunk issues urgent patches
-
CVE-2026-50751 Hits Check Point VPN as OpenAI Considers Price Cut
A critical vulnerability (CVE-2026-50751) affecting Check Point VPN has been discovered and is actively exploited. This alert emphasizes the importance of staying informed about cybersecurity threats. Meanwhile, OpenAI is considering a significant reduction…
-
Check Point VPN under attack as Splunk issues urgent patches
A critical vulnerability (CVE-2026-50751) has been identified in Check Point VPN, which is currently active and being exploited. Additionally, multiple security flaws have been disclosed in Splunk Enterprise, including CVE-2026-20253 with a severe CVSS score…
-
Check Point VPN exploited, GreatXML bypasses BitLocker protection
CVE-2026-50751 highlights a critical vulnerability in Check Point VPN actively exploited in the wild. Additionally, a new Windows vulnerability called GreatXML allows local attackers to bypass BitLocker protection, granting unrestricted access to encrypted…
-
Important GitLab Security Updates Address 12 Vulnerabilities
A critical vulnerability (CVE-2026-50751) affecting Check Point VPN has been discovered and is actively exploited. Administrators are urged to apply the latest GitLab security patches released on June 10, 2026, addressing twelve vulnerabilities. Key issues…
-
Check Point VPN and NVIDIA DALI flaws let attackers execute code
A critical vulnerability (CVE-2026-50751) affecting Check Point VPN has been discovered. Users are urged to view the threat details. Additionally, NVIDIA has issued a security bulletin for June 2026 highlighting two serious vulnerabilities in NVIDIA DALI…
-
-
Microsoft fixes active Exchange bug CVE-2026-42897.
Microsoft released Patch Tuesday updates that address an actively exploited vulnerability in Exchange Server, tracked as CVE-2026-42897. This vulnerability is a spoofing and XSS flaw affecting Exchange Server Subscription Edition and versions 2016 and 2019.…
-
EU Opens Antitrust Case Against Meta Over WhatsApp API
The European Union has launched an antitrust investigation against Meta, mandating that the company allow free access for external developers to its WhatsApp Business API, which had previously been restricted. This order follows Meta's controversial October…
SecurityOnline -
GitHub to block npm install scripts to curb supply chain attacks
GitHub is set to disable npm install scripts by default to combat supply chain attacks, a growing concern in software development. This change aims to enhance security by preventing potentially harmful scripts from running automatically during package…
The Hacker News -
Oracle warns of critical PeopleSoft RCE flaw CVE-2026-35273
A critical vulnerability, CVE-2026-35273, affecting PeopleSoft RCE has been discovered, presenting an immediate threat to enterprises. This flaw has a CVSS score of 9.8, allowing unauthorized remote attackers to exploit the system without authentication via…
-
Dahua Product Vulnerabilities: Patch 3 Critical CVEs
A recent security bulletin highlights critical vulnerabilities affecting Dahua's IP cameras and network video recorders, necessitating immediate action from network administrators. Three significant issues have been identified: 1. CVE-2026-29114, a…
-
Critical CVE-2026-46316 Lets Guests Break Out of KVM Arm64 Hosts
A critical security vulnerability, CVE-2026-46316, has been identified in ITScape KVM that allows untrusted guest virtual machines in KVM/arm64 environments to escape their isolation and execute commands on the host with root privileges. Discovered by…
-
Jenkins advisory flags critical deserialization flaw and bugs
The Jenkins security advisory 2026 outlines several critical vulnerabilities that pose significant risks to development pipelines. Key issues include: 1. **CVE-2026-53435**: A deserialization flaw that allows unauthorized execution of commands, enabling…
-
Jan Kopriva on Duty as ISC Stormcast Notes Green Threat Level
The content features the following key information: **Handler on Duty**: Jan Kopriva, with a link to his profile. **Threat Level**: Currently at green, indicating low threat status. **ISC Stormcast**: Related to a podcast episode dated June 11th, 2026.…
SANS ISC -
Critical RCE flaw found in PhpSpreadsheet, fixed in version 1.30.5
**CVE-2026-45034**: A critical remote code execution (RCE) vulnerability has been discovered in the popular PhpSpreadsheet library, which is widely used for reading and writing spreadsheet formats. This flaw allows remote attackers to execute arbitrary code…
-
CVE-2026-47895 exposes strongSwan VPN to remote code execution
A critical vulnerability (CVE-2026-47895) has been identified in the strongSwan VPN software, allowing unauthenticated attackers to execute malicious code remotely due to a memory management flaw in the libstrongswan component. This issue affects all…
-
Critical Spring Data bugs expose systems to remote code execution
Recent cybersecurity disclosures have identified five critical vulnerabilities in Spring Data, including severe injection risks and potential for remote code execution. Key vulnerabilities include CVE-2026-41729 (SpEL expression injection) and CVE-2026-41717…
-
North Korean Hackers Net $2bn Crypto as APAC Firms Feel Pressure
The article discusses the increasing threat posed by North Korean and Chinese cybercriminal groups, which are targeting financial firms and cryptocurrencies in the Asia-Pacific region. Despite their ongoing successes, these groups are facing heightened…
Dark Reading
