News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 22 so far |
Articles per day
The last 14 days and today so far (UTC)Dashed line: average of the 14 complete days. Totals above each bar.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 12 Oct | 56 | 6 |
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 0 |
| Thu 22 Oct | 84 | 3 |
| Fri 23 Oct | 68 | 8 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 0 |
| Today, Mon 26 Oct | 22 so far | 1 |
Wed 24 Jun· 64 articles
-
73,000 Fortinet Firewall Credentials Exposed in Access Broker Leak
In June 2026, researcher Volodymyr Diachenko discovered that a live server exposed valid credentials for over 73,000 Fortinet firewalls, revealing a large-scale access-brokering operation known as FortiBleed. This leak provided login credentials for devices…
Security Affairs -
AI drives cheaper faster cyberattacks ReliaQuest report warns
A new report by ReliaQuest highlights that AI is making cyberattacks cheaper, faster, and more covert, while not fundamentally changing the nature of intrusions. Over the past two years, AI utilization in cybercrime has evolved from basic phishing…
Infosecurity -
Crypto Clipboard Hijacker Hides Behind Fake Stars and Upvotes
A crypto clipboard hijacker, linked to a suspected operator on Telegram, targets cryptocurrency holders and traders. Identified by Check Point Research, this malware reinvents its promotion tactics, resembling marketing strategies to create a false sense of…
SecurityOnline -
US DoJ seizes Huione Cloud account tied to money laundering scam
The article discusses the Department of Justice (DoJ)'s recent seizure of a Huione Cloud account linked to a cyber scam involving money laundering. This highlights ongoing challenges in cybersecurity, particularly in the areas of cybercrime and financial…
The Hacker News -
UK Museums Face Cybersecurity Risks, MPs Warn
UK lawmakers from the Public Accounts Committee (PAC) have expressed concerns regarding the cybersecurity preparedness of national galleries and museums, criticizing the Department for Culture, Media and Sport (DCMS) for its reactive approach. The PAC…
Infosecurity -
Cyble Exposes 4,000 Fake FIFA 2026 Ticket Sites Targeting Fans
The article discusses a substantial fraud scheme surrounding the FIFA 2026 World Cup, dubbed Operation FanTrap, identified by Cyble Research and Intelligence Labs (CRIL). The scheme involves nearly 4,000 fake domains that target football fans worldwide,…
SecurityOnline -
Deutsche Bahn GSM R failure halts German trains for 90 minutes
On June 23, 2026, a nationwide outage of Deutsche Bahn's GSM-R system halted all trains across Germany, causing significant disruptions in rail services. The GSM-R system, essential for train communication, suffered a failure, leading to a halt in…
Security Affairs -
AI speeds exploit creation, shifting focus to exposure validation
The article discusses the rapid advancement of AI in cybersecurity, focusing on how it transforms vulnerabilities into actionable exploits in significantly less time. Traditional patch-and-pentest methods are becoming less effective as the key question…
SecurityWeek -
Lantronix EDS50004 articles this day · SecurityOnline first
SmartRAT ClickFix targets Brazilian banks with AI spoofed domains · Google Search Now Saves Your Uploaded Media to Train AI
-
SmartRAT ClickFix targets Brazilian banks with AI spoofed domains
The page highlights the detection of four critical vulnerabilities (CVE-2025-67038, CVE-2026-34910, CVE-2026-34909, and CVE-2026-34908) and details a SmartRAT ClickFix malware campaign operated by suspected Brazilian cybercriminals. The malware targets…
-
Google Search Now Saves Your Uploaded Media to Train AI
The article highlights recent critical alerts regarding vulnerabilities identified today, including CVE-2025-67038 (Lantronix EDS5000 Code Injection), CVE-2026-34910, CVE-2026-34909, and CVE-2026-34908 (all related to Ubiquiti UniFi OS). It also discusses…
-
Lantronix, UniFi flaws surface as Outlook Mac reply glitch seen
Today, four critical exploits have been detected, including: 1. **CVE-2025-67038**: Code Injection Vulnerability in Lantronix EDS5000. 2. **CVE-2026-34910**: Improper Input Validation in Ubiquiti UniFi OS. 3. **CVE-2026-34909**: Path Traversal Vulnerability…
-
Flaw in AVer PTC500S cameras allows remote code execution
Today's critical alerts include four active exploits related to vulnerabilities: CVE-2025-67038 (Lantronix EDS5000), CVE-2026-34910, CVE-2026-34909, and CVE-2026-34908 (all Ubiquiti UniFi OS vulnerabilities). Notably, CVE-2026-40624 affects AVer PTC500S…
-
-
Cisco CM flaw lets attackers gain root via file write exploit
The article discusses a recently exploited vulnerability in Cisco Unified Communications Manager (CM) after a proof-of-concept (PoC) demonstrated a file-write path to root. This breach highlights significant security risks in network communications,…
The Hacker News -
Linux Process Name Masquerading: How Attackers Hide Code
The article by Xavier Mertens discusses the technique of Linux process name masquerading, where malicious processes can disguise themselves using non-suspicious names. It references the MITRE ATT&CK framework (T1036) and emphasizes that both the process name…
SANS ISC -
ClickFix malvertising uses Claude.ai chat to drop MacSync malware
A ClickFix malvertising campaign exploited the shared chat feature of claude.ai, delivering the MacSync infostealer malware that compromised browser credentials, cookies, SSH keys, and cryptocurrency wallet files. The attackers utilized Google Ads to lead…
SecurityOnline -
Cisco Unified CM flaw lets hackers gain root access via SSRF
A critical vulnerability (CVE-2026-20230) in Cisco's Unified Communications Manager (Unified CM) has been exploited by attackers. This flaw allows unauthenticated remote access for Server Side Request Forgery (SSRF) attacks and could enable privilege…
-
Public Details Disclosed: MediaTek t7xx WWAN Flaw
TL;DR Security researcher Pavitra Jha published full details regarding a severe Linux kernel vulnerability. Specifically, this MediaTek t7xx
SecurityOnline -
455 arrests in $6.5bn US healthcare fraud crackdown
A recent health care fraud takedown resulted in the arrest of 455 defendants, including 90 medical professionals, across 45 states. The operation targeted false claims, telemedicine fraud, and illegal opioid distribution, alleging over $6.5 billion in…
SecurityOnline -
Anthropic’s Mythos AI spots US govt flaws amid Trump tensions
A U.S. official disclosed that Anthropic's AI model, Mythos, identified vulnerabilities in secure U.S. government systems during testing with intelligence agencies. This effort is part of Project Glasswing, aiming to address significant public safety and…
SecurityWeek -
Cloudflare, Google and browsers launch PACT to replace CAPTCHAs
The article discusses the development of a new internet protocol called Private Access Control Tokens (PACT), created through a collaboration between Cloudflare, Google Chrome, Mozilla Firefox, and Microsoft Edge. This protocol aims to authenticate…
SecurityOnline -
ISC Stormcast June 2026 Features SANS Classes and Resources
The ISC Stormcast for June 24th, 2026, is managed by Xavier Mertens and reports a threat level of green. The broadcast includes insights regarding classes taught by Dr. Johannes Ullrich for SANS. Additionally, the page provides a variety of links related to…
SANS ISC -
Critical Containerd bugs let attackers poison cloud image caches
The page highlights four critical vulnerabilities in the containerd runtime, particularly affecting cloud infrastructure. Specifically, the vulnerabilities CVE-2026-53492, CVE-2026-53488, and CVE-2026-50195 allow for arbitrary code execution and image cache…
-
Critical Webmin flaws expose authentication bypass and data leaks
The page discusses critical vulnerabilities recently detected in Webmin, a web-based administrative tool for Unix-like servers. It highlights three specific flaws: CVE-2026-56020 (critical authentication bypass), CVE-2026-56021 (information disclosure), and…
-
Squid Proxy Flaw Exposes User Logins via FTP Parser Bug
A critical vulnerability, tracked as CVE-2026-47729 and dubbed 'Squidbleed', has been discovered in the Squid web proxy, enabling leakage of users' HTTP requests, including sensitive data such as passwords and session tokens. This issue has remained…
