News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 20 so far |
Articles per day
The last 14 days and today so far (UTC)Dashed line: average of the 14 complete days. Totals above each bar.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 12 Oct | 56 | 6 |
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 0 |
| Thu 22 Oct | 84 | 3 |
| Fri 23 Oct | 68 | 8 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 0 |
| Today, Mon 26 Oct | 20 so far | 1 |
Thu 25 Jun· 75 articles
-
Ransomware surges 55% across Europe, exploiting supply chain gaps
The article discusses the surge in ransomware attacks across Europe, indicating a shift in focus from the US to the EU due to oversaturation in the US market and the availability of unpatched vulnerabilities in Europe. Researchers recorded a 55% increase in…
Dark Reading -
Apache Kvrocks Vulnerabilities Fix Five Severe Flaws
The article discusses critical vulnerabilities in Apache Kvrocks, a distributed NoSQL database. Two main vulnerabilities have been identified: CVE-2026-46752 (stack buffer overflow) with a CVSS score of 10, and CVE-2026-41566 (improper permissions) with a…
-
25-Year-Old Vulnerability Patched in Curl
The open-source tool curl has been updated to address 18 vulnerabilities, including one that has persisted for 25 years. Of the 18 flaws, four are classified as medium severity and fourteen as low severity, with the most notable being CVE-2026-8932, which…
-
Gaslight macOS malware hijacks AI analysis via prompt injection
The article discusses a new type of macOS malware known as 'Gaslight' that employs prompt injection techniques to disrupt AI-assisted analysis processes. This malware targets AI systems, manipulating their analysis capabilities and posing a significant…
The Hacker News -
Cisco Catalyst SD-WAN Manager3 articles this day · The Hacker News first
Cisco Catalyst SDWAN zero day exploited months before fix · Cisco SDWAN flaw lets attackers run root commands, Mandiant warns
-
Cisco Catalyst SDWAN zero day exploited months before fix
A zero-day vulnerability in Cisco Catalyst SD-WAN, identified as CVE-2026-20245, was exploited by hackers months before its public disclosure, allowing privileged command execution. Mandiant reported that an attacker with netadmin privileges could execute…
-
Cisco SDWAN flaw lets attackers run root commands, Mandiant warns
Google's Mandiant team has disclosed the exploitation of a Cisco Catalyst SD-WAN vulnerability, CVE-2026-20245, which allowed local authenticated attackers to execute arbitrary commands with root privileges. This flaw, the seventh SD-WAN product flaw…
-
CVE-2026-20245 exposes Cisco Catalyst SD WAN zero day flaw
Cisco Catalyst SD-WAN is facing a critical zero-day vulnerability, CVE-2026-20245, that allows malicious actors to gain root access. This vulnerability was exploited to compromise devices, raising alarms in the cybersecurity community. The article emphasizes…
-
-
Dialog network hack leaks personal data of military officials
The exclusive network Dialog, founded by Peter Thiel, was reportedly hacked after exposing personal data of its high-profile members in plaintext on its app distribution site. The incident occurred due to misconfiguration, allowing anyone to access internal…
Malwarebytes -
New Mistic Backdoor Fuels KongTuke and ModeloRAT Ransomware Ops
The article discusses a newly identified backdoor, named Mistic, associated with the KongTuke and ModeloRAT campaigns. The initial access broker is highlighted as a significant player in ransomware operations. The Mistic backdoor is indicative of evolving…
The Hacker News -
AutoGen Studio flaw lets attackers run code via malicious pages
The recent discovery by Microsoft Security Research unveils a critical vulnerability in the AutoGen Studio known as the AutoJack AI agent exploit, which can lead to remote code execution (RCE) through local agents visiting malicious webpages. This flaw…
SecurityOnline -
NIST Asks Public to Shape New IoT Security Rules for Federal
The National Institute of Standards and Technology (NIST) is seeking public feedback on updated guidelines for Internet of Things (IoT) security. The draft of SP 800-213 Revision 1 aims to enhance cybersecurity measures for IoT products used by federal…
SecurityWeek -
Microsoft warns of USB spread crypto malware stealing wallets
Microsoft Threat Intelligence has identified a new cryptocurrency stealer malware named Win32/CryptoBandits.A, affecting Windows users since February 2026. This malware primarily targets cryptocurrency users by stealing financial assets through malicious USB…
SecurityOnline -
Google patches 18 Chrome flaws, half are use after free bugs
Google released a Chrome update (version 149.0.7827.196/197) that addresses 18 vulnerabilities, including 4 critical and 14 high-severity issues. Key points include: 1) Over half of the vulnerabilities involve use-after-free flaws, potentially leading to…
SecurityWeek -
Malicious npm Packages Steal GitHub Tokens from Leo Platform
On June 24, 2026, a coordinated attack released malicious versions of 20 npm packages within the Leo Platform ecosystem, all equipped with a CI/CD attack toolkit that targets GitHub Actions runners, steals credentials, and exfiltrates them through the user's…
StepSecurity -
GitLab releases urgent patches for critical security flaws
GitLab released critical security patches on June 24, 2026, addressing 13 vulnerabilities in both the Community and Enterprise Editions. Administrators must update to versions 19.1.1, 19.0.3, or 18.11.6. The vulnerabilities include high-risk flaws with CVSS…
SecurityOnline -
Jenkins patches 22 flaws, warns of RCE via CVE-2026-57281
On June 24, 2026, Jenkins released a security advisory detailing 22 vulnerabilities across 18 plugins, several of which may allow remote code execution (RCE). The most critical issue involves a sandbox bypass in the Script Security Plugin, which could enable…
-
DraftKings Credential Stuffing Hacker Gets 18 Month Sentence
Nathan Austad has been sentenced to 18 months in prison following his guilty plea in a hacking scheme against DraftKings, where he participated in a credential-stuffing attack that compromised 1,600 accounts and resulted in the theft of approximately…
Security Affairs -
Vidar ABE Bypass Technique Steals Browser Keys
Gen Digital researchers have identified a new technique used by Vidar infostealer malware to bypass Application-Bound Encryption (ABE) in web browsers. Vidar extracts the master key from memory to decrypt sensitive data, targeting user credentials…
SecurityOnline -
Rokarolla Android Trojan Takes Devices, Steals Crypto & Bank Data
The Rokarolla Android banking trojan is a malware that executes complete device takeovers, targeting 217 cryptocurrency and banking applications. It is spread through malicious websites impersonating legitimate apps, tricking users into installing a dropper…
SecurityOnline -
Gemini in Chrome gains Select from Screen for smarter AI help
Google has introduced a new feature for Gemini in Chrome called 'Select from Screen', allowing users to select specific text or images from web pages and directly send them to the AI model. This feature cuts down the effort for users when describing…
SecurityOnline -
Google Gemini 3.5 Flash Introduces Computer Use Capabilities
Google has launched the Gemini 3.5 Flash model, integrating a native 'Computer Use' tool that enables artificial intelligence to analyze complex tasks and manipulate graphical user interfaces across various platforms. This tool allows AI to inspect…
SecurityOnline -
Zoho patches critical SSO ticket flaw in ManageEngine AD360 suite
Zoho Corporation has disclosed a critical vulnerability in ManageEngine, tracked as CVE-2026-11374, with a CVSS score of 9.0. This flaw allows unauthenticated attackers to predict single sign-on (SSO) tickets, potentially leading to account takeover in…
-
Google Wallet launches TSA PreCheck touchless ID for travellers.
Google has partnered with the TSA to introduce a streamlined TSA PreCheck Touchless ID experience through Google Wallet, making it the first digital wallet to do so. This initiative aims to reduce the hassle of entering passport details manually for frequent…
SecurityOnline -
Canonical Livepatch adds Arm64 support for zero downtime updates
Canonical's Livepatch service now supports the Arm64 platform, allowing crucial kernel security updates to be applied without downtime or rebooting. This service is critical for long-running servers. Arm64 support is available on Ubuntu Core 26 and later…
SecurityOnline -
Anthropic debuts Claude Tag AI for Slack with persistent memory
Anthropic has introduced "Claude Tag," a cutting-edge tool designed for enterprise clients that enhances collaborative AI interactions within Slack. Unlike traditional chatbots, Claude Tag features persistent memory and operates in two modes: Task…
SecurityOnline -
Laravel Livewire Vulnerability Exposes Over 6,000 Apps
The article discusses a critical vulnerability in Laravel Livewire, identified as CVE-2025-54068, which allows unauthenticated remote code execution and has been actively exploited in the wild. This vulnerability, affecting Livewire versions from…
-
Operation Endgame Takes Down SocGholish, Amadey, and StealC Malware
Operation Endgame, led by Europol on June 24, 2026, disrupted the SocGholish malware network and two associated groups, Amadey and StealC. This extensive operation targeted 326 servers and 142 domains, recovering approximately EUR 41 million in flagged…
SecurityOnlineAmadey -
Critical IBM Langflow flaws let attackers run code remotely
IBM Langflow OSS has two critical vulnerabilities (CVE-2026-10561 and CVE-2026-7664) that allow unauthenticated remote code execution and authorization bypass, with a maximum CVSS score of 10.0. These flaws arise from missing trust boundaries and risky…
-
Chrome patches critical WebGL, Blink and Autofill flaws in update
Google has released a security update for Chrome's Stable channel, version 149.0.7827.196, addressing 18 vulnerabilities, with four classified as critical. Key issues involve memory errors in WebGL, Autofill, and Blink. Critical CVEs include CVE-2026-13028,…
-
simonecorsi/mawesome GitHub Action has been compromised
On June 24, 2026, the simonecorsi/mawesome GitHub repository was compromised by an attacker who force-pushed malicious commits and altered version tags. This resulted in the execution of the attacker's code in workflows utilizing those tags. This incident is…
StepSecurity -
BreachForums Clone Breached[.hn] Shuts Down After Failed Bid
BreachForums has announced the closure of its clone, breached.hn, which was for sale at a reduced price of $1,500, without successful transactions. The announcement revealed that there is no official BreachForums left, emphasizing that the prior claimants…
DataBreaches -
Gitea auth flaw lets attackers hijack admin accounts via SSRF
The article discusses two critical security vulnerabilities affecting Gitea, a popular self-hosted platform for code management. These vulnerabilities, CVE-2026-20896 and CVE-2026-22874, allow attackers to bypass authentication and perform Server-Side…
-
Critical OpenDJ flaw lets unauthenticated hackers run code via JMX
The OpenDJ security report highlights a critical vulnerability, tracked as CVE-2026-46495, with a CVSS score of 9.2. The issue, impacting versions up to 5.1.0, allows for unauthenticated remote code execution (RCE) via Java deserialization in the JMX RMI.…
-
DShield tracks botnet patterns hitting exposed IoT devices
The content is a guest diary entry by Nicole Phillips, reflecting on her experience with analyzing automated cybercrime while contributing to the DShield honeypot project. It discusses the constant bombardment of automated traffic targeting vulnerable IoT…
SANS ISCr00ts3c -
CVSS 8.7 Unauthenticated RCE Impacts Multiple TP-Link Routers
The content discusses a critical security vulnerability identified as CVE-2026-11834 affecting several TP-Link routers, including the Archer MR200, MR402, and others. The flaw allows unauthenticated command injection through improper handling of DHCP…
