News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 20 so far |
Articles per day
The last 14 days and today so far (UTC)Dashed line: average of the 14 complete days. Totals above each bar.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 12 Oct | 56 | 6 |
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 0 |
| Thu 22 Oct | 84 | 3 |
| Fri 23 Oct | 68 | 8 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 0 |
| Today, Mon 26 Oct | 20 so far | 1 |
Fri 26 Jun· 59 articles
-
PTC Windchill and FlexPLM2 articles this day · SecurityOnline first
PTC Windchill Faces Attack, CISA Orders Patch for CVE-2026-12569 · PTC Windchill flaw spotted; Claude Fable 5 hints at AWS return
-
PTC Windchill Faces Attack, CISA Orders Patch for CVE-2026-12569
A vulnerability in PTC Windchill, tracked as CVE-2026-12569, has been exploited in the wild, marking the first confirmed real-world abuse of this product lifecycle management platform. The flaw allows remote, unauthenticated attackers to execute arbitrary…
-
PTC Windchill flaw spotted; Claude Fable 5 hints at AWS return
The content reports on two active vulnerabilities detected today: CVE-2026-12569 affecting PTC Windchill and FlexPLM due to improper input validation, and CVE-2026-20230 linked to a server-side request forgery vulnerability in Cisco Unified Communications…
-
-
FOSSBilling Template Injection Flaw Exploited in the Wild
A critical vulnerability (CVE-2026-28496) in FOSSBilling allows for template injection, rated with a CVSS score of 9.4, enabling attackers to access sensitive data and execute remote code. The flaw stems from improper input validation in the application’s…
-
MCP update adds stateless layer, sparks security worries
The Model Concept Protocol (MCP) is transforming from a single-user AI integration tool to a robust enterprise-ready version by July 28, 2026. This change introduces a stateless protocol layer and involves six Specification Enhancement Proposals (SEPs).…
SecurityWeek -
UK CMC flags Canvas data breach hitting 160 universities
The UK’s Cyber Monitoring Centre (CMC) has released an analysis regarding a recent data breach involving Instructure’s Canvas, affecting around 160 UK higher education institutions and approximately 9,000 globally. The breach involved unauthorized access and…
Infosecurity -
Gaslight malware tricks AI analysts with fake macOS messages
The article discusses a new malware named macOS.Gaslight, attributed to North Korean hackers, which targets macOS systems. This Rust-based infostealer implants fabricated system messages designed to confuse AI-assisted malware analysts, ultimately…
Security Affairs -
Google Ads spread OXLOADER malware, dropping CASTLESTEALER
The article discusses the discovery of a new malware loader named OXLOADER, which delivers the CASTLESTEALER infostealer targeting Windows users through malicious Google Ads that impersonate Node.js downloads. This campaign, tracked as REF8372, utilizes a…
SecurityOnline -
Google uncovers Turla's STOCKSTAY backdoor targeting Ukraine
On June 26, 2026, Google disclosed details about a new backdoor called "STOCKSTAY" used by the Turla cyber espionage group, particularly for targeting entities in Ukraine. This malware is reported to enhance Turla's capabilities to conduct espionage…
The Hacker NewsTurla -
India Targeted Phishing Uses Bitmap Hidden Remcos RAT Steals Data
The article reports on a phishing campaign involving Remcos RAT, a type of malware delivered via a steganographic loader hidden in a bitmap image. This attack primarily targets Windows users in India and employs a multi-stage .NET loader chain. The initial…
SecurityOnline -
Uber names former Coinbase CSO Philip Martin as new CISO
Philip Martin has been appointed as the Chief Information Security Officer (CISO) at Uber. He previously served as Chief Security Officer at Coinbase, managing cybersecurity and risk compliance for over 250 employees. His career includes roles at Palantir…
SecurityWeek -
Critical auth flaw in Python.org API lets anyone gain admin
A critical authentication bypass vulnerability was identified in the python.org release management API, allowing unauthorized admin access using an admin username and arbitrary API key. This flaw, reported by researcher Splitline Ng on February 23, 2026,…
SecurityOnline -
curl 8.21.0 fixes 18 security flaws, adds HTTP/3 proxy support
The recent release of curl v8.21.0 addresses 18 security vulnerabilities, marking a significant update for the utility used on over 30 billion devices. Notable improvements include support for HTTP/3 proxy connections, enhanced SSH host verification, and…
SecurityOnline -
Apple hikes prices on Macs and iPads amid memory chip crunch
Apple has raised prices on various products due to a memory chip shortage exacerbated by increased demand in AI data centers. The price hike affects 14 product lines, with notable increases in devices like the HomePod mini, iPad, and MacBook. CEO Tim Cook…
SecurityOnline -
Cisco and PTC flaws under active attack, CISA adds to KEV list
The page discusses two critical vulnerabilities that have been added to the CISA KEV Catalog on June 25, 2026. These vulnerabilities are affecting Cisco Unified Communications Manager and PTC Windchill, both of which are reportedly being actively exploited.…
-
Critical RCE flaw CVE-2026-52813 hits Gogs, patch out
The security alert highlights three critical remote code execution (RCE) vulnerabilities in Gogs, identified as CVE-2026-52813, CVE-2026-52806, and CVE-2026-52811, which have CVSS scores ranging from 9 to 10. These vulnerabilities allow attackers to exploit…
-
Chrome patches three high severity flaws, urges swift update
A security update for Google Chrome, released on June 10, 2026, addresses three high-severity vulnerabilities (CVE-2026-13281, CVE-2026-13282, CVE-2026-13283) with a CVSS score of 6.8. The flaws include use-after-free and integer overflow issues that could…
-
FFmpeg MagicYUV flaw lets hackers run code via crafted files
The content discusses a critical vulnerability (CVE-2026-8461) in FFmpeg's MagicYUV decoder that allows for heap out-of-bounds write, posing a high risk (CVSS score 8.8). This flaw can enable attackers to execute arbitrary code through specially crafted…
-
Critical flaws in Langflow allow data theft and DoS, patch urged
Three critical vulnerabilities have been detected in Langflow software, affecting versions prior to 1.9.2. The vulnerabilities include: 1. **CVE-2026-55255** - An Insecure Direct Object Reference (IDOR) bug allows attackers to hijack flows belonging to other…
-
Red Hat Ansible flaw leaks credentials via websocket API
An alert has been issued regarding a critical vulnerability in the Red Hat Ansible Automation Platform, identified as CVE-2026-11807, which has a CVSS score of 9.6. The flaw allows unauthorized credential access through a websocket API due to missing…
