News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Thu 2 Jul· 66 articles
-
Google Unveils Gemini Spark AI Assistant for macOS Professionals
Google has launched 'Gemini Spark', an advanced AI assistant for macOS aimed at enhancing productivity for users. Unlike traditional chatbots, Gemini Spark can execute tasks like organizing files and generating reports directly on local devices. Currently in…
SecurityOnline -
Adobe Fixes ColdFusion, Campaign Classic Bugs Rated CVSS 10.0
Adobe has released critical updates for ColdFusion and Campaign Classic, addressing multiple maximum-severity vulnerabilities that could lead to remote code execution. Seven vulnerabilities were highlighted, with a CVSS score of 10.0, allowing attackers to…
-
AI Agent Exploits Langflow RCE to Trigger Ransomware
The article discusses a recent incident where an AI agent exploited a Remote Code Execution (RCE) vulnerability in Langflow to automate a database ransomware attack. Such attacks highlight the growing intersection of artificial intelligence and cybersecurity…
The Hacker NewsJadePuffer -
Many breaches linger months undetected, Kaspersky report warns
The 2025 Kaspersky Compromise Assessment findings highlight key trends in cybersecurity, including the prolonged detection of incidents and the insufficient monitoring practices within organizations. Notably, 30.8% of incidents revealed activities lasting…
securelist.com -
Scattered Spider3 articles this day · SecurityOnline first
US extradites teen hacker linked to $100M Scattered Spider scheme · Teen Peter Stokes Extradited to US Over $8m Jewelry Heist
3 outlets-
US extradites teen hacker linked to $100M Scattered Spider scheme
The US Justice Department recently announced the arrest and extradition of Peter Stokes, a 19-year-old dual citizen of the US and Estonia, who is allegedly a member of the Scattered Spider hacking group. Arrested in Finland, Stokes faces multiple charges,…
Infosecurity -
Teen Peter Stokes Extradited to US Over $8m Jewelry Heist
Peter Stokes, a 19-year-old alleged member of the Scattered Spider hacking group, has been extradited from Finland to the U.S. to face charges of hacking, fraud, and extortion. He is accused of participating in various cyberattacks, including a significant…
Security Affairs -
Teen dual citizen extradited for Scattered Spider cyber extortion
A 19-year-old dual citizen, Peter Stokes, was extradited from Finland to Chicago due to his involvement in the Scattered Spider hacking group, known for data extortion, computer intrusion, and fraud. The group has reportedly extorted over $100 million from…
SecurityOnline
-
-
Gzip CVE-2026-41991/2 let attackers overwrite files
A critical alert has been issued regarding vulnerabilities in GNU gzip, specifically CVE-2026-41991 and CVE-2026-41992. The first vulnerability allows local attackers to overwrite files through a predictable symlink, while the second involves an…
-
Microsoft SharePoint Server3 articles this day · SecurityOnline first
CISA Flags SharePoint RCE (CVE-2026-45659) for Active Exploitation · SharePoint CVE-2026-45659 added to CISA KEV list amid exploits
-
CISA Flags SharePoint RCE (CVE-2026-45659) for Active Exploitation
CISA has flagged CVE-2026-45659, a vulnerability in Microsoft SharePoint Server, indicating active exploitation. This bug allows remote code execution (RCE) due to deserialization of untrusted data and affects on-premises SharePoint versions below specific…
-
SharePoint CVE-2026-45659 added to CISA KEV list amid exploits
The article discusses the recent addition of the SharePoint Remote Code Execution (RCE) vulnerability, identified as CVE-2026-45659, to the Cybersecurity and Infrastructure Security Agency's (CISA) Known Exploited Vulnerabilities (KEV) Catalog due to ongoing…
-
Attackers exploit SharePoint RCE bug CVE-2026-45659, patch urged
A significant vulnerability (CVE-2026-45659) in Microsoft SharePoint Server has been identified, allowing for remote code execution due to unsafe deserialization of untrusted data. This flaw has been actively exploited and added to CISA's Known Exploited…
-
-
FortiBleed Credential Theft Fuels INC and Lynx Ransomware Surge
The article reports on the FortiBleed credential theft linked to INC and Lynx ransomware operations, highlighting the increased vulnerabilities within organizations due to outdated security measures. It emphasizes the importance of Zero Trust frameworks to…
The Hacker NewsInc -
Mustang Panda spies on India using Zoho WorkDrive for hydropower
Acronis Threat Research Unit uncovered two espionage campaigns by Mustang Panda, targeting Indian government and hydropower sectors using Zoho WorkDrive for command and control (C2). These campaigns involved spear-phishing attacks with ZIP archives…
SecurityOnlineMUSTANG PANDA -
CVE-2026-8037: Progress Kemp LoadMaster RCE Exploited in the Wild
CVE-2026-8037 is a critical vulnerability affecting Progress Kemp LoadMaster, enabling pre-authenticated Remote Code Execution (RCE) via OS command injection through the product’s API. Active exploitation attempts began on June 29, 2026, coinciding with the…
-
Researchers Warn: Fake PoC Repos Spread New ChocoPoC RAT Malware
The article discusses the emergence of a new Remote Access Trojan (RAT) named ChocoPoC, which specifically targets vulnerability researchers through fake proof-of-concept (PoC) exploit repositories. This malware pretends to offer legitimate PoCs while…
The Hacker News -
Gentlemen ransomware gang compromises 320 firms amid 2026 spike
The article discusses the rise of The Gentlemen ransomware-as-a-service (RaaS) group, which has seen significant activity in 2026. Key points include: The group targets large organizations in sectors such as manufacturing, IT, healthcare, finance, and…
SecurityOnlineThe Gentlemen -
Pro Russia influence grows with AI election meddling worldwide
The pro-Russia influence ecosystem has expanded its global focus, engaging in covert operations, hacktivism, and leveraging generative AI to manipulate information. Targeting audiences in the US, EU, NATO, and Russia, these activities are characterized by…
SecurityOnline -
TONResolver malware infects Japan hotels via fake guest emails
Trend Micro identified a new malware named TONResolver targeting Booking.com partner hotels primarily in Japan, using phishing tactics that pose as guest complaints to deliver the malware. The attackers utilize a ZIP file containing a shortcut that executes…
SecurityOnline -
IBM Db2 hits critical flaw CVE-2026-10109, urgent patch advised
An active exploit has been detected for CVE-2026-10109, a critical remote code execution vulnerability in IBM Db2 affecting versions 11.5.0 to 11.5.9 and 12.1.0 to 12.1.4. The flaw allows unprivileged remote attackers to execute arbitrary code through a…
-
Cisco Patches Catalyst Center File Read Flaw and Seven ClamAV DoS Bugs
Cisco has patched a critical vulnerability in the Catalyst Center (CVE-2026-20191, CVSS 7.5) allowing unauthenticated remote attackers to read arbitrary files, posing a significant risk to enterprise networks. Additionally, seven vulnerabilities in ClamAV…
-
Poweradmin Host Header Injection Lets Attackers Hijack DNS Accounts
A critical security vulnerability identified as CVE-2026-54588 affects Poweradmin, scoring 9.6 on the CVSS scale. It allows attackers to exploit host header injection during login processes, potentially compromising DNS administrator accounts. Affected…
-
ISC Stormcast For Thursday, July 2nd, 2026 https://isc.sans.edu/podcastdetail/9992, (Thu, Jul 2nd)
The ISC Stormcast for July 2nd, 2026, is presented by handler Xavier Mertens. The current threat level is indicated as green. Additional resources include information on classes being taught by Dr. Johannes Ullrich. Listeners can join the discussion through…
SANS ISC -
Critical OpenAM bug CVE-2026-45051 allows remote code execution
A critical vulnerability, tracked as CVE-2026-45051, has been identified in OpenAM, scoring 9.2 on the CVSS scale. This flaw allows for remote code execution (RCE) through unsafe Java deserialization in the WebAuthn authentication module. Affected versions…
-
CVE-2026-35019 flaw lets attackers hijack NetComm routers
A critical vulnerability (CVE-2026-35019) affecting NetComm NF20MESH routers was disclosed, allowing unauthorized access due to hardcoded AES key authentication bypass. The CVSS score is 9.2, indicating high severity. The flaw can grant admin access to the…
-
Critical WinRAR heap overflow CVE-2026-14191 puts users at risk
A critical vulnerability, CVE-2026-14191, has been identified in RARLAB's WinRAR software, affecting versions below 7.23. This vulnerability is a heap overflow in the RAR5 recovery-volume parser, which can lead to potential exploits, although no active…
-
JetBrains Patches CVSS 10 Authentication Bypass Affecting 15 Million Developers
JetBrains has reported three critical vulnerabilities affecting its products, specifically CVE-2026-50242 (authentication bypass), CVE-2026-56142 (privilege escalation), and CVE-2026-53915 (remote code execution), with severities rated up to 10.0 on the CVSS…
