News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Fri 17 Jul· 56 articles
-
GoSerpent malware spies on Southeast Asian officials
The article discusses the emergence of 'GoSerpent' malware, which is specifically targeting government officials and diplomats in Southeast Asia for espionage purposes. The malware's capabilities demonstrate advanced stealth and infiltration techniques,…
The Hacker News -
Budapest server leak fuels Evilginx phishing on Microsoft 365
A recent security report reveals a critical exposure linked to three phishing operators utilizing the Evilginx framework to bypass multi-factor authentication (MFA) on Microsoft 365 accounts. The report, based on LEXFO's investigation, details how a…
SecurityOnline -
Risk Ledger raises £24M Series B for AI supply chain security
Risk Ledger, a UK-based supply chain security firm, has raised £24 million ($32.3 million) in a Series B funding round, bringing its total funding to £33.8 million ($45 million). The round was led by Axiom Equity, supported by Mercia Ventures. Founded in…
SecurityWeek -
Microsoft SharePoint4 articles this day · SecurityOnline first
292 Fake GitHub Repositories Deliver BoryptGrab Infostealer to Windows Users · Critical SharePoint Flaw Exploited, CISA Urges Immediate Patching
-
292 Fake GitHub Repositories Deliver BoryptGrab Infostealer to Windows Users
Today's critical security alert reveals three active exploits: CVE-2026-58644 related to Microsoft SharePoint, and two CVE entries (CVE-2026-25089 and CVE-2026-39808) concerning Fortinet FortiSandbox command injection vulnerabilities. An unattributed…
-
Critical SharePoint Flaw Exploited, CISA Urges Immediate Patching
The recent cybersecurity advisory warns of a critical remote code execution vulnerability in Microsoft SharePoint, tracked as CVE-2026-58644, which has been exploited by threat actors. The flaw, associated with deserialization of untrusted data, allows…
-
CISA Adds SharePoint Zero Day Exploit CVE-2026-58644 to KEV Catalog
CISA has added the exploited SharePoint RCE zero-day vulnerability, identified as CVE-2026-58644, to its Known Exploited Vulnerabilities (KEV) catalog. This move emphasizes heightened concerns regarding cybersecurity threats related to Microsoft SharePoint,…
-
CISA orders urgent patches for SharePoint, FortiSandbox flaws
CISA has added three vulnerabilities to its Known Exploited Vulnerabilities catalog as of July 16, 2026. These include two critical vulnerabilities affecting Fortinet FortiSandbox and one affecting Microsoft SharePoint. The federal agencies are required to…
-
-
U.S. CISA adds KNX Association KNX Protocol Connection Authorization Option 1 and Oracle flaws to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2023-4346 related to the KNX Protocol and CVE-2026-46817 affecting Oracle E-Business Suite. The KNX…
-
EU Orders Google to Share Android Search Data and AI Assistant Access
The European Commission has mandated Google to open its Android operating system to competing AI assistants and share its search data, significantly impacting the competitive landscape. Under the Digital Markets Act, Google must grant equal access to…
SecurityOnline -
CVE-2026-59208 Flaw Lets Attackers Impersonate n8n Users
The article addresses CVE-2026-59208, a vulnerability in n8n Enterprise that allows for cross-issuer impersonation due to improper authentication in token exchanges. The vulnerability arises when a valid token from one issuer can be used to impersonate a…
-
Google Renames NotebookLM to Gemini Notebook
Google has rebranded its AI note-taking tool, NotebookLM, as Gemini Notebook, reflecting a shift to unify its AI product names. This update introduces native code execution, allowing users to write and execute code directly within the platform, enhancing…
SecurityOnline -
Google Chrome 150 patches three critical Use After Free flaws
On July 16, 2026, Google released Chrome version 150.0.7871.128/.129, addressing seven vulnerabilities, three of which are rated as Critical. The critical vulnerabilities relate to Use-After-Free issues in CameraCapture, GPU, and Network components, and…
SecurityOnline -
Coca Cola Stops Fairlife Production Following Ransomware Attack
Coca-Cola has temporarily suspended production at its dairy subsidiary Fairlife following a ransomware attack that affected part of its systems, including production-related ones. The company activated incident response protocols and is collaborating with…
SecurityWeek -
Doctor Web discovers multi‑stage trojan in C++ developers' builds
The article discusses a multi-stage supply chain trojan identified by Doctor Web that targets software developers, specifically those working with C++ and C#. The malware infects project files and spreads through poisoned builds, leading to data theft,…
SecurityOnline -
ISC Handler Manuel Santander Pelaez Sees Green Threat Level
The content provides information about the Incident Security Center (ISC), detailing the handler on duty, Manuel Humberto Santander Pelaez, and a current threat level classified as green. It includes links to previous diaries and the ISC Stormcast podcast…
SANS ISC -
TP‑Link Kasa cameras hit by hardcoded key and location leak flaws
The article discusses two vulnerabilities in TP-Link Kasa EC70 and EC71 cameras, specifically CVE-2026-9770 and CVE-2026-13230. CVE-2026-9770, rated 8.6 (High), is a hardcoded cryptographic key issue that can lead to credential interception. CVE-2026-13230,…
