News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 32 so far |
Tue 11 Aug· 74 articles
-
CISA Logs CVE-2026-72898 Metabase Flaw in KEV Catalog
On 11 August 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE‑2026‑72898 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects Metabase, the open‑source business‑intelligence platform, and is identified as the…
-
Microsoft Windows Ancillary Function Driver for WinSock6 articles this day · Check Point first
CISA Flags High Risk Windows WinSock Use After Free Flaw in KEV · Microsoft's Patch Tuesday Deluge Continues With August Updates
-
CISA Flags High Risk Windows WinSock Use After Free Flaw in KEV
CISA has added CVE-2026-68820 to its Known Exploited Vulnerabilities catalogue. The flaw affects Microsoft’s Windows Ancillary Function Driver for WinSock and is identified as the Microsoft Windows Ancillary Function Driver for WinSock Use‑After‑Free…
-
Microsoft's Patch Tuesday Deluge Continues With August Updates
In August 2026, Microsoft released fixes for 421 unique CVEs during its Patch Tuesday, including two zero-day vulnerabilities. The bulk of these vulnerabilities (236) affect Windows, with 98 impacting Office products. Among the critical issues,…
-
Microsoft Plugs Nearly 400 Security Holes
Microsoft released security updates addressing 398 vulnerabilities across Windows and supported software, including one actively exploited zero-day flaw (CVE-2026-68820). This month's patch release, while significant, does not surpass last month's record of…
-
Microsoft Patch Tuesday Fixes Zero Day Winsock Flaw CVE-2026-68820
Microsoft's August 2026 Patch Tuesday addressed 421 CVEs, including a high-severity zero-day vulnerability (CVE-2026-68820) in WinSock's Ancillary Function Driver, allowing privilege escalation without user interaction. Other noteworthy vulnerabilities…
-
Microsoft Patch Tuesday August 2026, (Tue, Aug 11th)
This report summarizes the Microsoft Patch Tuesday for August 2026, detailing patches for 418 vulnerabilities, including 62 critical ones. Key vulnerabilities include: 1. **CVE-2026-68820**: Windows WinSock elevation vulnerability, exploited in the wild…
-
Lazarus hits defence via fake job PDFs, CVE-2026-68820
The article by Check Point Research details a significant cyber attack campaign named **Operation Dream Job**, attributed to the DPRK-linked **Lazarus group**. The campaign particularly targets organizations in the defense sector across Europe and India,…
-
-
CISA adds Cisco firewall heap flaw CVE-2026-20349 to KEV catalog
CISA has added CVE‑2026‑20349 to its Known Exploited Vulnerabilities (KEV) catalogue. The entry concerns Cisco’s Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) products and is titled “Cisco Secure Firewall Adaptive…
-
Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA
The article discusses the Gunra ransomware gang, which is exploiting vulnerabilities in Fortinet products, particularly CVE-2024-55591 and CVE-2025-24472, to bypass multifactor authentication (MFA) and compromise critical infrastructure and government…
-
Microsoft SharePoint Enterprise Server 20162 articles this day · Rapid7 first
Microsoft Fixes 421 Flaws Including SharePoint Zero Day · Rapid7 Finds Critical SharePoint RCE Flaw Tied to Auth Bypass
-
Microsoft Fixes 421 Flaws Including SharePoint Zero Day
On August 11, 2026, Microsoft released updates addressing 421 vulnerabilities, with 236 affecting Windows, marking a significant Patch Tuesday. Notable vulnerabilities include: 1. **CVE-2026-63520**: Critical remote code execution vulnerability in Microsoft…
-
Rapid7 Finds Critical SharePoint RCE Flaw Tied to Auth Bypass
The Rapid7 blog post discusses the recently fixed vulnerability CVE-2026-63520, a Remote Code Execution (RCE) flaw in Microsoft SharePoint discovered through research by Rapid7 Labs. The vulnerability can be exploited to execute arbitrary code on affected…
-
-
Chrome adds device bound session credentials to stop cookie theft
Google Chrome has introduced a new security feature called Device-Bound Session Credentials (DBSCs) that aims to combat account takeovers linked to session cookie theft. DBSCs store a unique encryption key in hardware secure elements such as the Trusted…
Ars Technica -
Fake CCleaner Installers Spread Spyware Through Chrome Extension
A fake version of the popular PC cleaning tool CCleaner is being used to spread a malicious Chrome extension known as GhostDesk, which operates as spyware. This attack begins with a clone of the CCleaner download page that installs malware disguised as the…
Malwarebytes -
Microsoft patches 398 bugs, fixes Windows driver zero day exploit
On August 11, 2026, it was reported that Microsoft has addressed 398 security vulnerabilities, which include a critical zero-day flaw in a Windows driver that is currently under active exploitation. This update highlights ongoing efforts to improve…
The Hacker News -
Kimwolf v7 Android Botnet Fuels Stealthy HTTP/2 DDoS Attacks
The article discusses the emergence of the Kimwolf v7 Android Botnet, which generates HTTP/2 DDoS traffic that mimics regular browsing behavior. This advancement poses significant challenges for cybersecurity defenses, making it harder to distinguish between…
The Hacker News -
Zoom Annotation Flaw Lets Attackers Hijack Meeting Participants
The article discusses vulnerabilities within Zoom's annotation feature that could allow one participant to hijack another attendee's client during meetings. This security flaw raises concerns about the safety of online meetings, particularly as remote work…
The Hacker News -
Sandworm Group Uses Fake Job VPN to Hijack Devices
The article discusses a new cybersecurity threat linked to the Sandworm group, specifically the UAC-0145 malware campaign. This threat involves the use of fake job interviews to promote a malicious VPN software that enables attackers to run remote commands…
The Hacker NewsSandworm -
Judge Approves Data Rules for Change Healthcare Breach Deal
A federal judge in Minnesota has approved strict handling rules for data stolen in Change Healthcare's 2024 cyberattack, as part of a combined lawsuit involving UnitedHealth Group and associated companies. The plan, agreed upon by both parties, aims to…
DataBreaches -
Adobe patches 51 flaws as Microsoft fixes 398 CVEs in August 2026
The August 2026 Security Update Review discusses key updates from Adobe and Microsoft. Adobe patched 51 vulnerabilities across five products, including ColdFusion and Campaign Classic, with critical bugs needing immediate attention. Microsoft released 398…
thezdi.com -
Zoom Communications Zoom Clients2 articles this day · SecurityWeek first
Zoom patches critical zero click flaw Zoomsday threatening meetings · Zoom Patches Zero-Click Code Execution Vulnerability
-
Zoom patches critical zero click flaw Zoomsday threatening meetings
Zoom has released patches for several vulnerabilities, including a critical zero-click flaw labeled "Zoomsday" (CVE-2026-53413) linked to its annotation feature. This vulnerability allows an attacker to execute code on another participant's device during a…
-
Zoom Patches Zero-Click Code Execution Vulnerability
Zoom announced patches for four vulnerabilities, including a critical zero-click remote code execution (RCE) flaw (CVE-2026-53413) that allowed participants to execute code on others' machines. Discovered by A Security, this bug exploited the annotator…
-
-
Adobe releases patches for over 50 vulnerabilities across key products
Adobe has released patches addressing over 50 vulnerabilities in its products, focusing on critical flaws in ColdFusion, Campaign Classic, and Commerce. Key vulnerabilities include three critical bugs in ColdFusion with high CVSS scores leading to arbitrary…
SecurityWeek -
AI Enhanced SharePoint Flaw Lets Attackers Run Code Remotely
The article discusses a recently disclosed exploit chain in AI-assisted SharePoint, which leads to unauthenticated Remote Code Execution (RCE). The vulnerability poses significant security risks for enterprises using SharePoint, as it allows attackers to…
The Hacker News -
ExfilSquad Targets New Victims, Shares Data via Torrents
ExfilSquad, a new cybercrime group that emerged in mid-2026, is targeting organizations by stealing data and threatening to leak it unless a ransom is paid. They focus on exploiting cloud tools like Microsoft Dataverse and CRM systems, recently attacking 13…
Security AffairsExfilSquad -
DeadLock ransomware hides behind Polygon smart contracts
The article discusses the DeadLock ransomware, which utilizes Polygon smart contracts to enhance its extortion tactics. This approach makes it increasingly challenging for law enforcement and cybersecurity professionals to disrupt these criminal activities.…
The Hacker NewsDeadLock -
Valve Warns EU Steam Buyers of Fake Delivery Scams After CEVA Hack
Valve has warned European Steam hardware buyers about potential fake delivery scams following a cyberattack on CEVA Logistics, its shipping partner. Personal information, including names, addresses, and email addresses associated with hardware orders, was…
Malwarebytes -
Iran-Linked Hackers Target More US Water Infrastructure in New Jersey and Alabama
Iranian-linked hackers have targeted water infrastructure in New Jersey and Alabama, escalating a series of cyberattacks across at least 12 states since July. Notably, the City of Cape May and the Borough of Woodbine reported simultaneous attacks, which did…
Security Affairs -
AI Powered Pentests Flood Teams Leaving Validation Debt Unchecked
The article discusses the challenges associated with AI in penetration testing (pentesting), emphasizing the issue of 'validation debt'—the backlog of unverified findings that arises when the number of vulnerabilities discovered exceeds the team's capacity to…
Security Affairs -
Recruitment via Drone Battle: Ukraine spreads on social media
Social media platforms are cracking down on recruitment strategies linked to a video game called **Drone Battle: Ukraine**, which serves as a recruitment tool for Russia's drone factory in Tatarstan. Investigators describe the game as part of a larger…
Malwarebytes -
Cisco Warns of Critical ClamAV Flaws Affecting Secure Endpoint
Cisco has issued a warning regarding seven vulnerabilities in ClamAV that affect its Secure Endpoint Connector across Windows, macOS, and Linux. Two of these vulnerabilities have public proof-of-concept (PoC) exploits that could allow unauthenticated…
-
CEOs must lead AI governance as adoption outpaces policy
AI governance, traditionally managed by legal departments, is increasingly critical for CEOs due to its impact on organizational performance. A significant 46% of organizations struggle with AI governance, resulting in underperformance. Leaders must act…
SecurityWeek -
Lazarus NullReceiver malware uses npm Ethereum queries for C2
Six npm packages have been identified as querying a malicious Ethereum wallet to retrieve command-and-control (C2) addresses, allowing them to fetch malware payloads. Research by Sonatype revealed that all identified packages contain the same payload and are…
InfosecurityLazarus Group -
Cursor CLI flaw lets cloned repos run commands on dev machines
A security flaw in Cursor's command-line tool has been identified, which allows cloned repositories to run commands on a developer's machine without prior trust verification. Reported by Manifold Security, the issue concerns Cursor's worktree feature that…
Infosecurity -
SAP Patches Critical Code Injection, Memory Corruption Vulnerabilities
SAP recently announced the release of 28 new security notes addressing critical vulnerabilities in its software, including four critical issues with CVSS scores ranging from 9.1 to 10.0. The most severe vulnerability, CVE-2026-58231, allows remote attackers…
-
US Lawmakers Introduce Water Cyber Shield Act with $300M Funding
A new initiative to enhance cybersecurity for U.S. water infrastructure has been launched by federal lawmakers, including the introduction of the Water Cyber Shield Act. This legislation aims to improve federal oversight and funding for water security,…
SecurityWeek -
MarkLogic Server Security Bulletin Patches 10 Vulnerabilities, With CVSS Scores Up to 9.9
Progress has issued a bulletin revealing ten vulnerabilities within MarkLogic Server, with some rated critical (CVSS score of 9.9). The vulnerabilities, which include authentication bypass and privilege escalation, have not been confirmed as actively…
-
FBI warns of rising predator attacks on private photos
The FBI issued a warning about increasing attacks by sexual predators targeting online accounts for non-consensual intimate images (NCII). Criminals employ tactics like password guessing, fake customer service messages, and phishing emails to steal sensitive…
Malwarebytes -
New SignalTrace tech links phones to cars, raising privacy alarms
The article discusses the implications of a new surveillance technology called SignalTrace, which connects mobile devices to vehicles through automatic license plate readers (LPRs). Developed by Leonardo, SignalTrace can recognize patterns of consumer…
Ars Technica -
OpenAI releases GPT 5.6 Cyber, easing exploit code generation
OpenAI has launched GPT-5.6-Cyber, a new AI model with reduced safeguards that is primarily designed for exploit development. This model raises concerns regarding cybersecurity as it may enable users to generate malicious software or scripts with greater…
The Hacker News -
Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave
The 25th edition of Cloudflare's DDoS Threat Report provides an overview of DDoS attacks from January to June 2026. Key insights include a 519% surge in attacks exceeding 1 Tbps, a shift in attack vectors towards DNS amplification (40% of network-layer…
Cloudflare -
CVE-2026-55040: SharePoint flaw lets attackers forge admin tokens
Rapid7 disclosed CVE-2026-55040, a serious authentication bypass vulnerability in Microsoft SharePoint, on July 14, 2026. The vulnerability allows unauthenticated attackers to forge valid JSON Web Tokens (JWT), impersonating SharePoint users or…
