News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 53 so far |
Wed 12 Aug· 65 articles
-
Ivanti patches critical EPM flaws, including cleartext data leak
Ivanti has released patches for four vulnerabilities in its Endpoint Manager (EPM) and Neurons for MDM products. The EPM update addresses three high-severity issues, including CVE-2026-18129, which involves cleartext transmission of sensitive information,…
-
Microsoft Windows Ancillary Function Driver for WinSock4 articles this day · SecurityOnline first
Microsoft Fixes 400 Flaws on August Patch Tuesday · Microsoft patches wormable DNS flaw and critical WinSock zero day
-
Microsoft Fixes 400 Flaws on August Patch Tuesday
On August 11, Microsoft addressed a total of 400 vulnerabilities during its Patch Tuesday, including a significant zero-day issue (CVE-2026-68820) that is actively exploited. This vulnerability, affecting the Windows Ancillary Function Driver, may allow…
-
Microsoft patches wormable DNS flaw and critical WinSock zero day
Microsoft's August 2026 Patch Tuesday update addresses 398 CVEs, including a zero-day vulnerability (CVE-2026-68820) and a wormable flaw (CVE-2026-62878) in Windows DNS Server. CVE-2026-68820 is a critical use-after-free bug in the WinSock driver that can…
-
Lazarus Exploits Windows Zero-Day in Operation Dream Job Attacks
The Lazarus group, linked to North Korea, launched a campaign called Operation Dream Job, targeting defense and aerospace companies in Europe and India. The campaign utilized spear-phishing and a Windows zero-day vulnerability (CVE-2026-68820) to deliver a…
-
Microsoft Patch Tuesday Patches Critical WinSock Exploit
The August 2026 Patch Tuesday from Microsoft addresses 421 vulnerabilities, with 62 categorized as critical. Notably, CVE-2026-68820, a use-after-free vulnerability in the WinSock driver, has been exploited in the wild. Other vulnerabilities include…
-
-
Microsoft Malware Protection Engine2 articles this day · SecurityOnline first
Proof of concept bypasses Defender patch for CVE-2026-50656 · ShieldBreak Exploit Exposes Defender Patch Flaw CVE-2026-50656
-
Proof of concept bypasses Defender patch for CVE-2026-50656
Chaotic Eclipse, a security researcher, has released a proof-of-concept (PoC) for a new zero-day vulnerability named ShieldBreak, which bypasses a Microsoft Defender patch for CVE-2026-50656. This flaw allows attackers to achieve SYSTEM-level code execution…
-
ShieldBreak Exploit Exposes Defender Patch Flaw CVE-2026-50656
The content discusses a new public proof-of-concept (PoC) exploit called ShieldBreak that demonstrates a vulnerability, CVE-2026-50656, in Microsoft Windows Defender. This exploit allows privilege escalation from a standard user to SYSTEM level, claiming a…
-
-
Malicious LiteLLM releases linked to Trivy hack hit 2,100 firms
The article discusses how malicious releases of LiteLLM, linked to the Trivy hack, may have compromised over 2,100 organizations. It highlights the importance of cybersecurity in protecting software supply chains and emphasizes the necessity for robust…
The Hacker News -
Siemens, Schneider, Phoenix Patch Critical ICS Flaws in August
In August 2026, major industrial companies Siemens, Schneider Electric, and Phoenix Contact released Patch Tuesday advisories addressing critical vulnerabilities in their Industrial Control System (ICS) products. Siemens published 10 advisories, including…
SecurityWeek -
Siemens warns of CVE-2026-58115 RCE in SIMATIC IoT2050 devices
Siemens has issued a critical alert for CVE-2026-58115, a severe vulnerability in the SIMATIC IoT2050 Advanced devices, rated 10.0 on the CVSS scale. This flaw allows unauthenticated remote code execution via the Node-RED HTTP interface, posing significant…
-
SAP Commerce Cloud flaw lets attackers run arbitrary code
The article discusses a critical vulnerability in SAP Commerce Cloud that allows unauthenticated attackers to execute arbitrary code. This flaw poses significant risks to enterprises using the platform as it could lead to unauthorized access and manipulation…
The Hacker News -
SonicWall GMS2 articles this day · SecurityOnline first
SonicWall patches GMS RCE flaws CVE-2026-66147, CVE-2026-66145 · SonicWall fixes critical RCE bug CVE-2026-66147 in GMS, Email
-
SonicWall patches GMS RCE flaws CVE-2026-66147, CVE-2026-66145
SonicWall has released patches for eight vulnerabilities in its products, particularly focusing on two critical remote code execution (RCE) flaws in the Global Management System (GMS) which could allow unauthenticated attackers to execute arbitrary code. The…
-
SonicWall fixes critical RCE bug CVE-2026-66147 in GMS, Email
SonicWall has disclosed critical vulnerabilities in its Global Management System (GMS) and Email Security products as of August 11, 2026. The most severe flaw, CVE-2026-66147, allows unauthenticated remote code execution with a CVSS score of 9.4. The…
-
-
Cisco, Windows and Metabase flaws fuel new macOS ClickFix attack
The page discusses a critical alert regarding three active exploits detected today, associated with specific vulnerabilities in Cisco, Microsoft Windows, and Metabase. It highlights a new cyber threat targeting macOS users via a ClickFix campaign, where…
SecurityOnline -
ShieldBreak zero‑day bypasses Defender, gives SYSTEM access
The article discusses a zero-day vulnerability known as ShieldBreak, which reportedly bypasses Microsoft Defender's patch, allowing SYSTEM access. Published on August 12, 2026, it highlights the implications for cybersecurity, emphasizing the potential risks…
The Hacker News -
Cisco ASA/FTD bug exploited for remote DoS attacks
The article discusses a recently discovered vulnerability in Cisco ASA and FTD devices, which has been actively exploited in the wild to trigger remote denial-of-service (DoS) attacks. The author, Ravie Lakshmanan, emphasizes the urgency for users of these…
The Hacker News -
UNC6671 vishing gang rebrands, steals cash from banks, law firms
The page reports on the UNC6671 vishing extortion group's activities, revealing that they have rebranded after the claimed retirement of their BlackFile brand, now operating under names like Redact, Pink, Helix, and Falcon. They utilize voice phishing to…
SecurityOnlineUNC6671 -
Critical SharePoint JWT flaw lets attackers bypass authentication
The page discusses a critical security vulnerability (CVE-2026-55040) affecting Microsoft SharePoint, enabling unauthorized users to bypass authentication by forging JSON Web Tokens (JWT). The issue has a CVSS score of 9.1, indicating its severity. Rapid7…
-
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)2 articles this day · SecurityOnline first
Cisco patches critical ASA/FTD zero day as attacks spike · Cisco ASA/FTD flaw lets attackers crash firewalls, CVE-2026-20349
-
Cisco patches critical ASA/FTD zero day as attacks spike
Cisco has released patches for a zero-day vulnerability (CVE-2026-20349) affecting its Secure Firewall ASA and FTD software. This vulnerability allows unauthenticated remote attackers to cause denial-of-service (DoS) conditions by sending specially crafted…
-
Cisco ASA/FTD flaw lets attackers crash firewalls, CVE-2026-20349
A critical vulnerability in Cisco's Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) has been identified, tracked as CVE-2026-20349. This flaw allows unauthenticated attackers to remotely crash the firewall,…
-
-
Chrome patches five high severity use after free flaws in update
The page discusses a new Chrome security update that addresses five high-severity use-after-free vulnerabilities affecting various components of the browser, including V8, Blink, HTML, TabStrip, and Extensions. The vulnerabilities, which allow potentially…
SecurityOnline -
Zoom fixes two remote code execution bugs in annotator function
On August 11, 2026, Zoom announced four security vulnerabilities, including two that allow remote code execution. The flaws, identified as CVE-2026-53413 and CVE-2026-53415, are particularly severe with CVSS scores of 8.3. Affected users are urged to update…
-
ISC Stormcast For Wednesday, August 12th, 2026 https://isc.sans.edu/podcastdetail/10048, (Wed, Aug 12th)
The content provides an overview of the ISC Stormcast for August 12, 2026, with Renato Marinho as the handler on duty. The current threat level is classified as green. It includes links to discussions, various information security resources, and podcasts…
SANS ISC -
Linux Kernel CPU Timer Flaw Lets Local Users Gain Root Access
A critical vulnerability, tracked as CVE-2026-64560, exists in the Linux kernel related to CPU timers. This use-after-free flaw allows local users to gain root access, with a CVSS score of 7.8, indicating high severity. The issue stems from a race condition…
-
Passengers spoof Delta flight WiFi to steal data, FBI probes
On a Delta flight from Las Vegas to Atlanta, passengers allegedly spoofed the onboard Wi-Fi, prompting an investigation by federal law enforcement. This occurred shortly after the DEF CON security conference, where individuals reportedly created a fake…
Ars Technica
