News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 53 so far |
Thu 13 Aug· 49 articles
-
Experts Warn VMware vCenter Zero day Flaw Exploited Worldwide
A critical vulnerability in VMware vCenter, identified as CVE-2026–59310, has been under active exploitation since early August, shortly after its disclosure on July 29. With a CVSS score of 9.8, the flaw allows remote attackers to execute arbitrary code…
Dark Reading -
Solar Eclipse 2024 Cuts European Internet Traffic by Nearly Half
On August 12, a total solar eclipse crossed Europe, marking the first such event in twenty years. Millions witnessed the eclipse, leading to significant decreases in internet traffic as people diverted their attention from devices to the sky. An analysis of…
Cloudflare -
US to let private firms overseas cyber raids on crime gangs
The Trump administration is initiating a program that recruits private security firms to execute government-authorized cyber operations against overseas criminal organizations targeting U.S. entities. A National Security Presidential Memorandum outlines that…
Ars Technica -
DomainTools probes Iran hacktivists, Mexican scams, crypto ties
The newsletter summarizes recent activities and research of DomainTools Investigations. Major highlights include: 1) An analysis of the decentralized pro-Iran hacktivist ecosystem, which combines various cyber groups for influence operations during…
dti.domaintools.com -
Adobe Commerce2 articles this day · SecurityWeek first
Adobe Commerce CVE-2026-71362 exploited, accounts hijacked · Adobe Commerce flaw CVE-2026-71362 lets attackers hijack accounts
-
Adobe Commerce CVE-2026-71362 exploited, accounts hijacked
Adobe Commerce's critical flaw, CVE-2026-71362, has come under attack shortly after its public disclosure, allowing unauthenticated attackers to hijack customer accounts and access sensitive data. Registered with a CVSS score of 9.1, the vulnerability…
-
Adobe Commerce flaw CVE-2026-71362 lets attackers hijack accounts
The article reports on a recent critical-severity vulnerability in Adobe Commerce, tracked as CVE-2026-71362, which has a CVSS score of 9.1. The flaw, described as an incorrect authorization issue, allows unauthenticated attackers to elevate privileges and…
-
-
CISA Flags Critical Flaws in Metabase, Windows and Cisco Firewall
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added vulnerabilities related to Metabase, Windows, and Cisco Secure Firewall to its Known Exploited Vulnerabilities catalog. The vulnerabilities include: 1. **CVE-2026-20349**: A heap…
-
Team PCP leaks 78k CI/CD secrets from 2,186 firms in five days
CloudSEK reported that Team PCP, a threat actor, exfiltrated 78,330 secrets from CI/CD pipelines of 2,186 organizations over five days in March 2026. This incident highlights the vulnerabilities in CI/CD systems as attackers can compromise a trusted…
StepSecurityTeamPCP -
Exposed AWS key leads to breach of UK charity data via Beacon CRM
A compromised AWS access key led to a cyber-attack on the CRM provider Beacon, affecting personal information of over 1500 UK charities. The key was publicly exposed during software development, allowing the attacker to download data, including sensitive…
Infosecurity -
US government permits vetted firms to hack criminal gangs abroad
The U.S. government will allow vetted private companies to conduct offensive cyber operations against international criminal gangs for the first time. This initiative, outlined in a presidential memorandum, aims to utilize private sector capabilities to…
DataBreaches -
QVMC alerts patients following Aesto vendor data breach
Quincy Valley Medical Center (QVMC) informed patients about a security incident involving Aesto, a third-party vendor responsible for archiving patient data, which was disclosed on July 7, 2026. Letters to patients were sent on August 5, adhering to a 30-day…
DataBreaches -
Google Cloud sets 2027 target for post quantum security upgrade
Google Cloud plans to achieve its first major post-quantum security milestone by the end of 2027, focusing on mitigating risks associated with data that could be decrypted by future quantum computers. Their roadmap includes specific deadlines for improving…
Infosecurity -
July 2026 sees 21 cybersecurity M&A deals, driving consolidation
In July 2026, twenty-one cybersecurity-related mergers and acquisitions (M&A) were announced, reflecting a trend in the industry. Significant deals include: 1) Bank of America's acquisition of MDSec Consulting to enhance its presence in the UK; 2) Barracuda's…
SecurityWeek -
CVE-2026-63455: EdgeConnect Orchestrator Web Authentication Bypass Rated CVSS 9.8
HPE Aruba Networking has addressed two critical security vulnerabilities (CVE-2026-63455 and CVE-2026-63456) in its EdgeConnect SD-WAN Orchestrator, both assigned a CVSS score of 9.8. These vulnerabilities allow unauthenticated remote attackers to bypass web…
-
Broadcom VMware vCenter2 articles this day · SecurityWeek first
VMware vCenter CVE-2026-59310 flaw exploited worldwide within days · VMware vCenter CVE-2026-59310 flaw lets APT groups run code
-
VMware vCenter CVE-2026-59310 flaw exploited worldwide within days
A critical vulnerability in VMware's vCenter, identified as CVE-2026-59310, was publicly disclosed on July 29, 2026, and exploited within just five days. The flaw, rated CVSS 9.8, allows unauthenticated attackers to execute arbitrary code on compromised…
-
VMware vCenter CVE-2026-59310 flaw lets APT groups run code
Threat actors are exploiting a critical vulnerability (CVE-2026-59310) in VMware vCenter, disclosed on July 29 and patched by Broadcom. The flaw, rated 9.8 on the CVSS scale, is associated with directory traversal in the Syslog server allowing remote code…
-
-
Apple patches root privilege flaw in mediaremoted on iOS, macOS
Apple has addressed a significant vulnerability tracked as CVE-2026-43723, which allowed a local application to gain root privileges through the mediaremoted service. This flaw has a CVSS score of 7.8 and affects multiple versions of iOS, iPadOS, tvOS,…
-
Cloudflare rolls out smarter CT monitoring for 650k domains
Cloudflare has launched Certificate Transparency Monitoring (CTM) for over 650,000 customer domains, providing alerts when new TLS certificates appear in public logs. Previously, alerts were noisy due to many routine renewals from Cloudflare's own issuances.…
Cloudflare -
Check Point Finds More Ransomware Groups Using AI Today
The 'State of Ransomware Q2 2026' report by Check Point Research reveals a notable shift in ransomware dynamics, highlighting that while leading Ransomware-as-a-Service (RaaS) groups continue to dominate, the number of active groups has increased…
Check PointThe Gentlemen -
WordPress2 articles this day · SecurityOnline first
WordPress patches CVE-2026-65640 after remote code flaw found · WordPress flaw CVE-2026-65640 lets authors run code remotely
-
WordPress patches CVE-2026-65640 after remote code flaw found
WordPress has released a patch for a high-severity vulnerability (CVE-2026-65640) that allows authenticated attackers to execute arbitrary code remotely, with a CVSS score of 8.8. This vulnerability, affecting installations using Imagick and Ghostscript, can…
-
WordPress flaw CVE-2026-65640 lets authors run code remotely
A critical vulnerability (CVE-2026-65640) affecting WordPress versions 4.7.0 to 7.0.3 has been identified and patched in version 7.0.4. This flaw, which allows authenticated remote code execution via the Imagick and Ghostscript libraries, poses a significant…
-
-
Zero-Click File Drop Hits Xiaomi ShareMe: PoC Public
A researcher discovered a zero-click vulnerability in Xiaomi's ShareMe file-sharing app, allowing attackers within Bluetooth LE range to send arbitrary files to a victim's phone without any user consent or notification. This flaw affects over 1 billion…
SecurityOnline -
Trump Authorizes Private Sector Participation in Offensive Cyber Operations
The White House has authorized federal law enforcement to collaborate with private firms in conducting offensive cyber operations against foreign threats. This initiative, outlined in National Security Presidential Memorandum (NSPM) signed by President…
Infosecurity -
Hitachi Energy APM Edge flaws let local users gain root access
The advisory highlights vulnerabilities in Hitachi Energy's APM Edge product, specifically related to two critical flaws: CVE-2026-43284 and CVE-2026-43500. Both vulnerabilities could allow local unprivileged users to escalate privileges to root, affecting…
-
Critical command injection bug in Haiwell's IoT Cloud HMI Gateway
The advisory, ICSA-26-225-02, issued on August 13, 2026, highlights a critical OS command injection vulnerability in the Haiwell IoT Cloud HMI Gateway, specifically version 3.40.1.12. The vulnerability allows attackers to execute arbitrary OS commands with…
CISA -
High risk AVEVA SCADA bug allows remote code execution
The ICS Advisory ICSA-26-225-01 addresses a critical vulnerability in AVEVA Enterprise SCADA that could allow attackers to tamper with serialized data, potentially resulting in code execution during deserialization. Affected versions include several releases…
CISA -
Siemens Parasolid flaw enables code execution via X_T files
The CISA advisory ICSA-26-225-10 addresses a critical vulnerability in Siemens' Parasolid software, which is susceptible to an out-of-bounds read when parsing X_T files. This issue can lead to application crashes or arbitrary code execution. Affected…
CISA -
Israeli VC Team8 bags $365M, lifting AUM beyond $2B
Israel-based venture fund Team8 has raised $365 million, with $265 million allocated to its third fund and $100 million for further investments in promising startups. This brings Team8's total assets under management to nearly $2 billion since its inception…
SecurityWeek -
WindRelay malware steals live card data via NFC relay attack
A new Android malware, named "WindRelay," enables criminals to steal live card data via NFC (Near Field Communication) technology. Researchers from Group-IB reported that attackers can capture card data from an infected phone and relay it to a…
Malwarebytes -
Fortinet patches CVE-2026-26035 auth bypass in FortiWeb
Fortinet has released patches for eight vulnerabilities in its products, including significant authentication issues in FortiWeb and FortiManager. The CVE-2026-26035 vulnerability in FortiWeb allows unauthenticated remote attackers to access the GUI/CLI…
-
Jewelbug APT mixes espionage, crypto theft via custom malware
The article discusses the **Jewelbug APT** group, a cybercriminal organization believed to be operating from China. This group engages in both state-sponsored cyber espionage and cryptocurrency theft using a single command-and-control panel. Their activities…
Dark ReadingREF7707 -
Tech Giants Face Thousands of Lawsuits Over Youth Safety Concerns
A consortium of tech giants, including Meta, TikTok, Google, and Snap, is facing approximately 3,000 lawsuits regarding youth safety due to allegations that they marketed addictive products harmful to children's mental health. A recent ruling from the 9th US…
Malwarebytes -
US memo lets vetted firms conduct offensive cyber ops overseas
A recent presidential memorandum expands U.S. federal capabilities against foreign cybercrime by enabling vetted private companies to conduct offensive cyber operations under federal oversight. Managed by the National Coordination Center, these operations…
SecurityWeek -
Akira Ransomware Fails After Safe Mode Trick on SonicWall VPN
The article discusses an incident involving the Akira ransomware group that attempted to deploy ransomware on a victim's system but faced an unexpected failure. Using an initial credential spraying attack, the attackers gained access to a SonicWall SSL VPN…
InfosecurityStorm-1567 -
ShieldBreak exploit hits Microsoft Defender via CVE-2026-50656
A security researcher known as Nightmare Eclipse released a new zero-day exploit named ShieldBreak, which allows for privilege escalation on Windows systems. This exploit specifically targets Microsoft Defender, enabling users to gain SYSTEM privileges. It…
-
SharePoint Zero Day Flaw Exploited After Rapid7 PoC Release
The article discusses the exploitation of a critical vulnerability in SharePoint (CVE-2026-55040), which allows unauthenticated users to impersonate administrators. The flaw, with a CVSS score of 9.1, was patched in July 2026, but public proof-of-concept…
-
ICO Reprimands Criminal Records Office After 2023 Breach
The ICO reprimanded the UK's Criminal Records Office (ACRO) following a data breach affecting over 10,000 individuals. The breach, which occurred from August 2022 to March 2023, was due to poor security practices, such as inadequate patch management and…
Infosecurity -
Storm-1175 Replaces Medusa With New StormEncryptor Ransomware
Microsoft has reported that the China-linked cybercriminal group Storm-1175 has replaced its previous ransomware, Medusa, with a new strain known as StormEncryptor. This ransomware encrypts files and appends a `.encrypted` extension, along with leaving a…
-
Armored Likho uses Still Toolkit to spy on Telegram in Russia
In May 2026, Kaspersky researchers uncovered a new cyber-espionage campaign by the Armored Likho group targeting individuals and organizations in Russia. The campaign utilizes a deceptive app to deliver the **Still Toolkit**, which comprises two primary…
securelist.comArmored Likho -
ChainDrop npm worm infects 400+ packages, steals cloud credential
The article discusses a newly detected self-propagating npm worm named ChainDrop, which is linked to over 400 infected packages, downloaded extensively, and targets developer environments and cloud infrastructures. It can steal sensitive credentials, such as…
SecurityOnline
