CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 10–13 on weekend days.

12 Oct1314151617181920Busiest · 96212223242543Today
  • On CISA KEV CVEs
  • Other coverage
Show as table
Articles published per day
DayArticles published
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Sun 25 Oct13
Today, Mon 26 Oct43 so far
Developing
Exploited only
80 articles

Latest days

Tue 18 Aug· 80 articles

  1. One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025

    The article highlights the ongoing security issues concerning SaaS applications, particularly focusing on an attacker who has successfully scraped data from both Salesforce and ServiceNow portals since 2025. It emphasizes the need for increased vigilance and…

    The Hacker News

  2. UT San Antonio Systems Down, Delaying Student Registration

    A cyber incident at the University of Texas (UT) San Antonio has disrupted IT systems, impacting student registrations and payments just before the new academic year starts. The university detected attempted unauthorized activity but reported no evidence of…

    Infosecurity

  3. Google Docs ‘Anyone with Link’ Setting Exposes Login Details

    The article warns users about the risks of using the 'anyone with the link' sharing option in Google Docs after a case where sensitive credentials were accidentally exposed online. A contractor for Pageloot set login details in a public Google Doc,…

    Malwarebytes

  4. wpmudev Forminator Forms – Contact Form, Payment Form & Custom Form Builder2 articles this day · SecurityOnline first

    WordPress Forminator flaw (CVE-2026-15748) exposes 300k sites · CVE-2026-15748 (CVSS 9.8): Forminator Flaw Enables Pre-Auth RCE

    2 outletsCVE-2026-15748CVE-2026-15748

  5. Heights Finance breach exposes data of 734,828 customers

    The Heights Finance data breach involved unauthorized access to a third-party cloud platform containing sensitive customer data, affecting approximately 734,828 individuals. The breach may have exposed personal and financial information including names,…

    Malwarebytes

  6. Three-quarters of Ransomware Attacks Target Mid-Market Firms

    A study by Black Kite revealed that 73% of ransomware attacks in 2023 targeted mid-sized firms with revenues between $10 million and $1 billion. The report analyzed over 13,000 incidents and highlighted that manufacturing companies were the most affected…

    Infosecurity

  7. Microsoft drops WMIC from new Windows 11 installs citing security

    Microsoft has confirmed that the Windows Management Instrumentation Command-line (WMIC) utility will no longer be included by default in new installations of Windows 11, starting with the August update for versions 24H2 and 25H2. Although existing…

    SecurityOnline

  8. NIST seeks public feedback on human centred cybersecurity draft

    On August 12, 2026, NIST released a concept paper advocating for a human-centered approach to cybersecurity, emphasizing the need for public feedback until September 30, 2026. This approach positions people as defenders and problem-solvers rather than…

    SecurityOnline

  9. Heights Finance alerts 1.2M after third party cloud breach

    Heights Finance Holdings Co. has reported a data breach affecting over 1.2 million individuals, where hackers accessed a third-party cloud platform used for customer data storage. The breach involved the theft of personal and financial information, including…

    SecurityWeek

  10. SpaceXAI debuts Cursor Origin beta with GitHub sync for devs

    SpaceXAI has launched the beta phase of its code hosting service, Cursor Origin, accessible to paying subscribers. This platform features real-time GitHub synchronization, allowing developers to mirror GitHub repositories directly. Cursor Origin incorporates…

    SecurityOnline

  11. Hardware wallet maker SafePal leaks data of 40,000 users

    The article discusses a vulnerability found in SafePal's hardware wallet, which potentially exposed data of nearly 40,000 customers. It highlights the implications of this breach within the cybersecurity landscape, noting the importance of safeguarding…

    The Hacker News

  12. SafePal breach leaks 40k users' data via order tracking flaw

    SafePal recently confirmed a data breach affecting approximately 39,798 customers due to an authorization flaw in an order-tracking plug-in. Exposed data includes names, email addresses, shipping addresses, phone numbers, and purchase details from orders…

    SecurityOnline

  13. North Carolina DMV launches ID, supports Apple, Google Wallet

    North Carolina's DMV will roll out its Mobile ID program in December, initially through the "NC Wallet" app, expanding to support Apple Wallet, Google Wallet, and Samsung Wallet by early next year. This digital ID will be accepted at over 250 TSA checkpoints…

    SecurityOnline

  14. GitLab3 articles this day · SecurityOnline first

    GitLab fixes critical code injection and CSRF bugs · GitLab Patches Critical Unauthenticated GraphQL Vulnerability

    3 outletsCVE-2026-19478CVE-2026-19478

  15. SRA Warns UK Law Firms on AI Risks and Data Protection Breaches

    The Solicitors Regulation Authority (SRA) of the UK has raised concerns about the misuse of AI in the legal sector, emphasizing the need for solicitors and law firms to ensure compliance with legal obligations. Key issues highlighted include AI…

    Infosecurity

  16. GEEKOM Mini PC Drivers Spread Backdoor Malware Since Dec 2024

    GEEKOM, a domestic mini PC manufacturer, has been found distributing infected driver downloads that contain a backdoor, as confirmed by both user reports and testing from VideoCardz. The malware has been active since December 2024, originating from a…

    SecurityOnline

  17. CISA flags CVE-2025-62593 in Ray AI, orders patch by August

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical remote code execution (RCE) vulnerability, identified as CVE-2025-62593, to its Known Exploited Vulnerabilities catalog. The flaw affects the Ray AI compute engine,…

    Security AffairsCVE-2025-62593CVE-2025-62593Exploited

  18. North Korean Kimsuky leverages AI to weaponise GitHub attacks

    The Kimsuky group, a suspected North Korean threat actor, has developed advanced AI operations for cyberattacks, primarily targeting diplomatic, military, and virtual asset sectors. They utilize local language models to create polished decoy documents,…

    SecurityOnlineKimsuky

  19. Microsoft Enables Auto WiFi Connect in Windows 11 WinRE

    Microsoft has improved the networking capabilities of the Windows 11 WinRE (Windows Recovery Environment) in its latest Insider Preview build. The update allows automatic connectivity to previously saved Wi-Fi networks during recovery scenarios like Cloud…

    SecurityOnline

  20. CVE-2026-75045: Unauthenticated Attacker Could Download YouTrack Database Backups

    JetBrains has addressed eight security vulnerabilities in its YouTrack platform, with the most critical being CVE-2026-75045. This vulnerability, rated as Critical with a CVSS score of 9.1, allows unauthenticated users to download database backups without…

    SecurityOnlineCVE-2026-75045CVE-2026-75045

  21. New Mirai-Based Evooo1Bot Botnet Targets Linux Devices

    The Evooo1Bot is a new Linux botnet based on Mirai, discovered by Fortinet's FortiGuard Labs. Active since July 2026, it targets routers and IoT devices for DDoS attacks, credential theft, and criminal proxy services. The botnet extends Mirai's capabilities…

    Security Affairs

  22. Zscaler Uncovers Abyssos Modular RAT Targeting Windows Endpoints

    The Abyssos modular RAT is a newly discovered malware targeting Windows endpoints, allowing attackers to execute commands, steal data, and control infected systems. It employs sophisticated methods to evade detection, including dynamic resolution of Windows…

    SecurityOnline

  23. Apple issues macOS, iOS, iPadOS patches for 28 WebKit flaws

    Apple has released significant security updates for macOS (26.6.2), iOS (26.6.1), and iPadOS (26.6.1), addressing a total of 28 vulnerabilities primarily affecting the WebKit browser engine. Notable fixes include 21 vulnerabilities in WebKit that could lead…

    SecurityWeek

  24. CISA warns of Ray framework flaw enabling browser based RCE attacks

    The article discusses a newly identified vulnerability, specifically a flaw in the Ray framework flagged by CISA, that can lead to remote code execution (RCE) through web browsers. This issue has already seen active exploitation. The report emphasizes the…

    The Hacker News

  25. Aeternum Blockchain Botnet Hides C2 Commands in Polygon Smart Contracts

    Researchers from Palo Alto Networks Unit 42 identified a new blockchain-based botnet named Aeternum, which operates its command-and-control (C2) entirely via Polygon smart contracts, affecting Windows systems, particularly targeting cryptocurrency wallet…

    SecurityOnline

  26. GeoServer bug CVE-2023-25158 allows remote takeover, high risk

    A critical vulnerability (CVE-2023-25158) in GeoServer allows unauthenticated SQL injection attacks via the jsonArrayContains filter function, which poses a high risk due to its CVSS score of 9.8. This flaw affects various versions of GeoServer with PostGIS,…

    SecurityOnlineCVE-2023-25158CVE-2023-25158

  27. Ubuntu on WSL installs surge as AI devs embrace Linux tools

    The article discusses the significant increase in installations of Ubuntu via the Windows Subsystem for Linux (WSL), suggesting that this trend may soon surpass traditional native Ubuntu installations. This surge is attributed to the growing use of…

    SecurityOnline

  28. Leaked Geedge files reveal Tiangou Secure Gateway censorship code

    The article discusses a significant leak of over 100,000 internal files from Geedge Networks, revealing parts of the Tiangou Secure Gateway (TSG), a commercial censorship platform developed to detect and block VPNs. Researchers reconstructed TSG from the…

    SecurityOnline

  29. Amazon Bars Class Actions, Forces Individual Arbitration

    Amazon has updated its terms of service, prohibiting users from initiating or participating in class action lawsuits against the company. Users must resolve disputes through mandatory arbitration, which eliminates the option for judicial review. While small…

    SecurityOnline

  30. Windows Server 2022 Support Ends 2026, Advises Upgrade to 2025

    Windows Server 2022 will exit mainstream support in October 2026 and transition to extended support until October 14, 2031. During extended support, Microsoft will provide security updates but no new features. Enterprises are encouraged to upgrade to Windows…

    SecurityOnline

  31. Linux Kernel 7.2 Update Boosts Drivers, File systems and Security

    The release of Linux Kernel 7.2 has been officially announced after extensive testing, focusing on hardware drivers, file systems, networking, virtualization, and security enhancements. Key highlights include: 1. **Hardware Driver Updates**: Significant…

    SecurityOnline

  32. Firefox iOS gets native ad blocker test with EasyList

    Mozilla is testing a native ad-blocking tool in Firefox for iOS, making it the only mainstream browser with this feature built-in. Users will not need third-party extensions to block ads, as the tool operates at the network level using the EasyList filter.…

    SecurityOnline

  33. Cross Device Service flaw lets users escalate to SYSTEM via DLL

    Microsoft has addressed a significant security vulnerability, CVE-2026-66804, related to the Windows Cross Device Service, which allows ordinary users to elevate their privileges to SYSTEM status through a DLL planting exploit. The vulnerability has a CVSS…

    SecurityOnlineCVE-2026-66804CVE-2026-66804

  34. CVE-2026-71479: New API Integer Overflow Exploited in the Wild

    A critical vulnerability (CVE-2026-71479) has been detected in the New API, an open-source AI gateway, allowing an integer overflow that enables users to exploit billing systems. The flaw can turn a small balance into a large one through crafted requests,…

    SecurityOnlineCVE-2026-71479CVE-2026-71479

  35. Internet Storm Center shares Johannes Ullrich’s threat insights

    The page features handler Johannes Ullrich, with a current threat level of 'green'. It includes links to previous posts, classes offered by Ullrich, and an ISC Stormcast for August 18, 2026. The page provides various resources, including diaries, podcasts,…

    SANS ISC

  36. DarkCrystal RAT spreads via fake Colombian justice SVG phishing

    The page details an active exploit involving the DCRat (DarkCrystal RAT) malware, which utilizes a phishing campaign centered around a manipulated SVG email attachment disguising as a Colombian judicial notice. The attack leverages HTML smuggling, DLL…

    SecurityOnline

  37. Critical Path Traversal Flaw in BigBlueButton Risks Student Data

    BigBlueButton has a critical path traversal vulnerability affecting versions prior to 3.0.35 and 4.0.0-beta.5, which allows attackers to perform unauthenticated arbitrary file reads. This could lead to the extraction of sensitive files and full server…

    SecurityOnline

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device