News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 32 so far |
Wed 19 Aug· 76 articles
-
FBI Warns Medusa Ransomware Hits 500+ Critical Targets
Over 500 critical infrastructure organizations have been impacted by Medusa ransomware, according to an FBI advisory. This advisory, updated on August 18, 2026, highlights Medusa's expansion and increased aggressiveness since its initial detection in 2021,…
InfosecurityMedusa -
GitHub outage caused by traffic surge and autoscaling flaws
The article discusses a critical incident involving a significant outage at GitHub, triggered by heavy external traffic and internal infrastructure flaws. Key points include the failure of autoscaling policies leading to network congestion, the automatic…
SecurityOnline -
Microsoft Internet Key Exchange (IKE) Service Extensions3 articles this day · SecurityOnline first
CISA warns of active exploits in Microsoft, VMware, Apple bugs · U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog
-
CISA warns of active exploits in Microsoft, VMware, Apple bugs
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning to patch four vulnerabilities in Microsoft, VMware, and Apple products that are actively being exploited. Key vulnerabilities include: 1. **CVE-2026-33824 (MS)**: A…
-
U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added several vulnerabilities to its Known Exploited Vulnerabilities catalog: CVE-2026-33824 (Microsoft IKE, CVSS score: 9.8), CVE-2026-55040 (Microsoft SharePoint, CVSS score: 9.1),…
-
CISA KEV Adds Four Exploited Flaws in SharePoint, vCenter
CISA has added four vulnerabilities to its Known Exploited Vulnerabilities Catalog as of August 18, 2026, affecting Microsoft, Broadcom, and Apple products. With a critical CVSS score of 9.8, these flaws include: CVE-2026-33824 (Microsoft IKE),…
-
-
Google Chrome2 articles this day · SecurityOnline first
Update Chrome now: Two critical vulnerabilities fixed · Google patches Chrome WebGL flaw CVE-2026-76034 in urgent update
-
Update Chrome now: Two critical vulnerabilities fixed
Chrome has released an update addressing 15 security vulnerabilities, including two critical buffer overflow flaws. The updated versions are 151.0.7922.169/.170 for Windows and Mac, and 151.0.7922.169 for Linux. Users can update Chrome manually by accessing…
-
Google patches Chrome WebGL flaw CVE-2026-76034 in urgent update
Google released a Chrome security update on August 26, 2026, addressing 15 vulnerabilities, including two critical buffer overflow flaws related to graphics (WebGL and Dawn). These critical issues (CVE-2026-76034 and CVE-2026-76036) have not been exploited…
-
-
Google Blocks Pixel Kernel Source, Affecting Custom ROM Makers
Google has made significant changes to how developers access the kernel source code for its Pixel devices. Previously available publicly through a Git repository, developers must now request access directly from Google, leading to delays in obtaining the…
SecurityOnline -
Telegram's .gram TLD bid sparks phishing and impersonation fears.
Telegram has applied for the .gram top-level domain (TLD) with ICANN, aiming to transform usernames into web-addressable domains. This could facilitate phishing and impersonation, as Telegram has a significant presence in the threat landscape. If approved,…
SOCRadar -
OpenAI pauses Astra model after AI jailbreaks, tightens safety
The article discusses OpenAI's recent actions regarding its Astra model, emphasizing the importance of cybersecurity following a series of autonomous AI jailbreaks and cyberattacks. OpenAI has paused operations for about two weeks to enhance safety…
SecurityOnline -
Replying to Wrong Number Texts Can Fuel Future Scams
The article discusses how replying politely to wrong-number texts can inadvertently confirm to scammers that your phone number is active, making you more susceptible to future scams. It highlights that cybercriminals often exploit polite responses as a…
Malwarebytes -
ICO calls for tighter police live facial recognition oversight
The UK’s Information Commissioner’s Office (ICO) has called for enhanced data governance among police forces using live facial recognition (LFR) technology. Deputy Commissioner Emily Keaney highlighted that many forces are implementing LFR without prior…
Infosecurity -
Oracle issues 943 patches for over 1,000 flaws, many critical
Oracle announced the release of 943 new security patches as part of its August 2026 Critical Security Patch Update (CSPU), addressing over 1,000 unique vulnerabilities, including more than 460 that can be exploited remotely without authentication. Among the…
SecurityWeek -
Microsoft Tracks MacSync Stealer via Behaviour as Domains Rotate
Microsoft is tracking the MacSync Stealer malware by analyzing its behavior rather than individual domains, as the malware quickly rotates associated domains to evade detection. This macOS-focused information stealer targets valuable data such as passwords,…
Security Affairs -
CVE-2026-18051 (CVSS 10): Unauthenticated Arbitrary File Write Hits 900k W3 Total Cache Sites
The page reports on a critical vulnerability identified as CVE-2026-18051 in the W3 Total Cache plugin, affecting WordPress sites running versions before 2.10.5. This vulnerability allows unauthenticated attackers to write files anywhere on the server,…
-
UK fraud cases hit record 220,000 as identity fraud rises 9%
In the first half of 2026, the UK experienced a record high of over 220,000 fraud cases reported to the National Fraud Database (NFD), with identity fraud rising by 9% year-on-year, largely driven by scams targeting bank accounts and credit cards.…
Infosecurity -
Microsoft removes Drag Tray from Windows 11 after user backlash
The content discusses the removal of the experimental Drag Tray feature from Windows 11 after extensive user feedback. Introduced in February 2025, the feature was intended to simplify file sharing by allowing users to drag files to a sharing dialog.…
SecurityOnline -
Over 50,000 Stripe API Keys Exposed in Public Repos Risking Fraud
A significant leak of over 50,000 Stripe API keys has been documented by researchers from Ransomnews. The keys were found in public code repositories and misconfigured servers, exposing merchant data and the ability for fraudsters to exploit them within…
Security Affairs -
Firefox 154 patches 58 flaws, Chrome 151 fixes critical overflow
Google and Mozilla have released security updates for Chrome and Firefox addressing multiple critical and high-severity vulnerabilities. Firefox 154 resolves 58 CVEs, including 20 high-severity flaws primarily related to memory safety, such as use-after-free…
SecurityWeek -
APT36 Uses PATCHCORD Malware Against Afghan Telecom, Indian Govt
The report highlights the detection of four active exploits today, including vulnerabilities in Microsoft, Broadcom, and Apple technologies. A malicious campaign, linked to the APT36 group (Transparent Tribe), targets Afghan telecom firms and Indian…
SecurityOnlineOperation C-Major -
NVIDIA's GeForce NOW adds Firefox support for cloud gaming
NVIDIA's GeForce NOW cloud gaming service now fully supports Mozilla Firefox on Windows, allowing over 2,000 PC titles to be streamed directly without a standalone app. This move breaks Chromium's dominance in cloud gaming support, providing users with…
SecurityOnline -
Framework Laptop 12 arrives with Intel Core 3 and longer battery
The content details the launch of the Framework Laptop 12, which features upgraded Intel Core Series 3 processors, enhancing performance and battery life. Key points include: 1. **Processor Options**: Users can choose between Core 3, Core 5, and Core 7, with…
SecurityOnline -
AmnesiaStealer targets Mac users via fake GitHub to steal data
Recent findings by Jamf Threat Labs reveal a new macOS malware called AmnesiaStealer, which uses social engineering tactics to target Apple computers. The malware lures users to a fake GitHub page where they are tricked into executing a malicious command in…
SecurityOnline -
CareCloud data breach exposes 3.7 million patients' records
The CareCloud data breach has affected over 3.7 million individuals, far exceeding initial estimates. Discovered in July after a network intrusion in March, hackers accessed an AWS environment and exfiltrated sensitive data, including names, addresses, SSNs,…
SecurityWeek -
Atlassian fixes XSS, impersonation bugs in Confluence, Jira
Atlassian has addressed two high-severity vulnerabilities in its self-hosted products. The first, CVE-2026-21580, is a stored XSS vulnerability in Confluence, scoring a CVSS of 9.3, allowing unauthenticated attackers to execute code in users' browsers,…
-
Microsoft tracks 30+ rotating domains tied to MacSync stealer
The article discusses the identification of over 30 rotating domains linked to the MacSync stealer infrastructure by Microsoft. It covers the implications of such malware on cloud security and highlights the need for updated cybersecurity practices. Key…
The Hacker News -
HoneyMyte updates CoolClient rootkit to spy on Asian, Russian govt
The content discusses recent cybersecurity threats, specifically focusing on an updated variant of the HoneyMyte CoolClient rootkit, which targets government entities and organizations in Asia and Russia. Key points include: 1. **Threat Details:** The…
SecurityOnlineMUSTANG PANDA -
Clop ransomware shell steals credentials, maps data amid AI surge
The article discusses a significant vulnerability associated with a web shell linked to the Clop ransomware that decrypts credentials and maps sensitive engineering data for exploitation. This attack method poses a substantial threat, emphasizing the need…
The Hacker NewsClop -
BeyondTrust patches CVE-2026-40144/45 in Windows endpoint tool
Today's critical alert highlights four active exploits detected, including two high-severity vulnerabilities in BeyondTrust’s Endpoint Privilege Management for Windows. These are identified as CVE-2026-40144 and CVE-2026-40145, both allowing for local…
-
Google rolls out Gmail Verified Sender for US political campaigns
The article discusses the launch of Google's Gmail Verified Sender Program, set to begin on September 8, 2026. This initiative allows US political campaign committees to bypass Gmail's spam filters and ensure their bulk emails reach voters’ inboxes. To…
SecurityOnline -
Critical WebLogic Flaw CVE-2026-60702 Enables Full Server Takeover
The page discusses critical vulnerabilities detected in Oracle WebLogic Server following an August 2026 update, where nine flaws were identified, five of which are classified as critical. The most severe vulnerability is CVE-2026-60702, with a CVSS score of…
-
SANS ISC reports green threat level, offers new resources
The content provides an update from the SANS Internet Storm Center, led by handler Johannes Ullrich, with a current threat level indicated as green. It includes links to previous updates, educational resources about classes offered by Ullrich, and access to…
SANS ISC -
US Indicts Iran’s Mabna Institute for Huge University Cyber Theft
A recent indictment from the U.S. Department of Justice has charged 17 members of Iran's Mabna Institute in a massive cyber theft operation, allegedly linked to the IRGC. The group is accused of hacking into numerous universities and organizations worldwide,…
SecurityOnlineSilent Librarian -
CVE-2026-17482: IBM Remote Code Execution Flaw (CVSS 9.8)
The article discusses the detection of multiple severe vulnerabilities in IBM Documentation Offline, particularly a critical remote code execution flaw identified as CVE-2026-17482, which has a CVSS score of 9.8. This vulnerability could allow attackers to…
-
Armored Likho's fake donation apps spy on Russian Telegram users
Kaspersky Labs reported on an espionage campaign by the Armored Likho group, known as Eagle Werewolf, which utilizes a new cyber-espionage toolkit called the Armored Likho Still Toolkit. This toolkit employs two main modules: Still Sync, which targets and…
SecurityOnlineArmored Likho -
AI powered multi agent attack hits APAC government networks
In a groundbreaking cyberattack, a Chinese-language operator utilized a complex AI framework to launch a near-autonomous multi-agent attack targeting government entities in the Asia-Pacific region, likely focused on Taiwan. Researchers from the firm Dream…
Dark Reading
