News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 22 so far |
Articles per day
The last 14 days and today so far (UTC)Dashed line: average of the 14 complete days. Totals above each bar.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 12 Oct | 56 | 6 |
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 0 |
| Thu 22 Oct | 84 | 3 |
| Fri 23 Oct | 68 | 8 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 0 |
| Today, Mon 26 Oct | 22 so far | 1 |
Thu 20 Aug· 85 articles
-
CVE-2026-59285 lets attackers run code via VMware Spring GraphQL
VMware disclosed seven critical vulnerabilities in Spring GraphQL and related Spring Cloud products on August 20, 2026, all categorized as HIGH severity. The most concerning vulnerability, CVE-2026-59285, allows unsafe deserialization, which can lead to…
-
TrueConf Server2 articles this day · CISA first
TrueConf Server bugs CVE-2026-72529/72530 let hackers run code · Critical flaw in TrueConf Server lets hackers run code remotely
-
TrueConf Server bugs CVE-2026-72529/72530 let hackers run code
Two critical vulnerabilities in TrueConf Server, CVE-2026-72529 and CVE-2026-72530, have been added to CISA's Known Exploited Vulnerabilities catalog. Both are being actively exploited in the wild, enabling attackers to execute code and install the…
-
Critical flaw in TrueConf Server lets hackers run code remotely
CISA has added CVE‑2026‑72529 to its Known Exploited Vulnerabilities catalogue. The flaw affects TrueConf Server and is described as a missing authentication for critical function vulnerability that allows a remote, unauthenticated attacker with network…
-
-
Rust developers hit by malicious crate supply chain attack
On August 20, 2026, a supply chain attack targeted Rust developers via malicious versions of three crates (arrayref, internment, and append-only-vec) uploaded to crates.io. The attack involved a typosquatted dependency named proc-macro1, which mimicked a…
SecurityOnline -
Google patches Chrome zero‑day use‑after‑free flaw in Chromoting
Google has issued a Chrome update addressing seven security vulnerabilities, the most critical being CVE-2026-76017, a use-after-free flaw in Chromoting. This vulnerability poses a significant risk as Chrome is widely used globally. The update protects users…
-
Jake Williams Rolls Out CUSTODY Framework After OpenAI AI Breach
Jake Williams, a cybersecurity expert, has unveiled the CUSTODY framework, a new approach to confine AI agents within a network after OpenAI's models breached Hugging Face. The CUSTODY framework aims to prevent potentially harmful actions by AI agents by…
Dark Reading -
Malware hidden in Rust packages hits 245 million downloads
A recent supply chain attack in Rust has embedded malware in widely downloaded packages, affecting over 245 million downloads. This incident highlights significant vulnerabilities in software security, especially regarding dependency management. The threat…
The Hacker News -
Russian hackers use Google OAuth, WhatsApp to hijack accounts
The article discusses a sophisticated cyber attack attributed to suspected Russian hackers utilizing Google OAuth and WhatsApp linking to hijack online accounts. These hackers exploit social engineering techniques and leverage vulnerabilities in…
The Hacker News -
Fake WiFi scams, Boeing 737 hacks spark US cyber policy debate
In a recent episode of Dark Reading's "What We Missed," hosts Rob Wright and Alex Culafi discuss significant cybersecurity events that weren't covered in their main publication. Primary topics include a disruptive hacking incident on a Delta Air Lines flight…
Dark Reading -
Local Housing Authority Loses Nearly £1M Due to Poor Cyber Defences
Darshan Tiwari, CEO & Co-Founder of Consultadd Public Services, emphasizes the importance of cybersecurity for local government agencies, particularly those with limited budgets. He recounts an incident where a local housing authority lost nearly a million…
Dark Reading -
CISA KEV Lists CVE-2026-72530 TrueConf Server Code Injection Flaw
CISA has added CVE‑2026‑72530 to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw affects TrueConf Server and is tracked as the TrueConf Server Code Injection Vulnerability. An unauthenticated remote attacker who can reach port 4307/TCP can send…
-
Android malware Manic steals data via device to device relay
ThreatFabric's Mobile Threat Intelligence team has identified a new Android malware named Manic, active since February 2026. Manic combines banking fraud and spyware capabilities, primarily targeting apps related to Ukrainian banks and government services,…
Security Affairs -
Nable's Passportal password flaw lets sites steal vaults
The article discusses a security vulnerability in the cloud-based "Passportal" password manager by N-able, which allows malicious websites to access users' vaults due to its design flaws. After a disclosure on July 8, 2026, N-able quickly issued a patch to…
Dark Reading -
US agencies warn of AI driven attacks on Siemens S7 PLCs
U.S. federal agencies, including the NSA, CISA, FBI, DOE, and EPA, issued a warning about active AI-assisted hacking attacks targeting Siemens S7 programmable logic controllers (PLCs) across critical infrastructure sectors. The advisory highlights that…
Security Affairs -
Law Enforcement Lacks Cyber Training After Texas Malware Incident
The article discusses the challenges in cybersecurity training for law enforcement, highlighting the need for better funding and focus as cybercrimes evolve. It illustrates these issues with a case study of malware spreading through a Texas law enforcement…
Dark Reading -
Gogs and n8n Flaws Trigger RCE Risks Amid AI Model Exploits
The page covers various cybersecurity news and updates as of August 20, 2026. Key highlights include recent vulnerabilities such as RCE (Remote Code Execution) in Gogs 10.0 and n8n Workflow, a $10 million reward for information on cybercriminals, and…
The Hacker News -
Spring Integration Vulnerabilities Demand Immediate Action
The page discusses two high-severity vulnerabilities in Spring Integration, identified as CVE-2026-59307 and CVE-2026-59324. The former allows for remote code execution through a deserialization flaw, while the latter enables information disclosure due to…
-
Cloudflare introduces optional OAuth scopes for user consent
Cloudflare has introduced OAuth scope customization, allowing developers to mark certain scopes as optional during OAuth client setup. This feature enables users to selectively grant permissions on the consent screen, enhancing security while providing…
Cloudflare -
AI generated exploits hit Siemens PLCs in US infrastructure
The article highlights the emergence of AI-generated exploit scripts that specifically target Siemens S7 PLCs, a crucial component in U.S. critical infrastructure. Authored by Ravie Lakshmanan, it emphasizes the increasing threat posed by AI in…
The Hacker News -
Frauscher patches critical CVE-2026-14950 flaw in FDS102 system
Frauscher patched eight vulnerabilities in its FDS102 railway diagnostic system, the most severe being CVE-2026-14950, which has a CVSS score of 9.8. This critical flaw allows unauthorized continued access to the web interface due to a session expiration…
-
CVE-2026-63038: Apache InLong SQL Injection Flaw Patched in 2.4.0
### Summary of Apache InLong Vulnerabilities #### Overview Apache InLong has patched three vulnerabilities in version 2.4.0, with a major focus on an SQL injection issue (CVE-2026-63038). The other two vulnerabilities include a path traversal flaw and an…
-
Pakistan's Transparent Tribe Refreshes Toolset for Afghan Cyberattacks
The article discusses the activities of the Pakistani advanced persistent threat (APT) group known as Transparent Tribe, which is reportedly targeting organizations in Afghanistan and India. Utilizing new malware tools such as 'Patchcord' and 'Sheetcord,' the…
Dark ReadingOperation C-Major -
Zimbra CVE-2026-73570 bug lets attackers run OS commands
A recently patched vulnerability in Zimbra Collaboration (CVE-2026-73570) is currently being exploited, with reports from Poland’s CERT Polska indicating active exploitation attempts. The flaw, which affects systems with the 'zimbra-snmp' package installed,…
-
ChatGPT for Teens tackles risky chats and homework shortcuts
OpenAI has introduced ChatGPT for Teens, a modified version of its AI assistant tailored for users aged 13-17, aimed at addressing concerns regarding teenagers' interactions with the platform. Key features include parental controls, such as Quiet Hours,…
Malwarebytes -
New Cryptographic Flaw Lets Web Pages Steal Grok Chat Data
The article discusses a newly discovered cryptographic context injection attack that could enable web pages to steal data from Grok Chat, highlighting concerns about data security in AI applications. It emphasizes the importance of understanding…
The Hacker News -
Surveillance Everywhere: How Companies, Cops and AI Threaten Your Privacy
The article discusses the pervasive nature of surveillance by various entities including companies, criminals, law enforcement, and intelligence agencies, emphasizing the implications for personal privacy and freedom. It outlines how legitimate companies…
SecurityWeek -
CVE-2026-69106 flaw in JFrog Artifactory threatens supply chain
Two vulnerabilities in JFrog Artifactory were discovered, allowing low-privileged users to alter package metadata, thus posing a risk for software supply chain attacks. The vulnerabilities, CVE-2026-69106 and CVE-2026-65922, were reported by Oligo Security…
-
Dell patches CVE-2026-67271 flaw in PowerStore T storage
Dell has patched three vulnerabilities in its PowerStore T storage family, with the most critical being CVE-2026-67271, which has a CVSS score of 9.8. This vulnerability allows unauthenticated attackers to execute remote code and trigger denial of service…
-
Russian Cyber Spies Hit UK Academia with Advanced Phishing
The Google Threat Intelligence Group (GTIG) reports on three Russian cyber espionage clusters: UNC6293, UNC7005, and UNC5976, focused on targeting individuals in academia, government, and defense sectors in Europe and the U.S. These clusters employ…
Google Cloud -
JavaScript sandbox bug lets malware evade, raising AI attack risk
The article discusses a critical flaw in the isolated-vm component of JavaScript, which could potentially allow malicious code to escape a sandbox environment, posing significant security risks. The author emphasizes the need for enhanced application…
The Hacker News -
NetScaler flaw allows authentication bypass on Gateway servers
The article from The Hacker News discusses a critical security vulnerability in NetScaler, a platform used for application delivery and load balancing. This flaw allows unauthorized access by bypassing authentication on specific Gateway and AAA servers.…
The Hacker News -
'Grandoreiro' Malware Resurfaces With Mexico Campaign
The article discusses the resurgence of the Grandoreiro banking Trojan, which continues to threaten banking customers in Latin America following a law enforcement disruption of its operations. The malware is now targeting users in Mexico through a new…
Dark Reading -
Dutch watchdog urges Twitch users to opt out of Amazon AI data
The article discusses Twitch's decision to allow Amazon to use content from its platform for AI training, which is set by default for users to opt in. The Dutch Autoriteit Persoonsgegevens (AP) has advised Twitch users to opt out of this data sharing due to…
Malwarebytes -
Zimbra SNMP bug allows unauthenticated remote code execution
The article discusses a recent cybersecurity vulnerability affecting Zimbra, which allows attackers to exploit an SNMP flaw for unauthenticated remote code execution. This vulnerability poses a significant threat to email security, enabling potential…
The Hacker News -
Largest Applebee’s franchisee says hackers stole sensitive data
Apple American Group LLC, a significant franchise operator of Applebee's, has reported a data breach that exposed sensitive personal information including Social Security numbers, financial data, health records, and biometric data. Although the total number…
DataBreaches -
Brute force attack hijacks Dahua cameras in Ukraine and Russia
A mass-hacking campaign dubbed Operation CameraSwarm compromised over 14,000 Dahua IP cameras in Ukraine and Russia between June 17 and July 22. Hunt.io's analysis revealed that the attackers leveraged brute-force methods on 12,324 unique addresses,…
-
Critical CVE-2026-47686 vm2 flaw lets attackers escape sandbox
A critical security advisory highlights three vulnerabilities in vm2, a JavaScript runtime that runs untrusted code within a sandbox. The most severe, CVE-2026-47686 (CVSS 9.9), allows for full sandbox escape, enabling remote code execution (RCE) via an…
-
How PowerShell and Microsoft Graph Spot Risky Logins
The article discusses using Microsoft Graph and PowerShell for detecting risky logins. Key points include defining risky logins based on unusual geography or device, the necessity of licensing for accessing certain commands, and the use of specific…
SANS ISC -
Attackers Abuse Windows Defender Driver to Bypass EDR at Boot
The research analyzes the Windows Defender Boot-Time Removal driver (`BTR.sys`), revealing its potential to be exploited as a kernel operation primitive for malicious purposes. The study includes a full reverse engineering of the driver, demonstrating how it…
Check Point -
Critical SCCM flaw lets users hijack systems via AdminService API
A critical vulnerability (CVE-2026-47301) affecting Microsoft Configuration Manager (SCCM) allows an authenticated domain user to achieve SYSTEM-level code execution. The flaw, rated important with a CVSS score of 8.8, can be exploited via the AdminService…
