News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 22 so far |
Fri 21 Aug· 72 articles
-
Keycloak fixes critical CVE-2026-18963 password reset bypass flaw
A recent update (Keycloak 26.7.2) released on August 19, 2026, addresses five vulnerabilities, notably the critical CVE-2026-18963, which allows unauthenticated account takeover through a password reset bypass. This flaw has a CVSS score of 9.1, indicating…
-
CERT Polska warns of Zimbra RCE flaw CVE-2026-73570 after patch
CERT Polska has reported active exploitation of a critical vulnerability (CVE-2026-73570) in the Zimbra Collaboration Suite, which allows unauthenticated remote code execution (RCE). The flaw, confirmed as being exploited shortly after a patch was issued on…
-
Android malware targets car head units with fake updates
The article discusses a new Android malware threat targeting automotive head units, identified by Kaspersky Labs as being delivered through compromised firmware update tools. The malware, associated with the MoYu Group and linked to the BADBOX botnet,…
SecurityOnlineBadBox -
Chinese Hacking Crew Uses AI to Target 170,000 Sites
Cisco Talos recently reported on UAT-10147, a Chinese-speaking cybercrime group leveraging agentic AI for web server exploitation and data theft. The group targets over 170,000 URLs across government, education, and tech sectors globally, utilizing automated…
SecurityOnlineUAT-10147 -
Defence Contractors Overconfident in CMMC Scores as Audits Stall
Two recent surveys highlight growing confidence among defense contractors in their cybersecurity compliance, despite challenges in substantiating that confidence due to the Pentagon's pause on third-party assessments for the CMMC 2.0. The Kiteworks survey…
SecurityWeek -
Google adds Preferred Sources button for custom news picks
The article discusses the introduction of a 'Preferred Sources' button by Google, aimed at empowering users to manually select their preferred news sources, boosting traffic for these publishers. The button enhances user experience by allowing seamless…
SecurityOnline -
TrueConf Server2 articles this day · SecurityWeek first
CISA adds TrueConf Server CVEs to KEV, urges urgent patching · CISA Urges Immediate Patching of Exploited TrueConf Vulnerabilities
-
CISA adds TrueConf Server CVEs to KEV, urges urgent patching
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities related to TrueConf Server to its Known Exploited Vulnerabilities (KEV) catalog. These vulnerabilities are: CVE-2026-72529, with a CVSS score of 9.3, involves…
-
CISA Urges Immediate Patching of Exploited TrueConf Vulnerabilities
CISA has warned federal agencies about two critical vulnerabilities in TrueConf, a secure video conferencing platform. The vulnerabilities, CVE-2026-72529 and CVE-2026-72530, allow attackers to execute arbitrary code remotely. Exploitations can lead to…
-
-
Microsoft patches critical Azure, Entra ID, Exchange bugs
Microsoft has announced 22 new security updates addressing critical vulnerabilities in its products, including Microsoft Azure, Entra ID, and Exchange. The updates resolve serious issues such as elevation of privilege and remote code execution, with several…
-
CVE-2026-67567 (CVSS 9.9): Red Hat Flaws Enable Privilege Escalation in ACM and FreeIPA
Red Hat has disclosed three high-severity vulnerabilities that allow for privilege escalation in its products, particularly affecting Advanced Cluster Management for Kubernetes and FreeIPA. The most critical, CVE-2026-67567, has a CVSS score of 9.9, posing…
-
Rapid7 Exposes Global Crypto Scam Using Phishing Vishing and AI
Rapid7 Labs uncovered a crypto fraud operation called Operation ASTERIX, which used a combination of phishing emails and live phone calls to scam cryptocurrency holders. The scam targeted individuals across 54 countries, exploiting around 885,000 phone…
SecurityOnline -
The invisible passenger in your car
The article discusses a newly discovered Android malware targeting automotive head units, which are multimedia systems integrated into vehicles. This malware installs like a regular user app, lacking a user interface, indicating potential covert…
securelist.comMoYu Group -
Cybersecurity Job Ads Requiring AI Skills Double
The number of cybersecurity job postings requiring AI skills has doubled year-over-year across G7 countries, now accounting for 28.5% of new roles, according to a report by the AI Workforce Consortium. This shift indicates the rise of an 'agentic skill…
Infosecurity -
Critical CVE-2026-32475 Flaw Hits 6 Million WordPress Sites
The content details a critical security vulnerability, CVE-2026-32475, affecting Elementor Pro, a popular WordPress plugin. This flaw allows unauthenticated arbitrary file uploads, posing a risk to approximately 6 million WordPress sites. The CVSS score for…
-
GitHub Traffic Spike Reveals Scaling Issues, Triggers Azure Shift
GitHub recently faced a major outage due to overwhelming traffic, which led to internal infrastructure errors. CTO Vladimir Fedorov clarified that the outage was not caused by code or configuration changes, but rather by a lack of capacity to handle…
SecurityOnline -
Projextor malware uses fake PDF apps to capture screens
A recent report highlights the Projextor malware, an Electron-based threat disguised as productivity applications like fake PDF converters and meal planners. This malware relies on misleading sites that lure users seeking free tools, enabling runtime script…
SecurityOnline -
Cl0p ransomware exploits PTC Windchill flaw, hits Shell, Philips
Cl0p, a notorious ransomware group, has targeted over 40 organizations by exploiting a critical vulnerability (CVE-2026-12569) in PTC's Windchill and FlexPLM software. This flaw allows for remote code execution through deserialization of untrusted data,…
-
Attackers hit GitLab flaw CVE-2026-19478 hours after disclosure
The article discusses the active exploitation of a vulnerability in GitLab identified as CVE-2026-19478, which emerged shortly after its disclosure. It highlights the urgency for enterprises to address security vulnerabilities promptly to prevent potential…
-
Operation QUICSILVER Targets Myanmar Government With Go Backdoor
Operation QUICSILVER is a new cyber espionage campaign attributed to a China-nexus actor, targeting the Myanmar government and IT personnel. The attack employs a Virtual Hard Disk (VHD) file disguised as an image containing a custom Go backdoor called…
SecurityOnline -
Microsoft Entra ID flaw lets attackers run code remotely, CVSS 10
The content discusses a critical vulnerability in Microsoft Entra ID identified with a CVSS score of 10.0, allowing remote code execution. The article highlights the urgent nature of the exploitation of this flaw, which poses significant risks to systems…
The Hacker News -
TrueConf Server bugs exposed as Android 17 tightens memory
The article discusses critical vulnerabilities detected in the TrueConf Server, specifically CVE-2026-72530 (Code Injection) and CVE-2026-72529 (Missing Authentication). Additionally, it outlines updates in Android 17 regarding memory management. Google has…
-
Windows 11 August Update Triggers Gaming Glitches and Crashes
The report highlights critical issues with Windows 11 gaming following the August cumulative update. Users have reported severe problems including graphical glitches, stuttering, and system reboots, marked by "EXCEPTION_ACCESS_VIOLATION" errors. Microsoft is…
SecurityOnline -
Sakura Internet reports breach impacting 1.36 million accounts
Sakura Internet, a Japanese cloud provider, recently revealed a security breach affecting approximately 1.36 million customer accounts, which occurred on August 9, 2026. The breach originated while the company was addressing a separate security incident.…
SecurityOnline -
CVE-2026-77647 (CVSS 9.8): Unauthenticated SPIP RCE Exploited in the Wild
The content discusses a critical vulnerability (CVE-2026-77647) within the SPIP content management system, rated CVSS 9.8, indicating a serious risk of unauthenticated remote code execution (RCE). The flaw affects all versions prior to 4.4.20, allowing…
-
PowerShell Script Finds Users Missing MFA During Rollout
The article discusses a method to identify users who are not registered for Multi-Factor Authentication (MFA) during an MFA rollout using Powershell scripts. It emphasizes the use of Microsoft.Graph.Beta library commands to streamline the auditing process.…
SANS ISC -
CVE-2026-19586 (CVSS 9.3): Pre-Authentication OS Command Injection Hits Omada Gateways
The content highlights critical vulnerabilities detected in TP-Link Omada gateways, specifically CVE-2026-19586, a pre-authentication OS command injection vulnerability rated CVSS 9.3. This vulnerability allows attackers to execute arbitrary commands without…
-
CVE-2026-69836 (CVSS 10): Entra ID Remote Code Execution Flaw Exploited in the Wild
Microsoft disclosed CVE-2026-69836, a CVSS 10 remote code execution vulnerability in Entra ID, now confirmed to have been exploited in the wild. Microsoft resolved the issue server-side, requiring no action from customers. The vulnerability allows for remote…
-
Spring Security Bug CVE-2026-59270 Leaves LDAP Open to Attack
The page discusses the disclosure of critical vulnerabilities in Spring Security software by VMware. The most severe vulnerability, CVE-2026-59270, has a CVSS score of 9.4, allowing unauthorized access to an embedded LDAP server, which can lead to reading or…
-
CVE-2026-77176 Lets Attackers Break Kata Containers Isolation
The article discusses CVE-2026-77176, a significant vulnerability in Kata Containers with a CVSS score of 8.1, allowing malicious operators to mount arbitrary guest rootfs paths onto sensitive locations, thereby undermining system isolation. This…
-
ISC Stormcast For Friday, August 21st, 2026 https://isc.sans.edu/podcastdetail/10062, (Fri, Aug 21st)
The ISC Stormcast for August 21st, 2026 features Rob VandenBrink as the handler on duty and indicates a threat level of green. Links are provided for accessing previous and next diaries, as well as to learn more about classes taught by Dr. Johannes Ullrich…
SANS ISC -
CVE-2026-52929: PoC Exploit Published for Linux SCTP Privilege Escalation
A critical vulnerability in the Linux kernel, identified as CVE-2026-52929, has been reported, enabling potential privilege escalation via an SCTP stream handling flaw. The vulnerability has a CVSS score of 7.5 and affects various mainstream Linux…
-
PowerShell tips to spot Azure login attacks after cloud migration
The article, authored by Rob VandenBrink, emphasizes the importance of reviewing login logs after migrating to cloud services. It discusses the use of PowerShell commands to analyze both successful and failed logins in Microsoft Entra. Key points include: 1.…
SANS ISC
