News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 16 so far |
Tue 25 Aug· 70 articles
-
ACSC Warns of Active TeamCity Exploits via CVE-2026-63077
The Australian Cyber Security Centre (ACSC) has issued a warning regarding the active exploitation of a critical vulnerability (CVE 2026-63077) affecting TeamCity On-Premises servers. This flaw allows unauthenticated attackers to bypass authentication checks…
Infosecurity -
WeedHack malware hits Minecraft players via Discord and MediaFire
The article discusses the ongoing threat of WeedHack malware targeting Minecraft players. Despite the takedown of the original infrastructure, McAfee researchers reported over 6,300 attempts to access malicious sites linked to the campaign. WeedHack,…
Infosecurity -
Critical RCE flaw in TYPO3 Powermail lets attackers hijack sites
The content discusses a critical security vulnerability (CVE-2026-77136) in TYPO3 Powermail that allows remote code execution (RCE) due to improper access control, currently being exploited by attackers. TYPO3 developers have issued a warning for users to…
-
Take Two seeks user data from Microsoft, Discord after GTA 6 leak
In August 2026, Take-Two Interactive, publisher of the Grand Theft Auto (GTA) series, issued a subpoena to Microsoft and Discord following a leak of GTA 6 game footage. The subpoena demands user data from three Discord servers, potentially exposing personal…
MalwarebytesCyberLeek -
AI powered malware remains rare in the wild Palo Alto finds
Palo Alto Networks' report discusses the state of AI-enabled malware, highlighting that while AI integration in malware is real, its actual deployment in the wild is limited. The study analyzed 405 malware samples, revealing that only 12 samples were…
unit42.paloaltonetworks.com -
Broadcom’s silent patches put defenders at risk, experts warn
The article discusses the issue of "silent patches"—vulnerability fixes released without public disclosure. Such practices, intended to prevent attackers from exploiting vulnerabilities, actually risk leaving defenders, such as penetration testers and IT…
SecurityWeek -
OpenAI bans Russian fake think tank spreading AI disinformation
OpenAI has disrupted a covert Russian influence operation, involving the creation of a fraudulent think tank named the International Burke Institute (IBI). The group, suspected of being Russian operators, spread disinformation using AI-driven accounts on…
SecurityOnline -
Weidmueller Router Flaw Lets Hackers Run Code Remotely, Patch Urged
A critical vulnerability has been identified in Weidmueller routers, impacting products IE-SR-2TX-WL and IE-SR-2TX-WL-4G. Two flaws, CVE-2026-63586 and CVE-2026-63587, have a maximum CVSS score of 9.8, allowing unauthenticated remote code execution and…
-
ReliaQuest says breach attempt exposed only view only dashboard
ReliaQuest has denied claims that it was compromised during a recent social engineering attack linked to the ShinyHunters group. The company revealed that the attack briefly exposed its identity dashboard when a team member was deceived into providing access…
InfosecurityShinyHunters -
US imposes sanctions on Mabna Institute over $16.8M crypto
The US has imposed sanctions on nearly 60 individuals and entities, including members of the Mabna Institute, a hacking group associated with the Iranian regime, as part of "Operation Economic Outcast." This initiative aims to disrupt financial support to…
InfosecuritySilent Librarian -
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in4 articles this day · SecurityOnline first
CISA flags Oracle flaw CVE-2026-21962, orders patch by Aug 27 · Clop uses Oracle CVE-2026-21962 to hit PTC Windchill credentials
-
CISA flags Oracle flaw CVE-2026-21962, orders patch by Aug 27
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Oracle vulnerability, tracked as CVE-2026-21962 with a CVSS score of 10.0, to its Known Exploited Vulnerabilities catalog. This unauthenticated flaw affects Oracle HTTP…
-
Clop uses Oracle CVE-2026-21962 to hit PTC Windchill credentials
A critical exploit (CVE-2026-21962) affecting Oracle HTTP Server and Weblogic has been leveraged in a new Clop extortion campaign targeting PTC Windchill users. This custom Java web shell allows attackers to decrypt stored credentials and access sensitive…
-
CISA urges patch of critical Oracle WebLogic flaw CVE-2026-21962
The cybersecurity agency CISA has warned government organizations to promptly patch a critical vulnerability, CVE-2026-21962, affecting Oracle WebLogic servers, which could allow remote code execution without authentication. CISA added this flaw to its Known…
-
Oracle Flaw CVE-2026-21962 Lets Attackers Access Critical Data
A critical vulnerability, CVE-2026-21962, affecting Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in was detected today, risking unauthorized access to sensitive data. Assigned a maximum CVSS score of 10.0, this flaw is actively exploited in the…
-
-
MiniOrange SAML Bug Lets Hackers Take Over WordPress Admin
Attackers are exploiting vulnerabilities in the miniOrange SAML plugin, which could potentially allow unauthorized access to WordPress admin accounts. This flaw emphasizes the need for heightened security measures and regular updates for web applications to…
The Hacker News -
Taiwan Charges 9 Over Illegal AI Server Exports to China, Including Nvidia and Super Micro Staff
Taiwanese prosecutors have charged nine individuals, including employees from Nvidia and Super Micro, for illegally exporting advanced AI servers to mainland China. This issue arises amid intensified U.S.-China competition over AI infrastructure,…
SecurityWeek -
Spot TikTok Phishing Scams and Secure Your Account Today
The article discusses TikTok phishing scams and how to recognize fraudulent login and verification pages. Phishing often begins with messages claiming account issues, prompting users to click malicious links that mimic TikTok's official site. Key indicators…
Malwarebytes -
WeedHack malware resurges via fake Minecraft sites, stealing data
The article discusses ongoing threats from the WeedHack malware campaign, despite the takedown of its command-and-control (C2) servers. McAfee Labs reported that malicious websites are still active, spreading the malware by impersonating legitimate Minecraft…
Security Affairs -
Core Werewolf Espionage Campaign Deploys CoreRAT in Russia
Core Werewolf, a suspected cyberespionage group, deployed a remote access trojan (RAT) named CoreRAT against Russian defense and public sector entities from June to July 2026. The attackers utilized two droppers to spread CoreRAT, disguised as military…
SecurityOnlineAwaken Likho -
Balonx Phishing as a Service Hits Mexican Banks with AI Voice Scams
The article discusses the Balonx Sistema, a Phishing-as-a-Service platform operating in Mexico, identified by Group-IB. This platform has targeted over 20 Mexican banks, exploiting more than 1,100 victims to potentially siphon off $99,384 USD. Key features…
SecurityOnline -
Oracle WebLogic flaw lets attackers steal data, urgent fix
The article discusses a critical vulnerability in Oracle WebLogic that allows unauthenticated attackers to access sensitive data. It emphasizes the urgency for enterprises to address this flaw due to ongoing exploitations. Additionally, the article…
The Hacker News -
ASUS ROG Users Lose NVIDIA Drivers After Windows 11 ECO Mode
A recent issue for ASUS ROG laptop users arises from a conflict between Windows 11 and the Armoury Crate software. Users report that when ECO mode is activated for an extended period, Windows 11 fails to automatically reinstall NVIDIA graphics drivers after…
SecurityOnline -
Fake AI PoC Flood Overwhelms Experts as Exploit Quality Plummets
The cybersecurity sector is facing an increase in fake AI proof-of-concept (PoC) submissions on public code-sharing platforms, according to a report by VulnCheck. While researchers have reviewed over 17,800 PoCs in 2026, the quality has plummeted, with…
SecurityOnline -
Thousands of Git repos leak cloud keys, putting millions at risk
Over 28,000 Git repositories have been discovered exposed on public servers, affecting 3.5 million hosts. These repositories risk data theft and cloud infrastructure takeover by leaking sensitive data like AWS keys and Stripe secrets due to misconfigured…
SecurityOnline -
Uber fined €824.9M by Dutch DPA over driver suspension algorithm
A recent ruling by the Dutch Data Protection Authority imposed a fine of 824.9 million euros ($966 million) on Uber due to its automated system that suspended driver accounts without human review. This practice was found to violate the European General Data…
SecurityOnline -
YouTube Premium price hikes set for Europe and Asia in September
YouTube Premium is set to increase subscription prices in various European and Asian countries starting September 23, 2026. Affected countries include Spain, Portugal, Italy, Finland, Romania, Netherlands, Hungary, Ukraine, and Singapore, with price hikes…
SecurityOnline -
Microsoft pushes Bing via new Recommended Search Settings app
Microsoft has released a controversial application called 'Microsoft Recommended Search Settings' that forces Bing to become the default search engine across various browsers. This program, utilizing the WinUI interface, injects an extension into browsers…
SecurityOnline -
ISC Stormcast for 25 August 2026 released with green threat level
The ISC Stormcast for August 25, 2026, is presented by Didier Stevens, with a current threat level categorized as green. The content includes links to prior diaries, podcasts, and additional SANS resources and classes taught by Dr. Johannes Ullrich. Users…
SANS ISC -
CVE-2026-9254: Unauthenticated OS Command Injection Hits TP-Link Archer
A critical alert highlights the discovery of multiple vulnerabilities affecting TP-Link Archer routers. The most severe is CVE-2026-9254, an unauthenticated OS command injection flaw that allows attackers to gain root access and potentially compromise…
-
CVE-2026-53365 Vsock flaw allows privilege escalation on Linux
The content discusses the discovery of a critical vulnerability (CVE-2026-53365) in the Linux kernel, which allows unprivileged local privilege escalation through a proof-of-concept exploit named VsockDrop. This exploit operates via the io_uring zerocopy…
