News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Fri 28 Aug· 65 articles
-
cPanel flaw lets one customer gain full server root access
The article highlights a critical vulnerability in cPanel that could allow one hosting customer to gain root access to an entire server. This poses a significant security risk for web hosting providers and their clients. Details on the nature of the…
The Hacker News -
PaperCut Rushes Patch After Critical Zero Day Exploit Detected
PaperCut Software has issued an emergency patch in response to the active exploitation of a zero-day vulnerability affecting its NG and MF print management products. Although the flaw does not have a CVE identifier yet and technical details are undisclosed,…
Security Affairs -
Tech firms warn AI attacks threaten hospitals and infrastructure
On August 28, 2026, over 100 tech and cybersecurity companies, including prominent names like OpenAI and Google, warned of an impending surge in AI-enabled cyber-attacks that threaten critical public services such as hospitals and infrastructure. An open…
Infosecurity -
CISA adds critical Red Hat, SQL Server, Citrix flaws to KEV list.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added several critical vulnerabilities to its Known Exploited Vulnerabilities catalog including flaws in Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix…
-
PaperCut zero day attack forces emergency patch, 1,000 at risk
PaperCut Software has issued a warning about a zero-day vulnerability being actively exploited in its NG and MF print management solutions. Emergency patches have been released, and users are advised to implement them and restrict server access. The company…
SecurityWeek -
PaperCut zero day flaw exploited, admins urged to patch now
The article discusses a zero-day vulnerability in PaperCut, affecting all versions of NG and MF. This security flaw is being actively exploited in cyber attacks. The piece emphasizes the importance of immediate updates and patches to mitigate risks…
The Hacker News -
APT28 Uses HOOKEDGE Backdoor to Spy on European Govt Networks
The article discusses the newly discovered HOOKEDGE backdoor, attributed to APT28, which is targeting European government and diplomatic organizations. This malware allows attackers to conduct cyber espionage effectively. Cybersecurity experts emphasize the…
The Hacker NewsAPT28 -
New SynkLoader malware uses fake Teams IT support to breach firms
The article discusses the detection of a new malware, SynkLoader, identified by Expel security researchers. This malware targets corporate networks using a sophisticated attack chain that employs social engineering via Microsoft Teams. Attackers impersonate…
SecurityOnline -
Aurora ransomware gang uses SpaceX AI tool in new ESXi attacks
The article discusses how threat actors associated with the Aurora ransomware group are exploiting SpaceX's AI Cursor Agent to enhance their operations. According to research by Gambit Security, these actors have utilized the AI tool for tasks like…
InfosecurityAPT17 -
Manchester Airports Group breach exposes 8.7m travellers' data
A cyberattack on Manchester Airports Group (MAG) has compromised the data of approximately 8.7 million customers across three major airports: Manchester, London Stansted, and East Midlands. The breach, discovered on August 25, involved unauthorized access to…
Security Affairs -
Windows 11 26H2 Enters Release Preview Channel
The page reports on six active exploits detected today, detailing various vulnerabilities from CVE-2021-23758 (Ajax.NET Professional) to CVE-2019-1068 (Microsoft SQL Server). It also discusses the recent updates to Windows 11, particularly the 26H2 Release…
-
Ubuntu 26.04.1 LTS release fixes Mutter crashes and Nautilus bugs
The page discusses the release of Ubuntu 26.04.1 LTS, which includes security updates and bug fixes since its initial release. Key enhancements include resolutions for desktop environment crashes, a patch for the Nautilus file manager's memory corruption…
SecurityOnline -
Google Tracks Russian Cyber Espionage Clusters
The content discusses the detection of six critical vulnerabilities, identified by their CVE codes, affecting various systems including Ajax.NET and Microsoft SQL Server. Additionally, the Google Threat Intelligence Group has observed active Russian cyber…
SecurityOnlineUNC6293 -
Australian Police Arrest TeamPCP Duo Over NPM Sandworm Malware
On August 26, 2026, the Australian Federal Police arrested two core members of the cybercrime syndicate TeamPCP, which has been involved in significant open-source supply chain attacks, specifically targeting the Node Package Manager (NPM) ecosystem using…
SecurityOnlineTeamPCP -
32 Bit Malware Leads in Massive PE Study, Visual C++ Tops Tools
Xavier Mertens discusses statistics related to malicious PE (Portable Executable) files, focusing on compiler usage and extraction techniques. A Python script was developed to analyze PE headers and gather statistics from a dataset of 1.3 TB of malware…
SANS ISC -
macOS ClickFix Malware Exploits Polygon C2
The page discusses a newly discovered macOS malware campaign named ClickFix, which targets macOS users, especially cryptocurrency holders and developers. The malware utilizes deceptive tactics to convince users to run malicious commands. Key points include:…
SecurityOnline -
WatchGuard patches five critical preauth RCE flaws in Fireware OS
The page details the detection of six active exploits, focusing on a critical vulnerability in WatchGuard Fireware OS and Dimension that was patched on August 27, 2026. Each of the five fixed CVEs carries a CVSS score of 9.3, indicating high severity. The…
SecurityOnline -
ZBT routers hit by critical backdoors allowing remote root access
VulnCheck reported critical vulnerabilities in ZBT routers, specifically the backdoors known as DARKLANTERN and SPEAKINGSTONE, rated with a CVSS score of 9.3. These backdoors allow unauthorized root access via the internet, affecting devices sold globally.…
-
Critical ServiceNow flaws allow unauthenticated code execution
This article outlines critical vulnerabilities identified in ServiceNow, highlighting four significant flaws disclosed on August 27, 2026, with three of them rated at a maximum CVSS score of 10, indicating critical severity. The vulnerabilities include code…
SecurityOnline -
PaperCut NG/MF Critical Flaw Exploited Since August, Patch Urged
The content highlights a critical vulnerability in PaperCut NG/MF print management software, which has been exploited in the wild since August 27, 2026. All versions of PaperCut NG and MF are affected, prompting the vendor to issue an emergency patch and…
SecurityOnline -
CISA Warns of Exploited Flaws in ownCloud, Linux Kernel, and JFrog Artifactory
On August 27, 2026, CISA added three actively exploited vulnerabilities to the KEV Catalog, affecting ownCloud, the Linux Kernel, and JFrog Artifactory. These vulnerabilities are critical, with the highest severity rated at 9.8 (Critical · CVSSv3). They…
-
CISA Issues Advisory on Xiiaozet LK100W Vulnerabilities
The Cybersecurity and Infrastructure Security Agency (CISA) has released an advisory regarding three critical vulnerabilities in the Xiiaozet LK100W device. These vulnerabilities, identified as CVE-2026-78239, CVE-2026-76943, and CVE-2026-78037, have a…
-
ISC Diary: Green Threat, Xavier Mertens On Duty, SANS Classes
The content provides an update from the Internet Storm Center (ISC) for August 28th, 2026. It mentions the handler on duty, Xavier Mertens, and the current threat level is green, indicating a low level of risk. Additionally, the content promotes classes…
SANS ISC -
CVE-2026-71362 Exploited: Adobe Commerce Account Takeover, Details and PoC are Public
A critical vulnerability in Adobe Commerce (CVE-2026-71362) has been detected, allowing unauthenticated account takeover with a CVSS score of 9.1. This flaw enables attackers to hijack customer accounts and access sensitive information like personal data and…
-
Most breaches stem from old software flaws, CISA report warns
The CISA Vulnerability Review for FY 2024 and 2025 reveals that most security breaches are caused by well-documented software weaknesses rather than advanced techniques or zero-day exploits. The report emphasizes the prevalence of a few high-impact…
SecurityOnline
