News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Thu 3 Sep· 70 articles
-
Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability
A high-severity vulnerability (CVE-2026-19949) in the All-in-One WP Migration and Backup WordPress plugin poses a major risk to over 3 million websites, allowing remote code execution (RCE) attacks. The issue, described as a second-order SQL injection in the…
-
Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means
The article discusses the expansion of Shai-Hulud, a cyber threat entity, which has increased its reach to 469 credential locations. This development emphasizes the growing risk of credential theft, highlighting the need for enhanced cybersecurity practices.…
The Hacker News -
Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities
Cisco has announced the public disclosure of two unpatched vulnerabilities, CVE-2026-20354 and CVE-2026-20355, affecting its Secure Email product. These medium-severity issues can allow attackers to intercept and modify email traffic. Cisco advises that…
-
Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America
The report from Palo Alto Networks details two sophisticated cyberattack campaigns targeting organizations in Latin America, using artificial intelligence (AI) to enhance their operations. The campaigns are classified into two clusters: the Mexican…
unit42.paloaltonetworks.com -
Chaotic Eclipse Releases Crowdstrike Falcon ZeroDay FalconFlank
Chaotic Eclipse has released a Proof of Concept (PoC) exploit named FalconFlank targeting a zero-day vulnerability in the Crowdstrike Falcon cybersecurity platform, specifically exploiting a privilege escalation flaw related to the Microsoft Office malicious…
Security Affairs -
FBI Probes Possible Breach of 153 Million Driver’s Licenses
The FBI is investigating a significant data breach potentially involving the personal details of 170 million North Americans. The breach was tied to a service called "Nexus," which advertised access to digital scans of identity documents on a Russian…
Infosecurity -
CVE-2026-59346 (CVSS 9.3): VMware Flaw Allows Runnin Code on the Host
Broadcom addressed two vulnerabilities in VMware Workstation and Fusion on September 3, 2026. The critical CVE-2026-59346 vulnerability, scoring 9.3 on the CVSS scale, allows attackers with admin rights on a guest VM to execute code on the host system,…
-
Cisco Fixes Critical Cisco IOS XR Vulnerabilities
Cisco has released critical security patches addressing multiple vulnerabilities in its IOS XR operating system, with a maximum CVSS score of 9.8 for two flaws. Network operators are urged to apply Software Maintenance Updates immediately to secure carrier…
-
Microsoft to Require Windows Driver SBOM and VEX Statements from March 2027
The article highlights 7 critical vulnerabilities detected today in various software, including improper authentication and SQL injection issues across platforms like BerriAI and SonicWall. Additionally, it discusses Microsoft's upcoming requirement for…
SecurityOnline -
Your phone or computer may soon ask how old you are
California has implemented the Digital Age Assurance Act (DAAA), requiring operating systems like Windows, macOS, iOS, and Android to collect users' ages during setup starting January 1, 2027. This measure, aimed at protecting children from accessing harmful…
Malwarebytes -
Microsoft Warns of TerminalFix Campaign Deploying Reverse Tunnels
A critical alert has been issued regarding seven active exploits detected today, including vulnerabilities in BerriAI LiteLLM and Kludex Starlette among others. The primary focus is on an identified TerminalFix campaign, which employs fake Cloudflare CAPTCHA…
SecurityOnline -
Court Upholds Edge Gatekeeper Exemption
The page details that the European Union's General Court has dismissed Opera's lawsuit against the European Commission regarding Microsoft's Edge browser and its classification under the Digital Markets Act (DMA). The court confirmed that Microsoft Edge does…
SecurityOnline -
Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone
The article discusses the recent infection of a Serbian student movement member's iPhone by the Pegasus zero-click spyware exploit. This incident highlights ongoing cybersecurity threats and the capabilities of advanced spyware in targeting individuals…
The Hacker News -
International Operation Disrupts Sality P2P Botnet
A recent international law enforcement operation, led by the US, has significantly disrupted the Sality P2P botnet, which has been active for over 20 years. The operation, conducted on August 31, involved collaboration between authorities from Bulgaria,…
Infosecurity -
2,000 Leaked Documents Reveal How Russia Turns Engineering Students Into GRU Cyber Operators
Over 2,000 leaked documents from Bauman Moscow State Technical University reveal that the institution's hidden Department No. 4 has been training students to become cyber operators for Russia's GRU (military intelligence). This department, which doesn't…
Security Affairs -
Gryxa Toolkit: AI-Built Malware Watches Defenders
Today, seven critical exploits have been detected, including vulnerabilities in BerriAI and SonicWall appliances. Meanwhile, a new AI-built malware toolkit called Gryxa has been identified by ReliaQuest. This toolkit exploits legitimate remote monitoring…
SecurityOnline -
Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon
A researcher has developed a Proof of Concept (PoC) named FalconFlank, which demonstrates a privilege escalation vulnerability in CrowdStrike Falcon, a key endpoint security platform. This vulnerability could potentially allow attackers enhanced access…
The Hacker News -
CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners
The article details new cybersecurity vulnerabilities identified by CISA, specifically seven recently exploited flaws. These vulnerabilities have allowed attackers to deploy reverse shells and crypto miners, posing significant risks to systems. The piece…
The Hacker News -
Researcher Claims CrowdStrike Falcon 0day, Posts PoC
The content highlights two primary topics related to cybersecurity vulnerabilities. First, it notes seven active exploits detected today, detailing various vulnerabilities with their corresponding CVE identifiers, including issues in BerriAI, Kludex, Kestra…
SecurityOnline -
Microsoft Defender Intercepts Legitimate Links
The page outlines critical alerts for 7 active exploits detected today, including vulnerabilities in various software. It highlights incidents like improper authentication and command injection vulnerabilities affecting products from BerriAI, Kludex, Kestra…
SecurityOnline -
CISA Adds Seven Critical Vulnerabilities to its KEV
A critical security alert highlights seven newly identified vulnerabilities actively exploited by threat actors. The vulnerabilities, categorized under CISA's Known Exploited Vulnerabilities (KEV), include high-risk flaws such as improper authentication and…
SecurityOnline -
CVE-2026-20212 (CVSS 9.8): Cisco Nexus 9000 Root RCE Flaw
Seven active exploits have been detected today, including vulnerabilities in BerriAI, Kludex, Kestra OSS, JFrog Artifactory, Sangoma Switchvox, and SonicWall SMA1000. Specifically, the Cisco Nexus 9000 vulnerability (CVE-2026-20212) allows unauthenticated…
-
Firefox for iOS Adds Native Ad Blocker
Today, seven critical exploits have been detected, highlighting various vulnerabilities in software products including improper authentication and SQL injection issues across notable platforms like BerriAI, JFrog Artifactory, and SonicWall appliances.…
SecurityOnline -
Russian National Indicted in Freelance Malware Scheme
A Russian national, Searzhudin Tamirlanovich Aktulaev, has been indicted for distributing malware targeting freelance workers, leading to the compromise of approximately 80,000 accounts. Between June 2016 and November 2017, he allegedly used 255 fraudulent…
SecurityOnline -
CVE-2026-43748 (CVSS 9.8): Apple ANE Kernel Bug, PoC Out
Seven active cybersecurity exploits were detected today, including several vulnerabilities with critical and high security implications. Notably, the Apple Neural Engine (ANE) kernel vulnerability (CVE-2026-43748) has a CVSS score of 9.8, indicating its…
-
AI Solves 370-Year-Old Cryptogram
The content discusses two main topics: critical vulnerabilities identified today and a recent achievement in cryptography by Claude Fable 5.1. It presents seven active exploits with their CVE identifiers, including issues in BerriAI, Kludex, Kestra OSS,…
SecurityOnline -
Honeypot-Omaha and batch.py [Guest Diary], (Wed, Sep 2nd)
The diary by Frank Igbokwe discusses the Honeypot-Omaha DShield Sensor, a decoy system designed to attract threat actors. It highlights the use of a tool called 'cowrie' that captures malicious activities on exposed ports. Igbokwe outlines the automation of…
SANS ISC -
ISC Stormcast For Thursday, September 3rd, 2026 https://isc.sans.edu/podcastdetail/10080, (Thu, Sep 3rd)
The content discusses the ISC Stormcast for Thursday, September 3rd, 2026, highlighting the on-duty handler, Guy Bruneau, and indicating a green threat level. It provides links to learn more about classes taught by Dr. Johannes Ullrich and invites…
SANS ISC -
CVE-2026-73749: Unauth RCE in HPE Networking AOS-CX Scores 9.8
The page discusses critical vulnerabilities identified in HPE Networking's AOS-CX switch software. Key points include: 1. **Alert Summary**: 7 active exploits were detected today, including several critical vulnerabilities like CVE-2026-73749 (CVSS 9.8)…
-
Jenkins Patches RCE Flaw and 30+ Vulnerabilities
The report provides updates on critical security vulnerabilities affecting Jenkins, particularly noting seven active exploits detected. Eight significant CVEs including a high-risk remote code execution vulnerability (CVE-2026-84645) were highlighted, with…
