News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Fri 4 Sep· 59 articles
-
WebRehab Super Forms – Drag & Drop Form Builder2 articles this day · SecurityOnline first
Attackers Exploit Two WordPress Flaws to Deploy Web Shells · Hackers Exploit WordPress Form Plugin to Take Over 13,000 Sites
-
Attackers Exploit Two WordPress Flaws to Deploy Web Shells
Wordfence reports that attackers are actively exploiting two critical WordPress plugin flaws to upload arbitrary PHP files and achieve remote code execution. The vulnerabilities are CVE-2026-14894 in the Super Forms Drag & Drop Form Builder (CVSS 9.8) and…
-
Hackers Exploit WordPress Form Plugin to Take Over 13,000 Sites
SecurityOnline[.]info reports that a critical vulnerability in the WordPress plugin WebRehab Super Forms – Drag & Drop Form Builder (vulnerable up to and including 6.3.313) is being exploited in the wild. The flaw, CVE-2026-14894, allows unauthenticated…
-
-
Google Chromium V86 articles this day · SecurityOnline first
Google Patches Actively Exploited Chrome V8 Zero Day · AWS Root Accounts Hit in Password Spraying Campaign Across 150 Firms
-
Google Patches Actively Exploited Chrome V8 Zero Day
Google has issued a Chrome security update addressing 12 flaws, including CVE-2026-85046, a actively exploited Type Confusion flaw in the V8 JavaScript and WebAssembly engine. The vulnerability could allow a remote attacker to execute arbitrary code inside…
-
AWS Root Accounts Hit in Password Spraying Campaign Across 150 Firms
Datadog Security Research has described an active AWS password spraying campaign that targeted root user accounts across more than 150 organisations. The attack occurred between 24 July and 23 August 2026, with attackers attempting to log into highly…
-
Google Patches Chrome Zero Day Exploited in V8 Attacks
Google has issued a desktop Chrome security update to fix 12 vulnerabilities, including CVE-2026-85046, a high-severity type-confusion bug in the V8 engine that is already being exploited in the wild. The flaw could allow a remote attacker to execute…
-
Microsoft Teams Vishing Campaign Tricks 150 Workers Into Malware Attacks
Security researchers have highlighted a vishing campaign, dubbed the Spring Ring, that targets Microsoft Teams and has affected more than 150 employees across 10 or more companies between January and April 2026. The operation relies on attackers using…
-
Sneaky 2FA Phishing Campaign Targets Healthcare with AiTM Attacks
Security researchers have identified an active AiTM phishing operation targeting healthcare organisations, including hospitals, medical schools and related institutions. The campaign stole session tokens by compromising university accounts that sent…
-
OpenAI Drops Long Context Charges for GPT-6 Astra in Codex
OpenAI’s GPT-6 Astra within Codex now supports a context window of up to one million tokens, with the notable change that users are no longer charged surplus for content exceeding 272,000 tokens. The article clarifies that this revised billing policy applies…
-
-
Plex Patches Undisclosed Flaws in Media Server and Desktop Apps
Plex has issued a security update urging users to upgrade to the latest releases after patching multiple undisclosed flaws in its Plex Media Server and Plex Desktop products. The company states that the fixes are available in Plex Media Server 1.43.3 and…
-
Dark Web Service Offers 153 Million Driver’s Licences in Live Breach
A dark web identity theft service named Nexus appeared on 1 September 2026 offering searchable access to more than 153 million scanned driver’s licences from the United States and Canada, along with other ID documents. The FBI’s New Orleans field office…
Security AffairsNexus -
OpenAI’s GPT-6 Astra Scores 100% at Exploiting Vulnerabilities
OpenAI has unveiled GPT-6 Astra, described as the “world’s most intelligent and aligned model,” with the company highlighting exceptional cybersecurity capabilities. In its public briefing, Astra earned a perfect 100% on ExploitBench, the benchmark that…
The Hacker News -
Apache Allura Fixes Four Flaws That Could Expose Repositories
Apache Allura deployments running version 1.20.0 or earlier have been patched after multiple security vulnerabilities were disclosed. The vendor released Allura 1.21.0 to fix four related flaws: CVE-2026-80180 (stored cross-site scripting via markdown HTML…
-
Linux Kernel Flaw Gets Working PoC for Local Root Access
SecurityOnline[.]info reports that NebuSec researchers published technical details and a functional proof-of-concept exploit for Linux CVE-2026-52924, a high-severity use-after-free in the kernel SCTP handling during stale COOKIE-ECHO events. The PoC…
-
TP-Link Patches Archer AX55 Flaws Enabling Code Execution and Password Theft
TP-Link has disclosed two vulnerabilities affecting the Archer AX55 v4 router. The flaws involve the EasyMesh service and the web login module, with one issue potentially enabling remote code execution and the other exposing the admin password to a local…
-
Plex Urges Users to Patch Servers Before Security Flaw Details Emerge
Plex has issued an urgent security update affecting both its desktop client and the Plex Media Server, urging immediate upgrades to Plex Desktop 1.115.0 or later and Plex Media Server 1.43.3 or newer. The company indicated the vulnerability is serious enough…
SecurityOnline -
CERN Moves 2,200 LHC Control Systems to Debian 13 to Avoid Hardware Costs
The European Organisation for Nuclear Research (CERN) has announced a major operating-system migration for its accelerator control fleet, moving over 2,200 industrial computers and embedded devices to Debian 13 by the end of 2026. The machines form the…
SecurityOnline -
ISC Stormcast For Friday, September 4th, 2026 https://isc.sans.edu/podcastdetail/10082, (Fri, Sep 4th)
The content provides information on Guy Bruneau, the current handler on duty, and indicates that the threat level is green. It includes links to various resources such as research journals, diaries, podcasts, data statistics related to TCP/UDP port activity,…
SANS ISC -
WHMCS Patches Critical Flaws Enabling Code Execution and Data Theft
Two critical vulnerabilities have been identified in WHMCS, the popular billing platform, with a vendor-issued security update now available to address both. The first flaw, CVE-2026-67399, is a remote code execution (RCE) vulnerability that stems from input…
-
BraZetsu Malware Maps Networks to Sell Access for Just $5.80
Group-IB threat intelligence has identified BraZetsu, a Python-based initial access framework attributed to the Brazilian actor Exilware, as an operational tool set sold on an underground marketplace. Described as an initial access broker (IAB) framework,…
SecurityOnlineExilware
