News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Wed 9 Sep· 11 articles
-
Google Chromium V83 articles this day · SecurityOnline first
BlueMoon Exploit Kit Races to Exploit Fresh Chrome and Windows Flaws · Chrome Zero-Day Chain BlueMoon Drops Espionage Backdoors on Windows
-
BlueMoon Exploit Kit Races to Exploit Fresh Chrome and Windows Flaws
Proofpoint reports that a chrome-and-windows exploit kit, dubbed BlueMoon, has been deployed rapidly by at least four groups after chaining three vulnerabilities to install malware of choice. The chain exploits two Chromium vulnerabilities in the V8 engine…
-
Chrome Zero-Day Chain BlueMoon Drops Espionage Backdoors on Windows
Four espionage-linked clusters are openly deploying a previously undocumented Chrome/Windows exploit chain, dubbed BlueMoon, within days of each other. The first attribution goes to APT31 (China-aligned) on 28 August 2026, with subsequent activity from other…
-
Chinese-Linked Spies Exploit Chrome and Windows Zero-Days
Proofpoint threat researchers have tracked a new BlueMoon exploit kit used in espionage campaigns, chaining Chrome/Chromium browser flaws with a Windows kernel privilege escalation to breach targeted networks. The operation, active from late August into…
-
-
Microsoft Patches 964 CVEs as Two Windows Zero-Days Face Attacks
Microsoft’s September 2026 Patch Tuesday delivers what the vendor describes as the largest ever batch of fixes, addressing 964 CVEs, with 104 rated Critical and 860 rated Important. Microsoft notes 974 CVEs in total for the release, but ten affect cloud…
-
Microsoft Windows3 articles this day · The Hacker News first
Microsoft Patches Record 974 CVEs Amid Exploited Windows Zero-Days · Microsoft Fixes Nearly 1,000 Flaws in Record Patch Tuesday Update
-
Microsoft Patches Record 974 CVEs Amid Exploited Windows Zero-Days
Microsoft has reported a record-breaking 974 CVEs addressed in its September 2026 Patch Tuesday, shattering the previous high of 570 CVEs. The August–September trend shows a sharp rise in patched flaws, with Windows accounting for 723 CVEs and Office for…
-
Microsoft Fixes Nearly 1,000 Flaws in Record Patch Tuesday Update
Microsoft’s September 2026 Patch Tuesday set another record, with Microsoft stating fixes for up to 974 CVEs across Windows, Exchange, SharePoint, SQL Server and other services. The update slate includes two zero-days exploited in the wild and 20 wormable…
-
Microsoft Patches 974 Flaws as Two Windows Zero Days Exploited
Microsoft’s September Patch Tuesday set a new record, with fixes for 974 vulnerabilities across its software stack, including two flaws that were already being exploited in the wild. The breakdown cited by Microsoft shows 723 in Windows, 111 in Office and…
-
-
Microsoft Malware Protection Engine3 articles this day · SecurityOnline first
ShieldCrash PoC Revives Microsoft Defender SYSTEM File Read Flaw · Microsoft Defender Zero Day Bypasses Patch to Read Windows Files as SYSTEM
-
ShieldCrash PoC Revives Microsoft Defender SYSTEM File Read Flaw
Security researcher Chaotic Eclipse (INFINITE NIGHTMARE, MSNightmare, Nightmare-Eclipse) released a new zero-day exploit named ShieldCrash, a PoC that demonstrates an arbitrary file read as SYSTEM in Microsoft Defender. The PoC targets a vulnerability…
-
Microsoft Defender Zero Day Bypasses Patch to Read Windows Files as SYSTEM
A security researcher going by Chaotic Eclipse has released a proof-of-concept demonstrating a new zero-day in Microsoft Defender, named ShieldCrash. The PoC suggests it bypasses the previously patched ShieldBreak vulnerability, CVE-2026-69414 (CVSS 7.8), by…
-
Microsoft Defender 0day PoC Exposes SYSTEM Files on Windows
A publicly available 0day in Microsoft Defender, dubbed ShieldCrash, has been disclosed with a working PoC that can read arbitrary files as SYSTEM on all supported Windows versions. The flaw is associated with CVE-2026-69414 and follows an initial…
-
-
CVE-2026-41870: Unauthenticated RCE in Apache Nutch
The page reports on four critical vulnerabilities detected in various software. Key points include: 1. **CVE-2026-75650**: An Adobe Commerce and Magento vulnerability concerning improper neutralization of special template elements. 2. **CVE-2026-81963**: A…
