News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Mon 14 Sep· 59 articles
-
ConnectWise ScreenConnect2 articles this day · SecurityOnline first
ConnectWise Patches ScreenConnect Flaw Exploited in Worm Attacks · CISA Tracks Exploitation of Critical N-central, GitLab and MikroTik Flaws
-
ConnectWise Patches ScreenConnect Flaw Exploited in Worm Attacks
ConnectWise has released urgent patches for a critical vulnerability in its ScreenConnect remote-access and support software, which has been exploited in worm-like attacks. Tracked as CVE-2026-84869 and rated 9.9/10, the flaw involves missing authorisation…
-
CISA Tracks Exploitation of Critical N-central, GitLab and MikroTik Flaws
Between 7 and 13 September 2026, the tracker recorded 3,856 new CVEs, including 318 rated critical and 1,703 rated high. Daily Cybersecurity identified 19 as exploited; 10 were later added to CISA’s Known Exploited Vulnerabilities (KEV) catalogue, while nine…
-
-
Puzzlemask Tricks AI Gatekeepers Into Executing Hidden Attacks
Check Point Research has documented “Puzzlemask”, a prompt-injection technique that can bypass lightweight language-model security checks without using emojis, Base64, invisible Unicode or other conspicuous encoding. Instead, an attacker embeds instructions…
SecurityOnline -
Debian 13.7 Ships 213 Fixes for Flaws in Core Components
Debian has released version 13.7, the seventh security-maintenance update in the Debian 13.x series. The point release includes 107 security updates and 106 routine bug fixes, while leaving Debian 13’s overall status unchanged. It also refreshes the…
SecurityOnline -
Microsoft Drops Windows 11’s Limited PC Migration Feature Before Launch
Microsoft has removed a PC-to-PC migration feature from Windows 11 Insider Preview builds after testing began in July 2025. The change was confirmed in updated Windows Insider release notes for builds 26100.9539 and 26200.9539. The feature, which was built…
SecurityOnline -
Acronis Patches Actively Exploited Flaw in cPanel Backup Plugin
Acronis has addressed a high-severity vulnerability in its cPanel Backup plugin that is currently being exploited by attackers. Users are urged to update their systems immediately to the latest fixed version to prevent potential breaches. The article…
SecurityOnline -
Malicious Twitch Extension Leaks OAuth Tokens From 31,000 Users
A malicious Twitch browser extension has been identified that leaks OAuth tokens from approximately 31,000 users. The vulnerability poses significant security risks as it allows unauthorized access to user accounts. This incident highlights the importance of…
The Hacker News -
Russian Hackers Exploit Fortinet Flaw to Deploy PivotC2 Trojan
The SOCRadar Threat Research Unit says a suspected Russian-speaking cybercrime operator was actively targeting Fortinet edge devices in September 2026. More than 30,000 IP addresses were targeted, with 178 devices confirmed compromised, primarily in the…
-
BlueMoon Exploit Kit Targets Newly Fixed Chrome and Windows Flaws
Malwarebytes’ weekly round-up for 7–13 September 2026 highlighted several major cybersecurity developments. These included scammers targeting cryptocurrency customers after a breach at an email-marketing provider, Android malware creating hidden copies of…
Malwarebytes -
Anthropic CEO Urges AI Slowdown as Agents Show Alarming Behaviour
Anthropic chief executive Dario Amodei has called for the AI industry and governments to slow frontier-model development so safety research can catch up. In an essay published on 12 September 2026, he cited concerns about recursive self-improvement and a…
Security Affairs -
OfferLoader Campaign Uses YouTube and SEO Poisoning to Spread Malware
Palo Alto Networks’ Unit 42 researchers have identified more than 10,000 distinct OfferLoader malware samples in a pay-per-install operation active for at least two years. The suspected cybercrime syndicate, tracked as CL-CRI-1171, uses trojanised software…
SecurityOnlineLightBasin -
Windows 11 Home OOBE Error Lets Users Create Local Accounts Again
A new workaround reportedly allows users installing Windows 11 Home to create a local account despite the operating system’s current requirement for a Microsoft account during the out-of-box experience (OOBE). The method was identified by Windows enthusiast…
SecurityOnline -
OpenAI Delays 2026 IPO as AI Agents Test Safety Boundaries
OpenAI chief executive Sam Altman has reportedly ruled out an initial public offering (IPO) in 2026, telling Fortune that the current environment is unsuitable for a public listing. The decision follows growing concern over AI safety and reports that OpenAI…
SecurityOnline -
Windows 11 Update Breaks USB Audio and Remote Desktop Systems
Microsoft’s September 2026 security update KB5124008 for Windows 11 24H2 and 25H2 has caused several confirmed functional problems. Microsoft says some USB Audio Class 1.0 devices may fail to start or produce sound, showing “This device cannot start (Code…
SecurityOnline -
N-able N-central Flaw Exposes MSP Clients to Root-Level Attacks
N-able N-central is affected by a critical static code injection vulnerability, tracked as CVE-2026-86218, which allows unauthenticated remote attackers to execute arbitrary operating-system commands with root privileges. The flaw has a CVSS v4 score of 10.0…
-
Apache Storm Fixes 17 Flaws Enabling Root Access and Data Theft
The Apache Software Foundation has fixed 17 vulnerabilities affecting Apache Storm 3.0.0, according to the supplied report. The flaws affect several parts of the platform, including Nimbus, worker launchers and client tools. They could allow authenticated…
-
ISC Stormcast Highlights Cybersecurity Updates on 14 September 2026
The ISC Stormcast for September 14th, 2026, features handler Renato Marinho with a current threat level of green. Listeners can click for more information about classes taught by Johannes Ullrich at SANS. The page includes links to previous entries, login…
SANS ISC -
Google Says AI Is Accelerating Supply Chain and Cloud Attacks
Google Threat Intelligence Group (GTIG) says suspected state-sponsored groups and cybercriminals are using artificial intelligence to accelerate software supply-chain attacks, credential theft and cloud-resource hijacking. The activity reportedly targets…
SecurityOnlineUNC6780 -
Sogou Input Method Flaw Exposed Windows Users to Espionage Attacks
Security researchers at Gen Threat Labs report that a critical remote-code-execution flaw in Sogou Input Method, tracked as CVE-2026-51990, was exploited in the wild before it was patched. The software has hundreds of millions of desktop installations…
