News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Tue 15 Sep· 68 articles
-
Mass Scanning Exploits Vite Flaw to Steal Cloud Credentials
A mass-scanning campaign is exploiting a vulnerability in the Vite platform to extract cloud credentials from exposed development servers. The article details the nature of the security breach, emphasizing the risk of exposing sensitive data in cloud…
The Hacker News -
Apple Fixes Over 200 Flaws Across iOS 27 and macOS Golden Gate
Apple has released updates addressing more than 200 vulnerabilities across its latest desktop and mobile operating systems. iOS 27 and iPadOS 27 fix about 126 flaws, including 20 affecting the kernel, while macOS Golden Gate 27 addresses 210 vulnerabilities,…
-
China-Linked Groups Exploited Chrome Patch Gap to Target NGOs
Two China-linked threat groups used the same Chrome and Windows exploit chain against non-governmental organisations (NGOs), according to Volexity. The activity began on 1 September 2026, when UTA0560 sent spear-phishing emails directing targets through a…
-
Meta AI Probed a Child’s Identity and Resurfaced Deleted Photos
On 15 September 2026, Malwarebytes reported that Meta AI had generated invasive prompts about children after Kalie Robins posted a video of her young daughter on Facebook. The system suggested asking, “Who is the child passenger?” When Robins followed the…
Malwarebytes -
Microsoft Drafts Rules to Stop AI Models Helping Cyberattacks
Microsoft AI has published a draft “Humanist AI Code of Conduct” for its MAI Models, setting limits on offensive cyber capabilities, autonomous agents and the handling of instructions from external content. Under its “Absolute Constraints”, models must not…
SecurityWeek -
Hackers Hijack HBO Max’s Reddit Account to Push Mac Malware
Hackers compromised HBO Max’s verified Reddit account, _u/hbomax_, and used it to run a malvertising campaign called PasteSwitch. Over a 48-hour period, they published 108 malicious adverts across five lure groups, targeting both macOS and Windows users. The…
SecurityWeek -
Fake Bitrefill Gift Card Sites Steal Crypto Through Search Results
Scammers are using search results to direct people looking for Bitrefill or its gift cards to counterfeit websites that imitate the legitimate company’s branding and checkout. Malwarebytes said it found a cluster of lookalike domains, while Bitrefill has…
Malwarebytes -
Microsoft Races to Fix RDS Failures in Sixth Emergency Patch
Microsoft released an out-of-band update on 14 September 2026 to address problems introduced by its 8 September Patch Tuesday release, which contained fixes for 974 CVEs. The issues affected some environments using Remote Desktop Services (RDS), where…
Infosecurity -
US Sanctions Disrupt Iranian Banks’ HTTPS Access as Certificates Fail
Iranian banks and other financial institutions have reportedly suffered widespread digital-certificate failures, disrupting access to their websites and online services. The article attributes the problem to US Office of Foreign Assets Control (OFAC)…
SecurityOnline -
Telegram Desktop Flaw Let Attackers Steal Data from Chat Exports
Telegram Desktop contained a stored cross-site scripting (XSS) flaw in its HTML chat-export feature, according to researchers Denis and Aleksander Rostilov of ExPatch. A bot could create a message with a specially crafted inline keyboard and have it…
Security Affairs -
Private Apple Hooks Let Third-Party AI Models Work Through Siri
Researchers analysing iOS 27 and macOS 27 code say Apple has included private interfaces that can support third-party Siri AI extensions, although these hooks are not available as public APIs. A developer demonstration reportedly used the interfaces to run…
SecurityOnline -
HP BIOS Update Fixes Windows 11 KB5121003 Boot Failures
HP laptop users have reported boot failures after installing Windows 11 update KB5121003. According to user feedback cited by SecurityOnline, affected systems become stuck at the HP logo during the restart stage. Windows then enters repair, removes the…
SecurityOnline -
Japan’s Digital Agency Exposes 246,000 Records in VPN Breach
Japan’s Digital Agency has disclosed a breach of its Government Solution Service (GSS), a shared IT platform used by 23 ministries and agencies. Attackers exploited a medium-severity vulnerability in a VPN device, for which a patch was already available, and…
Security Affairs -
Googlebook Laptop Pre Orders Open as Android and ChromeOS Merge
Google has announced that pre-orders for its new Googlebook laptop line will open on 21 September 2026. The company describes Googlebook as a laptop platform for the artificial-intelligence era, combining Android, ChromeOS and Gemini AI services. Google will…
SecurityOnline -
Codex Errors May Signal Temporary Account Restrictions, Not Capacity Limits
Codex users have reportedly been seeing repeated “Selected model is at capacity. Please try a different model” messages even when the chosen model has not reached its actual capacity. SecurityOnline claims the message may instead indicate that OpenAI has…
SecurityOnline -
LiteSpeed Enterprise Flaw Lets Shared Hosts Gain Root Access
A critical vulnerability in LiteSpeed Enterprise, reported on September 15, 2026, allows a single hosting account to gain root access on shared servers, raising serious security concerns. This flaw could potentially compromise multiple websites hosted on the…
The Hacker News -
Hackers Exploit Cisco Secure Email Gateway Flaw to Run Root Commands
The article discusses a security vulnerability found in the Cisco Secure Email Gateway that is actively being exploited in the wild. This flaw allows attackers to execute root commands, posing significant risks to network security. Experts recommend…
The Hacker News -
China Linked Hackers Exploit Chrome and Windows Zero Day to Deploy GRIMWEDGE
The article discusses a cybersecurity threat where China-linked hackers exploit a zero-day vulnerability in Chrome and Windows to deploy GRIMWEDGE, a sophisticated malware used for cyber espionage. The piece elaborates on the process of the attack,…
The Hacker News -
Cisco Secure Email Gateway2 articles this day · SecurityOnline first
Cisco Secure Email Gateways Hit by Actively Exploited Root Flaw · Cisco Email Gateway Flaw Exploited to Gain Root Access via Email
-
Cisco Secure Email Gateways Hit by Actively Exploited Root Flaw
Cisco has warned that attackers are actively exploiting CVE-2026-76461, a zero-day vulnerability in the AsyncOS software used by its Secure Email Gateway appliances. The flaw has a CVSS score of 9.8 and can reportedly be exploited remotely without…
-
Cisco Email Gateway Flaw Exploited to Gain Root Access via Email
Cisco has confirmed active exploitation of a critical vulnerability in its Secure Email Gateway, tracked as CVE-2026-76461 and rated 9.8 (Critical) under CVSSv3. The flaw affects both physical and virtual appliances, regardless of configuration. It is caused…
-
-
Microsoft Fixes Windows 11 RDS Failures and CVE-2026-62721
Microsoft has released the out-of-band Windows 11 KB5129195 update for versions 24H2 and 25H2. The update addresses instability introduced by the recent September patch, including failures affecting Remote Desktop Services (RDS). Microsoft said RDS could…
-
Cisco Patches Actively Exploited Flaws in Secure Email Appliances
Cisco has fixed five vulnerabilities in Cisco Secure Email Gateway and Cisco Secure Email and Web Manager. Four are rated critical with CVSS 3 scores of 9.8, while the remaining issue is high severity with a score of 7.5. The flaws affect software releases…
-
Internet Storm Center Tracks Threat Levels and Port Activity in Daily Report
The content features a report from the Internet Storm Center (ISC) for September 15th, 2026, highlighting the presence of handler Johannes Ullrich, whose threat level is currently green. It includes links to previous entries, information about Ullrich's…
SANS ISC -
Chinese-Linked Hackers Exploit Critical Gitea Flaw to Steal Data
Acronis Threat Research Unit says a Chinese-speaking, state-linked actor tracked as Red Heron is exploiting a critical Gitea remote-code-execution flaw, CVE-2026-60004, in attacks against exposed self-hosted instances. The vulnerability affects Gitea…
-
Critical WordPress Plugin Flaws Put 600,000 Sites at Risk
The Events Calendar WordPress plugin is affected by two critical vulnerabilities that can enable unauthenticated remote code execution. CVE-2026-78006, rated 9.8, is a PHP object-injection flaw affecting versions up to and including 6.17.4, while…
-
Mirai Botnets Exploit Critical KGUARD DVR Flaw to Spread Malware
Security researchers have reported a critical vulnerability in KGUARD digital video recorder firmware, tracked as CVE-2026-87827 and rated 10.0 under CVSSv4. The flaw allows unauthenticated attackers to execute arbitrary system commands remotely, potentially…
-
Attackers Scan Vite Servers to Steal Cloud Credentials via CVE-2026-39364
Attackers are mass-scanning internet-exposed Vite development servers to steal environment files, API keys, database passwords and cloud administrator credentials. F5 Labs recorded 807 grouped attacks and approximately 32,000 events during one month,…
-
Hackers Exploit WooCommerce Plugin Flaw to Upload PHP Web Shells
A critical vulnerability in the WooCommerce Wholesale Lead Capture WordPress plugin is being actively exploited, according to the report and Wordfence. Tracked as CVE-2026-27540, the flaw has a CVSS v3 score of 9.0 and affects versions up to and including…
