News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Wed 23 Sep· 79 articles
-
Adobe Patches Critical Connect and AEM Forms Flaws Enabling Code Execution
Adobe has released patches for 36 vulnerabilities, including critical flaws in Adobe Connect and Experience Manager (AEM) Forms. The Connect update addresses nine defects, six of them critical, that could allow arbitrary code execution or privilege…
-
Microsoft Disrupts AI Phishing Platform After 12,000 Accounts Compromised
Microsoft says it has disrupted EvilTokens, an AI-powered phishing platform that emerged in February 2026 and was used to compromise more than 12,000 email accounts across over 10,000 organisations. The affected organisations were located in the US, Canada,…
SecurityWeekEvilTokens -
Unpatched Ubuntu Flaw Enables Host Root Container Escapes
A new exploit has been released that targets an unpatched vulnerability in Ubuntu Linux, potentially allowing host-root container escape. The article, authored by Swati Khandelwal on September 23, 2026, highlights the implications of this vulnerability on…
The Hacker News -
Microsoft Dismantles EvilTokens Phishing Service Behind 12,000 Breaches
Microsoft, Coinbase and law-enforcement partners have dismantled EvilTokens, a phishing-as-a-service platform that Microsoft attributes to the Storm-2992 group. The service, which appeared in February 2026 and was advertised through Telegram, reportedly…
Security AffairsStorm-2992 -
Google Chrome 154 Patches 11 Critical Flaws and 97 Others
Google has released Chrome 154 to the stable channel with patches for 108 vulnerabilities, including 11 rated critical. The critical flaws comprise buffer overflows in ANGLE and WebGL, out-of-bounds writes in GPU and WebGL, and use-after-free vulnerabilities…
SecurityWeek -
Apple Plans Auto Lock to Secure iPhones After Suspected Theft
Apple is preparing an Auto Lock feature for iPhones, revealed in the iOS 27 Beta 2 release notes. The feature is intended to protect users immediately after a phone is snatched by automatically displaying the lock screen when iOS determines that theft is…
SecurityOnline -
Experts Warn AI Could Enable Cyberattacks and Bioweapons Development
Researchers and AI companies have outlined several potential scenarios in which advanced artificial intelligence could cause catastrophic harm, although the article stresses that many remain speculative and contested. Juan Andrés Guerrero-Saade of…
SecurityWeek -
UAE and Saudi Arabia Face Half of Gulf’s Cyberattacks in 2026
The United Arab Emirates and Saudi Arabia accounted for 50% of all cyberattacks recorded across the Gulf in the first half of 2026, according to threat intelligence firm Positive Technologies. The UAE represented 35% of attacks and Saudi Arabia 15%, while…
Dark Reading -
Trump Wants US Government to Replace ‘Artificial Intelligence’ With ‘Super Intelligence’
US President Donald Trump has directed the federal government to replace “artificial intelligence” with “super intelligence” in future government documents. The article says Trump argued that “artificial” could mislead people into thinking the technology is…
SecurityOnline -
Malicious MemOS Packages Steal Developer Secrets Across Platforms
Unknown attackers reportedly compromised MemTensor’s open-source MemOS repositories and used a maintainer’s account to publish malicious releases of two packages on 23 September 2026. The affected packages were the npm package…
SecurityOnline -
Outerlimit Raises $16 Million to Secure Autonomous AI Agents
New York-based Outerlimit has emerged from stealth with $16 million in pre-seed funding from AlbionVC, Evolution Equity Partners, Crane Venture Partners and angel investors. Founded by Tony Pepper, Neil Larkins and Peter Vincent, the company is developing a…
SecurityWeek -
ShinyHunters2 articles this day · The Hacker News first
ShinyHunters Claims FBI Breach Exploited Oracle PeopleSoft Zero-Day · ShinyHunters Claims FBI Breach Exposed Agents and Job Applicants
2 outlets-
ShinyHunters Claims FBI Breach Exploited Oracle PeopleSoft Zero-Day
ShinyHunters has claimed it breached the FBI using a zero-day vulnerability in Oracle PeopleSoft and stole data relating to “all FBI employees and applicants”. The group published the claim on its leak site, saying the attack was retaliation for an FBI…
Infosecurity -
ShinyHunters Claims FBI Breach Exposed Agents and Job Applicants
ShinyHunters has claimed to breach the FBI's database, allegedly stealing confidential information on agents and job applicants. The breach raises significant concerns about cybersecurity measures in place to protect sensitive data. The ongoing conversation…
The Hacker News
-
-
Chrome for macOS Users Face Minutes Long Delays Opening Extensions
Some macOS users are experiencing severe delays when opening Google Chrome extension pop-ups. Clicking an extension icon can leave its window frozen for several minutes before it loads or responds. Reported examples include 1Password and script-management…
SecurityOnline -
Android 17 May Let Users Unlock Forgotten PINs with Google Accounts
Google is testing an “Unlock with Google Account” feature in Android 17 QPR2 Beta 5. The option is not currently enabled, but code found in the beta suggests that users who forget their device PIN or password could eventually regain access using a Google…
SecurityOnline -
iPhone 18 Pro Face ID Failures Trigger Freezes and Restarts
Users of the iPhone 18 Pro and iPhone 18 Pro Max are reporting touchscreen lock-ups, system freezes and unexpected restarts after failed Face ID attempts. The issue reportedly affects biometric authentication for protected content, including Apple’s…
SecurityOnline -
F5 BIG-IP2 articles this day · SecurityWeek first
F5 BIG-IP Flaw Enables Unauthenticated Remote Code Execution · F5 BIG-IP APM zero-day lets attackers execute code remotely
-
F5 BIG-IP Flaw Enables Unauthenticated Remote Code Execution
Rapid7 reports that F5 published an advisory on 22 September 2026 for CVE-2026-94127, a critical heap-based buffer overflow in BIG-IP Access Policy Manager (APM). The vulnerability has a CVSS v3.1 score of 9.8 and could allow an unauthenticated attacker with…
-
F5 BIG-IP APM zero-day lets attackers execute code remotely
F5 and the US Cybersecurity and Infrastructure Security Agency (CISA) have warned that attackers are exploiting a critical BIG-IP Access Policy Manager (APM) vulnerability as a zero-day. Tracked as CVE-2026-94127, and rated 9.8 under CVSS, the flaw can allow…
-
-
Arista Patches Actively Exploited VeloCloud Orchestrator Zero-Day
Arista has issued urgent patches for a critical vulnerability in on-premises VeloCloud Orchestrator (VCO), its central management platform for VeloCloud SD-WAN edge devices, policies and traffic. Tracked as CVE-2026-93952 and rated 10.0 on the CVSS scale,…
-
EU Auditors Warn Cyber Incident Response Is Hampered by Gaps
The EU Court of Auditors has criticised shortcomings in the bloc’s ability to detect and respond to large-scale cyber incidents. Its report said the EU’s €1.4bn cybersecurity budget is delivering benefits, but that insufficient information-sharing remains a…
Infosecurity -
F5 Patches Critical BIG-IP APM Zero Day Exploited for RCE
F5 has released patches for a critical zero-day vulnerability in its BIG-IP APM product, which was being exploited for unauthorized remote code execution (RCE) on OAuth servers. This security flaw poses significant risks as it allows attackers to gain access…
The Hacker News -
Chinese Hackers Exploit Chrome and Windows Zero Days to Deploy CLEANGULP
The article discusses a cybersecurity incident involving Chinese hackers who exploited a zero-day vulnerability in Chrome and Windows to deploy a malware called CLEANGULP. The report highlights the seriousness of this security breach, the potential impact on…
The Hacker News -
Fake LastPass Authenticator Campaign Used Signed Driver to Disable Security Tools
Attackers used a fake GitHub organisation impersonating LastPass to distribute a counterfeit LastPass Authenticator. Identified by LastPass’s Threat Intelligence, Mitigation, and Escalation team on 13 August 2026, the operation appeared in searches for…
Security Affairs -
SideCopy Expands Espionage Campaign to South Asian Universities
Trellix Advanced Research Center (ARC) researchers have identified a new SideCopy espionage campaign targeting academic institutions and research organisations, as well as defence personnel and government officials across South Asia. SideCopy is described as…
SecurityOnlineSideCopy -
Vercel Fixes Critical Next.js Flaw Enabling Unauthenticated RCE
Vercel published an emergency fix on 22 September 2026 for a critical Next.js remote-code-execution vulnerability, tracked as CVE-2026-94545. The flaw has a CVSS base score of 9.5 and could allow unauthenticated attackers to run arbitrary code on Node.js…
-
WordPress Patches Critical Flaw Enabling Conditional Code Execution
WordPress 7.1.2, released on 22 September 2026, fixes an unauthenticated local file inclusion vulnerability tracked as CVE-2026-87902, with a CVSS score of 9.2. The flaw affects versions from 4.7.0 onwards and arises in `get_page_template()`, which builds…
-
North Korean Recruiters Target Developers With Malware in Interviews
A joint advisory from Australia’s ASD’s Australian Cyber Security Centre, the FBI, Japan’s National Police Agency and European partners details a North Korean campaign attributed with high confidence to the WaterPlum group, also known as Contagious…
SecurityOnlineWageMole -
ShinyHunters Claims FBI Breach Exposed Agents’ Personal Data
ShinyHunters claims it breached FBI systems and accessed sensitive information from Criminal Justice, HR and Medlink services, including data on nearly all FBI agents and job applicants. To support the claim, the group defaced a subdomain of the FBI’s jobs…
-
Next.js ImageResponse Flaw Lets Attackers Execute Server Code via SVGs
The article discusses a critical vulnerability in Next.js ImageResponse, which can potentially lead to server code execution through specially crafted SVG inputs. This issue poses significant risks to web security, and users are advised to implement…
The Hacker News -
Fake Trading App Delivers KRSID Ransomware to South Korean Victims
Cybercriminals are distributing KRSID ransomware through UBP Asset, a counterfeit investment application presented as a private Home Trading System (HTS). According to analysis from AhnLab’s SEcurity intelligence Center (ASEC), victims are recruited through…
SecurityOnline -
Check Point Patches Critical Flaw Exploited in Active Attacks
Check Point has released urgent patches for CVE-2026-93616, a critical directory-traversal and file-upload vulnerability in its Management Server products. Rated 9.8 by CVSS, the flaw can allow unauthenticated attackers to upload and execute arbitrary…
-
IBM FTM Flaws Put OpenShift Payment Systems at Risk of Code Execution
IBM published a security bulletin on 23 September 2026 covering vulnerabilities in Financial Transaction Manager (FTM) for Red Hat OpenShift. The article gives conflicting totals, referring to 47 vulnerabilities in its introduction but listing 33 CVEs: five…
-
HPE Fixes Critical ALE Flaws That Could Let Attackers Seize Servers
Hewlett Packard Enterprise addressed 10 vulnerabilities in its Networking Analytics and Location Engine (ALE) platform on 22 September 2026. The flaws affect ALE versions 5.0.0.0 and earlier, including unsupported branches. Two vulnerabilities have a CVSS v3…
-
IBM Patches 22 DataStage Flaws Enabling Command Execution and Credential Theft
IBM has disclosed 22 vulnerabilities affecting DataStage on Cloud Pak for Data 5.4.0.0. The supplied report identifies eight CVEs, including CVE-2026-16346, rated 9.9 on CVSS v3, and says the wider set includes one critical and seven high-severity flaws. The…
-
ISC Stormcast Reviews Key Cybersecurity Threats and Training Updates
The ISC Stormcast for September 23rd, 2026 is presented by handler Brad Duncan, with a threat level currently set to green. The podcast features discussions on ongoing cybersecurity highlights and relevant training courses. For further engagement, users can…
SANS ISC -
Google Chrome 154 Fixes 108 Flaws, Including Three Critical Bugs
Google has released Chrome 154 to the stable channel for Windows, Mac and Linux, fixing 108 security vulnerabilities across several browser components. The issues include memory-safety flaws such as buffer overflows, use-after-free vulnerabilities and…
-
SolarWinds Fixes Critical Flaws Enabling Remote Code Execution
On 22 September 2026, SolarWinds released updates for two critical vulnerabilities in SolarWinds Observability Self-Hosted. CVE-2026-28324, rated 9.8 on the CVSS scale, involves insufficient integrity checks in non-default configurations. CVE-2026-28325,…
-
ClickFix Campaign Uses Fake Bot Checks to Deploy macOS Stealer
SANS Internet Storm Centre researcher Brad Duncan has reported a macOS-focused ClickFix campaign, which he calls “Macfinger”. Observed on 21 and 22 September 2026, the activity involved legitimate websites carrying injected JavaScript. The script displayed a…
SANS ISC -
Critical D-Link Flaw Enables Root Command Injection on Wi-Fi APs
Security researchers have published technical details and a functional proof-of-concept exploit for a critical vulnerability in D-Link DAP-1360 wireless access points. Tracked as CVE-2026-95675, the flaw is rated 9.8 under CVSS v3 and affects firmware…
