News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 0 so far |
Fri 25 Sep· 62 articles
-
Shipping Rebate Sites Draw Scrutiny Over Recurring $25 Charges
Malwarebytes has warned that shipping-rebate services branded ShipmentsFree, FreeShipments and ShipmentFree may enrol customers in recurring paid memberships. ShipmentsFree says members can claim up to $100 a month in shipping and return rebates if they…
Malwarebytes -
Roundcube Webmail2 articles this day · SecurityWeek first
Roundcube SQL Flaw Exploited in Attacks Against Webmail Servers · Hackers Exploit Roundcube SQL Flaw to Target Webmail Servers
-
Roundcube SQL Flaw Exploited in Attacks Against Webmail Servers
A pre-authentication SQL injection flaw in Roundcube Webmail, tracked as CVE-2026-48842 and rated CVSS 8.1, is reportedly being exploited in the wild. The vulnerability affects the virtuser_query plugin, which performs database-backed mappings between…
-
Hackers Exploit Roundcube SQL Flaw to Target Webmail Servers
Threat actors are exploiting a high-severity SQL injection vulnerability in Roundcube, the open-source webmail client, Canada’s Cyber Centre has warned. Tracked as CVE-2026-48842 and rated 8.1 by CVSS, the flaw affects the `virtuser_query` plugin and can be…
-
-
Android Banking Trojan RemControl Targets 30 Banks Across Six Countries
A newly identified Android banking trojan, RemControl, has given attackers remote control of infected devices and enabled the theft of banking credentials, Group-IB researchers have warned. The malware has reportedly targeted retail banking customers in…
Infosecurity -
Salesforce Agentforce Flaws Exposed CRM Data and Enabled Phishing
Security researchers at Zenity Labs disclosed three Salesforce Agentforce vulnerabilities, dubbed “SalesBleed”, that could have enabled attackers to exfiltrate sensitive CRM data without a user clicking anything, or use an Agentforce agent to send phishing…
SecurityWeek -
AI Flags AliExpress Phishing Domains Weeks Before They Go Live
EfficientIP Research Labs said it identified 10 potential AliExpress-themed phishing domains on 9 June 2026, weeks before they were registered. The domains were found in customer DNS traffic by the company’s AI-driven domain generation algorithm detection…
Infosecurity -
WSO2 Universal Gateway2 articles this day · SecurityOnline first
CISA Flags Critical WSO2 and Magento Flaws Used in Attacks · CISA Warns of Exploited WSO2 and Adobe Commerce Flaws
-
CISA Flags Critical WSO2 and Magento Flaws Used in Attacks
The US Cybersecurity and Infrastructure Security Agency (CISA) added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on 24 September 2026: CVE-2026-5430, a WSO2 multiple-products path traversal vulnerability with a CVSS score of…
-
CISA Warns of Exploited WSO2 and Adobe Commerce Flaws
On 24 September 2026, the US Cybersecurity and Infrastructure Security Agency (CISA) added two vulnerabilities affecting WSO2 products and Adobe Commerce to its Known Exploited Vulnerabilities (KEV) catalogue. The agency’s listing indicates that both flaws…
-
-
Attackers Exploit SharePoint Flaw to Deploy Stealthy Web Shells
Threat actors are actively targeting on-premises Microsoft SharePoint servers by exploiting the remote-code-execution vulnerability CVE-2026-65660. The flaw has a CVSSv3 score of 8.8 and affects SharePoint Server 2013, 2016, 2019 and Subscription Edition,…
-
Fake Terraform Providers Hide Backdoor Targeting DevOps Systems
Researchers have uncovered a supply-chain campaign using fraudulent Terraform providers and poisoned Go modules to distribute a Go-based backdoor linked, with moderate confidence, to the Graphalgo intrusion cluster. In early September, attackers published…
SecurityOnlineGraphalgo -
CLOSEDQUORUM Malware Turns AI Models Into Command Centre
Cisco Talos has reported a Windows malware implant called CLOSEDQUORUM that uses commercial large language model (LLM) services as command-and-control infrastructure. The 16.4MB, 64-bit executable, written in Go with C components, collects the host name,…
SecurityOnline -
Russia Tests Europe’s Defences with Cyberattacks and Drones
Recorded Future says Russia is intensifying hybrid operations against European countries supporting Ukraine, combining cyber sabotage, disinformation, drones and other physical activity. The reported aim is to test defences, disrupt critical infrastructure…
Dark Reading -
WordPress Backdoor Hides in MU Plugins and Steals Payment Keys
Wordfence researchers have identified a persistent WordPress backdoor deployed as a must-use (MU) plugin across thousands of websites, particularly sites running WooCommerce. The threat actor and initial intrusion method remain unconfirmed, although the…
SecurityOnline -
Macfinger ClickFix Campaign Steals macOS Data Through Fake CAPTCHA Pages
The Macfinger ClickFix campaign remains active and is delivering an unidentified macOS information stealer, according to SANS Internet Storm Centre researcher Brad Duncan. In an infection observed on 24 September 2026 on macOS 27.0, victims were shown a fake…
SANS ISC -
Cloudflare Fixes Container Flaw That Exposed Customers’ Data
Cloudflare has addressed a vulnerability that allowed one customer’s container to access another customer’s leftover disk data. This flaw highlighted significant security concerns in cloud environments and has been rectified to ensure better data isolation…
The Hacker News -
CISA Flags Exploited WSO2 and Adobe Commerce Vulnerabilities
On September 25, 2026, Ravie Lakshmanan reported that vulnerabilities in WSO2 and Adobe Commerce have been exploited in cyberattacks and subsequently added to the CISA Known Exploited Vulnerabilities (KEV) list. The article highlights the significance of…
The Hacker News -
ISC Stormcast Highlights Network Threat Research and Security Resources
The ISC (Internet Storm Center) report features Brad Duncan as the handler on duty with a current threat level of green. The report includes links to previous diaries and highlights a podcast titled 'ISC Stormcast for Friday, September 25th, 2026'.…
SANS ISC -
ServiceNow Patches Critical AI Platform Flaws Enabling Data Theft
ServiceNow released patches on 24 September 2026 for five vulnerabilities in its AI Platform, affecting the Yokohama, Zurich and Australia release branches before the September patch cycle. The issues comprise two critical and three high-severity flaws. The…
-
CISA Warns Eufy Robot Vacuum Flaws Could Enable Code Execution
CISA published an advisory on 24 September 2026 covering three vulnerabilities in Eufy Omni C20 and Omni X10 Pro robot vacuums running firmware before version 1.6.4. The flaws are CVE-2026-93291, an improper certificate-validation issue rated 9.4 (critical)…
-
F5 Patches Exploited BIG-IP Zero-Day Enabling Remote Code Execution
F5 has patched a critical zero-day vulnerability in BIG-IP Access Policy Manager (APM), tracked as CVE-2026-94127, which the company says is being exploited in the wild. Rated 9.8 (Critical) under CVSSv3, the flaw affects BIG-IP 21.1.0, 17.5.0 and 17.1.0…
-
Sudo Flaw Lets Local Users Bypass Time Restricted Rules via TZ
Security researchers have disclosed a high-severity sudo vulnerability, tracked as CVE-2026-96512, with a CVSS v3 score of 7.8. The flaw affects sudo versions 1.8.20 through 1.9.17p2 and, according to Red Hat, all supported versions from RHEL 7 through RHEL…
-
RustyTux Exploit Turns Linux Kernel Race Into Root Access
A researcher has published RustyTux, a working proof-of-concept exploit for CVE-2026-23239, a Linux kernel privilege-escalation vulnerability rated High with a CVSS score of 7.8. The flaw affects the espintcp module and involves a race condition during…
