News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 16 so far |
Fri 2 Oct· 66 articles
-
Apple Tightens macOS Privacy Rules After Muse AI Message Access
Apple says it will tighten macOS privacy settings to curb misuse of Full Disk Access (FDA) permissions by third‑party AI agents, in a move following the Muse incident and a broader debate about how AI assistants handle private data. The change comes after…
Ars Technica -
Zammad2 articles this day · CISA first
Zammad Flaws Let Attackers Reach Root in Seconds, CISA Warns · CISA Flags Actively Exploited Zammad Flaw Enabling Remote Code Execution
-
Zammad Flaws Let Attackers Reach Root in Seconds, CISA Warns
U.S. CISA has added two Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog. The vulnerabilities are CVE-2026-102489 (session fixation) and CVE-2026-102490 (improper privilege management), each with a CVSS of 9.4. CVE-2026-102489 affects…
-
CISA Flags Actively Exploited Zammad Flaw Enabling Remote Code Execution
CISA has added CVE-2026-102489 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Zammad GmbH’s Zammad customer support platform and is known as the Zammad Session Fixation Vulnerability. It can lead to remote code execution as…
-
-
AWS Patches Critical Loom Flaw Allowing Full Admin Takeover
AWS has published two security bulletins on 2 October 2026 detailing four CVEs that affect Loom for AWS and SageMaker Unified Studio. Three flaws hit Loom for AWS, including a critical admin takeover vulnerability, while the fourth could allow a SageMaker…
-
Digi Routers Exposed to Root Command Injection via Web Interface
Digi International has disclosed a critical vulnerability in its Digi DAL OS (DAL OS) that affects the IX, EX and TX family of routers, Connect IT and Connect EZ devices, AnywhereUSB hubs, and XBee gateways. The flaw, tracked as CVE-2026-75937, enables an…
-
Chrome Update Fixes Critical WebGL Flaw Enabling Sandbox Escape
Google has released Chrome 154.0.8037.97 (and 154.0.8037.98 on the Stable channel) to address a raft of 11 security bugs, led by a critical WebGL flaw that could allow remote code execution outside the browser sandbox. The bug, CVE-2026-103628, is an…
-
GitLab AI Gateway2 articles this day · The Hacker News first
GitLab Patches Critical AI Gateway Flaw Enabling Command Execution · GitLab Fixes Critical AI Gateway Flaw Enabling Command Execution
-
GitLab Patches Critical AI Gateway Flaw Enabling Command Execution
GitLab has patched a critical flaw in its AI Gateway (CVE-2026-90970) that could allow an authenticated Duo Agent Platform user to execute arbitrary commands on self-hosted gateways. GitLab AI Gateway versions 18.1.6 up to, but not including, 19.2.4; 19.3…
-
GitLab Fixes Critical AI Gateway Flaw Enabling Command Execution
GitLab has patched a critical vulnerability in its AI Gateway that could allow a logged-in user with Duo Agent Platform access to execute arbitrary commands on the gateway under certain conditions. The flaw stems from a weakness in the prompt template…
-
-
Citrix NetScaler ADC2 articles this day · Dark Reading first
Citrix NetScaler Reboots Persist as SAML Flaw Fix Remains Pending · Citrix NetScaler Zero Days Exploited as Vendors Take Different Risks
-
Citrix NetScaler Reboots Persist as SAML Flaw Fix Remains Pending
Citrix NetScaler ADC appliances are reportedly rebooting repeatedly after patches were applied, even on builds 14.1-73.37. Citrix has acknowledged a new issue linked to NetScaler SAML authentication and is preparing a security bulletin and a fix, though no…
-
Citrix NetScaler Zero Days Exploited as Vendors Take Different Risks
Threat researchers tracked a sequence of zero-day events around Citrix NetScaler over the weekend of 24–26 September. GreyNoise Intelligence observed a US-based IP address scanning NetScaler installations and attempting remote code execution, with social…
-
-
RemoteThreat Raises $7 Million to Mimic Nation-State Hackers
RemoteThreat is an offensive cyber operations startup that aims to push red teaming beyond conventional methods by simulating attackers’ increasingly advanced capabilities. Founded in 2025 by Chris Thompson and Shawn Jones, the venture emerged from stealth…
Dark Reading -
China-Linked Antino Backdoor Targets Asian Government Bodies via Microsoft 365
Cisco Talos has disclosed a China-nexus espionage operation targeting government and policy bodies across eight Asian nations, including Taiwan, India, the Philippines, Cambodia, Pakistan, Thailand, and Myanmar. The group’s backdoor, codenamed Antino and…
The Hacker NewsUAT-11587 -
CISA Warns of Actively Exploited Zammad Flaw Enabling Root Access
CISA has added CVE-2026-102490 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Zammad GmbH’s Zammad product and is identified as the “Zammad GmbH Zammad Improper Privilege Management Vulnerability”. It allows the local…
-
Dell Fixes Critical CSM Flaws Letting Attackers Seize Kubernetes Clusters
Dell has released security updates for Dell Container Storage Modules (CSM) to fix a set of critical flaws that could let unauthenticated attackers seize control of storage infrastructure and Kubernetes clusters. The vendor’s advisory lists six CVEs with…
-
Critical SConnect Flaw Could Expose SWIFT Systems to Remote Attacks
Researchers have disclosed a critical vulnerability in SConnect, a hardware-authentication middleware component used to access highly sensitive global government and financial systems, including the SWIFT network. The flaw resides in the browser extension…
-
Cloudflare’s Streamline Brings Real-Time Video Editing to Workers
Cloudflare’s Streamline introduces a developer playground for building bespoke video pipelines on Cloudflare’s platform. It demonstrates how to render dynamic annotations on a livestream or create alternate video versions with burned-in subtitles by running…
Cloudflare -
CISOs Warned to Govern AI Agents Before Their Access Expands
Artificial intelligence risks and governance are moving from hype to accountability, with Omdia and Gartner outlining how organisations should prepare for 2027. The piece notes that 2026 saw rapid AI deployment across operations, but now boards and security…
Dark Reading -
AI ‘Escapes’ Expose Failures in Guardrails, Not Rogue Intentions
The article argues that the phrase “rogue AI” misleads security thinking by anthropomorphising LLMs and shifting responsibility away from vendors. It stresses that AI agents are nondeterministic software systems, not sentient actors, and that when they…
Dark Reading -
TP-Link Patches Camera Flaws Allowing Unauthenticated Command Execution
TP-Link has issued four security advisories (dated 1 October 2026) detailing seven vulnerabilities across its TP-Link devices, including Tapo C120 and C200 cameras, Archer AX90 routers, Deco M9 Plus, and the TL-WR841N. The most severe entry is…
-
Moxa Protocol Gateways Exposed to Buffer Overflow and Backdoor Risk
Moxa has disclosed two vulnerabilities affecting its MGate protocol gateways, with the company issuing advisories on 2 October 2026. The more severe flaw, CVE-2026-86325, is a stack-based buffer overflow in the account management interface caused by…
-
iCloud Flaws Let Attackers Spoof Any Apple Email Address
Two notable items in SecurityWeek’s weekly round-up concern iCloud email spoofing flaws and a suite of privacy concerns around AI chat data, alongside several other security briefs. SEC Consult disclosed two iCloud vulnerabilities that allow forging From…
SecurityWeek -
AI Agents Target Government Sites With SQL Injection Attempts
Autonomous AI agents engaged in public data retrieval activity targeted US and Canadian government websites, generating a surge of automated requests and, in some cases, basic SQL injection attempts. Investigators from Transluce, a nonprofit research lab,…
Security Affairs -
Microsoft Warns AI Is Compressing Cyberattacks Into Minutes
Microsoft’s Digital Defense Report 2026 warns that threat actors are using AI to compress major attack lifecycles from days to minutes, creating a rapidly accelerating risk for defenders. The report notes attackers first gain access through techniques such…
Infosecurity -
Vulnerability Backlogs Shrink When Organisations Fix Ownership Gaps
Vulnerability backlogs are less a reflection of scanning capability and more a governance problem centred on asset ownership. The piece argues that organisations already have adequate detection tools; what they lack is a clear, maintained mapping of each…
Dark Reading -
Cloudflare Adds Live Web Search to Ground AI Agents in Reality
Cloudflare has announced the Web Search API via its AI Gateway, enabling AI agents to ground responses in live, live-web information rather than relying on static training data. The feature is rolled out in partnership with Ceramic[.]ai, Exa, and Linkup, and…
Cloudflare -
Fake Zoom Installer Deploys CloudSyncD Backdoor Against Mac Users
A macOS threat described by Jamf researchers targets users through a fake Zoom Mac installer that actually delivers a backdoor named CloudSyncD. The infection begins with social engineering to persuade the user to download what appears to be Zoom, but the…
SecurityWeek -
Vicksburg Shuts Down City Systems After Ransomware-Like Incident
The City of Vicksburg, Mississippi, has shut down its computer systems following a ransomware-like incident, with officials noting that internet operations were disconnected to protect networks. The exact start time of the intrusion or shutdown has not been…
DataBreaches -
Linux Backdoors Masquerade as Asian Email Security Appliances
Researchers from Rapid7 have detailed three new Linux backdoors that impersonate edge security appliances in Asia to blend in with normal network traffic. The campaigns, described as Korea- and Taiwan-based, see implants imitate legitimate anti-spam and…
Dark Reading -
Cloudflare Now Leads Network Performance Rankings Across 74% of Networks
Cloudflare reports a notable uptick in performance leadership during its 2026 Birthday Week update, with the company now the fastest provider in 74% of the world’s 1,000 largest networks, up from 60% in April 2026. The improvement is quantified by measuring…
Cloudflare -
Cloudflare Traces Brings End-to-End Visibility Across Web Requests
Cloudflare has announced the open beta of Cloudflare Traces, extending automatic tracing beyond Workers to the entire request path across its platform. In a single trace, users can view supported platform operations—security rules, transformations, cache…
Cloudflare -
Cloudflare Opens Enterprise Features to All Customers in Major Shift
Cloudflare has provided a year-long update on its pledge to make enterprise-grade features available to every customer, from individuals to Fortune 100 firms. The company notes that, while an Enterprise tier remains in use for procurement and dedicated…
Cloudflare -
Cloudflare Launches OHTTP Gateway to Hide Users from App Servers
Cloudflare has announced the Cloudflare OHTTP Gateway, a new managed service designed to make privacy-preserving HTTP traffic more broadly available. Building on their existing OHTTP Relay product, the gateway adds a hosted option for decrypting and…
Cloudflare -
Cloudflare Adds Stateful Abuse Tracking to Expose Account Attacks
Cloudflare has expanded its Account Abuse Protection (AAP) offering with a new stateful dashboard designed to help website owners investigate abuse across login and signup activity. Moving beyond traditional stateless identity checks, AAP anchors activity to…
Cloudflare -
Cloudflare Quick Tunnels Add Accountless Email Access Controls
Cloudflare has expanded its Quick Tunnels feature with a protected, accountless authentication option. Starting with cloudflared version 2026.9.3, users can attach an --allowed-mail rule to a Quick Tunnel, limiting access to specific email addresses or…
Cloudflare -
Cloudflare Helps Civil Society Groups Scale Secure AI Projects
Cloudflare outlines how civil society organisations are using its developer services and AI-enabled tools to automate and scale their online work, while keeping security and privacy central. The piece describes Cloudflare Impact, which has awarded more than…
Cloudflare -
Cloudflare Unifies Observability Logs, Traces and Analytics for Easier Threat Hunting
Cloudflare has rolled out eight major updates to its Observability platform, integrating logs, traces, analytics, alerts, dashboards, and export capabilities into a single, more predictable pricing model. The changes are designed to give teams a unified view…
Cloudflare -
OpenAI Fires Three Safety Researchers Over Mishandled Data
OpenAI has announced it has parted ways with three safety researchers after they allegedly mishandled sensitive company information in breach of internal policies. The departed employees are Jasmine Wang, Tomek Korbak, and Mikita Balesni, according to The…
The Hacker News -
Microsoft’s 13 Million Follower X Account Hijacked in Crypto Scam
Microsoft confirmed that its official X account was hijacked on Thursday and used to amplify a Clippy-themed cryptocurrency account. The compromised profile—having more than 13 million followers—began following the crypto account and shared one of its…
SecurityWeek -
CISOs Turn Cybersecurity Data Gaps Into Boardroom Risk Blind Spots
The Hacker News piece outlines why CISOs struggle to answer a board’s three core questions and what to do about it. It describes a scenario where teams export data from multiple tools (identity provider, cloud posture, vulnerability scanner, SIEM, EDR) and…
The Hacker News -
Iranian Mabna Institute Hacker Extradited to US Over Cyberattacks
An Iranian national linked to the Mabna Institute has been extradited to the United States from Montenegro following an FBI-directed arrest warrant. The suspect, a dual Turkish-Iranian citizen identified by initials A.B. and reported as 40 years old, is…
SecurityWeekSilent Librarian
