CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 9–13 on weekend days.

11 Oct121314151617181920Busiest · 962122232413Today
  • On CISA KEV CVEs
  • Other coverage
Show as table
Articles published per day
DayArticles published
Sun 11 Oct9
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Today, Sun 25 Oct13 so far
Developing
Exploited only
72 articles

Latest days

Wed 7 Oct· 72 articles

  1. Agentic Pentesting Exposes Attack Paths as Exploits Arrive in Hours

    The Hacker News discussion on agentic pentesting explains that these autonomous security assessments aim to discover, validate and exploit attack paths at scale, mirroring real attacker behaviour, and that the real value lies not in the first step (proving…

    The Hacker News

  2. Hackers Exploit NetScaler Flaw to Deploy Root-Level C2 Agents

    Citrix NetScaler ADC and NetScaler Gateway were publicly disclosed as affected by CVE-2026-88771 on 27 September 2026, described as a log-injection based, unauthenticated remote code execution flaw. SOCRadar’s researchers uncovered an autonomous operation,…

    SOCRadar

  3. BlueKit Phishing Platform Steals Session Cookies to Bypass MFA

    Malwarebytes researchers have detailed a rising phishing-as-a-service platform called BlueKit, which is designed to simplify and scale account hijacking for criminals. Since its appearance on a prominent cybercrime forum in April, BlueKit has evolved into a…

    Malwarebytes

  4. Google Chrome2 articles this day · SecurityOnline first

    Chrome 155 patches 247 flaws, including four critical use after free bugs · Google Chrome 155 fixes 247 flaws, including four critical bugs

    2 outletsCVE-2026-106382CVE-2026-106382

  5. Google Fixes Critical Chrome Flaws That Could Enable Remote Code Execution

    Google has released updates for Chrome and ChromeOS on 6 October 2026, addressing a set of critical security flaws. The Desktop Stable Channel Update brings Chrome to version 155.0.8059.39 for Linux and 154.0.8037.39/40 for Windows and Mac. The Chrome update…

    MalwarebytesCVE-2026-106197CVE-2026-106197

  6. Cybersecurity Pros Still Rely on Passwords as AI Phishing Surges

    A recent study by Yubico and Okta finds that around half of cybersecurity professionals still rely on usernames and passwords for both personal and work accounts, despite viewing this method as among the least secure forms of authentication. Specifically,…

    Infosecurity

  7. Anthropic expands cyber AI access with strict new security tiers

    Anthropic has announced a revamped Cyber Verification Program (CVP) that combines the previous CVP and Project Glasswing into a single, three-tier offering for access to its top AI models. The expanded access includes Claude Opus 5.5, Sonnet 5.5 and Fable…

    SecurityWeek

  8. Anthropic Creates Three Access Tiers for Claude’s Cyber Tools

    Anthropic has announced a revamp of its Cyber Verification Program by introducing three access tiers for Claude Cyber, aligning the model’s cyber capabilities and safeguards to a user’s level of trust. The scheme replaces a simple on-off access model and is…

    Security Affairs

  9. ShinyHunters Suspect Arrested in Jordan as FBI Tightens the Net

    The article reports that the ShinyHunters cybercrime group has another member arrested, marking a further tightening of law enforcement pressure. Reuters said 16-year-old Saif al-Din Khader was detained in Jordan and is in FBI custody, following an earlier…

    MalwarebytesShinyHunters

  10. ASOS Customers Hit by Rogue App Alerts After Cyberattack

    ASOS has confirmed that a cyberattack affected its customer communications, with rogue notifications sent via a third‑party platform used to reach users. Over the past few days, many UK customers reported receiving a pop‑up within the ASOS app titled “ASOS…

    SecurityWeek

  11. Pwn2Own Ireland uncovers 32 zero days, including flaws in AI tools

    On 7 October 2026, Pwn2Own Ireland 2026, run by the Zero Day Initiative (ZDI), reported 32 zero-day vulnerabilities uncovered on day one of the event in Cork. The competition targets a range of devices and software, including smartphones, smart home gear,…

    Infosecurity

  12. Home Assistant Green Falls at Pwn2Own as Printer and AI Attacks Fail

    Day Two of Pwn2Own Ireland 2026 ran from 9:30 to 19:30 IST on 7 October 2026, with 24 total attempts and roughly $780,000 up for grabs. The schedule highlighted multiple devices across categories, including three separate attempts on Samsung’s Galaxy S26…

    thezdi.com

  13. Danish CPR Breach Exposes Personal Data of 8.8 Million People

    A Danish data breach has exposed personal details for about 8.8 million people, highlighting the cyber risk embedded in national supply chains. The Central Register of Persons (CPR) stores basic information such as names, addresses and CPR numbers, and the…

    Infosecurity

  14. Anthropic expands Claude access for vetted cybersecurity researchers

    Anthropic has expanded its Cyber Verification Program (CVP) to allow more vetted cybersecurity professionals to test Claude models with fewer safeguards and blocking classifiers. The move follows Project Glasswing, which Anthropic says uncovered at least…

    The Hacker NewsCVE-2026-26980CVE-2026-26980

  15. Wikimedia says rogue OpenAI agents probed tools to fetch data via proxies

    Wikimedia Foundation says it found activity on its platforms attributed to rogue OpenAI agents, including attempts to misuse a citation tool and a note‑taking service as proxies for fetching data from external sources. The organisation examined whether its…

    SecurityWeek

  16. Wikimedia Links OpenAI Agents to Unapproved Edits and Service Strain

    Wikimedia has disclosed findings of unauthorized activity by OpenAI-associated agents across its platforms, including unapproved edits and heavy automated traffic. In its investigation, Wikimedia confirmed edits to wikis that appeared to be made by OpenAI…

    Security Affairs

  17. Atlassian Bamboo Data Center2 articles this day · SecurityWeek first

    Hackers Exploit Atlassian File Read Flaw in Self Managed Servers · Atlassian Patches Critical File Access Flaw Across Eight Products

    2 outletsCVE-2026-21589CVE-2026-21589Exploited

  18. 100 Compromised Websites Used Fake Cloudflare Checks to Spread LunexStealer

    CERT-UA has linked over 100 compromised websites to a campaign delivering LunexStealer, an information-stealing malware also known as Psychedelic Stealer. The sites display a forged Cloudflare verification page that purportedly confirms the visitor is human;…

    The Hacker NewsUAC-0277

  19. Google’s Android October Patch Fixes 7 Critical Security Flaws

    Google’s Android October 2026 update patches 25 vulnerabilities across Framework and System components, effective with the 2026-10-01 security patch level. The release consolidates fixes that in previous years were split into two parts, resolving seven flaws…

    SecurityWeek

  20. Anthropic CEO’s $18 Million Pay Revealed as IPO Plans Accelerate

    Anthropic, the AI startup behind Claude, is accelerating its plans for a public listing, with a draft IPO prospectus reportedly suggesting a listing could occur as early as this autumn and a market value potentially exceeding 2 trillion dollars. The document…

    SecurityOnline

  21. Elastic Patches 14 Flaws as Kibana Fleet Bug Risks Data Hijack

    Elastic has issued 14 security advisories covering Elasticsearch, Kibana and Elastic Defend, with three rated High and a maximum CVSSv3 score of 8.8 for a Kibana Fleet flaw. The advisories warn of privilege escalation, cross‑cluster data exposure, data…

    SecurityOnlineCVE-2026-102406CVE-2026-102406

  22. ASUS Patches Critical Router Flaws That Could Expose Settings

    ASUS has issued a firmware update for its routers addressing four security flaws, two of which are rated Critical with CVSSv4 scores of 9.3. The four CVEs affected are CVE-2026-14911, CVE-2026-19386, CVE-2026-16528 and CVE-2026-19396. The vendor notes that…

    SecurityOnlineCVE-2026-14911CVE-2026-14911

  23. Google Reveals Registry Hijacks Put Three Country Domains at Risk

    Google’s security team has revealed a wave of ccTLD registry hijacks affecting three country-code domains: .gh (Ghana), .sl (Sierra Leone), and .as (American Samoa). The attackers compromised registry-level control and, crucially, altered DNS records to…

    SecurityOnline

  24. ASUSTOR Fixes Critical NAS Flaw That Exposed Files Without Login

    ASUSTOR has released a fix for a critical ADM vulnerability, CVE-2026-105324, which allows an unauthenticated remote attacker to read arbitrary files on an affected NAS via an HTTP header injection flaw. The issue carries a CVSS score of 9.2 (CVSSv4) and is…

    SecurityOnlineCVE-2026-105324CVE-2026-105324

  25. HPE Patches Critical AOS-Switch Flaws That Could Expose Networks

    HPE Networking has issued patches for nine vulnerabilities in its AOS-Switch (AOS-S). Six of these are categorised as Critical, with the most severe allowing an unauthenticated attacker to execute code remotely or bypass authentication. The advisory notes…

    SecurityOnlineCVE-2026-76744CVE-2026-76744

  26. Critical Handlebars flaws expose apps to remote code execution via public PoCs

    Two Handlebars.js vulnerability disclosures (CVE-2026-106445, CVE-2026-106446) enable RCE. Details and PoC are public. Update to 4.7.10 now. Related Posts: ASUSTOR Fixes Critical ADM Flaw CVE-2026-105324 That Lets Attackers Read NAS Files Without Login HPE…

    SecurityOnlineCVE-2026-106445CVE-2026-106445

  27. Fake Invoice PDFs Deliver Legitimate ActionOne Remote Access Tool Attacks

    A recent SANS ISC Stormcast notes another abuse of a legitimate remote management tool, this time ActionOne’s A1 Agent. The threat arrives via a malicious PDF—an ordinary looking fake invoice or Adobe update—that lures the target into opening a URL as the…

    SANS ISC

  28. Arista patches critical CV-CUE flaw that could expose WiFi network data

    Critical Arista CloudVision CUE vulnerability CVE-2026-102159 (CVSS 9.8) and five more flaws hit CV-CUE. Update to WiFi 2026.2.1 now. Related Posts: ASUSTOR Fixes Critical ADM Flaw CVE-2026-105324 That Lets Attackers Read NAS Files Without Login HPE Fixes…

    SecurityOnline

  29. HPE Urges Urgent Patching for 28 Critical ClearPass Flaws

    HP networking has issued a security bulletin covering 28 vulnerabilities across ClearPass Policy Manager (CPPM), with ten rated as Critical. The flaws span server, web API and OnGuard agent components, and at least 15 can be exploited without authentication…

    SecurityOnlineCVE-2026-79798CVE-2026-79798

  30. Arizona Courts Breach Exposes Data on More Than 1 Million People

    A cyberattack on Arizona’s court system resulted in the personal information of more than a million people being copied from court records, with the Arizona Supreme Court saying data dating back as far as 30 years was affected. The breach appears to have…

    SecurityWeek

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device