News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Mon 12 Oct· 56 articles
-
Critical GitLab flaw lets unauthenticated attackers run code on servers
GitLab has patched a critical pre-authentication vulnerability, CVE-2026-97229, which carried a CVSS score of 10.0 and could allow an unauthenticated attacker to execute arbitrary code on affected servers. The flaw sits in the CI/CD regular expression…
-
Fake Terraform AWS provider installs backdoors on developer systems
In mid-2026, researchers from Zscaler ThreatLabz reported a trojanised Terraform provider masquerading as an AWS plugin. The malicious provider, named terraform-provider-awsbeta, is designed to load when Terraform starts, then silently install malware on…
SecurityOnline -
Let’s Encrypt cuts certificate lifetimes to 64 days from 2027
Let’s Encrypt will begin issuing certificates with a 64-day validity period by default from 10 February 2027, as a preparatory step toward the 45-day lifetimes planned for 2028. The change aligns with the CA/Browser Forum Baseline Requirements and is…
SecurityWeek -
AI Powered Campaign Breaches Ukrainian Infrastructure and 429 WordPress Sites
CyberXero, a Russian-speaking initial access broker, is reported to be running a two‑pronged AI‑augmented campaign that targets Ukrainian critical infrastructure and a broader global surface. According to SOCRadar, the operation combines commodity tools such…
-
Warden Stealer Targets AI Coding Tools and Crypto Wallets via Memory Theft
Warden Stealer, a Rust-based infostealer also known to Gen Threat Labs as CallbackBeaver, has emerged on underground forums since August 2026 and is now considered one of the more prevalent threats in its category. The malware is sold as…
SecurityOnlineCallbackBeaver -
ASOS breach exposes customer details and shopping searches
Over the week of 5–11 October 2026, Malwarebytes Labs ran through a handful of security developments affecting consumers and organisations. The digest highlights a mix of data breaches, credential-stuffing activity, impersonation schemes, AI-driven threat…
Malwarebytes -
Fake Taiwan Research Invitations Steal Google Logins and MFA Codes
Cisco Talos researchers track a mid-2026 spear-phishing operation, attributed to the actor UAT-11985, aimed at individuals connected with Taiwan’s research community. The campaign sent fake event invitations purporting to be from real bodies such as the…
SecurityOnlineUAT-11985 -
GTA 6 leaker threatens full game release if meme coin hits $30m
CyberLeek, the anonymous operator behind this year’s GTA 6 leaks, has raised the stakes by threatening to release a complete, playable GTA 6 build if its Solana meme-coin reaches a $30 million market capitalisation. The threat follows 25 minutes of gameplay…
Security AffairsCyberLeek -
Microsoft Fixes Windows 11 Setup Shortcut to Bypass Online Sign In
Microsoft has patched a local account bypass in Windows 11’s OOBE (out-of-box experience) that previously allowed users to sidestep online authentication. The flaw emerged when a click on the “Learn more” link beneath the login prompt would instantly…
SecurityOnline -
Outlook will block MSIX app files by default from November 2026
Microsoft has announced that MSIX and MSIXBundle attachments will be blocked by default in Outlook, beginning in November 2026. The change applies to Outlook on the web and the new Outlook client, and targets enterprise users on Microsoft Exchange Online.…
SecurityOnline -
Amazon Bedrock AI agents exposed credentials through an SSRF flaw
On 12 October 2026, the SANS Internet Storm Center’s Stormcast covered a mix of threat intelligence governance and concrete vulnerability snapshots. The host clarifies the Traffic Light Protocol’s purpose: it indicates who information can be shared with, but…
SANS ISC -
Ubuntu 26.10 Brings Official RISC-V Desktop Images to PCs
Canonical has announced that Ubuntu 26.10 will include official RISC-V desktop images, marking a step change for the open‑source ecosystem. The riscv64 builds are currently under active testing, with the final release slated to coincide with Ubuntu 26.10 on…
SecurityOnline -
Actively Exploited Vulnerabilities Jump to 100 in Q3 2026
Daily CyberSecurity’s Q3 2026 CVE report tracks every entry CISA added to the Known Exploited Vulnerabilities (KEV) catalog between 1 July and 30 September 2026. In this quarter, 100 actively exploited vulnerabilities were added, up from 75 in Q2, with…
-
NVIDIA Patches DCGM Exporter Flaw That Could Crash GPU Monitoring
NVIDIA has patched a high-severity flaw in its DCGM Exporter, tracked as CVE-2026-47483, which scores 8.2 on CVSSv3. The vulnerability affects the DCGM Exporter across all platforms and could allow unauthenticated attackers to flood the exporter’s profiling…
-
AnyDesk for Linux flaw enables pre-authentication root code execution
Researchers from V12 have publicly disclosed a pre-authentication remote code execution flaw in AnyDesk for Linux, named AnyPwn. The PoC exploit code was released on GitHub on 8 October 2026, with the vulnerability first announced by the researchers on 22…
SecurityOnline -
Six Actively Exploited Flaws Remain Outside CISA’s KEV Catalog
Between 5 and 11 October 2026, CVE Watchtower logged 3,255 new vulnerabilities. This weekly CVE report highlights six flaws that Daily Cybersecurity’s intelligence sources surfaced as exploited, but which were not yet listed in the CISA Known Exploited…
