News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Thu 15 Oct· 78 articles
-
Cisco Secure Email3 articles this day · SecurityWeek first
Cisco and Palo Alto Patch Exploited Flaws Enabling Root Access · Cisco Fixes Actively Exploited Secure Email Gateway Flaw Allowing Root Access
-
Cisco and Palo Alto Patch Exploited Flaws Enabling Root Access
Cisco and Palo Alto Networks have issued patches for two actively exploited zero-day vulnerabilities that can enable root-level code execution on security appliances. The flaws, CVE-2026-76519 and CVE-2026-0322, have been added to the US CISA Known Exploited…
-
Cisco Fixes Actively Exploited Secure Email Gateway Flaw Allowing Root Access
Cisco has disclosed a critical flaw in its Secure Email Gateway that threat actors have been actively exploiting, tracked as CVE-2026-76519 with a CVSS of 9.8. The vulnerability resides in the Advanced Malware Protection (AMP) feature and stems from improper…
-
Attackers Exploit Critical Cisco Email Gateway Flaw to Gain Root Access
Cisco has disclosed that attackers are actively exploiting a critical vulnerability in its Secure Email Gateway (SEG), tracked as CVE-2026-76519 with a CVSS of 9.8/10. The flaw affects the AMP (Advanced Malware Protection) component and arises when…
-
-
India to Display Callers’ Registered Names to Curb Spam from 2026
The Indian government has ordered telecom service providers to display the caller’s registered name alongside the number for incoming calls on 4G and newer networks, with the change taking effect from 1 November 2026. The move, outlined in a circular from…
The Hacker News -
SOCRadar brings tenant separated incident and vulnerability alerts to Splunk
SOCRadar has released two new Splunk apps aimed at MSSPs and multi-tenant environments: SOCRadar Incidents MSSP and SOCRadar Vulnerability. The release targets the friction of managing risk findings across many managed companies, providing a single input and…
SOCRadar -
Hirudo Android Trojan Replaces Banking Apps to Evade Security Checks
Security researchers have detailed a novel Android banking trojan-and-RAT hybrid termed Hirudo, which stealthily replaces legitimate banking apps with Trojanized copies to undermine security checks from within the target app. Delivered via a dropper embedded…
SecurityWeek -
Microsoft Dismantles Phishing Marketplace Behind 1 Billion Messages
Microsoft and law enforcement partners say they have dismantled a large-scale phishing ecosystem built around Yam Store, an underground marketplace tracked by Microsoft as Storm-3119. The operation unraveled after Microsoft and Japanese police investigated a…
InfosecurityStorm-3119 -
CenterPoint Energy breach exposes personal data of 1 million Texans
CenterPoint Energy has told Texan authorities that personal information for more than 1 million people was compromised in a data breach. In a Texas Attorney General filing, the utility said 1,062,060 state residents were affected, and that it has not yet…
SecurityWeek -
GhostAction Hackers Hijack 1,900 GitHub Accounts to Steal Secrets
The GhostAction campaign has intensified, with attackers compromising around 1,900 GitHub accounts to target more than 30,000 repositories across some 3,000 users and organisations. The spike occurred on 8–9 October 2026, according to security researchers…
The Hacker NewsGhostAction -
UK Police Reprimanded for Uploading 179 People’s Data to Unvetted Platform
The Information Commissioner’s Office (ICO) has issued a reprimand and enforcement notice to the Metropolitan Police Service (MPS) over governance failings linked to its use of the Auror third‑party platform for crime intelligence and shoplifting operations.…
Infosecurity -
Netskope CISO Says Curiosity Matters More Than Credentials in Security
James Robinson’s path to the CISO role at Netskope is a portrait of mobility and ongoing learning. Starting in a vocational route with Cisco Networking Academy, he moved from a State Farm network engineer with a CCIE to multiple security-focused roles across…
SecurityWeek -
Torvalds Tests AI-Written Linux Patch That Triples Read Throughput
Linus Torvalds has experimented with Claude Code, an AI-assisted coding tool, to craft patches for a key Linux memory management subsystem. The eight patches, produced with Claude Code, aim to speed up small-block reads from the page cache by changing how…
SecurityOnline -
Fake WatchGuard VPN site steals credentials before serving genuine installer
A WatchGuard VPN phishing operation was uncovered in October 2026 that steals credentials directly in the browser rather than dropping malware onto endpoints. The campaign uses lookalike WatchGuard domains and an SEO-poisoned search result to lure IT…
SecurityOnline -
Langflow RCE flaw lets any authenticated user run malicious commands
Langflow has a critical authenticated remote code execution flaw, tracked as CVE-2026-105740 (CVSS 9.9), affecting versions prior to 1.9.0. Security researchers at Previdian report that any authenticated Langflow user can trigger RCE by adding an MCP server…
-
Cyberattacks Turn Refrigeration Units Into Heaters Across 400 French Stores
Hundreds of French grocers were hit by cyberattacks that manipulated refrigerated display and storage equipment, turning cooling units into heating systems and spoiling vast quantities of perishable stock. Overnight on Monday, attackers breached commercial…
-
Palo Alto Networks Cloud NGFW2 articles this day · The Hacker News first
Palo Alto patches exploited PAN-OS zero-day allowing root access to firewalls · Palo Alto Patches PAN-OS Flaw Exploited to Run Code as Root
-
Palo Alto patches exploited PAN-OS zero-day allowing root access to firewalls
Palo Alto Networks has released patches for a PAN-OS zero-day vulnerability tracked as CVE-2026-0322, which has been exploited in limited attacks against the management interface of PAN-OS. The flaw allows remote code execution and can be exploited by an…
-
Palo Alto Patches PAN-OS Flaw Exploited to Run Code as Root
Palo Alto Networks has released security updates for PAN-OS after a high‑severity remote code execution flaw, tracked as CVE-2026-0322 (CVSS 8.6), was observed being exploited in the wild. The vulnerability affects PAN-OS running on PA‑Series and VM‑Series…
-
-
Ahsay Backup fixes exploited flaws after patches failed to stop attackers
Singapore-based Ahsay Backup has issued updated security patches for AhsayCBS to address two flaws that have been observed in the wild being exploited to deploy web shells and XMRig cryptocurrency miners. The vulnerabilities, CVE-2026-105133 and…
-
CodeAudit VS Code Extension Sends Pasted Code Over Unencrypted HTTP
Akamai researchers have uncovered that the CodeAudit AI extension for Visual Studio Code operates a background activity listener that monitors developer workspace edits from startup and remains active for the entire VS Code session. The extension, published…
SecurityOnline -
Android Trojan Replaces Banking Apps to Bypass Security Checks
ThreatFabric researchers have detailed a new Android banking trojan named Hirudo that goes beyond overlaying fake screens by replacing targeted banking apps with modified copies. Instead of presenting a counterfeit login, Hirudo uninstalls the legitimate app…
Security Affairs -
Vercel patches critical Next.js flaws that let attackers run code remotely
Vercel released out-of-band security updates for Next[.]js on 14 October 2026, delivering versions 16.4.1 and 15.5.28 to address two critical unauthenticated remote code execution flaws and a high-severity denial-of-service issue. The fixes cover…
-
Citrix Patches XenServer Flaws That Could Let Guests Crash Hosts
A Citrix security update fixes seven XenServer and UniconOS flaws, including guest-to-host and privilege escalation bugs. Patch hosts and thin clients. Related Posts: SiteGuard Server Edition Flaw CVE-2026-106931 Exploited in the Wild for Root Access Juniper…
-
Windows 11 KB5127648 aims to fix long-running mouse lag in games
Microsoft has released Windows 11 KB5127648, addressing a long-running issue that caused mouse input lag during gaming sessions. The update is officially documented as the first time Microsoft has described this particular remediation in its release notes,…
SecurityOnline -
Attackers Exploit SiteGuard Flaw to Seize Server Control as Root
A SiteGuard Server Edition vulnerability, CVE-2026-106931, is exploited in the wild and grants root or SYSTEM access. Update to Ver8.00 Update 5 now. Related Posts: Citrix Patches XenServer Host Escape Risks and UniconOS Privilege Escalation Flaws Juniper…
-
Google quadruples Chrome memory bug bounties, offering up to $20,000
Google restructures its Chrome VRP rewards, raising baseline payouts for memory corruption bugs to $2,000 and offering up to $20,000 for critical exploits. Related Posts: npm Trusted Publishing Now Expires After 48 Hours Google Play AI Apps Revolutionize…
SecurityOnline -
Epic’s rebuilt Launcher brings Linux support but sparks Vibe Coding backlash
Epic Games’ newly rebuilt Epic Games Launcher has sparked a significant backlash centred on the company’s marketing framing, even as the release itself delivers notable technical improvements. The update is described as lightweight and highly responsive,…
SecurityOnline -
Windows 11 will block removable ReFS drives by default from 2027
Microsoft is tightening how ReFS (Resilient File System) volumes on removable or external storage are supported in Windows 11 and Windows Server. Starting with the October 13, 2026 monthly security update, Windows will audit removable ReFS volumes by…
SecurityOnline -
GitHub Closes npm Publishing Flaw Exploiting Reused Repository Names
GitHub has tightened its npm trusted publishing rules after researchers exposed a flaw tied to repository name reuse. A new requirement means that a trusted publishing configuration must complete its first successful publish within 48 hours of creation; if…
SecurityOnline -
Google brings Gemini AI scam protection to more Android phones
Google has announced a broad upgrade to Android scam protections, leveraging Gemini AI to tackle increasingly personalised telecom fraud and social engineering. The update brings real-time scam warnings into the notification shade for a wide range of Android…
SecurityOnline -
Juniper Fixes Critical Flaws That Could Let Attackers Take Over Network Devices
Juniper Networks released October 2026 security bulletins addressing a broad set of critical vulnerabilities in Junos OS and Junos OS Evolved across MX, SRX, PTX, EX, and QFX platforms. The combined advisories cover more than 60 routing and management bugs…
-
Hackers Used FortiManager Flaws to Compromise 500 Firewalls
In September 2024, threat cluster CL-STA-0954, tracked by Mandiant as UNC5820 and attributed to Unit 42, breached a telecommunications managed service provider by exploiting Fortinet’s FortiJump vulnerability, CVE-2024-47575. The attackers gained access via…
-
Dell Patches Critical XSS Flaw in Wyse Management Suite
Dell Technologies has released security advisory DSA-2026-405 addressing four cross-site scripting (XSS) vulnerabilities in Wyse Management Suite (WMS). The most severe flaw, CVE-2026-82158, carries a CVSS base score of 9.0 and enables script injection via…
-
Ledger Wallet Hardware Implants Could Steal Cryptocurrency Seed Phrases
In the 15 October 2026 edition of the SANS Internet Storm Center’s Stormcast, the host reports on several distinct security concerns discussed in previous updates. First, Visual Basic for Applications (VBA) scripts embedded in AutoCAD files are again in…
SANS ISC -
NSD DNS Server Flaws Let Attackers Run Code Through Malicious Zone Files
NLnet Labs has patched four high-severity NSD stack overwrite vulnerabilities with the release of NSD version 4.15.3 on 14 October 2026. The flaws enable an attacker to trigger remote code execution by supplying specially crafted zone files, affecting…
-
SonicWall fixes two flaws enabling attacks on on-prem NSM systems
SonicWall has released security updates for two high‑severity flaws in NSM On‑Prem deployments. The issues, tracked as CVE-2026-96540 (CWE-863, CVSS 8.8) and CVE-2026-100232 (CWE-78, CVSS 7.2), could allow a remote, authenticated attacker to escalate…
-
Panchan Cryptomining Worm Targets Exposed Systems Through SSH Attacks
A guest diary from Zachary Norwood describes the Panchan worm, a long-running crypto mining botnet that propagates via multiple methods and remains active despite the passage of time. The entry notes that the worm was obtained from the DShield honeypot after…
SANS ISCPanchan -
Microsoft and partners dismantle CoGUI phishing network behind one billion messages
Microsoft, Health-ISAC, Proofpoint and international partners on 14 October 2026 announced a coordinated takedown targeting the CoGUI phishing kit, along with its connected marketplaces YAM Store and Iron Man. Citing a U.S. District Court for the Southern…
SecurityOnline -
Bisheng flaws expose AI platform to admin takeover and credential theft
CERT/CC and security researchers have disclosed three high-risk DataElement Bisheng vulnerabilities affecting the open-source Bisheng platform used for building and managing LLM applications. The flaws, tracked as CVE-2026-96679, CVE-2026-96681, and…
