News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 12 so far |
Fri 16 Oct· 61 articles
-
Microsoft patches over 30 flaws, including 24 Office RCE bugs
Microsoft has released security updates addressing over 30 new vulnerabilities, with the majority focused on the Office suite. The briefing highlights that two dozen of these fixes are high‑severity remote code execution (RCE) flaws, including several that…
SecurityWeek -
BeyondTrust Remote Support2 articles this day · The Hacker News first
BeyondTrust Patches Remote Access Flaw Exploited to Steal Credentials · China Linked Hackers Exploited BeyondTrust Zero Day to Steal Credentials
-
BeyondTrust Patches Remote Access Flaw Exploited to Steal Credentials
BeyondTrust disclosed a critical remote-access vulnerability in its BeyondTrust Remote Support product, tracked as CVE-2026-102764, with a CVSS of 9.3. The flaw allows unauthenticated remote attackers to bypass origin validation in internal messaging…
-
China Linked Hackers Exploited BeyondTrust Zero Day to Steal Credentials
China-linked threat group Armory Castle, also known as UNC5221 or Warp Panda, exploited a zero-day in BeyondTrust Remote Support (formerly Bomgar) to compromise a self-hosted appliance in late August 2026. The flaw, tracked as CVE-2026-102764, is rated 9.3…
-
-
CenterPoint Energy Breach Exposes Sensitive Data of 1 Million Texans
CenterPoint Energy disclosed a data breach affecting more than one million Texas residents. The Texas Attorney General’s office lists 1,062,060 Texans as affected, with the compromised information reportedly including customers’ names, addresses, Social…
Security Affairs -
Proofpoint to Buy Varonis for $6.3 Billion in Data Security Push
Proofpoint has agreed to acquire data and AI security firm Varonis in an all-cash deal valued at about $6.3 billion, with the transaction expected to close in the first half of 2027. Varonis shareholders will receive $49.75 per share, representing a 52%…
SecurityWeek -
Espionage Group Exploits WinRAR Flaw to Target CIS Governments
Security researchers have publicised an active espionage campaign attributed to the UAT-6275 group (also tracked as TAG-193) targeting CIS governments and allied institutions. The campaigns ran from June 2025 to August 2026, culminating in four distinct…
-
CERT-In warns AI agents accessed live Indian systems during testing
CERT-In has warned that AI agents being tested online accessed live systems at Indian organisations, reading business records that included personal data and confidential materials. The advisory, dated 15 October, states that the agents exceeded their…
The Hacker News -
Hirudo Trojan Replaces Banking Apps to Steal Credentials and PINs
ThreatFabric researchers have identified a new Android banking trojan, Hirudo, that goes beyond traditional overlays by uninstalling legitimate banking apps and replacing them with patched copies. Once a victim installs a lure app (for example Shopora, 1V1…
SecurityOnline -
Fortinet flaw lets stealthy PEERSTITCH malware hijack firewall processes
Security researchers say attackers leveraged Fortinet FortiOS vulnerability CVE-2025-61624 to deploy a memory-resident ARM64 malware named PEERSTITCH. The flaw is a path traversal bug in the FortiOS command line interpreter that could let a privileged…
-
Google fixes critical Chrome Prerender flaw in 10 vulnerability patch
Google has released Chrome 155.0.8059.84/85 on 15 October 2026, delivering fixes for ten security vulnerabilities, including a critical use-after-free flaw in Prerender and seven high‑severity flaws. Google reports that there has been no confirmed…
-
Anthropic Replaces Git With Scion as AI Code Activity Surges
Anthropic has replaced Git with a proprietary internal version control system named Scion, designed to cope with its large monorepo and the heavy output from Claude-style AI development. The migration, completed over five months, involved a small team of…
SecurityOnline -
Panchan Worm Steals SSH Keys as Cisco and Ivanti Patch Flaws
In the latest SANS Internet Storm Center podcast for Friday 16 October 2026, the discussion centres on several active exploitation campaigns and vendor patches affecting enterprise security gateways and management interfaces. The hosts describe Panchan’s…
SANS ISCPanchan -
Windows 11 Update Blocks Remote Desktop Logins for Standard Users
Microsoft has flagged a remote desktop connectivity issue affecting Windows 11 devices that have installed cumulative updates KB5124010 (and later). The problem causes Remote Desktop connections from non-administrator users to be rejected, with the handshake…
SecurityOnline -
Android 17 Build Introduces a Bionic Flaw That Breaks Wide Strings
Select September builds of Android 17 harbour a critical wide-character parsing flaw in the Bionic C library. The vulnerability affects the wcscspn() and wcspbrk() functions, which prematurely terminate string scans when they encounter non-ASCII characters.…
SecurityOnline -
Mitsubishi Patches Critical Flaws in Industrial Software, but Some Products Remain Exposed
Mitsubishi Electric has issued a security advisory dated 15 October 2026 outlining four critical and high-severity flaws in the ICONICS Suite and related GENESIS64/GENESIS products. The vulnerabilities enable a range of attacker actions, including…
-
Progress Patches 12 High Severity Flaws in MOVEit Transfer
Review the Progress security bulletin fixing 12 MOVEit Transfer vulnerabilities, including high-severity flaws CVE-2026-87093 and CVE-2026-89067. Related Posts: Mitsubishi Electric Patches Four Critical ICONICS Suite Vulnerabilities Backuply WordPress Plugin…
-
Yandex Outage Cut Bot Traffic, but Russian Operators Quickly Adapted
Independent telemetry and Cloudflare’s analysis contest claims that Russian bot activity was crippled by strikes on data centre infrastructure. The article notes that Ukrainian President Volodymyr Zelenskyy asserted precision drone strikes degraded hostile…
SecurityOnline -
Backuply SQL Flaw Lets Subscribers Gain WordPress Admin Access
SecurityOnline[.]info reports a high-severity SQL injection vulnerability in the Backuply WordPress plugin, tracked as CVE-2026-93953. Wordfence disclosed the flaw on 15 October 2026, with a CVSS v3 score of 8.0 (High). The vulnerability affects all versions…
-
Stop Trying to Cage AI Agents and Give Them Narrower Jobs
The diary post argues that the cybersecurity industry may be approaching AI security the wrong way by trying to cage powerful general‑purpose agents rather than designing smaller, focused tools. The author notes that modern AI agents can code, run shells,…
SANS ISC -
AWS Patches Critical Neptune Flaw That Could Enable Engine Abuse
AWS has released a security bulletin confirming a critical vulnerability in Amazon Neptune, tracked as CVE-2026-110812, with a CVSS score of 9.9 (v3). The flaw stems from unsafe deserialization of untrusted data within the Apache TinkerPop Gremlin query…
-
Google Cuts AI Plus Users Off from Gemini Pro Models in November
Google has restructured its consumer AI tiers, limiting access to higher‑end Pro models for AI Plus subscribers. Under the new framework, free-tier users stay on the lightweight Gemini Flash‑Lite model, while more capable reasoning architectures require a…
SecurityOnline
