News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Fri 23 Oct· 68 articles
-
LiteSpeed Cache Flaws Let Commenters Inject Scripts into WordPress Sites
LiteSpeed Cache has three newly disclosed vulnerabilities affecting WordPress sites, with the issues tracked under CVEs 2026-113499, 2026-113500 and 2026-113501. The flaws were disclosed by WPScan on 23 October 2026 and patched in LiteSpeed Cache 7.9.2,…
-
Flaws in x402 SDKs let AI agents pay API bills without spending limits
Security firm V12 has disclosed a set of critical defects in the x402 SDKs used by AI agents to pay for API calls. The most serious flaw stemmed from the default client, which previously allowed automatic signing of payments without any spending limit. In…
The Hacker News -
OpenBSD 8.0 Ships Day One Fix for Critical IPsec Kernel Flaw
OpenBSD 8.0 arrived on 20 October 2026 with notable kernel hardening and new features, but the release was accompanied by four critical day-one errata. The most serious patch fixes a memory corruption flaw in the IPsec AES-GMAC implementation. Under targeted…
SecurityOnline -
Capcom Breach Exposes Email Addresses of 11.7 Million Users
Capcom has disclosed a data breach affecting CAPCOM ID, its shared service used for online access and gaming. The incident was detected on 19 October 2026 and involved unauthorised access to CAPCOM ID. The attackers stole the email addresses of 11,774,247…
SecurityWeek -
Quest Diagnostics probes unauthorised access to patient records in Quanum platform
Quest Diagnostics has disclosed a cyber incident affecting its Quanum Lab Services Manager, a platform used by some clients to place test orders and access results. In a regulatory filing, the company said it learned of unauthorized access to this system…
SecurityWeek -
Arista VeloCloud Orchestrators Hit by Exploited SQL Injection Flaw
Arista has disclosed CVE-2026-114625, a critical SQL injection flaw in on-prem VeloCloud Orchestrator (VCO) deployments. The vulnerability, which is being actively exploited in the wild, allows any authenticated portal user—even an Enterprise Read Only…
-
Compromised LiteLLM Update Stole Secrets and Fueled Cloud Abuse
LiteLLM was compromised in a contemporary supply‑chain incident, with malicious packages pushed to PyPI and Docker Hub. The attackers abused GitHub CLI OAuth tokens that had been leaked from an internal LiteLLM deployment exposed to the public internet. They…
SecurityWeek -
INC Ransomware Exposed Using AI and Custom Malware Against Victims
In late September 2026, security researchers uncovered seven INC Ransomware command servers that exposed AI-driven activity and bespoke malware used by affiliates of the group. The exposed AI workbench contained 8,257 messages across 133 OpenCode sessions…
-
Atlassian Flags 162 High and 14 Critical Flaws in Server Products
Atlassian’s October bulletin lists 176 vulnerability entries, including 14 critical-severity issues, all in third-party components.
-
Australian Court Orders Apple to Open iOS to Rival App Stores
An Australian Federal Court has ordered Apple to open its iOS ecosystem to third‑party app stores and direct downloads, marking a significant push to loosen the company’s control over the App Store. The ruling, described as a 1,104‑paragraph decision,…
SecurityOnline -
Node.js Brotli flaw enables remote code execution in Linux arm64 builds
Researchers have demonstrated a remote code execution (RCE) flaw in the Brotli decoder bundled with official Node[.]js builds, by feeding crafted Brotli data that exploits a mismatch in the decoder’s handling of a Brotli stream. The PoC, created by Imperva,…
-
PHP2 articles this day · SecurityOnline first
Attackers exploit PHP2Shell flaws to build a Mirai derived botnet · Okta fixes critical Access Gateway flaws enabling remote code execution
-
Attackers exploit PHP2Shell flaws to build a Mirai derived botnet
Threat researchers warn that attackers are probing PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619; CVSS 9.2) to drive infected hosts into a Mirai-derived botnet variant named Potassium. The exploits revolve around unauthenticated remote code…
-
Okta fixes critical Access Gateway flaws enabling remote code execution
Okta has released security advisories for four vulnerabilities in Okta Access Gateway (OAG), disclosed on 22 October 2026. The flaws span PHP runtime components (PHP2Shell) and the Admin Console, with the most severe being a command-execution bug rated…
-
-
Capcom Confirms Data Breach Exposing 11.77 Million User Records
Capcom has confirmed unauthorized access to its CAPCOM ID membership system, exposing about 11.77 million user records worldwide. The CAPCOM ID credential is used to access Capcom’s online services and some games. The initial findings indicate that the…
SecurityOnline -
Arc browser will shut down in December 2026 as users face data loss
The Browser Company has announced that Arc, its once-popular but niche browser, will shut down on 22 December 2026. After this date, the company will cease maintaining Arc and users will no longer be able to run the browser, with personal data also being…
SecurityOnline -
Russian Doppelganger campaign revives fake Walla news ahead of Israeli vote
Russian threat actors revived the Doppelganger campaign in August 2026 to influence Israeli public opinion ahead of the 27 October 2026 elections. Researchers from ClearSky Cyber Security report that operators created a counterfeit news portal at walla[.]ist…
SecurityOnlineDoppelganger -
Iranian Hackers Resume Data Theft Using US Based Command Servers
Prince of Persia, a government-sponsored Iranian threat group also known as Infy, resurfaced its command-and-control (C&C) infrastructure in the United States for the first time since 2016, according to Semperis. After a three-month lull in operations, the…
SecurityWeekInfy -
Sophos Uncovers BRONZE SANDCASTLE Using Sandboxie to Load Malware
Sophos Counter Threat Unit and SophosLabs have tracked BRONZE SANDCASTLE across victims in Asia and Africa from August 2025 to August 2026. The group’s hallmark technique is Sandboxie DLL sideloading, where a legitimate Sandboxie program is placed beside a…
SecurityOnlineENERGETIC BEAR -
INTERPOL Operation Nets 1,462 Arrests and Disrupts 10,909 Networks
INTERPOL’s Operation Serengeti III was a multinational crackdown conducted across 21 countries between 29 June and 31 August 2026, targeting online fraud, ransomware, business email compromise, scams and digital extortion. The operation culminated in 1,462…
Security Affairs -
Quest Diagnostics Confirms Patient Data Breach in Lab Portal Intrusion
Quest Diagnostics has disclosed an unauthorized access incident affecting its Quanum Lab Services Manager (LSM) system. The company said it detected the intrusion on 21 October 2026 and promptly paused access to Quanum LSM while it investigated. In a filing…
SecurityOnline -
Oracle Rushes Fix for Compromised Certificates Threatening Java Users
Oracle has issued an out-of-band security alert for CVE-2026-91403 relating to compromised eMudhra intermediate certificates that affect Java’s trust store in Oracle Java SE and GraalVM. The advisory, rated CVSS 9.1 (Critical, CVSSv3), warns that if Java…
-
SBI Confirms Customer Data Leak, Raising Risks of Identity Fraud
An anonymous hacker leaked a small batch of SBI customer records to BreachForums, disclosed in a post that includes a table of 375,000 rows and 2,722 PDFs. SBI has confirmed that the leaked data included names, genders, mobile numbers, email addresses, home…
Dark Reading -
Unpatched Linux KSMBD flaws expose servers to remote code execution
Trend Micro’s Zero Day Initiative (ZDI) has published details of several unpatched Linux kernel vulnerabilities to the public Linux kernel mailing list (LKML) as of 22 October 2026. The disclosures include two KSMBD flaws rated at CVSS 9.0 that can enable…
SecurityOnline -
CISA Warns Kiloview Video Encoders Could Be Hijacked for Root Access
CISA has warned that Kiloview E3 NDI encoders contain nine vulnerabilities, including three high‑risk OS command injection flaws that could allow a logged‑in attacker to gain root access. The flaws are tracked as CVEs including CVE‑2026‑107861 (CVSS 9.9),…
SecurityOnline -
HPE Patches 72 Wi-Fi Flaws, Including Critical Remote Code Bugs
HPE has issued patches for 72 vulnerabilities affecting its HPE Networking AOS-8 and AOS-10 wireless operating systems, which run across Mobility Conductors, Controllers, Gateways and Access Points. The flaws span unauthenticated remote code execution,…
-
Laravel TokenGuard flaw lets attackers bypass login using JSON requests
Hakai Security has released a public proof-of-concept for CVE-2026-114509, a critical authentication bypass in Laravel’s TokenGuard. The vulnerability, rated CVSS 9.2, allows an unauthenticated attacker to log in as an existing user when the backend uses…
-
FortiSIEM flaw lets unauthenticated attackers execute code as admins
FortiSIEM has a critical unauthenticated remote code execution vulnerability, tracked as CVE-2026-106173. A technical deep dive by Horizon3 detailed a gRPC path traversal flaw that enables an unauthenticated attacker to write files and execute code. The PoC…
-
Hackers Steal 70,000 Credentials in Fortinet and Palo Alto Attacks
Group-IB and NyxLab have uncovered a widespread campaign linked to an operator known as “k0t” that targets FortiGate, FortiWeb and Palo Alto GlobalProtect deployments. Launched largely between February and June 2026, the operation uses bulk asset discovery…
