News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 13 so far |
Mon 26 Oct· 13 articles
-
eMudhra faces backlash over delayed certificate disclosures
SecurityOnline[.]info reports that Indian certificate authority eMudhra has faced swift backlash after issuing a controversial explanation for delayed forensic disclosures, claiming that intense public scrutiny prevented engineers from conducting meaningful…
SecurityOnline -
Storybook fixes dev server flaw that could lead to code execution
SecurityOnline[.]info reports that Storybook has fixed a critical dev server vulnerability, CVE-2026-114125, which the site rates at CVSS 9.4. The advisory states that under certain conditions a malicious website can interact with the preview of a running…
-
PHP2 articles this day · SecurityOnline first
Weekly report flags PHP and FortiSIEM flaws under attack · PHP2Shell flaws put products running PHP at risk of remote code execution
-
Weekly report flags PHP and FortiSIEM flaws under attack
Between 19 and 25 October 2026, CVE Watchtower logged 4,222 new CVEs, with Daily Cybersecurity (DC) flagging six flaws as exploited during the period. Of these six, two had already reached CISA KEV, while four were exclusive to DC at the time of reporting.…
-
PHP2Shell flaws put products running PHP at risk of remote code execution
PHP2Shell has been disclosed with two critical flaws, CVE-2026-109618 and CVE-2026-109619, that allow unauthenticated remote code execution on servers running PHP. The flaws prompt RCE via OOM corruption and via a stale global state, and PHP has issued fixed…
-
-
Google Brotli2 articles this day · SecurityOnline first
Microsoft issues out of band .NET fixes for four flaws · Brotli flaw expands Node2Shell risk across HTTP applications
-
Microsoft issues out of band .NET fixes for four flaws
Microsoft has issued an out-of-band security update for .NET across multiple major releases—8, 9, 10, and the Release Candidate 3 of 11—to fix two critical flaws and to re-address two issues from an earlier October batch. The fixes include CVE-2026-111497, a…
-
Brotli flaw expands Node2Shell risk across HTTP applications
SecurityOnline[.]info reports that Aikido Security has expanded the Node2Shell vulnerability into what researchers are calling the HTTP2Shell flaw, tied to a Brotli decompression bug. The issue began with Node2Shell and CVE-2026-111497, but is now understood…
-
-
Document Foundation revisits Microsoft’s OOXML standards battle
The Document Foundation, which develops LibreOffice, has published a retrospective on the OOXML standard’s history, covering 2006 to 2008 when Microsoft sought international standard status for OOXML. The foundation alleges that Microsoft used a fast-track…
SecurityOnline -
PingCAP Discloses TiDB Cloud Breach Exposing Customer Data
PingCAP has disclosed a security incident affecting TiDB Cloud, with intrusions occurring between 9 September and 7 October 2026. An attacker used stolen service account credentials to access internal PingCAP systems and copied customer records and source…
SecurityOnline -
Apache Camel fixes eight flaws, including an XXE vulnerability
Apache Camel has released fixes for eight vulnerabilities across multiple components, with the most serious being a high‑severity XXE flaw in camel-saxon. CVE-2026-90885 affected XQuery processing and could allow an external entity declared in a message body…
-
Ruby fixes regex flaws that could enable GitLab server attacks
On 23 October 2026 the Ruby team released security updates in versions 4.0.9, 3.4.12 and 3.3.13 to fix memory bugs in Onigmo, Ruby’s regular expression engine. GitLab researchers had determined that these bugs could enable remote code execution on affected…
-
Attackers exploit FortiSIEM flaw after public PoC release
Fortinet’s FortiSIEM has a critical vulnerability, CVE-2026-106173, which is being exploited in the wild following a public proof-of-concept exploit and open disclosures. The Canadian Cyber Centre’s advisory AV26-1037 notes active exploitation, and Horizon3…
-
Study finds smart TV tracking persists after users opt out
A Northeastern University study published on 26 October 2026 tested 12 smart TVs across eight operating systems and found that automatic content recognition (ACR) tracking persists even after users opt out on several devices. The researchers conducted 5,943…
SecurityOnline -
Linux kernel IPv6 flaw enables container escape via RPL
Linux kernel CVE-2026-43501 has been disclosed as a high-severity IPv6 flaw, judged CVSS 9.8 by the kernel CVE team. The vulnerability is described as an out-of-bounds write in the RPL (Routing Protocol for Low-Power and Lossy Networks) source routing header…
