Skip to content

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Articles per day, last 14 days

Most articles on Wed 21 Oct (96); 10–13 on weekend days.

14 Oct16182096222426Today9 so faravg 60
  • On CISA KEV CVEs
  • Other coverage
  • Closed-day average
Show as table
Articles per day, last 14 days
DayArticlesOn CISA KEV CVEs
Wed 14 Oct8625
Thu 15 Oct7815
Fri 16 Oct6112
Sat 17 Oct101
Sun 18 Oct100
Mon 19 Oct6012
Tue 20 Oct8616
Wed 21 Oct9618
Thu 22 Oct8411
Fri 23 Oct6816
Sat 24 Oct134
Sun 25 Oct132
Mon 26 Oct7620
Tue 27 Oct9518
Today, Wed 28 Oct9 so far1

Developing

Exploited only
9 articles

Wed 28 Oct9 articles

  1. Microsoft Explains Why Clearing Windows 11 Prefetch Files Slows Launches

    The Microsoft Incident Response team has published guidance detailing how Windows 11 Prefetch files work, clarifying that deleting these cached records does not improve performance and can actually slow down subsequent application launches. The article…

    SecurityOnline
  2. Google Publishes Linux Kernel Exploit for CVE-2026-23111

    Google’s kernelCTF programme has published full technical details and a working proof-of-concept exploit for CVE-2026-23111, a use-after-free flaw in the Linux kernel’s Netfilter nf_tables. The vulnerability allows a local attacker to achieve root and escape…

    SecurityOnlineCVE-2026-23111
  3. Supermicro fixes BMC flaws affecting 392 board models

    Eight vulnerabilities have been disclosed affecting Supermicro baseboard management controllers (BMCs) across 392 motherboard and module SKUs, with the most severe IPMI flaw rated CVSSv3 9.8. The critical issue, CVE-2026-18450, allows an unauthenticated…

    SecurityOnlineCVE-2026-18450
  4. Moxa discloses three flaws in remote access products

    Moxa has disclosed three high-severity vulnerabilities affecting its Remote Connect Suite (MRC Client) and the end‑of‑life OnCell G3150A-LTE gateway. The flaws are CVE-2026-111459 (Unauthenticated server-supplied OpenVPN configuration in MRC Client),…

    SecurityOnlineCVE-2026-111459
  5. PoC chains libheif flaws to execute code on WordPress servers

    Security researchers have publicly disclosed technical details and working proof‑of‑concept exploit code for two critical libheif vulnerabilities, GHSA-x8r2-mggj-j6wr and GHSA-2jg2-4ch7-h545. The PoC chain shows how an authenticated user with media upload…

    SecurityOnline
  6. Canada Privacy Commissioner investigates Crime Stoppers breach

    The Privacy Commissioner of Canada has opened an investigation into a cybersecurity incident linked to Crime Stoppers programs across Canada, as disclosed by the office. The probe focuses on Navigate360, the commercial firm that provides and manages the…

    DataBreaches
  7. WatchGuard fixes 18 Fireware flaws, including critical RCE bug

    WatchGuard has issued 18 Fireware OS advisories for its Firebox firewall platform, published on 27 October 2026. Seven of the flaws score 9.1 or higher on CVSS 4.0, with the most severe being CVE-2026-103594, rated 9.5, described as a stack buffer overflow…

    SecurityOnlineCVE-2026-103594
  8. AuthMask flaw lets Android apps steal Microsoft tokens

    Security researcher Ofek Levin has disclosed a chain of flaws named AuthMask that allows Android apps to hijack corporate authentication tokens used by Microsoft Authenticator. The issue, tracked as CVE-2026-80097, arises when the Android-based…

    SecurityOnlineCVE-2026-80097
  9. NVIDIA fixes CVSS 10 flaw in NeMo Agent Toolkit

    NVIDIA has disclosed a high-severity vulnerability in the NeMo Agent Toolkit, tracked as CVE-2026-65145, which carries a CVSSv3 score of 10.0. The flaw is described by NVIDIA as a missing authentication issue that could allow a remote attacker to take…

    SecurityOnlineCVE-2026-65145
Updated AboutDevelopersSign in