News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 15 |
| Today, Thu 29 Oct | 7 so far | 3 |
Developing
Thu 29 Oct7 articles
- UAT-11473 implants KeyDrift malware on Cisco SD-WAN systems
Threat actors tracked as UAT-11473 exploited Cisco SD-WAN Catalyst Controllers via CVE-2026-20127, a critical authentication bypass, to implant a custom malware framework called KeyDrift. Cisco Talos reports the intruders began with unauthorised access to…
- Researchers link PHP2Shell and Fragnesia flaws to 25 firewall compromises
Dream researchers have disclosed an espionage operation that chained two exploits to gain root on 25 firewall servers across the Pacific region, including a U.S. government–affiliated system. The attackers weaponised a custom PHP2Shell exploit against PHP…
- FasterXML discloses critical Jackson deserialisation flaw
FasterXML has published full details and a public proof-of-concept exploit for CVE-2026-110879, a critical deserialisation flaw in jackson-databind with a CVSS v3.1 score of 9.8. Do Son, writing for SecurityOnline[.]info, notes that the vulnerability…
SecurityOnlineCVE-2026-110879 - Dell fixes unauthenticated flaws in PowerProtect appliances
Dell has issued a security advisory, DSA-2026-416, detailing more than 180 CVEs across its PowerProtect Data Domain backup appliances, including 48 Dell-specific vulnerabilities. Four of these are rated CVSS v3.1 at 9.8 and are exploitable without login.…
SecurityOnlineCVE-2026-86400 - FoxIO discloses three TLS flaws in GoAhead web server
FoxIO has published full details and proof‑of‑concept code for three GoAhead TLS vulnerabilities affecting the embedded web server used in a wide range of devices, including routers, switches, printers and industrial controllers. The advisories describe…
SecurityOnline - EDK II PXE flaw enables remote code execution before boot
The article reports a critical pre-boot remote code execution vulnerability in the TianoCore EDK II PXE driver, tracked as CVE-2026-97631. Discovered by Alex Matrosov of Anthropic and Dan Holmes-Mitra of Google, the flaw scores 9.5 on CVSS v4.0. It affects…
SecurityOnlineCVE-2026-97631 - free5GC advisories detail two unpatched 5G core flaws
Two security advisories from the free5GC project detail two unpatched vulnerabilities in its 5G core that have published proof-of-concept material. The more severe issue, CVE-2026-115926, scores 9.1 on CVSS v3.1 and relates to the Binding Support Function…
SecurityOnlineCVE-2026-115926
