News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Fri 16 Oct | 61 | 13 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Today, Fri 30 Oct | 9 so far | 1 |
Developing
Fri 30 Oct9 articles
- ServiceNow patches AI Platform flaw allowing host code execution
ServiceNow issued security updates on 29 October 2026 for three flaws in its cloud ecosystem. The most severe, CVE-2026-103093, is rated 9.4 on CVSSv4 and affects the ServiceNow AI Platform. ServiceNow says an authenticated user with the admin role could…
SecurityOnlineCVE-2026-103093 - Compromised analytics script drains Polymarket trader wallets
Polymarket suspended new transactions on 29 October 2026 after attackers compromised a JavaScript analytics script supplied by monitoring company DebugBear, according to SecurityOnline. The altered script was designed to target active Polymarket sessions and…
SecurityOnline - Google Chrome 156 fixes 21 flaws, including critical bug
Google has rolled out Chrome 156.0.8078.79/0.8078.80 for Windows and Mac, with Linux receiving 156.0.8078.79, to fix 21 vulnerabilities across the Stable and Extended Stable channels. The update addresses one critical flaw in MediaStream, plus 19…
SecurityOnlineCVE-2026-76024 - Binance investigates suspected hot wallet breach and transfers
Binance is investigating a suspected breach of its hot wallets that allegedly enabled billions of dollars of unauthorised transfers. The incident began on the evening of 29 October 2026, with the primary Binance 14 hot wallet moving 167,464 ETH and 1.615…
SecurityOnline - Kaspersky uncovers NetamLoader supply chain attack on Asian government
Kaspersky has detailed a suspected supply-chain incident in mid‑2026, centred on a malicious CAB archive found in a Windows update download folder. Although the package appeared to be part of the Patch My PC patch management tool and carried Microsoft-signed…
SecurityOnline - ThreatMon finds AhsayCBS webshells used to build SOCKS tunnels
ThreatMon has disclosed an exposed AhsayCBS workspace containing 1,357 files documenting webshell access. Of 189 AhsayCBS webshell probes, 134 yielded live command output and 55 failed. The majority of live responses came from Windows hosts, principally…
- Composer fixes path traversal and token leak flaws in new releases
Maintainers of the PHP dependency manager Composer disclosed two vulnerabilities on 29 October 2026, affecting all releases prior to 2.2.31 and prior to 2.11.0. The issues are tracked as GHSA-c968-33g3-wh7p (path traversal) and GHSA-fm2w-xgf2-f9fh (token…
SecurityOnline - Researcher finds 26,000 live secrets in Gitee repositories
Independent security researcher Ben Zimmermann conducted a large-scale audit of Gitee, China’s largest Git repository hosting platform, focusing on public code repositories for lingering authentication secrets. The scan examined 7.25 million repositories and…
SecurityOnline - Veeam patches seven flaws, including critical remote code execution
Veeam has released patches for seven vulnerabilities across two products—Veeam Management Pack and Veeam Backup for Microsoft 365—with two rated as Critical. The most severe, CVE-2023-22793, scores 9.3 on CVSS v4 and allows an unauthenticated attacker to…
SecurityOnlineCVE-2023-22793
