Skip to content

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Articles per day, last 14 days

Most articles on Wed 21 Oct (96); 13–17 on weekend days.

19 Oct21962325272931Today6 so faravg 61
  • On CISA KEV CVEs
  • Other coverage
  • Closed-day average
Show as table
Articles per day, last 14 days
DayArticlesOn CISA KEV CVEs
Mon 19 Oct6012
Tue 20 Oct8616
Wed 21 Oct9618
Thu 22 Oct8411
Fri 23 Oct6816
Sat 24 Oct134
Sun 25 Oct132
Mon 26 Oct7621
Tue 27 Oct9518
Wed 28 Oct8716
Thu 29 Oct7817
Fri 30 Oct6910
Sat 31 Oct143
Sun 1 Nov170
Today, Mon 2 Nov6 so far1

Developing

Exploited only
6 articles

Mon 2 Nov6 articles

  1. pgAdmin 4 update fixes 15 flaws, including command execution

    The pgAdmin development team released version 9.19 on 29 October 2026, fixing 15 vulnerabilities in earlier versions: two rated critical, 11 high and two medium. The flaws affect pgAdmin deployments, particularly those running in server mode on Linux and…

    SecurityOnlineCVE-2026-116241
  2. Dell patches 44 PowerStore flaws, including seven rated 9.8

    Dell has issued security advisory DSA-2026-479 for 44 vulnerabilities affecting 13 PowerStore models. The flaws affect all PowerStoreT OS 5.1.x versions earlier than 5.1.0.0-2798105. Dell has released PowerStoreT OS 5.1.0[.]0-2798105 to address them; the…

    SecurityOnlineCVE-2026-116443
  3. Ransomware targets unpatched Synology NAS devices

    SecurityOnline reports a ransomware campaign against Synology network-attached storage (NAS) devices, saying it has encrypted storage volumes and primarily affected internet-exposed appliances running outdated software. It attributes the attacks to the…

    SecurityOnlineCVE-2024-10441
  4. LXD flaw lets attackers impersonate trusted TLS clients

    Canonical has patched CVE-2026-112816, a critical mutual TLS authentication flaw in LXD and MicroCloud, rated 10.0 under CVSSv4. Canonical says an attacker able to reach the LXD HTTPS API could authenticate as a trusted TLS client if they possess that…

    SecurityOnlineCVE-2026-112816
  5. Hackers hijack Ukraine's Air Alert app to send fake nuclear alerts

    Ukraine's Air Alert app sent false radiation, chemical and street-fighting warnings to phones on Sunday night. Officials say the state siren network kept working, and the app has been taken offline.

    cybersixtAir Alert
  6. Rapid7 details BeyondTrust flaw exploited for code execution

    Rapid7 has published a technical analysis and Metasploit module for CVE-2026-102764, a BeyondTrust Remote Support vulnerability that allows unauthenticated attackers to write files to an appliance and execute code as the site’s operating-system user.…

    SecurityOnlineExploitedCVE-2026-102764
Updated AboutDevelopersSign in