News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Mon 2 Nov | 80 | 7 |
| Today, Tue 3 Nov | 11 so far | 1 |
Developing
Tue 3 Nov11 articles
- Brazil's Mercado Bitcoin halts withdrawals after $40 million drain
Brazil's largest crypto exchange puts the assets involved at about $38 million and says $11 million is already blocked. Customers will not lose money, it says; how the transfers were signed is unknown.
CyberSIXTMercado Bitcoin - Google and partners dismantle botnet infecting 1.3 million TV boxes
Google said on 2 November 2026 that it and industry partners dismantled a botnet built from more than 1.3 million Android TV set‑top boxes, which carried malware that secretly rents the user’s Internet connection to third parties and conducts advertising…
Krebs on Security - Apache fixes eight high risk flaws across three projects
Apache Software Foundation has released security fixes on 2 November 2026 addressing eight high‑risk vulnerabilities across three core projects: Apache Syncope, Apache Fineract, and Apache Arrow. The most severe flaw is CVE-2026-64618, with a CVSS v3 score…
SecurityOnlineCVE-2026-64618 - Stormcast covers crypto attacks and flaws in network security tools
On 3 November 2026, the SANS Internet Storm Center's Stormcast discusses several security topics touched on in recent weeks. Host Johannes Ullrich explains how to detect multipath TCP usage on a network by looking for TCP option 30; he notes that iOS devices…
SANS ISC - SUSE fixes Rancher flaws exposing cloud credentials and shells
SUSE has issued security updates to fix three serious Rancher vulnerabilities discovered in late October 2026, with patches released on 29 October 2026. The flaws enable credential leakage and request forgery, and they also permit unauthorized shell access…
SecurityOnlineCVE-2026-88811 - Google fixes 216 Android flaws in November security update
Google’s November 2026 Android Security Bulletin fixes 216 vulnerabilities across two patch levels, according to the November 2026 update. The most serious issue is a critical Framework flaw that enables remote code execution with no user interaction. The…
SecurityOnlineCVE-2026-58868 - Arista patches two flaws that risk remote code execution
Arista Networks has issued patches for two critical vulnerabilities in its core networking gear, with fixes released on 2 November 2026. The flaws enable remote code execution (RCE) and are rated highly, with CVSSv3 scores up to 9.8. The two CVEs are…
- macOS flaw lets local attackers gain root privileges
Security researchers publicly released PoC exploit code for a local privilege escalation in Apple macOS, tracked as CVE-2026-112487. The flaw resides in revisiond (com.apple.revisiond), the root LaunchDaemon behind macOS Document Revisions. The advisory…
SecurityOnlineCVE-2026-112487 - Researcher discloses Axis Camera Station flaws enabling host takeover
A public PoC exploit and vulnerability details have been disclosed for Axis Camera Station, outlining an attack chain that combines an authentication bypass, insecure deserialization and weak encryption to gain control of Windows hosts running the software.…
SecurityOnlineCVE-2025-30026 - WorkOS says hackers used AI tool ARTEX to reach its sales records
The identity provider says attackers got into an internal sales tool holding customer contacts, account histories and excerpts of calls and Slack conversations. Its production systems were not touched, and it has not said how the attackers got in.
CyberSIXTWorkOS - Linux Kernel Roundup Flags Two Critical iSCSI Flaws
The Linux kernel CNA reported 129 new CVEs between 26 October and 1 November 2026. The bulk of the disclosures were on 28 October (117) with 26 October contributing the remaining 12. The two most severe flaws are rated 9.8 (Critical) and occur in the iSCSI…
SecurityOnlineCVE-2026-99154 - Attackers exploit Node-RED flaw to run commands on exposed systems
Security researchers have warned that a critical Node-RED remote code execution flaw, tracked as CVE-2026-58115 with a maximum CVSS v3 score of 10.0, is being exploited in the wild. VulnCheck reported that unauthenticated attackers can execute arbitrary…
SecurityOnlineCVE-2026-58115
