News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Mon 2 Nov | 80 | 7 |
| Tue 3 Nov | 94 | 4 |
| Today, Wed 4 Nov | 8 so far | 1 |
Developing
Wed 4 Nov8 articles
- Fridge cyberattack hits 13 countries and France's blood service
Attackers changed the settings of cold rooms used by France's blood service the same night supermarket fridges were tampered with across Europe. France's health ministry says the incident was caught in time.
CyberSIXT - PoC exposes critical remote code flaw in Puppet Server
SecurityOnline[.]info reports that a full PoC exploit for CVE-2026-115731, a critical Puppet Server RCE flaw rated CVSS 9.4, has been published. The OpenVox project’s GitHub advisory and a write‑up from Neodyme confirm that a crafted JSON report can trigger…
SecurityOnlineCVE-2026-115731 - HPE fixes 46 Fabric Composer flaws, including a critical password bug
HPE has released details of 46 security vulnerabilities affecting its Fabric Composer (AFC) product, with the most severe entry, CVE-2026-95731, rated 9.8 on CVSS v3.1. The flaws span three critical, 20 high, 18 medium and five low severities and impact…
SecurityOnlineCVE-2026-95731 - Nearly 69GB of Philippine migrant worker data stolen
An unknown attacker copied nearly 69GB of data from the Philippine Overseas Employment Administration, including 27 SQL Server backups, in a transfer lasting 24 minutes. Hunt[.]io found logs and tools on a staging server in Singapore and said the files…
Dark Reading - Binarly warns of exploited Zyxel GS1900 switch zero day
A Zyxel GS1900 zero‑day has been exploited in the wild, researchers from Binarly warn. The flaw, tracked as CVE-2026-107441, is an out‑of‑bounds write in the GS1900 web interface’s dispatcher.cgi that lets an unauthenticated attacker on the adjacent network…
- Researcher discloses macOS root exploit for CVE-2026-112445
A security researcher known as Mas0nShi has disclosed full details and PoC exploit code for CVE-2026-112445, a macOS privilege-escalation flaw. The issue is described as a straightforward bug in launchd daemons that can let a standard desktop user obtain…
SecurityOnlineCVE-2026-112445 - GitBook says AI-driven cyberattack exposed customer API tokens
The documentation platform says attackers using AI agents reached infrastructure credentials on 2 November, putting integration tokens, Git Sync secrets and API tokens at risk. Customers must rotate them.
CyberSIXTGitBook - CERT/CC discloses two critical flaws in INFINITT PACS
Two critical vulnerabilities have been disclosed affecting INFINITT PACS, the hospital imaging platform used by thousands of sites worldwide. CERT/CC issued a security notice on 2 November 2026 detailing two flaws in INFINITT System Manager that could enable…
SecurityOnlineCVE-2026-16305 - SUSE patches critical Rancher Fleet flaw enabling cluster takeover
SUSE has published advisories on 29 October 2026 warning of two serious Rancher Fleet vulnerabilities in the GitOps management engine, with the most severe CVE-2026-94290 allowing local privilege escalation to cluster-admin. Fleet’s agent management…
SecurityOnlineCVE-2026-94290
