News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Tue 20 Oct· 1 article
-
Attackers exploit Siemens Software Center flaw to spread malware via ClickFix
Siemens has warned customers that attackers are actively exploiting a dynamic link library (DLL) side-loading flaw in its Software Center to distribute malware. The activity is linked to the Romulus multi-platform ClickFix campaign, a server hosting panel…
Fri 16 Oct· 1 article
-
China-Linked Hackers Exploited BeyondTrust Flaw to Install Root Backdoor
A suspected China state-backed actor, Armory Castle, exploited a newly disclosed critical vulnerability in BeyondTrust Remote Support, CVE-2026-102764, to gain access and escalate privileges on affected appliances. Google warns this allowed the group to…
Wed 14 Oct· 1 article
-
Microsoft Fixes Record 1,411 Flaws as Patch Tuesday Strain Grows
Microsoft’s October Patch Tuesday set a new record, fixing 1,411 CVEs and surpassing the total patched in the whole of 2025. The surge is attributed to Microsoft leveraging AI-assisted vulnerability discovery and remediation through its multi-model agentic…
Mon 12 Oct· 1 article
-
Ransomware gangs exploit Palo Alto VPN flaw months after patch release
Ransomware groups are continuing to target a high‑severity vulnerability in Palo Alto Networks products, CVE-2026-0257, despite a patch released five months ago. ReliaQuest warned on 9 October that multiple groups, including Qilin and Settra, are actively…
Thu 8 Oct· 1 article
-
Hackers Exploit Critical Atlassian Flaw to Steal Sensitive Files
A critical vulnerability in Atlassian Data Center products, tracked as CVE-2026-21589, is reportedly being exploited in the wild. Atlassian’s advisory describes it as an arbitrary file access flaw with a CVSS score of 9.3, affecting eight Data Center…
Mon 5 Oct· 2 articles
-
ClingSTUN Turns Unpatched IoT Devices Into Covert Proxy Nodes
FortiGuard Labs has tracked a Linux proxy backdoor dubbed ClingSTUN, which targets unpatched internet-facing IoT devices and uses legitimate public STUN servers to keep compromised systems reachable as remotely controlled proxy nodes. The campaign unfolded…
-
Citrix warns attackers are exploiting a NetScaler zero day
Citrix has warned of targeted attacks against its NetScaler ADC and NetScaler Gateway via a new high-severity zero-day vulnerability, CVE-2026-88779, a memory buffer issue that can affect service availability under certain pre-conditions. The CVSS score is…
Fri 2 Oct· 1 article
-
Zammad Zero Days Let Attackers Hijack Dutch Cybersecurity Non-Profit
Two zero-day flaws in the Zammad helpdesk platform were exploited to compromise the Dutch Institute for Vulnerability Disclosure (DIVD), a Dutch cybersecurity non-profit. The attack, detected on 24 September and disclosed on 30 September, used two chained…
Thu 1 Oct· 1 article
-
Cisco SD-WAN Zero Day Exposes Internet Facing Systems to Attackers
Cisco has released an urgent security update for Cisco Catalyst SD-WAN Manager after the discovery of a zero-day vulnerability that is already being exploited in the wild. The flaw, tracked as CVE-2026-76504, affects the API session-based authentication…
Wed 30 Sep· 2 articles
-
Google Finds AI Discovered Flaws Are Nearly Twice as Likely to Enable RCE
AI-found vulnerabilities are disproportionately linked to remote code execution (RCE), according to Google Threat Intelligence Group (GTIG) analysis published on 30 September 2026. The researchers compared AI-discovered vulnerabilities with other CVEs and…
-
Apple Patches CoreGraphics Zero Day Exploited in Targeted iPhone Attacks
Apple has released a security update for a zero-day in CoreGraphics that it says may have been exploited in an extremely sophisticated attack. The flaw is tracked as CVE-2026-86950, with Apple noting that processing a maliciously crafted file could lead to…
Mon 28 Sep· 1 article
-
Citrix NetScaler Zero Days Exploited in Attacks, Patch Now
Citrix has released updates for eight vulnerabilities in NetScaler ADC and NetScaler Gateway, including two critical zero-days exploited in the wild. In a 27 September bulletin, the vendor said the flaws have CVSS scores ranging from 7 to 9.5. CVE-2026-88771…
Mon 21 Sep· 1 article
-
ShinyHunters Claims It Hacked and Extorted Clop Ransomware Group
ShinyHunters has claimed it hacked the Clop ransomware group, defacing Clop’s dark-web leak site on the evening of 18 September 2026. The site displayed the message “THIS SITE HAS BEEN PWN3D BY SHINYHUNTERS”, a Pokémon ASCII image and a link to ShinyHunters’…
Thu 17 Sep· 1 article
-
Attackers Exploit Critical Cisco ISE Flaw for Root Access
Cisco has warned that attackers are actively exploiting CVE-2026-76460, a maximum-severity vulnerability in Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC). The flaw, rated CVSS 10.0, results from insufficient control over…
Mon 14 Sep· 2 articles
-
Human Attacker Hits Machine-Speed Exploitation of Marimo RCE
A human attacker successfully exploited a remote code execution flaw (CVE-2026-39987) in Marimo notebooks, moving from a vulnerable device to an SSH bastion host in just eight seconds. This speed, typically attributed to AI, was achieved with a hand-crafted…
-
GitLab Urges Patching as Attackers Probe Critical File-Read Flaw
GitLab users have been urged to patch CVE-2026-85706, a maximum-severity path-traversal vulnerability reportedly being probed in the wild. The flaw affects GitLab CE/EE versions 18.7 before 19.1.8, 19.2 before 19.2.6 and 19.3 before 19.3.2. According to…
Wed 9 Sep· 1 article
-
Microsoft Patches Record 974 CVEs Amid Exploited Windows Zero-Days
Microsoft has reported a record-breaking 974 CVEs addressed in its September 2026 Patch Tuesday, shattering the previous high of 570 CVEs. The August–September trend shows a sharp rise in patched flaws, with Windows accounting for 723 CVEs and Office for…
Mon 7 Sep· 1 article
-
N-able Patches CVSS 10 N-central Flaw Enabling Pre-Auth RCE
N-able has issued a hotfix addressing a critical remote code execution (RCE) vulnerability in its N-central platform, the company’s remote monitoring and management (RMM) product. CVE-2026-86218 is a pre-authentication RCE flaw rated CVSS 10, affecting…
Wed 2 Sep· 1 article
-
Hackers Chain Two New SonicWall Zero-Day Vulnerabilities
SonicWall has issued a security advisory regarding two newly discovered zero-day vulnerabilities impacting their SMA1000 appliances, specifically models 6210, 7210, and 8200v. The critical vulnerability, CVE-2026-83548, is a pre-authentication server-side…
Thu 27 Aug· 1 article
-
CISA adds KEV flaws, flags Citrix NetScaler and SQL Server bugs.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, urging urgent action from government agencies and critical infrastructure organizations. Two notable…
Thu 13 Aug· 1 article
-
VMware vCenter CVE-2026-59310 flaw exploited worldwide within days
A critical vulnerability in VMware's vCenter, identified as CVE-2026-59310, was publicly disclosed on July 29, 2026, and exploited within just five days. The flaw, rated CVSS 9.8, allows unauthenticated attackers to execute arbitrary code on compromised…
Wed 12 Aug· 2 articles
-
Microsoft Windows Ancillary Function Driver for WinSock2 articles this day · Infosecurity first
Lazarus Used Post-Quantum Key Exchange to Deliver Zero-Day · Microsoft Fixes 400 Flaws on August Patch Tuesday
-
Lazarus Used Post-Quantum Key Exchange to Deliver Zero-Day
The Lazarus Group, linked to North Korea, executed a new malware campaign utilizing a post-quantum key exchange to negotiate its command channel and deploy a Windows zero-day exploit against defense and aerospace firms in Europe and India. The exploitation…
-
Microsoft Fixes 400 Flaws on August Patch Tuesday
On August 11, Microsoft addressed a total of 400 vulnerabilities during its Patch Tuesday, including a significant zero-day issue (CVE-2026-68820) that is actively exploited. This vulnerability, affecting the Windows Ancillary Function Driver, may allow…
-
Wed 29 Jul· 1 article
-
TA488 employs half‑click OWA exploit against government targets
A Russia-aligned espionage group, TA488 (also known as Void Blizzard or Laundry Bear), has re-emerged, employing a sophisticated half-click exploit to launch persistent attacks on Outlook Web Access (OWA). Using a cross-site scripting flaw (CVE-2026-42897),…
Thu 23 Jul· 1 article
-
Russian zero-click attack exploits Zimbra flaw CVE-2025-66376
Russian state-sponsored hackers are employing a new 'zero-click' attack strategy that targets Western organizations without requiring user interaction. This campaign, identified by multiple western cybersecurity agencies, focuses on exploiting the Zimbra…
Mon 20 Jul· 1 article
-
AI crafted WordPress exploit chain triggers urgent CVE patches
Security researchers at Searchlight Cyber have developed a complete exploit chain for two critical vulnerabilities in WordPress, utilizing OpenAI’s GPT-5.6 Sol Ultra. The vulnerabilities, identified as CVE-2026-63030 and CVE-2026-60137, affect multiple…
Fri 17 Jul· 1 article
-
CISA Mandates Urgent Patch for Actively Exploited Critical Fortinet Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has mandated urgent patches for two critical vulnerabilities in Fortinet's FortiSandbox, identified as CVE-2026-39808 and CVE-2026-25089, both rated 9.1 on the CVSS scale. These vulnerabilities…
Tue 7 Jul· 2 articles
-
China linked hackers hit US Canada universities via Roundcube
A China-aligned threat group, identified as UNK_MassTraction, has been exploiting vulnerable Roundcube mail servers at universities in the US and Canada. The attackers are targeting physics and engineering departments potentially linked to national security.…
-
Adobe ColdFusion Users Warned to Patch Critical CVE-2026-48282 Flaw
Adobe ColdFusion customers are urged to patch their systems urgently due to the exploitation of a maximum severity flaw, CVE-2026-48282, which can lead to arbitrary code execution. Adobe released patches for 11 vulnerabilities on June 30, with six classified…
Tue 30 Jun· 1 article
-
Critical SimpleHelp Vulnerability Exploited For Malware Delivery
A critical vulnerability in SimpleHelp's remote monitoring and management (RMM) software has been exploited by attackers to deliver two new malware families. The flaw, designated CVE-2026-48558, allowed unauthenticated users to forge login tokens and gain…
Thu 25 Jun· 1 article
-
Google warns Cisco flaw exploited months before June 2026 patch
A Google report reveals that a severe vulnerability (CVE-2026-20245) in Cisco products was exploited months prior to its disclosure on June 4, 2026. This vulnerability, stemming from improper validation in the command-line interface of Cisco Catalyst SD-WAN…
Tue 9 Jun· 2 articles
-
Google patches Chrome following exploited CVE-2026-11645 zero day
Google has issued an emergency update for Chrome to address 74 vulnerabilities, including a high-severity flaw (CVE-2026-11645) that has been exploited in the wild. This marks the fifth zero-day vulnerability for Chrome in 2026. The update includes fixes for…
-
Check Point Warns Critical Auth Bypass Bug Exploited in the Wild
Check Point has issued a warning about a critical zero-day vulnerability (CVE-2026-50751) in its Remote Access VPN and Mobile Access solutions, which is actively being exploited. The flaw allows attackers to bypass user authentication using a logic weakness…
Mon 1 Jun· 2 articles
-
Ukrainian networks hit by stealth Gamaredon worm via WinRAR flaw
A new report reveals that the Russian state-linked Gamaredon group has developed a sophisticated worm, referred to as GammaWorm, that hides its components within Windows NTFS Alternate Data Streams, enabling it to infect Ukrainian networks almost undetected.…
-
Attackers Exploit CVE-2026-0257 in Palo Alto GlobalProtect VPN
Palo Alto Networks has alerted customers to a high-severity authentication bypass vulnerability (CVE-2026-0257) affecting its GlobalProtect portal and gateway in the PAN-OS software. Despite a patch released on May 13, attackers are actively exploiting this…
Fri 15 May· 1 article
-
Microsoft Reports Severe Zero-Day Flaw in On-Prem Exchange Servers
According to Infosecurity Magazine, Microsoft has warned of a high-severity zero-day vulnerability that could allow an attacker to send arbitrary code to a victim by crafting an email to an Outlook user. The flaw, tracked as CVE-2026-42897 and rated CVSS…
Fri 1 May· 1 article
-
AI tool finds 2017 Linux kernel zero day CVE-2026-31431
A new high-security zero-day vulnerability that has lurked in the Linux kernel since 2017 has just been found with the help of AI, in a discovery by Taeyang Lee, a vulnerability researcher at offensive security firm Theori. Lee used Xint Code, a source code…
Wed 15 Apr· 1 article
-
Microsoft Fixes Two Zero-Days in April Patch Tuesday
Microsoft has published a higher-than-usual Patch Tuesday with fixes for two zero-days, including CVE-2026-32201, which is being actively exploited in the wild and is described as a SharePoint server spoofing vulnerability that allows an unauthorised…
Wed 8 Apr· 1 article
-
AI powered tool finds decade old Apache ActiveMQ Classic RCE flaw
An AI-powered vulnerability-hunting effort helped security researchers uncover a flaw in Apache ActiveMQ Classic that they claim had been hiding in plain sight for over a decade. According to Infosecurity Magazine, Horizon3[.]ai chief architect Naveen…
Tue 7 Apr· 2 articles
-
APT28 exploits SOHO routers via CVE‑2023‑50224 to steal credentials
The Infosecurity Magazine report notes that Russian hacking group APT28 has been exploiting vulnerable internet routers to redirect traffic through attacker‑controlled servers and steal credentials from targeted organisations. According to the National Cyber…