News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Wed 7 Oct· 1 article
-
Atlassian Patches Flaw Letting Attackers Read Web App Files
Atlassian published patches on 5 October 2026 to fix a pre-auth Arbitrary File Access vulnerability across multiple products, tracked as CVE-2026-21589. The flaw is a directory traversal weakness that can let an attacker read arbitrary files within the web…
Mon 28 Sep· 1 article
-
Apple Patches Exploited Zero Day Targeting Older iOS Versions
Apple has released security updates for older branches of its operating systems to address CVE-2026-86950. The vulnerability affects iOS 26, macOS 26 and macOS 15, and Apple says it is already being exploited. Apple credited Meta Product Security with…
Mon 14 Sep· 1 article
-
Apple Patches Record 261 Flaws Across New Operating Systems
Apple released its annual operating-system updates on 14 September 2026, including iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27 and visionOS 27. It also issued bug-fix-only updates for the 26-series systems and macOS Sequoia 15.8. According…
Tue 11 Aug· 1 article
-
Microsoft Patch Tuesday August 2026, (Tue, Aug 11th)
This report summarizes the Microsoft Patch Tuesday for August 2026, detailing patches for 418 vulnerabilities, including 62 critical ones. Key vulnerabilities include: 1. **CVE-2026-68820**: Windows WinSock elevation vulnerability, exploited in the wild…
Wed 22 Jul· 1 article
-
Rondo botnet revives Geoserver flaw, exploiting CVE-2024-36401
The article, authored by Johannes Ullrich, discusses a recent resurgence of a known attack associated with the Rondo botnet targeting Geoserver. The attack exploits a vulnerability (CVE-2024-36401) related to X-Path expression evaluation in Geoserver, which…
Mon 20 Jul· 1 article
-
WordPress core flaw CVE-2026-63030 lets attackers execute code
The article discusses a critical SQL injection vulnerability in WordPress, designated CVE-2026-63030, named 'wp2shell', which allows unauthenticated remote code execution. Detected initially by Searchlight Cyber, this vulnerability is unique as it is found…
Tue 23 Jun· 1 article
-
CVE-2024-40766 exposes SonicWall firewalls to ransomware
The article discusses CVE-2024-40766, a severe vulnerability in SonicWall's SonicOS affecting firewall access controls. Despite patches being available, many organizations fail to implement essential post-patch configurations, leaving themselves vulnerable…
Fri 8 May· 1 article
-
Linux Kernel Flaw Lets Users Gain Root via Page Cache Corruption
Less than two weeks after Copy Fail’s public disclosure (CVE-2026-31431), SANS ISC reports a new Linux local privilege escalation vulnerability, dubbed Dirty Frag, discovered by Hyunwoo Kim (@v4bel). The flaw comprises two sub-vulnerabilities in the xfrm ESP…
Thu 30 Apr· 1 article
-
Redtail miner spread via CVE-2024-4577 Libredtail HTTP attacks
According to SANS Internet Storm Center, a guest diary by James Roberts details observations from a DShield honeypot where libertail-http activity was prominent and linked to cryptomining malware. The narrative notes that three top IP addresses from Germany,…
Tue 14 Apr· 1 article
-
Microsoft Patch Tuesday April 2026., (Tue, Apr 14th)
Microsoft Patch Tuesday April 2026 patches a total of 243 vulnerabilities, with 78 of those being Chromium issues affecting Microsoft Edge that were released earlier, leaving 165 non-Edge flaws. Of the non-Edge items, eight are rated critical and 154 are…
Wed 8 Apr· 1 article
-
TeamPCP Supply Chain Campaign: Update 007 - Cisco Source Code Stolen via Trivy-Linked Breach, Google GTIG Tracks TeamPCP as UNC6780, and CISA KEV Deadline Arrives with No Standalone Advisory, (Wed, Apr 8th)
The seventh TeamPCP update confirms Cisco’s internal development environment was breached via the Trivy supply chain compromise, with access to build systems and developer workstations and over 300 private GitHub repositories cloned, including code for AI…
Fri 3 Apr· 1 article
-
TeamPCP Supply Chain Campaign: Update 006 - CERT-EU Confirms European Commission Cloud Breach, Sportradar Details Emerge, and Mandiant Quantifies Campaign at 1,000+ SaaS Environments, (Fri, Apr 3rd)
According to CERT-EU, the European Commission’s Europa web hosting platform on AWS was breached via the Trivy supply chain compromise (CVE-2026-33634), with initial access on 19 March, detection on 24 March, and notification to CERT-EU on 25 March. The…
Mon 30 Mar· 1 article
-
TeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Compromise, TeamPCP Runs Dual Ransomware Operations, and AstraZeneca Data Released, (Mon, Mar 30th)
This update consolidates intelligence from 28–30 March 2026, two days since the previous diary entry, and notes Databricks is investigating an alleged compromise linked to TeamPCP’s credential harvest. It confirms that TeamPCP now operates two parallel…
Sat 28 Mar· 1 article
-
TeamPCP Supply Chain Campaign: Update 003 - Operational Tempo Shift as Campaign Enters Monetization Phase With No New Compromises in 48 Hours, (Sat, Mar 28th)
The third update to the TeamPCP supply chain campaign notes an operational tempo shift into a monetization phase, with no new package compromises confirmed in the 48 hours up to March 28, 2026. The last confirmed disruption occurred with the Telnyx…
Thu 26 Mar· 1 article
-
TeamPCP Supply Chain Campaign: Update 001 ? Checkmarx Scope Wider Than Reported, CISA KEV Entry, and Detection Tools Available, (Thu, Mar 26th)
The update to the TeamPCP supply chain campaign reveals that the Checkmarx ast-github-action compromise was far broader than publicly reported, with all 91 published tags overwritten from v0.1-alpha through v2.3.32, not just a single version. According to…
Tue 3 Mar· 1 article
-
CrushFTP Brute Force Attacks Target Admin Logins from French IP
CrushFTP, a Java-based open source file transfer system available on multiple operating systems, is currently being targeted by brute-force scans rather than exploitation of a specific vulnerability. According to SANS[.]edu, prior notable flaws include…
No older articles match these filters.