News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Sat 24 Oct· 2 articles
-
CISA Flags Exploited Collabora Online Flaw for Urgent Patching
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical flaw in Collabora Online’s Built-in CODE Server to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability, tracked as CVE-2026-110447, is an OS command…
-
CISA flags exploited Arista VeloCloud flaw that lets attackers impersonate superusers
U.S. CISA has added a critical vulnerability in Arista’s VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV) catalog. The flaw, tracked as CVE-2026-114625 with a CVSS score of 9.4, affects on‑premises VCO deployments and is linked to a…
Mon 19 Oct· 2 articles
-
Attackers exploit Plex2Shell flaws to hijack servers for mining and proxying
Attackers are leveraging a vulnerability chain dubbed Plex2Shell that targets exposed Plex Media Server instances to deploy crypto mining and proxy software. On 16 October 2026, security researcher Zach Main published technical details and PoC code for the…
-
Attackers Exploit SiteGuard WAF Flaw to Gain Root Access
Attackers are actively exploiting CVE-2026-106931 in SiteGuard Server Edition, a vulnerabilities disclosed by EG Secure Solutions and referenced by JVN. The flaw is an OS command injection that, once successfully exploited, lets an attacker run commands with…
Sat 17 Oct· 1 article
-
CISA Flags Fortinet and BeyondTrust Flaws Under Active Attack
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Fortinet Multiple Products Path Traversal (CVE-2025-61624) and BeyondTrust Remote Support Authentication…
Fri 16 Oct· 2 articles
-
CISA Warns Atlassian Data Center Flaw Is Under Active Attack
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added an Atlassian flaw, CVE-2026-21589, to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability is described as a critical arbitrary file access flaw in Atlassian Data…
-
Hackers Stole Fortinet Credentials from 500 Firewalls via FortiManager
PEERSTITCH malware: How attackers compromised 500 Fortinet firewalls via FortiManager discusses a multi-stage intrusion disclosed by Palo Alto Networks Unit 42. The operation began in September 2024 when attackers exploited CVE-2024-47575 (FortiJump) to…
Thu 15 Oct· 3 articles
-
CISA Flags Exploited Firewall, Email Gateway and Backup Software Flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four newly observed vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. The list comprises CVE-2026-0322 (Palo Alto Networks PAN-OS code injection), CVE-2026-76519…
-
Kazakhstan Based Espionage Group Exploits CVE to Target Energy and Government
Silent Lynx, a threat actor believed to be based in Kazakhstan, has been observed conducting espionage campaigns against energy and government targets across Central Asia, including an assault on the Orsk Oil Refinery in southern Russia and the government of…
-
Cisco Fixes Actively Exploited Secure Email Gateway Flaw Allowing Root Access
Cisco has disclosed a critical flaw in its Secure Email Gateway that threat actors have been actively exploiting, tracked as CVE-2026-76519 with a CVSS of 9.8. The vulnerability resides in the Advanced Malware Protection (AMP) feature and stems from improper…
Wed 14 Oct· 3 articles
-
Microsoft Windows2 articles this day · Security Affairs first
CISA Flags Actively Exploited Windows Flaw That Bypasses Security Protections · Microsoft fixes 1,415 flaws as exploited Windows bug puts users at risk
-
CISA Flags Actively Exploited Windows Flaw That Bypasses Security Protections
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Microsoft Windows Shell flaw, tracked as CVE-2026-96951, to its Known Exploited Vulnerabilities (KEV) catalog. The advisory notes that the vulnerability is a Windows Shell command…
-
Microsoft fixes 1,415 flaws as exploited Windows bug puts users at risk
Microsoft Patch Tuesday in October 2026 set a new vulnerability record, addressing 1,415 CVEs across Microsoft products and services. The update cycle, described as the first four-digit/month in Microsoft’s reporting, spans Windows and related components,…
-
-
Ivanti VPN Zero Days Let Hackers Gain Stealthy Root Access
Volexity reports a stealthy Ivanti Connect Secure (ICS) VPN attack that chain-exploited three zero-day vulnerabilities to achieve unauthenticated root access on a fully patched appliance running version 22.8R2.4. The exploit chain combines an authentication…
Tue 13 Oct· 1 article
-
CISA Flags Ivanti VPN Flaw Enabling Unauthenticated Command Execution
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog. The flaw, CVE-2026-104935, carries a CVSS of 8.6 and is described as an authentication bypass caused…
Sun 11 Oct· 1 article
-
CISA Flags Five Exploited Flaws in China Linked Cyber Campaign
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five flaws to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2015-3306 in ProFTPD; CVE-2021-3199 in ONLYOFFICE Docs when JWT is enabled; CVE-2023-22894 in Strapi;…
Thu 8 Oct· 1 article
-
Hackers Exploit Critical Atlassian Flaw to Steal Restricted Files
Threat actors are exploiting CVE-2026-21589, a critical arbitrary file access flaw in Atlassian Data Center products, with a CVSS score of 9.3. The vulnerability allows unauthenticated attackers to read specific files from the web application root if they…
Wed 7 Oct· 1 article
-
SonicWall Fixes Critical Pre Auth SSRF Flaw in SMA1000 Appliances
SonicWall has released hotfixes for four vulnerabilities affecting its SMA1000 remote access appliances, including a maximum-severity pre-authentication SSRF flaw tracked as CVE-2026-102255. The flaw resides in the WorkPlace portal and could let an…
Mon 5 Oct· 1 article
-
CISA Flags Exploited Citrix NetScaler Flaw That Can Take Services Offline
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Citrix NetScaler flaw to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability, tracked as CVE-2026-88779, is a memory overflow in Citrix NetScaler ADC and NetScaler…
Fri 2 Oct· 2 articles
-
Zammad Flaws Let Attackers Reach Root in Seconds, CISA Warns
U.S. CISA has added two Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog. The vulnerabilities are CVE-2026-102489 (session fixation) and CVE-2026-102490 (improper privilege management), each with a CVSS of 9.4. CVE-2026-102489 affects…
-
CISA Warns FortiMail Flaw Is Being Exploited in the Wild
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Fortinet FortiMail flaw to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability, CVE-2026-104286, is a path traversal issue (CWE-22) that can be triggered by…
Thu 1 Oct· 3 articles
-
Apple Patches CoreGraphics Zero Day Exploited in Targeted Attacks
Apple has patched a zero‑day in CoreGraphics tracked as CVE-2026-86950, after researchers reported that it could be triggered by processing specially crafted files to cause arbitrary code execution. The flaw is described as an out‑of‑bounds write in the font…
-
CISA Flags Actively Exploited Cisco SD-WAN Authentication Flaw
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added Cisco Catalyst SD-WAN Manager’s flaw to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability is tracked as CVE-2026-76504 and carries a CVSS score of 9.8. It affects…
-
AI Agent Chained Zammad Zero Days to Gain Root Access in Seconds
The Dutch Institute for Vulnerability Disclosure (DIVD) has disclosed a breach that exploited two previously unknown Zammad flaws, tracked as CVE-2026-102489 and CVE-2026-102490. DIVD’s investigation, conducted with Merlon Security, found that the two…
Wed 30 Sep· 2 articles
-
CISA Flags Exploited Apple Graphics Flaw Affecting iPhones and Macs
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added Apple CVE-2026-86950, a flaw in CoreGraphics, to its Known Exploited Vulnerabilities (KEV) catalog. Described as an out-of-bounds write that can lead to arbitrary code execution when…
-
Citrix NetScaler Zero Day Gives Attackers Tunnels Into Internal Networks
Mandiant and Google Threat Intelligence Group (GTIG) have detailed active exploitation of a Citrix NetScaler zero-day affecting the NetScaler ADC and Gateway appliances, tracked as CVE-2026-88772 (with a CVSS of 9.5) and CVE-2026-88771. The campaigns,…
Tue 29 Sep· 1 article
-
Apple Patches CoreGraphics Zero Day Exploited in Targeted iOS Attacks
Apple has patched a zero-day in CoreGraphics, tracked as CVE-2026-86950, after it was reportedly exploited in extremely sophisticated targeted attacks against specific iOS users. The flaw is an out-of-bounds write that could allow arbitrary code execution…
Mon 28 Sep· 1 article
-
CISA Warns of Active Exploitation in Critical Citrix NetScaler Flaws
The US Cybersecurity and Infrastructure Security Agency (CISA) has added two critical Citrix NetScaler vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalogue: CVE-2026-88771 and CVE-2026-88772. Both have a CVSS score of 9.5. CVE-2026-88771 is…
Sun 27 Sep· 2 articles
-
Citrix NetScaler Zero Days Exploited Against Unpatched Systems
Citrix confirmed on 27 September 2026 that two critical zero-day vulnerabilities in NetScaler ADC and NetScaler Gateway had been exploited against unmitigated systems before patches were available. The flaws are CVE-2026-88771 and CVE-2026-88772, both rated…
-
OpenAI Agents Bypassed Controls on US and Australian Government Sites
Security Affairs published its 597th weekly newsletter on 27 September 2026, bringing together recent cybersecurity reporting from its own site and other publications. The edition covers cybercrime, malware, hacking, intelligence and information warfare, and…
Sat 26 Sep· 1 article
-
CISA Warns of Actively Exploited WordPress Flaw Enabling RCE
The US Cybersecurity and Infrastructure Security Agency (CISA) has added a WordPress Core vulnerability, CVE-2026-87902, to its Known Exploited Vulnerabilities (KEV) catalogue. The flaw has a CVSS score of 9.2 and affects WordPress versions dating back to…
Fri 25 Sep· 2 articles
-
CISA Warns of Active MikroTik RouterOS Attacks and SharePoint Flaw
The US Cybersecurity and Infrastructure Security Agency (CISA) added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalogue on 25 September 2026: CVE-2026-65660, a Microsoft SharePoint code-injection flaw with a CVSS score of 8.8, and…
-
CISA Flags Critical WSO2 and Magento Flaws Used in Attacks
The US Cybersecurity and Infrastructure Security Agency (CISA) added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on 24 September 2026: CVE-2026-5430, a WSO2 multiple-products path traversal vulnerability with a CVSS score of…
Thu 24 Sep· 1 article
-
MikroTik Routers Hacked Using Dual Flaws to Bypass Passwords
CERT Polska researchers identified the “MikroTrick” attack chain after MikroTik released RouterOS security patches on 3 September 2026 without detailing the underlying flaws. The chain combines CVE-2026-67279 and CVE-2026-86060 to provide unauthenticated…
Wed 23 Sep· 4 articles
-
CISA Warns of Active Attacks on Check Point and F5 Flaws
The US Cybersecurity and Infrastructure Security Agency (CISA) has added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalogue: CVE-2026-85102 and CVE-2026-93616 in Check Point products, CVE-2026-93952 in on-premises Arista VeloCloud…
-
F5 Patches Exploited BIG-IP Flaw Allowing Unauthenticated Code Execution
F5 has released emergency updates for a critical BIG-IP Access Policy Manager (APM) vulnerability, CVE-2026-94127, which has a CVSS score of 9.8 and is being exploited in the wild. The flaw allows an unauthenticated attacker to execute arbitrary code through…
-
ShinyHunters Claims FBI Applicant Data Breach via Oracle Flaw
ShinyHunters claimed on 22 September 2026 that it had breached the FBI and stolen information belonging to current and former employees and job applicants. The group reportedly offered about 5,000 records as evidence, claiming the data could include names,…
-
WordPress Patches Critical Flaw Enabling Conditional Code Execution
WordPress 7.1.2, released on 22 September 2026, fixes an unauthenticated local file inclusion vulnerability tracked as CVE-2026-87902, with a CVSS score of 9.2. The flaw affects versions from 4.7.0 onwards and arises in `get_page_template()`, which builds…
Tue 22 Sep· 2 articles
-
Check Point Servers Hit by Actively Exploited Path Traversal Flaw
Check Point has released emergency hotfixes for CVE-2026-93616, a critical path-traversal vulnerability in its Security Management Server products. The company says the flaw is being exploited in the wild. Unauthenticated remote attackers can reportedly…
-
CISA Flags Zyxel Switch Flaw Enabling Unauthenticated Code Execution
The US Cybersecurity and Infrastructure Security Agency (CISA) has added a Zyxel GS1900 Series switch vulnerability, tracked as CVE-2026-7273 and rated 8.8 by CVSS, to its Known Exploited Vulnerabilities catalogue. The flaw is a stack-based buffer overflow…
Sun 20 Sep· 1 article
-
CISA Flags Three Exploited Linux Kernel Flaws for Urgent Patching
The US Cybersecurity and Infrastructure Security Agency (CISA) has added three Linux kernel vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalogue: CVE-2025-39682, CVE-2025-39964 and CVE-2026-53266. CISA’s additions were reported on 18…
