News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Tue 20 Oct· 1 article
-
APT28 Breaches NATO Naval Shipbuilder and Steals Credentials in Week-Long Intrusion
The Hacker News reports that the Russia-linked APT28 group, also known as BlueDelta, Fancy Bear or Forest Blizzard, has been attributed by Symantec Threat Hunter Team (Swallowtail) with breaching multiple NATO-related targets, including a naval shipbuilder…
Wed 14 Oct· 8 articles
-
Microsoft Windows7 articles this day · CISA first
CISA Flags Actively Exploited Windows Flaw That Bypasses Security Protections · Microsoft fixes 1,415 flaws as exploited Windows bug puts users at risk
-
CISA Flags Actively Exploited Windows Flaw That Bypasses Security Protections
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Microsoft Windows Shell flaw, tracked as CVE-2026-96951, to its Known Exploited Vulnerabilities (KEV) catalog. The advisory notes that the vulnerability is a Windows Shell command…
-
Microsoft fixes 1,415 flaws as exploited Windows bug puts users at risk
Microsoft Patch Tuesday in October 2026 set a new vulnerability record, addressing 1,415 CVEs across Microsoft products and services. The update cycle, described as the first four-digit/month in Microsoft’s reporting, spans Windows and related components,…
-
Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Zero Day
Microsoft’s October Patch Tuesday patch release has set a new record with fixing 1,413 vulnerabilities, including an actively exploited Windows Shell zero-day. The record-breaking bundle underscores the rapid pace of flaws being disclosed and addressed, with…
-
Microsoft’s record 1,413 fixes include a Windows flaw exploited to bypass security warnings
Microsoft has released its October 2026 Patch Tuesday with a record 1,413 CVE fixes across multiple products, including Windows, Office, developer tools, and SharePoint Server. Microsoft notes that 1,102 of the fixes affect Windows, with additional patches…
-
Microsoft patches 1,413 flaws as hackers exploit Windows bug
Microsoft has released a record-breaking Patch Tuesday, delivering fixes for 1,413 vulnerabilities across Windows, Office, Developer Tools, SharePoint Server, and SQL Server. The update slate includes 1,102 Windows flaws, 134 in Office, 61 in Developer…
-
Microsoft Fixes Actively Exploited Windows Flaw in Record Patch Release
Microsoft’s October 2026 Patch Tuesday fixes a record 1,414 vulnerabilities, including 78 rated critical, making it the largest Microsoft release to date. The update slate includes three zero-day flaws, with one already being actively exploited. CISA has…
-
CISA flags actively exploited Windows flaw with 16 October patch deadline
CISA added CVE-2026-96951 to its Known Exploited Vulnerabilities (KEV) catalogue on 13 October 2026. The vulnerability affects Microsoft Windows and is a command injection flaw in Windows Shell that allows an unauthorised attacker to bypass a security…
-
-
Broadcom Moves VMware to Monthly Security Updates as AI Speeds Flaw Discovery
Broadcom has announced a shift to a monthly software security update cadence for its VMware product line, citing the increasing capability of AI to identify defects as a driver for faster remediation. The move implies that organisations will need to devote…
Tue 13 Oct· 4 articles
-
Microsoft Windows4 articles this day · thezdi.com first
Microsoft fixes over 1,400 flaws, including a Windows zero day · Microsoft patches actively exploited Windows flaw that bypasses security checks
-
Microsoft fixes over 1,400 flaws, including a Windows zero day
Microsoft has issued a sweeping patch batch fixing more than 1,400 security vulnerabilities across Windows operating systems and related software. The roll-up dwarfs September’s near-1,000 fixes and underscores an unusually large month for Microsoft’s patch…
-
Microsoft patches actively exploited Windows flaw that bypasses security checks
On 13 October 2026, Dark Reading reports Microsoft’s October Patch Tuesday as the largest update yet, with 1,413 Microsoft CVEs disclosed. The haul includes 80 critical flaws and two zero-day bugs, one of which is actively exploited. The patched issues span…
-
Microsoft Patches Windows Shell Zero Day Exploited in the Wild
Microsoft’s October 2026 Patch Tuesday swells to a much larger cycle than last month, with 1,413 disclosed vulnerabilities across its own products, of which 1,102 are in Windows.
-
Adobe and Microsoft Patch Thousands of Flaws in Record Update
The October 2026 security update cycle sees Adobe patching across 11 bulletins addressing 174 CVEs spanning Dimension, Commerce, Substance 3D, Bridge and related tools, with several critical issues. Notably, Adobe ColdFusion (APSB26-144) contains 32 critical…
-
Fri 2 Oct· 1 article
-
Warlock Ransomware Expands SharePoint Attacks Against Critical Sectors
Warlock, a ransomware operation tied to the China-based groups Longlegs and Storm-2603, is again exploiting SharePoint vulnerabilities to target critical infrastructure, government, and educational sectors. Symantec’s assessment states that the group has…
Sun 27 Sep· 1 article
-
Attackers Exploit Patched Microsoft SharePoint Flaw to Deploy Webshells
Microsoft SharePoint vulnerability CVE-2026-65660 is being exploited in attacks, about six weeks after Microsoft issued patches and days after researchers published technical details. Microsoft fixed the flaw in its August 2026 Patch Tuesday updates and…
Fri 25 Sep· 4 articles
-
Microsoft SharePoint Enterprise Server 20164 articles this day · SecurityOnline first
CISA Warns of Active MikroTik RouterOS Attacks and SharePoint Flaw · CISA Warns of Actively Exploited Microsoft SharePoint Code Flaw
-
CISA Warns of Active MikroTik RouterOS Attacks and SharePoint Flaw
The US Cybersecurity and Infrastructure Security Agency (CISA) added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalogue on 25 September 2026: CVE-2026-65660, a Microsoft SharePoint code-injection flaw with a CVSS score of 8.8, and…
-
CISA Warns of Actively Exploited Microsoft SharePoint Code Flaw
CISA added CVE-2026-65660 to its Known Exploited Vulnerabilities (KEV) catalogue on 25 September 2026. The vulnerability affects Microsoft SharePoint and is identified as the Microsoft SharePoint Code Injection Vulnerability. It could allow an authorised…
-
CISA Flags Actively Exploited SharePoint and MikroTik Flaws
CISA added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog on 25 September 2026, citing evidence that both are being actively exploited. The entries are CVE-2026-65660, a Microsoft SharePoint code injection vulnerability, and…
-
Attackers Exploit SharePoint Flaw to Deploy Stealthy Web Shells
Threat actors are actively targeting on-premises Microsoft SharePoint servers by exploiting the remote-code-execution vulnerability CVE-2026-65660. The flaw has a CVSSv3 score of 8.8 and affects SharePoint Server 2013, 2016, 2019 and Subscription Edition,…
-
Thu 24 Sep· 1 article
-
Chinese Hackers Exploited Chrome and Windows Zero Days in Espionage Attacks
A suspected Chinese state-sponsored espionage group tracked as UTA0565 used zero-day vulnerabilities in Google Chrome and Microsoft Windows to target Asian government bodies, think tanks and policy researchers. According to Volexity, attacks began in early…
Mon 21 Sep· 1 article
-
NightEagle Hackers Target Russian Firms With GhostContainer Backdoor
Kaspersky’s Global Emergency Response Team has identified a cyber-espionage campaign attributed to NightEagle, also known as APT-Q-95, targeting businesses in Russia. The group, active since at least 2023 and previously focused on Asia, reportedly gained…
Wed 16 Sep· 1 article
-
NightEagle Hackers Hide Exchange Backdoor Behind Stolen VPN Access
Kaspersky’s Global Emergency Response Team says the NightEagle group, also known as APT-Q-95, has targeted businesses in Russia after previously focusing on organisations in Asia. In most investigated incidents, the attackers used stolen valid credentials to…
Tue 15 Sep· 1 article
-
China-Linked Groups Exploited Chrome Patch Gap to Target NGOs
Two China-linked threat groups used the same Chrome and Windows exploit chain against non-governmental organisations (NGOs), according to Volexity. The activity began on 1 September 2026, when UTA0560 sent spear-phishing emails directing targets through a…
Sat 12 Sep· 1 article
-
Chrome Zero Days Fuel BlueMoon Exploit Kit’s Espionage Surge
BlueMoon is an exploit kit that security researchers say was rapidly adopted by multiple espionage groups in opportunistic, rushed campaigns. The China-linked Violet Typhoon (also known as APT31, JungleBamboo, TA412 and Tide Castle) first deployed BlueMoon…
Thu 10 Sep· 3 articles
-
Google Chromium V82 articles this day · Security Affairs first
Chrome Zero Day Chain Targeted NGOs Before Google’s Patch Arrived · Chrome and Windows Zero Days Fuel BlueMoon Espionage Campaigns
-
Chrome Zero Day Chain Targeted NGOs Before Google’s Patch Arrived
Security researchers have traced a Chrome-focused zero-day chain used by two Chinese espionage cohorts, UTA0560 and JungleBamboo (APT31), to target NGOs and public policy institutes across borders. The attackers carried out spear-phishing campaigns…
-
Chrome and Windows Zero Days Fuel BlueMoon Espionage Campaigns
Proofpoint, with corroboration from Google Threat Intelligence, MSTIC and Volexity, identifies four espionage groups adopting a Chrome-and-Windows exploit kit named BlueMoon within roughly two weeks of its first appearance. The initial cluster, TA412 (aka…
-
-
CISA Warns of Exploited Magento Flaw Enabling Remote Code Execution
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four newly observed exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalogue. The entries are CVE-2026-75650, CVE-2026-81963, CVE-2026-85880 and…
Wed 9 Sep· 8 articles
-
Google Chromium V83 articles this day · SecurityOnline first
BlueMoon Exploit Kit Races to Exploit Fresh Chrome and Windows Flaws · Chrome Zero-Day Chain BlueMoon Drops Espionage Backdoors on Windows
-
BlueMoon Exploit Kit Races to Exploit Fresh Chrome and Windows Flaws
Proofpoint reports that a chrome-and-windows exploit kit, dubbed BlueMoon, has been deployed rapidly by at least four groups after chaining three vulnerabilities to install malware of choice. The chain exploits two Chromium vulnerabilities in the V8 engine…
-
Chrome Zero-Day Chain BlueMoon Drops Espionage Backdoors on Windows
Four espionage-linked clusters are openly deploying a previously undocumented Chrome/Windows exploit chain, dubbed BlueMoon, within days of each other. The first attribution goes to APT31 (China-aligned) on 28 August 2026, with subsequent activity from other…
-
Chinese-Linked Spies Exploit Chrome and Windows Zero-Days
Proofpoint threat researchers have tracked a new BlueMoon exploit kit used in espionage campaigns, chaining Chrome/Chromium browser flaws with a Windows kernel privilege escalation to breach targeted networks. The operation, active from late August into…
-
-
Microsoft Patches 964 CVEs as Two Windows Zero-Days Face Attacks
Microsoft’s September 2026 Patch Tuesday delivers what the vendor describes as the largest ever batch of fixes, addressing 964 CVEs, with 104 rated Critical and 860 rated Important. Microsoft notes 974 CVEs in total for the release, but ten affect cloud…
-
Microsoft Windows3 articles this day · The Hacker News first
Microsoft Patches Record 974 CVEs Amid Exploited Windows Zero-Days · Microsoft Fixes Nearly 1,000 Flaws in Record Patch Tuesday Update
-
Microsoft Patches Record 974 CVEs Amid Exploited Windows Zero-Days
Microsoft has reported a record-breaking 974 CVEs addressed in its September 2026 Patch Tuesday, shattering the previous high of 570 CVEs. The August–September trend shows a sharp rise in patched flaws, with Windows accounting for 723 CVEs and Office for…
-
Microsoft Fixes Nearly 1,000 Flaws in Record Patch Tuesday Update
Microsoft’s September 2026 Patch Tuesday set another record, with Microsoft stating fixes for up to 974 CVEs across Windows, Exchange, SharePoint, SQL Server and other services. The update slate includes two zero-days exploited in the wild and 20 wormable…
-
Microsoft Patches 974 Flaws as Two Windows Zero Days Exploited
Microsoft’s September Patch Tuesday set a new record, with fixes for 974 vulnerabilities across its software stack, including two flaws that were already being exploited in the wild. The breakdown cited by Microsoft shows 723 in Windows, 111 in Office and…
-
-
CVE-2026-41870: Unauthenticated RCE in Apache Nutch
The page reports on four critical vulnerabilities detected in various software. Key points include: 1. **CVE-2026-75650**: An Adobe Commerce and Magento vulnerability concerning improper neutralization of special template elements. 2. **CVE-2026-81963**: A…
Tue 8 Sep· 9 articles
-
Microsoft Windows2 articles this day · Ars Technica first
Microsoft Fixes 974 Flaws Including Two Exploited Windows Zero Days · Microsoft’s Record 972-Flaw Patch Haul Includes Two Zero-Days
-
Microsoft Fixes 974 Flaws Including Two Exploited Windows Zero Days
Microsoft has released a record-breaking Patch Tuesday, issuing updates to fix at least 974 security holes across Windows and related software. The batch dwarfs July’s previous record of 570 vulnerabilities and brings the year’s total to more than 2,600. The…
-
Microsoft’s Record 972-Flaw Patch Haul Includes Two Zero-Days
Microsoft’s September patch release is described as a record by Ars Technica, fixing about 972 vulnerabilities, with 112 rated as high-severity critical. The piece notes that two months earlier Microsoft set a prior record with 570 fixes. When including the…
-
-
Microsoft Windows3 articles this day · CISA first
Microsoft’s Record Patch Tuesday Fixes Two Exploited Windows Zero-Days · Microsoft Fixes 974 Flaws as Two Windows Zero Days Face Exploitation
-
Microsoft’s Record Patch Tuesday Fixes Two Exploited Windows Zero-Days
Microsoft's September 2026 Patch Tuesday update disclosed a total of 999 vulnerabilities, including 974 related to Microsoft products, marking a historic high for the company. Key issues include a zero-day elevation of privilege vulnerability in Windows ALPC…
-
Microsoft Fixes 974 Flaws as Two Windows Zero Days Face Exploitation
Microsoft released fixes for 974 unique vulnerabilities in its September Patch Tuesday, a figure that would once have represented a full year’s worth of CVEs. Of these, two zero‑days are already under active exploitation, and 58 further flaws are considered…
-
CISA Flags Actively Exploited Windows Flaw Enabling Privilege Escalation
CISA has added CVE-2026-85880 to its Known Exploited Vulnerabilities (KEV) catalogue. The vulnerability affects Microsoft Windows and is a heap-based buffer overflow in Windows Advanced Local Procedure Call that enables local privilege escalation. The flaw…
-