News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Fri 23 Oct· 2 articles
-
CISA Flags Actively Exploited Nextcloud Code Injection Flaw
CISA added CVE-2026-110447 to its Known Exploited Vulnerabilities (KEV) catalogue on 23 October 2026. The flaw affects Collabora Online – Built-in CODE Server when used within the Nextcloud platform and can allow remote code execution through OS command…
-
CISA Confirms Active Attacks on Arista VeloCloud Orchestrator
CISA added CVE-2026-114625, the Arista VeloCloud Orchestrator SQL Injection Vulnerability, to its Known Exploited Vulnerabilities (KEV) catalogue on 23 October 2026. The flaw affects on-premises Arista VeloCloud Orchestrator and may let a remote attacker…
Thu 22 Oct· 1 article
-
CISA warns unmanaged AI token use could disrupt critical services
CISA, together with the Canadian Centre for Cyber Security and partners, has published joint guidance on managing token consumption for operational resilience as organisations deploy third-party super intelligence (SI) services. The briefing notes that…
CISA
Tue 20 Oct· 6 articles
-
CISA Flags Actively Exploited Siemens Software Center Flaw
CISA added CVE-2026-110936 to its Known Exploited Vulnerabilities (KEV) catalogue on 20 October 2026. The vulnerability affects Siemens Software Center and is an uncontrolled search path element flaw that could let an authenticated local attacker execute…
-
CISA Flags Actively Exploited Plex Server SSRF Flaw
CISA added CVE-2026-96652 to its Known Exploited Vulnerabilities (KEV) catalogue on 20 October 2026. The vulnerability affects Plex Media Server and is a server-side request forgery (SSRF) flaw that can make the server send a POST request to a destination…
-
CISA Flags Actively Exploited Plex Media Server Flaw for Patching
CISA added CVE-2026-96654 to its Known Exploited Vulnerabilities (KEV) catalogue on 20 October 2026. The flaw affects Plex Media Server and could let an attacker call functions belonging to other plugins and supply their own parameters. The vulnerability,…
-
CISA Flags Exploited Plex Flaw That Can Reach Internal Systems
CISA added CVE-2026-96655 to its Known Exploited Vulnerabilities (KEV) catalogue on 20 October 2026. The vulnerability affects Plex Media Server and is a server-side request forgery (SSRF) flaw that could let an authenticated user make the server request…
-
CISA Confirms Active Exploitation of Plex Media Server Flaw
CISA added CVE-2026-96656 to its Known Exploited Vulnerabilities (KEV) catalogue on 20 October 2026. The vulnerability affects Plex Media Server and is an external control of file name or path flaw that can let an admin user write arbitrary files that may…
-
CISA Flags Exploited SiteGuard Flaw That Could Give Attackers System Control
CISA added CVE-2026-106931 to its Known Exploited Vulnerabilities (KEV) catalogue on 20 October 2026. The vulnerability affects EG Secure Solutions SiteGuard Server Edition and is an OS command injection flaw that may let an attacker run arbitrary operating…
Fri 16 Oct· 3 articles
-
CISA Flags Fortinet Path Traversal Flaw Under Active Exploitation
CISA added CVE-2025-61624 to its Known Exploited Vulnerabilities (KEV) catalogue on 16 October 2026. The vulnerability affects Fortinet FortiOS, FortiPAM, FortiProxy and FortiSwitchManager, and may let an authenticated administrator with at least read-write…
-
CISA Warns of Exploited BeyondTrust Remote Support Auth Bypass
CISA added CVE-2026-102764 to its Known Exploited Vulnerabilities (KEV) catalogue on 16 October 2026. The flaw affects BeyondTrust Remote Support and is an authentication bypass by spoofing that could let a remote attacker perform file operations on the…
-
CISA and FBI Warn Election Teams of Phishing Ahead of Midterms
CISA and the FBI released a Public Service Announcement on 16 October 2026 warning election and campaign officials about cyber threats during the 2026 U.S. midterm elections. Malicious cyber actors may use phishing and smishing techniques to steal login…
CISA
Thu 15 Oct· 1 article
-
CISA Flags Critical Atlassian Flaw Letting Attackers Access Files
CISA added CVE-2026-21589 to its Known Exploited Vulnerabilities (KEV) catalogue on 15 October 2026. The flaw affects multiple Atlassian products, including Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software…
Wed 14 Oct· 5 articles
-
CISA Flags Actively Exploited PAN-OS Flaw That Grants Root Access
CISA added CVE-2026-0322 to its Known Exploited Vulnerabilities (KEV) catalogue on 14 October 2026. The vulnerability affects Palo Alto Networks PAN-OS and could let an authenticated attacker with network access execute arbitrary code as root on a firewall.…
-
CISA Warns of Attacks Exploiting AhsayCBS Authentication Flaw
CISA added CVE-2026-105133 to its Known Exploited Vulnerabilities (KEV) catalogue on 14 October 2026. The Ahsay AhsayCBS Improper Authentication Vulnerability affects AhsayCBS and could let a remote attacker bypass authentication by manipulating a parameter…
-
CISA Flags Exploited Cisco Email Gateway Flaw With Critical Score
CISA added CVE-2026-76519 to its Known Exploited Vulnerabilities (KEV) catalogue on 14 October 2026. The Cisco Secure Email Gateway Relative Path Traversal Vulnerability affects Cisco Secure Email Gateway and could let an unauthenticated remote attacker…
-
CISA Warns of Active Attacks on Critical AhsayCBS Flaw
CISA added CVE-2026-105134 to its Known Exploited Vulnerabilities (KEV) catalogue on 14 October 2026. The flaw affects Ahsay AhsayCBS and is a command injection vulnerability that could let a remote attacker execute operating system commands. The…
-
CISA flags actively exploited Windows flaw with 16 October patch deadline
CISA added CVE-2026-96951 to its Known Exploited Vulnerabilities (KEV) catalogue on 13 October 2026. The vulnerability affects Microsoft Windows and is a command injection flaw in Windows Shell that allows an unauthorised attacker to bypass a security…
Tue 13 Oct· 2 articles
-
CISA Warns Ivanti VPN Flaw Enables Unauthenticated Command Execution
CISA added CVE-2026-104935 to its Known Exploited Vulnerabilities (KEV) catalogue on 13 October 2026. The entry affects Ivanti Connect Secure and describes an authentication bypass by spoofing that lets a remote, unauthenticated attacker execute arbitrary…
-
Swann camera flaws let local attackers view live feeds without authentication
Swann Communications SWIFI-SE2KIC cameras with firmware version 2.0.22 or earlier are implicated in three related vulnerabilities that could allow an attacker on the local network to access live video information without authentication. The issues are listed…