News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Tue 13 Oct· 1 article
-
Microsoft patches actively exploited Windows flaw that bypasses security checks
On 13 October 2026, Dark Reading reports Microsoft’s October Patch Tuesday as the largest update yet, with 1,413 Microsoft CVEs disclosed. The haul includes 80 critical flaws and two zero-day bugs, one of which is actively exploited. The patched issues span…
Wed 16 Sep· 1 article
-
Browser Extensions Hijacked AI Assistants in Five Major Browsers
On 16 September 2026, Forever Security disclosed BragJack, a proof-of-concept attack that hijacks built-in AI assistants in five browsers: Google Chrome with Gemini, Microsoft Edge, Opera Neon, Perplexity Comet and Claude in Chrome. Researcher Gal Weizman…
Thu 10 Sep· 1 article
-
Windows Defender Patch Bypass Exposes SYSTEM Files to Attackers
The Dark Reading article reports that the security researcher Nightmare-Eclipse has released a new Windows zero-day exploit, ShieldCrash, described as a patch bypass for CVE-2026-69414, known as ShieldBreak, which is a privilege escalation flaw in the…
Tue 8 Sep· 1 article
-
Microsoft Fixes 974 Flaws as Two Windows Zero Days Face Exploitation
Microsoft released fixes for 974 unique vulnerabilities in its September Patch Tuesday, a figure that would once have represented a full year’s worth of CVEs. Of these, two zero‑days are already under active exploitation, and 58 further flaws are considered…
Tue 11 Aug· 1 article
-
Microsoft's Patch Tuesday Deluge Continues With August Updates
In August 2026, Microsoft released fixes for 421 unique CVEs during its Patch Tuesday, including two zero-day vulnerabilities. The bulk of these vulnerabilities (236) affect Windows, with 98 impacting Office products. Among the critical issues,…
Tue 28 Jul· 1 article
-
Microsoft addresses critical AD Cert Services bug CVE-2026-54121
Microsoft has addressed a severe vulnerability in its Active Directory (AD) Certificate Services, tracked as CVE-2026-54121, which allowed low-privileged users to impersonate a domain controller, potentially compromising the entire AD environment. The flaw…
Fri 24 Jul· 1 article
-
Microsoft fixes Azure Automation flaw after CVE-2025-29827 leak
The article discusses a critical vulnerability in Microsoft's Azure Automation service that could allow attackers to seize identities of other tenants due to a default public configuration. Discovered by security researcher Shay Shavit, this vulnerability…
Tue 14 Jul· 1 article
-
Records Are Made to Be Broken: Patch Tuesday Raises Triage Stakes
Microsoft's July 2026 Patch Tuesday update is unprecedented, addressing 622 unique CVEs, including three zero-day vulnerabilities. Among these, two are actively exploited, while the third is a known but unexploited flaw. The update signals a significant…
Thu 9 Jul· 1 article
-
Microsoft patches Windows Defender zero day CVE-2026-50656
Microsoft has addressed a significant zero-day vulnerability, called RoguePlanet, in Windows Defender, which was disclosed by a security researcher named Nightmare-Eclipse. The flaw, designated CVE-2026-50656, has a CVSS score of 7.8 and allows attackers to…
Mon 15 Jun· 1 article
-
Attackers hijack Microsoft Copilot to leak data CVE-2026-42824
The article discusses a recently discovered Microsoft Copilot attack named 'SearchLeak', which allows attackers to exfiltrate files like emails and documents with a malicious link. This three-stage attack leverages a specific URL structure, enabling prompt…
Tue 26 May· 1 article
-
Microsoft patches critical SharePoint RCE flaw CVE-2026-45659
Microsoft has released an out-of-band patch to address a critical remote code execution vulnerability in SharePoint Server (CVE-2026-45659). This flaw allows authenticated attackers to remotely execute code without elevated privileges, assigning it a high…
Tue 19 May· 1 article
-
Windows Zero-Day Barrage Continues After Patch Tuesday
Six Windows zero-days were disclosed by Nightmare Eclipse in the six weeks since May 2026’s security update, adding to a growing list that researchers say attackers are already exploiting in some cases. The three new vulnerabilities are YellowKey,…
Mon 18 May· 1 article
-
Microsoft Exchange Zero-Day Under Attack, No Patch Available
Microsoft on Thursday disclosed a zero-day vulnerability in Exchange that is under active exploitation, and four days later customers were still awaiting a patch. The flaw, tracked as CVE-2026-42897, affects Exchange Outlook Web Access and could allow an…
Tue 12 May· 1 article
-
Microsoft Patch May 2026 fixes 137 bugs, zero day free
It's Patch Tuesday for Microsoft and Not a Zero-Day In Sight, with Microsoft reporting no actively exploited zero-days, marking the first such lull in nearly two years. The May 2026 update fixes 137 CVEs, of which Microsoft considers 13 as likely candidates…
Tue 21 Apr· 1 article
-
Exploits Turn Windows Defender into Attacker Tool
Three publicly available proof-of-concept exploits are being used to attack Microsoft Defender and turn its protective functions against organisations, with two of the exploits unpatched. BlueHammer is a TOCTOU flaw in Defender’s signature update workflow…
Wed 15 Apr· 1 article
-
Salesforce and Microsoft fix prompt inject bugs exposing CRM data
Two recently fixed prompt injections in Salesforce Agentforce and Microsoft Copilot could have allowed an external attacker to exfiltrate sensitive data, according to Capsule Security. In Salesforce, the flaw dubbed “PipeLeak” could be triggered via a…
Tue 14 Apr· 1 article
-
Privilege Elevation Dominates Massive Microsoft Patch Update
Privilege Elevation Dominates Microsoft’s patch Tuesday, with elevation-of-privilege bugs accounting for more than half of the 165 CVEs patched. Microsoft noted that one zero-day is actively being exploited, CVE-2026-32201, a spoofing vulnerability in…
Tue 7 Apr· 1 article
-
Storm-1175 Deploys Medusa Ransomware at 'High Velocity'
Storm-1175 is described by Microsoft Threat Intelligence as a financially motivated group conducting “high velocity ransomware campaigns” that push rapid exploitation of known vulnerabilities, often delivering Medusa ransomware within days or even 24 hours.…
Tue 17 Mar· 1 article
-
Warlock Ransomware Group Augments Post-Exploitation Activities
The Warlock ransomware group is expanding its post-exploitation activity to be more stealthy and resilient, using a new BYOVD technique and other strategic tools after gaining access by exploiting unpatched SharePoint servers, according to Trend Micro threat…
Tue 10 Feb· 1 article
-
Microsoft Patches 6 Actively Exploited Zero-Days
Microsoft has patched six actively exploited zero-days in its latest security update, with three of the flaws described as security feature bypass vulnerabilities that let attackers slip past built-in protections across multiple Microsoft products. Two of…
Tue 3 Feb· 1 article
-
Russian Hackers Weaponize Microsoft Office Bug in Just 3 Days
Russian hackers have weaponised a recently disclosed Microsoft Office flaw, with APT28 beginning exploitation three days after a patch was released, on 29 January 2026, in a campaign tracked as Operation Neusploit. The attacks use specially crafted Microsoft…
Tue 27 Jan· 1 article
-
Microsoft Rushes Emergency Patch for Office Zero-Day
Microsoft has rushed out an emergency patch for a zero-day vulnerability in Microsoft Office and Microsoft 365 that attackers are actively exploiting. The bug, CVE-2026-21509, carries a CVSS of 7.8 and can bypass protections against unsafe COM/OLE behaviour…
No older articles match these filters.