News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Wed 14 Oct· 2 articles
-
Microsoft Windows2 articles this day · Security Affairs first
CISA Flags Actively Exploited Windows Flaw That Bypasses Security Protections · Microsoft fixes 1,415 flaws as exploited Windows bug puts users at risk
-
CISA Flags Actively Exploited Windows Flaw That Bypasses Security Protections
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Microsoft Windows Shell flaw, tracked as CVE-2026-96951, to its Known Exploited Vulnerabilities (KEV) catalog. The advisory notes that the vulnerability is a Windows Shell command…
-
Microsoft fixes 1,415 flaws as exploited Windows bug puts users at risk
Microsoft Patch Tuesday in October 2026 set a new vulnerability record, addressing 1,415 CVEs across Microsoft products and services. The update cycle, described as the first four-digit/month in Microsoft’s reporting, spans Windows and related components,…
-
Tue 6 Oct· 1 article
-
Microsoft Patches Exchange Flaw That Could Expose Staff Mailboxes
Microsoft has released out-of-band security updates for Exchange Server to fix a high-severity vulnerability tracked as CVE-2026-96940 (CVSS 8.8). The flaw stems from weak authorisation and allows an authenticated attacker to gain higher privileges on an…
Fri 25 Sep· 1 article
-
CISA Warns of Active MikroTik RouterOS Attacks and SharePoint Flaw
The US Cybersecurity and Infrastructure Security Agency (CISA) added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalogue on 25 September 2026: CVE-2026-65660, a Microsoft SharePoint code-injection flaw with a CVSS score of 8.8, and…
Mon 21 Sep· 1 article
-
AI Agents Expose New Attack Paths Through Skills and Memory
Research published during February 2026 indicates that AI agents, rather than standalone models, are becoming a broader cybersecurity target because they combine persistent memory with skills, external tools, protocols and the ability to act on connected…
Tue 15 Sep· 1 article
-
China-Linked Groups Exploited Chrome Patch Gap to Target NGOs
Two China-linked threat groups used the same Chrome and Windows exploit chain against non-governmental organisations (NGOs), according to Volexity. The activity began on 1 September 2026, when UTA0560 sent spear-phishing emails directing targets through a…
Thu 10 Sep· 2 articles
-
CISA Warns of Exploited Magento Flaw Enabling Remote Code Execution
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four newly observed exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalogue. The entries are CVE-2026-75650, CVE-2026-81963, CVE-2026-85880 and…
-
Chrome and Windows Zero Days Fuel BlueMoon Espionage Campaigns
Proofpoint, with corroboration from Google Threat Intelligence, MSTIC and Volexity, identifies four espionage groups adopting a Chrome-and-Windows exploit kit named BlueMoon within roughly two weeks of its first appearance. The initial cluster, TA412 (aka…
Wed 9 Sep· 2 articles
-
ShieldCrash PoC Revives Microsoft Defender SYSTEM File Read Flaw
Security researcher Chaotic Eclipse (INFINITE NIGHTMARE, MSNightmare, Nightmare-Eclipse) released a new zero-day exploit named ShieldCrash, a PoC that demonstrates an arbitrary file read as SYSTEM in Microsoft Defender. The PoC targets a vulnerability…
-
Microsoft Fixes Nearly 1,000 Flaws in Record Patch Tuesday Update
Microsoft’s September 2026 Patch Tuesday set another record, with Microsoft stating fixes for up to 974 CVEs across Windows, Exchange, SharePoint, SQL Server and other services. The update slate includes two zero-days exploited in the wild and 20 wormable…
Fri 28 Aug· 1 article
-
CISA adds critical Red Hat, SQL Server, Citrix flaws to KEV list.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added several critical vulnerabilities to its Known Exploited Vulnerabilities catalog including flaws in Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix…
Wed 19 Aug· 1 article
-
U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added several vulnerabilities to its Known Exploited Vulnerabilities catalog: CVE-2026-33824 (Microsoft IKE, CVSS score: 9.8), CVE-2026-55040 (Microsoft SharePoint, CVSS score: 9.1),…
Thu 13 Aug· 3 articles
-
CISA Flags Critical Flaws in Metabase, Windows and Cisco Firewall
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added vulnerabilities related to Metabase, Windows, and Cisco Secure Firewall to its Known Exploited Vulnerabilities catalog. The vulnerabilities include: 1. **CVE-2026-20349**: A heap…
-
SharePoint Zero Day Flaw Exploited After Rapid7 PoC Release
The article discusses the exploitation of a critical vulnerability in SharePoint (CVE-2026-55040), which allows unauthenticated users to impersonate administrators. The flaw, with a CVSS score of 9.1, was patched in July 2026, but public proof-of-concept…
-
Lazarus Group exploits CVE‑2026‑68820 via fake job offers
The North Korean Lazarus Group has launched a new phase of its long-running 'Operation Dream Job,' targeting defense and aerospace professionals with fake job offers that exploit a recently discovered Windows zero-day vulnerability, identified as…
Wed 12 Aug· 2 articles
-
Proof of concept bypasses Defender patch for CVE-2026-50656
Chaotic Eclipse, a security researcher, has released a proof-of-concept (PoC) for a new zero-day vulnerability named ShieldBreak, which bypasses a Microsoft Defender patch for CVE-2026-50656. This flaw allows attackers to achieve SYSTEM-level code execution…
-
Microsoft patches wormable DNS flaw and critical WinSock zero day
Microsoft's August 2026 Patch Tuesday update addresses 398 CVEs, including a zero-day vulnerability (CVE-2026-68820) and a wormable flaw (CVE-2026-62878) in Windows DNS Server. CVE-2026-68820 is a critical use-after-free bug in the WinSock driver that can…
Thu 23 Jul· 1 article
-
U.S. CISA adds Microsoft SharePoint and Check Point SmartConsole flaws to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical vulnerabilities to its Known Exploited Vulnerabilities catalog: CVE-2026-16232, an authentication bypass flaw in Check Point SmartConsole, and CVE-2026-50522, a…
Tue 21 Jul· 1 article
-
CVE-2026-50522: SharePoint Flaw Lets Site Owners Run Remote Code
A critical Microsoft SharePoint vulnerability, CVE-2026-50522, with a CVSS score of 9.8, is being actively exploited following the release of proof-of-concept (PoC) code. This deserialization flaw allows authenticated Site Owners to execute arbitrary code…
Sat 18 Jul· 1 article
-
CISA urges patch of FortiSandbox, SharePoint flaws amid exploits
On July 16, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) included two critical vulnerabilities from Fortinet FortiSandbox and one from Microsoft SharePoint in its Known Exploited Vulnerabilities (KEV) catalog. The vulnerabilities…
Tue 14 Jul· 1 article
-
Patch Tuesday security updates for July 2026, the largest update ever. 621 CVEs in one month
In July 2026, Microsoft released its largest Patch Tuesday update, addressing 621 vulnerabilities (CVEs), surpassing all previous yearly totals. This includes critical flaws such as two actively exploited zero-days—CVE-2026-56155 in Active Directory and…
Thu 9 Jul· 1 article
-
Microsoft patches Defender bug CVE-2026-50656 after local exploit
Microsoft has addressed a critical vulnerability in its Defender software known as RoguePlanet (CVE-2026-50656), which allows local attackers to elevate privileges through the Malware Protection Engine. The flaw was rated 7.8 on the CVSS scale and originated…
Thu 2 Jul· 1 article
-
CISA urges SharePoint patch for CVE-2026-45659 before July 4
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Microsoft SharePoint Server vulnerability (CVE-2026-45659) to its Known Exploited Vulnerabilities catalog, with a CVSS score of 8.8. This high-severity flaw allows remote code…
Wed 1 Jul· 1 article
-
CISA warns BlueHammer flaw now used in ransomware attacks
CISA has confirmed that the vulnerability known as BlueHammer (CVE-2026-33825) is now being exploited in ransomware attacks, allowing attackers to gain SYSTEM privileges through Microsoft Defender. Originally a proof-of-concept, it has transitioned to active…
Thu 18 Jun· 1 article
-
Microsoft Defender Zero Day Lets Attackers Run SYSTEM Code
Microsoft has confirmed a zero-day vulnerability in its Defender software, tracked as CVE-2026-50656, which enables privilege escalation due to a flaw in the Malware Protection Engine. While a security patch is under development, the issue was brought to…
Tue 9 Jun· 1 article
-
Microsoft patches CVE-2026-41091 amid record 208 CVE update
Microsoft's June 2026 Patch Tuesday released a record 208 CVEs, significantly surpassing the previous monthly record of 177 CVEs. Noteworthy vulnerabilities include CVE-2026-41091, actively exploited and affecting Microsoft Defender; CVE-2026-45657, a…
Wed 27 May· 1 article
-
Microsoft SharePoint Has a New RCE Flaw. If You Haven’t Patched Yet, Go Do That.
A critical vulnerability in Microsoft SharePoint, identified as CVE-2026-45659, allows for remote code execution (RCE) with a CVSS score of 8.8. This flaw results from the deserialization of untrusted data and poses a significant risk as it requires minimal…
Thu 21 May· 1 article
-
CISA Adds Critical Flaws in Windows, Office, Defender to KEV List
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added vulnerabilities in Microsoft and Adobe products to its Known Exploited Vulnerabilities (KEV) catalog as of May 21, 2026. Notable vulnerabilities include: 1. **CVE-2008-4250** -…
Wed 20 May· 1 article
-
Microsoft flags BitLocker flaw CVE-2026-45585, urges mitigations
Microsoft has acknowledged a BitLocker bypass flaw, tracked as CVE-2026-45585 with a CVSS of 6.8, and has issued mitigations rather than a patch. The vulnerability, known as YellowKey, affects Windows 11 versions 24H2, 25H2 and 26H1 on x64, plus Windows…
Mon 18 May· 1 article
-
MiniPlasma PoC revives CVE-2020-17103 flaw on fully patched Windows
Chaotic Eclipse has released a proof-of-concept for a new Windows privilege-escalation zero-day named MiniPlasma, claiming it works on fully patched systems and targets the cldflt[.]sys component of the Windows Cloud Files Mini Filter Driver in the…
Sat 16 May· 1 article
-
CISA flags Exchange zero day flaw CVE-2026-42897 in KEV list
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Microsoft Exchange Server flaw, tracked as CVE-2026-42897 with a CVSS score of 8.1, to its Known Exploited Vulnerabilities (KEV) catalog. Microsoft warned that threat actors are…
Fri 15 May· 2 articles
-
CVE-2026-42897: Microsoft warns of active Exchange XSS flaw
CVE-2026-42897 describes an improper neutralisation of input during web page generation (cross-site scripting) in Microsoft Exchange Server, with Microsoft warning that attackers are actively exploiting the flaw in the wild. According to Microsoft, the…
-
Windows Zero Days YellowKey & GreenPlasma Expose BitLocker Bypass
Security researchers disclosed two Windows zero-day vulnerabilities named YellowKey and GreenPlasma, affecting BitLocker and the Windows CTFMON framework, in a report published on 15 May 2026. The flaws were exposed by a security researcher known as Chaotic…
Wed 13 May· 1 article
-
Microsoft Patch Tuesday for May 2026 fix 138 bugs, some of them are alarming
Microsoft’s May 2026 Patch Tuesday fixed 138 vulnerabilities across a broad swath of the Microsoft portfolio, including Windows and its components, Office, Edge, Azure, .NET, Visual Studio, SQL Server, the Copilot products, and even the Telnet client, which…
Tue 12 May· 1 article
-
WannaCry worm spreads globally after exploiting Windows SMB flaw
WannaCry emerged on 12 May 2017, exploiting a vulnerability in the SMBv1 protocol of Microsoft Windows (CVE-2017-0144, aka EternalBlue) and was later addressed by the MS17-010 patch in March 2017. The attack spread as a worm, able to propagate autonomously…
Wed 29 Apr· 1 article
-
CISA Adds ConnectWise ScreenConnect Path Flaw and Windows Shell Bug
According to U.S. Cybersecurity and Infrastructure Security Agency (CISA), Windows Shell and ConnectWise ScreenConnect flaws have been added to the Known Exploited Vulnerabilities (KEV) catalog. The flaws are CVE-2024-1708, a ConnectWise ScreenConnect path…
Thu 23 Apr· 1 article
-
CISA urges patch Microsoft Defender flaw CVE-2026-33825 by May 6
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a flaw in Microsoft Defender to its Known Exploited Vulnerabilities (KEV) catalog, tracked as CVE-2026-33825 with a CVSS score of 7.8. The flaw can be exploited to achieve privilege…
Wed 22 Apr· 1 article
-
Microsoft issues emergency fix for ASP.NET Core SYSTEM flaw
Microsoft released out-of-band updates to address a serious ASP[.]NET Core vulnerability tracked as CVE-2026-40372 (CVSS 9.1), with a fix in ASP[.]NET Core version 10.0.7. An attacker could exploit the flaw to gain SYSTEM-level privileges, access sensitive…
Sat 18 Apr· 1 article
-
Microsoft Defender under attack as three zero-days, two of them still unpatched, enable elevated access
Attackers are exploiting three recently disclosed Microsoft Defender zero-days, code-named BlueHammer, RedSun, and UnDefend, to gain elevated privileges on compromised systems, with BlueHammer locally escalating privileges and UnDefend triggering a…
Wed 15 Apr· 2 articles
-
CISA adds old Excel RCE and SharePoint flaw to KEV list
The U.S. Cybersecurity and Infrastructure Security Agency has added two flaws to its Known Exploited Vulnerabilities catalog: CVE-2009-0238, a Microsoft Office Remote Code Execution vulnerability affecting multiple versions of Excel, and CVE-2026-32201, a…
