News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Fri 23 Oct· 3 articles
-
INC Ransomware Exposed Using AI and Custom Malware Against Victims
In late September 2026, security researchers uncovered seven INC Ransomware command servers that exposed AI-driven activity and bespoke malware used by affiliates of the group. The exposed AI workbench contained 8,257 messages across 133 OpenCode sessions…
-
FortiSIEM flaw lets unauthenticated attackers execute code as admins
FortiSIEM has a critical unauthenticated remote code execution vulnerability, tracked as CVE-2026-106173. A technical deep dive by Horizon3 detailed a gRPC path traversal flaw that enables an unauthenticated attacker to write files and execute code. The PoC…
-
Hackers Steal 70,000 Credentials in Fortinet and Palo Alto Attacks
Group-IB and NyxLab have uncovered a widespread campaign linked to an operator known as “k0t” that targets FortiGate, FortiWeb and Palo Alto GlobalProtect deployments. Launched largely between February and June 2026, the operation uses bulk asset discovery…
Fri 16 Oct· 1 article
-
Espionage Group Exploits WinRAR Flaw to Target CIS Governments
Security researchers have publicised an active espionage campaign attributed to the UAT-6275 group (also tracked as TAG-193) targeting CIS governments and allied institutions. The campaigns ran from June 2025 to August 2026, culminating in four distinct…
Thu 15 Oct· 1 article
-
Hackers Used FortiManager Flaws to Compromise 500 Firewalls
In September 2024, threat cluster CL-STA-0954, tracked by Mandiant as UNC5820 and attributed to Unit 42, breached a telecommunications managed service provider by exploiting Fortinet’s FortiJump vulnerability, CVE-2024-47575. The attackers gained access via…
Tue 13 Oct· 1 article
-
Fortinet Patches Critical Flaws Enabling Unauthenticated Remote Attacks
Fortinet has released a set of patches addressing 13 vulnerabilities across eight product lines, issued on 13 October 2026. The most serious flaws are two unauthenticated, remote-exploitation risks: an authentication bypass in FortiSandbox (CVE-2026-107656)…
Mon 12 Oct· 1 article
-
Actively Exploited Vulnerabilities Jump to 100 in Q3 2026
Daily CyberSecurity’s Q3 2026 CVE report tracks every entry CISA added to the Known Exploited Vulnerabilities (KEV) catalog between 1 July and 30 September 2026. In this quarter, 100 actively exploited vulnerabilities were added, up from 75 in Q2, with…
Mon 5 Oct· 1 article
-
Seven Newly Exploited Flaws Put Cisco, MediaWiki and Zammad at Risk
Researchers tracked 2,652 new CVEs between 28 September and 4 October 2026, with seven flaws showing confirmed exploitation. Daily Cybersecurity (DC) flagged six exploited flaws, and six appeared in CISA’s Known Exploited Vulnerabilities (KEV) catalog. Five…
Thu 1 Oct· 1 article
-
FortiMail Flaw Exploited in the Wild, Exposing Corporate Networks
Fortinet’s FortiMail appliance is actively exploited due to a path traversal flaw tracked as CVE-2026-104286, rated CVSS 9.8. The vulnerability arises from a combination of path traversal (CWE-22) and poor handling of NULL bytes (CWE-158), enabling…
Mon 14 Sep· 1 article
-
Russian Hackers Exploit Fortinet Flaw to Deploy PivotC2 Trojan
The SOCRadar Threat Research Unit says a suspected Russian-speaking cybercrime operator was actively targeting Fortinet edge devices in September 2026. More than 30,000 IP addresses were targeted, with 178 devices confirmed compromised, primarily in the…
Tue 8 Sep· 1 article
-
Fortinet Patches Flaws Let Attackers Bypass Auth and Reroute Traffic
Fortinet has disclosed three high-severity vulnerabilities affecting FortiMonitor OnSight, FortiSandbox, and FortiPAM, potentially allowing unauthorized access to sensitive corporate data and internal systems. The FortiMonitor flaw involves a static key…
Fri 4 Sep· 1 article
-
Gentlemen Ransomware Storms Networks Through Fortinet VPNs
The Gentlemen ransomware operates as a ransomware-as-a-service under the GOLD SHERWOOD banner, with affiliates handling data theft, defence disruption and rapid encryption. Sophos Counter Threat Unit confirms the operation, noting a repeatable affiliate…
Mon 27 Jul· 1 article
-
CISA adds Arista VeloCloud RCE and Fortinet FortiOS bypass to KEV
On July 27, 2026, CISA added two known exploited vulnerabilities to their KEV list: a critical remote code execution (RCE) flaw in Arista VeloCloud and a persistence bypass in FortiOS. These vulnerabilities are identified as CVE-2026-16812 (CVSS 10.0) and…
Sat 18 Jul· 1 article
-
Ubuntu Pro Client Flaw CVE-2026-11386 Allows Arbitrary Code Execution With Root Privileges
The article discusses a critical vulnerability (CVE-2026-11386) in the Ubuntu Pro Client, reported on July 16, 2026, by Frederick Jerusha. This flaw allows arbitrary code execution with root privileges, scoring 9.0 on the CVSS scale. It affects multiple…
Fri 17 Jul· 2 articles
-
Microsoft SharePoint2 articles this day · SecurityOnline first
292 Fake GitHub Repositories Deliver BoryptGrab Infostealer to Windows Users · CISA orders urgent patches for SharePoint, FortiSandbox flaws
-
292 Fake GitHub Repositories Deliver BoryptGrab Infostealer to Windows Users
Today's critical security alert reveals three active exploits: CVE-2026-58644 related to Microsoft SharePoint, and two CVE entries (CVE-2026-25089 and CVE-2026-39808) concerning Fortinet FortiSandbox command injection vulnerabilities. An unattributed…
-
CISA orders urgent patches for SharePoint, FortiSandbox flaws
CISA has added three vulnerabilities to its Known Exploited Vulnerabilities catalog as of July 16, 2026. These include two critical vulnerabilities affecting Fortinet FortiSandbox and one affecting Microsoft SharePoint. The federal agencies are required to…
-
Thu 16 Jul· 1 article
-
Red Hat OpenShift AI flaw lets attackers read local files
Three critical vulnerabilities have been identified: CVE-2026-58644 in Microsoft SharePoint, and two instances of CVE-2026-25089 affecting Fortinet FortiSandbox, which involve command injection risks. Notably, Red Hat has reported a critical flaw in Red Hat…
Wed 10 Jun· 1 article
-
FortiSandbox flaw CVE-2026-25089 lets attackers run commands
The content discusses a critical security vulnerability tracked as CVE-2026-25089 affecting the Fortinet ecosystem, specifically the FortiSandbox. This vulnerability allows unauthenticated attackers to execute commands using specially crafted HTTP requests,…
Thu 28 May· 1 article
-
FortiClient EMS flaw used to drop EKZ Infostealer via fake updates
The article discusses a critical cybersecurity threat targeting corporate infrastructure through a FortiClient EMS exploitation campaign. It highlights three active vulnerabilities identified today, including CVE-2026-48027, CVE-2026-45321, and…
Mon 9 Feb· 1 article
-
Endpoint Exposed: Critical FortiClient EMS Flaw (CVSS 9.1) Allows Unauthenticated RCE
Fortinet has issued a high-priority advisory for FortiClient Enterprise Management Server (EMS) warning of a critical SQL injection vulnerability that could allow attackers to execute arbitrary code without logging in. Tracked as CVE-2026-21643, the flaw…
Wed 28 Jan· 1 article
-
Under Attack: Critical Fortinet Auth Bypass (CVE-2026-24858) Exploited in the Wild
Fortinet has issued an urgent warning about a critical authentication bypass flaw in its core network platforms, including FortiOS, FortiManager and FortiAnalyzer, tracked as CVE-2026-24858 with a near-maximum CVSS score of 9.4. According to the security…
Fri 23 Jan· 1 article
-
“New” Path of Attack: Fully Upgraded Fortinet Devices Hit by SSO Exploits
Fortinet is investigating a new wave of attacks on FortiGate devices that have already been patched against known vulnerabilities, with threat actors apparently exploiting a “new attack path” that defeats current defences. The exploits target CVE-2025-59718…
No older articles match these filters.