CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 9–13 on weekend days.

Show as table
Articles published per day
DayArticles published
Sun 11 Oct9
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Today, Sun 25 Oct9 so far
Developing
Exploited only
41 articles · 29 Jul – 22 Oct

Thu 22 Oct· 1 article

  1. APT41 Uses a BlackX UEFI Bootkit to Bypass Secure Boot in Central Asia

    Security researchers have disclosed a new firmware-based intrusion campaign attributed to APT41, in which a BlackX UEFI bootkit targets diplomatic networks in Central Asia. The operation, observed in early 2026 and detailed by Kaspersky GReAT, deploys a…

    SecurityOnlineCVE-2022-21894CVE-2022-21894

Wed 14 Oct· 3 articles

  1. Broadcom Moves VMware to Monthly Security Updates as AI Speeds Flaw Discovery

    Broadcom has announced a shift to a monthly software security update cadence for its VMware product line, citing the increasing capability of AI to identify defects as a driver for faster remediation. The move implies that organisations will need to devote…

    SecurityOnlineCVE-2026-104935CVE-2026-104935Exploited

  2. Microsoft patches Copilot flaw that could let attackers run code via files

    Microsoft has released a Patch Tuesday update to fix CVE-2026-103572, a remote code execution flaw said to affect Visual Studio Copilot and SQL Server Management Studio (SSMS). The vulnerability stems from a shared library,…

    SecurityOnlineCVE-2026-103572CVE-2026-103572

  3. Microsoft Fixes Actively Exploited Windows Flaw in Record Patch Release

    Microsoft’s October 2026 Patch Tuesday fixes a record 1,414 vulnerabilities, including 78 rated critical, making it the largest Microsoft release to date. The update slate includes three zero-day flaws, with one already being actively exploited. CISA has…

    SecurityOnlineCVE-2026-96951CVE-2026-96951Exploited

Sat 3 Oct· 1 article

  1. Microsoft Reissues Exchange Updates With New CVE-2026-96940 Flaw

    Microsoft has reissued the September 2026 security updates for Exchange Server as a V2 release, adding one new vulnerability: CVE-2026-96940. The Exchange Team says the update was published ahead of schedule and urges admins to apply it promptly. Microsoft…

    SecurityOnlineCVE-2026-96940CVE-2026-96940

Fri 25 Sep· 1 article

  1. Attackers Exploit SharePoint Flaw to Deploy Stealthy Web Shells

    Threat actors are actively targeting on-premises Microsoft SharePoint servers by exploiting the remote-code-execution vulnerability CVE-2026-65660. The flaw has a CVSSv3 score of 8.8 and affects SharePoint Server 2013, 2016, 2019 and Subscription Edition,…

    SecurityOnlineCVE-2026-65660CVE-2026-65660Exploited

Thu 24 Sep· 1 article

  1. Chinese Hackers Exploited Chrome and Windows Zero Days in Espionage Attacks

    A suspected Chinese state-sponsored espionage group tracked as UTA0565 used zero-day vulnerabilities in Google Chrome and Microsoft Windows to target Asian government bodies, think tanks and policy researchers. According to Volexity, attacks began in early…

    SecurityOnlineCVE-2026-85046CVE-2026-85046Exploited

Mon 21 Sep· 1 article

  1. NightEagle Hackers Target Russian Firms With GhostContainer Backdoor

    Kaspersky’s Global Emergency Response Team has identified a cyber-espionage campaign attributed to NightEagle, also known as APT-Q-95, targeting businesses in Russia. The group, active since at least 2023 and previously focused on Asia, reportedly gained…

    SecurityOnlineCVE-2020-0688CVE-2020-0688Exploited

Tue 15 Sep· 1 article

  1. Microsoft Fixes Windows 11 RDS Failures and CVE-2026-62721

    Microsoft has released the out-of-band Windows 11 KB5129195 update for versions 24H2 and 25H2. The update addresses instability introduced by the recent September patch, including failures affecting Remote Desktop Services (RDS). Microsoft said RDS could…

    SecurityOnlineCVE-2026-62721CVE-2026-62721

Thu 10 Sep· 1 article

  1. Chrome Zero Day Chain Targeted NGOs Before Google’s Patch Arrived

    Security researchers have traced a Chrome-focused zero-day chain used by two Chinese espionage cohorts, UTA0560 and JungleBamboo (APT31), to target NGOs and public policy institutes across borders. The attackers carried out spear-phishing campaigns…

    SecurityOnlineCVE-2026-85046CVE-2026-85046Exploited

Wed 9 Sep· 3 articles

  1. Chinese-Linked Spies Exploit Chrome and Windows Zero-Days

    Proofpoint threat researchers have tracked a new BlueMoon exploit kit used in espionage campaigns, chaining Chrome/Chromium browser flaws with a Windows kernel privilege escalation to breach targeted networks. The operation, active from late August into…

    SecurityOnlineCVE-2026-85046CVE-2026-85046Exploited

  2. CVE-2026-41870: Unauthenticated RCE in Apache Nutch

    The page reports on four critical vulnerabilities detected in various software. Key points include: 1. **CVE-2026-75650**: An Adobe Commerce and Magento vulnerability concerning improper neutralization of special template elements. 2. **CVE-2026-81963**: A…

    SecurityOnlineCVE-2026-75650CVE-2026-75650Exploited

  3. Microsoft Defender 0day PoC Exposes SYSTEM Files on Windows

    A publicly available 0day in Microsoft Defender, dubbed ShieldCrash, has been disclosed with a working PoC that can read arbitrary files as SYSTEM on all supported Windows versions. The flaw is associated with CVE-2026-69414 and follows an initial…

    SecurityOnlineCVE-2026-69414CVE-2026-69414

Tue 8 Sep· 2 articles

  1. Microsoft Patches Two Windows Zero Days Exploited in Attacks

    Microsoft’s September 2026 Patch Tuesday fixes 996 vulnerabilities, but two zero-day flaws had already been exploited in the wild. Both are Windows elevation-of-privilege issues that allow attackers to gain higher access after already compromising a…

    SecurityOnlineCVE-2026-81963CVE-2026-81963Exploited

  2. Windows HTTP.sys Flaw Enables SYSTEM Access with Public PoC

    Security researchers have disclosed full technical details and a proof‑of‑concept for CVE-2026-62735, a Windows HTTP[.]sys elevation of privilege flaw that scores 7.8 on CVSS v3. The vulnerability centres on an integer overflow in…

    SecurityOnlineCVE-2026-62735CVE-2026-62735

Mon 7 Sep· 1 article

  1. Microsoft to Block Outdated Exchange Servers from Cloud Email

    Microsoft is tightening control over outdated on‑premises Exchange servers connecting to Exchange Online, beginning in the second week of September 2026. Inbound emails from Exchange Server 2016 and 2019 via OnPremises connectors will be throttled first and…

    SecurityOnlineCVE-2026-62911CVE-2026-62911

Tue 1 Sep· 1 article

  1. Exchange flaw lets attackers run code as SYSTEM via NTLM relay.

    A critical vulnerability in Microsoft Exchange Server, tracked as CVE-2026-62911, allows local unauthenticated attackers to achieve remote code execution with SYSTEM privileges. It affects various versions of Exchange Server 2016 and 2019, prompting…

    SecurityOnlineCVE-2026-62911CVE-2026-62911

Fri 28 Aug· 1 article

  1. Windows 11 26H2 Enters Release Preview Channel

    The page reports on six active exploits detected today, detailing various vulnerabilities from CVE-2021-23758 (Ajax.NET Professional) to CVE-2019-1068 (Microsoft SQL Server). It also discusses the recent updates to Windows 11, particularly the 26H2 Release…

    SecurityOnlineCVE-2021-23758CVE-2021-23758Exploited

Thu 27 Aug· 4 articles

  1. Ajax.NET Professional3 articles this day · SecurityOnline first

    uBlock Origin v1.74.0 Chrome release to be delisted amid CVEs · Six Active Exploits Emerge as Microsoft Rebrands to AI Roadmap

    1 outletCVE-2021-23758CVE-2021-23758Exploited

  2. CISA warns of active exploits in NetScaler, SQL Server, Linux

    On August 26, 2026, CISA added six exploited vulnerabilities to its Known Exploited Vulnerabilities Catalog. This includes flaws in Citrix NetScaler, Microsoft SQL Server, and the Linux kernel, among others, all of which exhibit active exploitation in the…

    SecurityOnlineCVE-2026-8452CVE-2026-8452Exploited

Tue 25 Aug· 1 article

  1. Critical SharePoint RCE and Auth Bypass Flaws Actively Exploited

    A critical SharePoint remote code execution (RCE) vulnerability has been identified as CVE-2026-63520, alongside an authentication bypass flaw (CVE-2026-55040). Both vulnerabilities have been exploited in the wild, posing a significant threat to…

    SecurityOnlineCVE-2026-63520CVE-2026-63520Exploited

Fri 21 Aug· 1 article

  1. CVE-2026-69836 (CVSS 10): Entra ID Remote Code Execution Flaw Exploited in the Wild

    Microsoft disclosed CVE-2026-69836, a CVSS 10 remote code execution vulnerability in Entra ID, now confirmed to have been exploited in the wild. Microsoft resolved the issue server-side, requiring no action from customers. The vulnerability allows for remote…

    SecurityOnlineCVE-2026-69836CVE-2026-69836Exploited

Thu 20 Aug· 1 article

  1. Critical SCCM flaw lets users hijack systems via AdminService API

    A critical vulnerability (CVE-2026-47301) affecting Microsoft Configuration Manager (SCCM) allows an authenticated domain user to achieve SYSTEM-level code execution. The flaw, rated important with a CVSS score of 8.8, can be exploited via the AdminService…

    SecurityOnlineCVE-2026-47301CVE-2026-47301

Wed 19 Aug· 4 articles

  1. Microsoft Internet Key Exchange (IKE) Service Extensions4 articles this day · SecurityOnline first

    Google patches Android ContactsProvider2 SQLi high severity bug · Urgent Patches Address Flaws in Microsoft, Apple, IBM Db2

    1 outletCVE-2026-33824CVE-2026-33824Exploited

Tue 18 Aug· 1 article

  1. Cross Device Service flaw lets users escalate to SYSTEM via DLL

    Microsoft has addressed a significant security vulnerability, CVE-2026-66804, related to the Windows Cross Device Service, which allows ordinary users to elevate their privileges to SYSTEM status through a DLL planting exploit. The vulnerability has a CVSS…

    SecurityOnlineCVE-2026-66804CVE-2026-66804

Mon 17 Aug· 1 article

  1. Critical Metabase SQLi flaw lets attackers seize full admin control

    The weekly threat intelligence report for mid-August 2026 highlights the discovery of 3,976 new vulnerabilities, emphasizing the need for immediate patching to protect enterprise systems. Key vulnerabilities include a critical SQL injection in Metabase…

    SecurityOnlineCVE-2026-72898CVE-2026-72898Exploited

Wed 12 Aug· 5 articles

  1. CVE-2026-61515: Unauthenticated Command Injection in Puwell IP Cameras, PoC Exploit Code Publicly Disclosed

    Three critical vulnerabilities were detected today: CVE-2026-20349 (Cisco Secure Firewall), CVE-2026-68820 (Microsoft Windows), and CVE-2026-72898 (Metabase). Additionally, two serious vulnerabilities in Puwell IP cameras, CVE-2026-61514 and CVE-2026-61515,…

    SecurityOnlineCVE-2026-20349CVE-2026-20349Exploited

  2. Critical SharePoint JWT flaw lets attackers bypass authentication

    The page discusses a critical security vulnerability (CVE-2026-55040) affecting Microsoft SharePoint, enabling unauthorized users to bypass authentication by forging JSON Web Tokens (JWT). The issue has a CVSS score of 9.1, indicating its severity. Rapid7…

    SecurityOnlineCVE-2026-55040CVE-2026-55040Exploited

  3. ShieldBreak Exploit Exposes Defender Patch Flaw CVE-2026-50656

    The content discusses a new public proof-of-concept (PoC) exploit called ShieldBreak that demonstrates a vulnerability, CVE-2026-50656, in Microsoft Windows Defender. This exploit allows privilege escalation from a standard user to SYSTEM level, claiming a…

    SecurityOnlineCVE-2026-50656CVE-2026-50656

  4. Microsoft Windows Ancillary Function Driver for WinSock2 articles this day · SecurityOnline first

    Lazarus Exploits Windows Zero-Day in Operation Dream Job Attacks · Microsoft Patch Tuesday Patches Critical WinSock Exploit

    1 outletCVE-2026-68820CVE-2026-68820Exploited

Tue 11 Aug· 1 article

  1. CVE-2026-27912 flaw lets hackers reset any Windows AD password

    CVE-2026-27912, known as ResetNightmare, is a high-severity vulnerability in the Windows Kerberos Change Password protocol allowing attackers to reset any Active Directory account password without knowing the old password, potentially granting SYSTEM…

    SecurityOnlineCVE-2026-27912CVE-2026-27912

Tue 4 Aug· 1 article

  1. Public Exploit Code Released for CVE-2026-50343, a Windows InstallService Flaw That Grants SYSTEM Privileges

    A critical vulnerability, CVE-2026-50343, in Windows allows unprivileged users to escalate privileges to SYSTEM level without needing admin rights, effectively enabling them to execute code within a privileged environment. The vulnerability stems from flaws…

    SecurityOnlineCVE-2026-50343CVE-2026-50343

Wed 29 Jul· 3 articles

  1. Low priv users hijack the DCs via CVE-2026-54121 flaw

    The content discusses the vulnerability CVE-2026-54121 affecting Microsoft Active Directory Certificate Services (AD CS), which allows low-privileged domain users to impersonate a Domain Controller, leading to potential domain compromise. This vulnerability,…

    SecurityOnlineCVE-2026-54121CVE-2026-54121

  2. CVE-2026-50502: Public PoC Exploit Details Windows Event Log Remote Code Execution

    CVE-2026-50502 is a high-severity remote code execution vulnerability (CVSS 8.0) affecting various versions of Microsoft Windows 10, including multiple updates. It involves the Windows Event Log service, allowing attackers to execute code with stolen…

    SecurityOnlineCVE-2026-50502CVE-2026-50502

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device