News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Wed 14 Oct· 1 article
-
Microsoft’s record 1,413 fixes include a Windows flaw exploited to bypass security warnings
Microsoft has released its October 2026 Patch Tuesday with a record 1,413 CVE fixes across multiple products, including Windows, Office, developer tools, and SharePoint Server. Microsoft notes that 1,102 of the fixes affect Windows, with additional patches…
Fri 2 Oct· 1 article
-
Warlock Ransomware Expands SharePoint Attacks Against Critical Sectors
Warlock, a ransomware operation tied to the China-based groups Longlegs and Storm-2603, is again exploiting SharePoint vulnerabilities to target critical infrastructure, government, and educational sectors. Symantec’s assessment states that the group has…
Sun 27 Sep· 1 article
-
Attackers Exploit Patched Microsoft SharePoint Flaw to Deploy Webshells
Microsoft SharePoint vulnerability CVE-2026-65660 is being exploited in attacks, about six weeks after Microsoft issued patches and days after researchers published technical details. Microsoft fixed the flaw in its August 2026 Patch Tuesday updates and…
Fri 18 Sep· 1 article
-
Microsoft Fixes 18 Azure and Copilot Flaws, Urges Windows Update
Microsoft has released fixes for 18 vulnerabilities across its Azure cloud portfolio and Copilot-branded AI products. Most were elevation-of-privilege flaws affecting Azure ARC, Azure AI Foundry, Azure Logic Apps, Azure Billing, Azure HorizonDB, Azure Cosmos…
Sat 12 Sep· 1 article
-
Chrome Zero Days Fuel BlueMoon Exploit Kit’s Espionage Surge
BlueMoon is an exploit kit that security researchers say was rapidly adopted by multiple espionage groups in opportunistic, rushed campaigns. The China-linked Violet Typhoon (also known as APT31, JungleBamboo, TA412 and Tide Castle) first deployed BlueMoon…
Thu 10 Sep· 1 article
-
Microsoft Defender Zero Day Bypasses Patches to Expose Windows Systems
Security researchers have disclosed a new Microsoft Defender zero-day exploit, dubbed ShieldCrash, that can achieve full System privileges on fully patched Windows systems. The PoC reportedly demonstrates arbitrary file read at System level, with the…
Tue 8 Sep· 1 article
-
Microsoft Fixes 974 Flaws in Record Patch Tuesday Update
Microsoft has issued a record September Patch Tuesday, fixing 974 CVEs across its product range, including two zero-days that have seen exploitation in the wild. The first exploited zero-day, CVE-2026-85880, is a heap buffer overflow in the Windows ALPC…
Fri 4 Sep· 1 article
-
Microsoft Patches Nine Cloud Flaws as Exchange Attacks Intensify
Microsoft has issued patches for nine vulnerabilities across its cloud and productivity stack, including Entra ID, Azure Cosmos DB, Power Automate, Copilot Studio, Azure Active Directory B2C, Fabric, Azure AI Language, and Discovery Studio. The fixes were…
Fri 21 Aug· 1 article
-
Microsoft patches critical Azure, Entra ID, Exchange bugs
Microsoft has announced 22 new security updates addressing critical vulnerabilities in its products, including Microsoft Azure, Entra ID, and Exchange. The updates resolve serious issues such as elevation of privilege and remote code execution, with several…
Wed 19 Aug· 1 article
-
CISA warns of active exploits in Microsoft, VMware, Apple bugs
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning to patch four vulnerabilities in Microsoft, VMware, and Apple products that are actively being exploited. Key vulnerabilities include: 1. **CVE-2026-33824 (MS)**: A…
Thu 13 Aug· 1 article
-
ShieldBreak exploit hits Microsoft Defender via CVE-2026-50656
A security researcher known as Nightmare Eclipse released a new zero-day exploit named ShieldBreak, which allows for privilege escalation on Windows systems. This exploit specifically targets Microsoft Defender, enabling users to gain SYSTEM privileges. It…
Wed 12 Aug· 2 articles
-
SharePoint Auth Bypass Flaw CVE-2026-55040 Under Active Attack
A recently patched SharePoint vulnerability, CVE-2026-55040, is being actively exploited following the release of a proof-of-concept exploit. This vulnerability allows attackers to bypass authentication and potentially access or modify files without…
-
Lazarus uses fake job offers to exploit Windows CVE-2026-68820
North Korean hackers, attributed to the Lazarus Group, are exploiting a newly patched Windows zero-day vulnerability (CVE-2026-68820) to infiltrate systems, targeting the defense sector through fake job offers. This campaign, part of 'Operation Dream Job,'…
Tue 11 Aug· 1 article
-
Microsoft Patch Tuesday Fixes Zero Day Winsock Flaw CVE-2026-68820
Microsoft's August 2026 Patch Tuesday addressed 421 CVEs, including a high-severity zero-day vulnerability (CVE-2026-68820) in WinSock's Ancillary Function Driver, allowing privilege escalation without user interaction. Other noteworthy vulnerabilities…
Fri 7 Aug· 1 article
-
Microsoft, Apple issue patches for critical RCE and auth bypass
Microsoft and Apple recently announced security updates addressing multiple vulnerabilities in their products. Microsoft led the charge with over a dozen patches, including critical remote code execution (RCE) issues rated 10/10, specifically CVE-2026-63508,…
Wed 22 Jul· 1 article
-
Fourth SharePoint Vulnerability Exploited in Past Month’s Wave of Attacks
A new SharePoint vulnerability, CVE-2026-50522, has been found actively exploited in the wild, marking the fourth such exploitation reported in a month. Microsoft released a patch for this critical remote code execution flaw on July 14. Threat intelligence…
Fri 17 Jul· 1 article
-
Critical SharePoint Flaw Exploited, CISA Urges Immediate Patching
The recent cybersecurity advisory warns of a critical remote code execution vulnerability in Microsoft SharePoint, tracked as CVE-2026-58644, which has been exploited by threat actors. The flaw, associated with deserialization of untrusted data, allows…
Wed 15 Jul· 1 article
-
CISA urges swift patching of SharePoint after zero day exploits
The US Cybersecurity and Infrastructure Security Agency (CISA) has urged immediate strengthening of Microsoft SharePoint servers following the discovery of zero-day vulnerabilities, notably CVE-2026-56164, which allows remote privilege escalation without…
Tue 14 Jul· 1 article
-
Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days
Microsoft announced its July 2026 Patch Tuesday, addressing 622 vulnerabilities, including two critical zero-day exploits in Active Directory (CVE-2026-56155) and SharePoint Server (CVE-2026-56164). These flaws could lead to privilege escalation attacks.…
Thu 9 Jul· 1 article
-
Microsoft patches privilege escalation flaw CVE-2026-50
Microsoft has released patches for a vulnerability in its Defender software called RoguePlanet, which was first publicly exploited by a researcher known as Nightmare Eclipse. This vulnerability, tracked as CVE-2026-50656, allows privilege escalation due to a…
Thu 2 Jul· 1 article
-
CISA warns of active SharePoint flaw CVE-2026-45659
CISA has warned about a high-severity vulnerability (CVE-2026-45659) in Microsoft SharePoint Server that is being actively exploited. This security flaw, allowing authenticated attackers with minimal permissions to execute arbitrary code, has a CVSS score of…
Tue 30 Jun· 1 article
-
BlueHammer Defender Flaw Linked to Ransomware Exploits
A Microsoft Defender vulnerability, known as BlueHammer (CVE-2026-33825), is currently being exploited in ransomware attacks, as reported by CISA. This vulnerability was publicly disclosed on April 2, with Microsoft issuing patches on April 14. Despite…
Wed 17 Jun· 1 article
-
Microsoft Defender bug CVE-2026-50656 allows admin takeover
Microsoft recently acknowledged a vulnerability in its Defender software, tracked as CVE-2026-50656, which could allow for privilege escalation, with a CVSS score of 7.8. This vulnerability, called 'RoguePlanet', was disclosed by researcher Nightmare…
Thu 11 Jun· 1 article
-
Microsoft fixes active Exchange bug CVE-2026-42897.
Microsoft released Patch Tuesday updates that address an actively exploited vulnerability in Exchange Server, tracked as CVE-2026-42897. This vulnerability is a spoofing and XSS flaw affecting Exchange Server Subscription Edition and versions 2016 and 2019.…
Tue 9 Jun· 1 article
-
Microsoft fixes 200 bugs in June, none exploited, dozens critical
Microsoft's June 2026 Patch Tuesday updates addressed approximately 200 vulnerabilities in its products, none of which were exploited in the wild prior to patching. Three publicly disclosed vulnerabilities include CVE-2026-49160 (a DoS issue related to…
Mon 1 Jun· 1 article
-
Belgium flags active exploitation of CVE-2026-41089 Netlogon flaw
The Centre for Cybersecurity Belgium (CCB) issued a warning that threat actors are exploiting a critical-severity Windows Netlogon vulnerability, tracked as CVE-2026-41089, which carries a CVSS score of 9.8. This security flaw, disclosed on May 12 during…
Thu 21 May· 1 article
-
Microsoft fixes two zero day Defender bugs under active attack
Microsoft has released patches for two critical vulnerabilities in its Defender software, labeled CVE-2026-41091 and CVE-2026-45498, which have been exploited in the wild as zero-days. CVE-2026-41091, rated at 7.8 on the CVSS scale, allows local privilege…
Wed 20 May· 1 article
-
Microsoft Rolls Out Mitigations for ‘YellowKey’ BitLocker Bypass
Microsoft has rolled out mitigations for YellowKey, a recently disclosed zero-day vulnerability leading to a BitLocker bypass, now tracked as CVE-2026-45585 with a CVSS of 6.8. The flaw can be triggered by an attacker with physical access using a USB drive…
Mon 18 May· 1 article
-
MiniPlasma exploit revives Windows privilege flaw CVE-2020-17103
SecurityWeek reports that a researcher has released MiniPlasma, an exploit targeting CVE-2020-17103, a privilege-escalation flaw in the Windows Cloud Filter driver disclosed in 2020. The CVE, tracked with a CVSS score of 7.0, was addressed by Microsoft as…
Fri 15 May· 1 article
-
Microsoft warns of zero day Exchange flaw CVE-2026-42897
According to Microsoft, a newly disclosed zero-day vulnerability in Exchange Server, tracked as CVE-2026-42897, has been exploited in attacks and is described as a spoofing and cross-site scripting issue affecting Exchange Server Subscription Edition, 2016,…
Wed 13 May· 1 article
-
Attackers can exploit CVE-2026-40361 via zero click Outlook flaw
Microsoft has patched a critical zero-click Outlook vulnerability, tracked as CVE-2026-40361, described by Microsoft as a remote code execution flaw affecting Word. The flaw, a zero-click use-after-free, can be exploited to target Outlook users in an…
Tue 12 May· 1 article
-
Microsoft Patches 137 Vulnerabilities
On Tuesday, Microsoft released patches for 137 vulnerabilities in its products, with none reported as actively exploited. Notably, CVE-2026-41103 in the Microsoft SSO Plugin and high-severity flaws in Windows Remote Desktop, among others, have been flagged…
Mon 27 Apr· 1 article
-
APT28 exploits Windows SmartScreen gap for zero click LNK attacks
SecurityWeek reports that an incomplete patch for a Windows SmartScreen and Windows Shell security prompts bypass opened the door to zero-click attacks, with researchers tracing the issue to CVE-2026-21510, which was patched in February and could enable…
Thu 23 Apr· 2 articles
-
Chinese firm claims AI finds nearly half of Tianfu Cup flaws
A Chinese cybersecurity firm has claimed AI-driven vulnerability discovery capabilities that approach the scale of those attributed to Anthropic’s Claude Mythos, according to Eugenio Benincasa, an ETH Zurich cybersecurity researcher focusing on China. 360…
-
Recent Microsoft Defender Vulnerability Exploited as Zero-Day
SecurityWeek reports that a recently disclosed privilege escalation vulnerability in Microsoft Defender has been exploited in the wild as a zero-day using publicly available PoC code, tracked as CVE-2026-33825 with a CVSS of 7.8. Patched on 14 April, the…
Tue 14 Apr· 2 articles
-
Microsoft patches SharePoint zero day CVE-2026-32201 in the wild
SecurityWeek reports that Microsoft’s April 2026 Patch Tuesday fixes 165 vulnerabilities, including a SharePoint Server zero-day tracked as CVE-2026-32201 that has been exploited in the wild and is described as a spoofing issue with a CVSS score of 6.5.…
-
Organizations Warned of Exploited Windows, Adobe Acrobat Vulnerabilities
According to CISA, on 14 April 2026 seven vulnerabilities were added to its Known Exploited Vulnerabilities (KEV) catalog, including two Windows flaws. The first Windows defect is CVE-2023-36424, described as a common log file driver issue that could lead to…
Mon 23 Mar· 1 article
-
M-Trends 2026: Initial Access Handoff Shrinks From Hours to 22 Seconds
According to Google, the M-Trends 2026 report is based on information from its Threat Intelligence Group and more than 500,000 hours of Mandiant incident investigations conducted in 2025. One of the standout findings is that the time from initial access to…
Thu 19 Mar· 1 article
-
CISA Warns of Attacks Exploiting Recent SharePoint Vulnerability
According to CISA, a recently patched Microsoft SharePoint remote code execution vulnerability, CVE-2026-20963, has been exploited in the wild. Microsoft outlined the flaw as a critical RCE (CVSS 9.8) enabled by deserialisation of untrusted data and noted…
Fri 13 Feb· 1 article
-
CISA Warns of Exploited SolarWinds, Notepad++, Microsoft Vulnerabilities
According to CISA, recently disclosed vulnerabilities affecting SolarWinds, Notepad++, Apple and Microsoft have been exploited in the wild, with SolarWinds CVE-2025-40536 described as a security control bypass in Web Help Desk that could allow…