News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Fri 23 Oct· 1 article
-
Arista VeloCloud Orchestrators Hit by Exploited SQL Injection Flaw
Arista has disclosed CVE-2026-114625, a critical SQL injection flaw in on-prem VeloCloud Orchestrator (VCO) deployments. The vulnerability, which is being actively exploited in the wild, allows any authenticated portal user—even an Enterprise Read Only…
Thu 22 Oct· 2 articles
-
Exposed PHP2Shell tooling targets PHP 8.4, but no sites were vulnerable
SOCRadar Threat Intelligence Unit researchers found PHP2Shell exploit tooling on an attacker-controlled server whose working directory was exposed via an open, unauthenticated directory listing. The central asset is a lab-tested PHP2Shell remote code…
-
Trojanised LiteLLM Release Steals Cloud Keys on Python Startup
A new LiteLLM supply chain attack has compromised the 1.107.0 release of the open‑source LiteLLM gateway, turning it into a credential stealer. Attackers used stolen maintainer tokens to publish trojanised wheels to PyPI and poisoned Docker images, exposing…
SOCRadar
Wed 21 Oct· 2 articles
-
Weak eMudhra CA Keys Let Attackers Forge Trusted TLS Certificates
The eMudhra CA key compromise concerns eight eMudhra intermediate CA certificates in the G3 hierarchy, whose private keys were recoverable from public certificates within milliseconds. All eight keys used P-384 values below 256, including a key that was…
-
PHP2Shell Flaws Put PHP Servers at Risk of Remote Code Execution
Two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, have been named PHP2Shell. The PHP security team rated both 9.2 on CVSS v4.0, and researchers say they could allow remote code execution. The flaws were leaked on 20 October 2026, two…
Tue 20 Oct· 3 articles
-
30 Questions Help Buyers Separate Real AI Pentests From Hype
SOCRadar’s article presents a structured buyer’s guide to AI-powered pentesting tools, arguing that AI-focused products span a spectrum from fully autonomous attack orchestration to language-model–summarised vulnerability scanners. It offers a concrete…
SOCRadar -
Japan’s October Breach Wave Exposes Millions of Customer Records
SOCRadar documents a dense wave of Japanese breach disclosures that began in late September and surged through October 2026. The firm’s Dark Web News logged 134 Japan-related items in the first half of October, more than all of September (129) and at roughly…
-
AI-Driven Ransomware Campaign Targeted 62 Organisations
SOCRadar Threat Research Unit (STRU) has disclosed an AI-driven intrusion ecosystem operated by affiliates of INC Ransomware and The Gentlemen Ransomware. A publicly accessible command-and-control server exposed the operators’ AI session databases, their…
Mon 19 Oct· 3 articles
-
Drupal Patches Two Critical Flaws That Could Enable Unauthenticated Code Execution
Drupal has patched two critical remote code execution vulnerabilities—CVE-2026-108097 in the core Field UI module and CVE-2026-108099 in the contributed Entity List module. The advisories make clear that neither flaw is directly exploitable through the…
-
ConnectWise suspends cloud services after Microsoft 365 identity breach
ConnectWise reports unauthorized access to Cloud Backup identities (formerly SkyKick) tied to its Microsoft 365 integration. A vendor-controlled application credential was compromised and used to obtain Microsoft Graph tokens in multiple customer tenants,…
SOCRadar -
Hackers Claim Millions of ZoomInfo and TryCircle Records Leaked
SOCRadar’s Dark Web team flagged a string of alleged data incidents advertised across underground forums, including a purported 185 million-record ZoomInfo database sale, a claimed TryCircle customer data leak, and a supposed Vicente López municipal database…
SOCRadar
Fri 16 Oct· 1 article
-
BeyondTrust Patches Zero-Day Flaw Used to Gain Root Access
BeyondTrust disclosed CVE-2026-102764, a critical improper origin validation vulnerability (CWE-290) in its internal Remote Support messaging component. The flaw allowed remote attackers to trigger file operations without authentication or user interaction…
Thu 15 Oct· 2 articles
-
Cisco and Palo Alto Patch Exploited Flaws Enabling Root Access
Cisco and Palo Alto Networks have issued patches for two actively exploited zero-day vulnerabilities that can enable root-level code execution on security appliances. The flaws, CVE-2026-76519 and CVE-2026-0322, have been added to the US CISA Known Exploited…
-
SOCRadar brings tenant separated incident and vulnerability alerts to Splunk
SOCRadar has released two new Splunk apps aimed at MSSPs and multi-tenant environments: SOCRadar Incidents MSSP and SOCRadar Vulnerability. The release targets the friction of managing risk findings across many managed companies, providing a single input and…
SOCRadar