News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Fri 23 Oct· 2 articles
-
AI Agents Power Ransomware Affiliates’ Attacks on Edge Devices
Cybersecurity researchers have uncovered an AI-driven intrusion ecosystem operated by affiliates of the INC and The Gentlemen ransomware groups. Central to the operation is an Autonomous Red Team Kill Chain Framework called Phantom, used in live operations…
-
Hackers Target Exposed Fortinet and Palo Alto Firewalls in Global Campaign
Cybersecurity researchers have detailed a large-scale campaign that targeted exposed network edge devices, including Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls. The joint investigation by Group-IB and NyxLab notes that operators in the…
Tue 20 Oct· 1 article
-
FortiSIEM flaw lets unauthenticated attackers execute code remotely
Fortinet’s FortiSIEM has a newly publicised vulnerability, tracked as CVE-2026-106173, labelled a critical path traversal flaw that allows unauthenticated remote code execution. Fortinet’s advisory puts the CVSS at 9.4 and notes patches were released last…
Fri 16 Oct· 1 article
-
Fortinet flaw lets stealthy PEERSTITCH malware hijack firewall processes
Security researchers say attackers leveraged Fortinet FortiOS vulnerability CVE-2025-61624 to deploy a memory-resident ARM64 malware named PEERSTITCH. The flaw is a path traversal bug in the FortiOS command line interpreter that could let a privileged…
Thu 15 Oct· 1 article
-
Silent Lynx Exploits WinRAR Flaw in Attacks on CIS Governments
Silent Lynx has been linked to a new wave of attacks against government organisations across the CIS, with activity spanning from June 2025 to August 2026. The group employs four parallel infection chains that hinge on macro-enabled Office documents, PS2EXE…
Fri 2 Oct· 1 article
-
Fortinet FortiMail Zero Day Exploited in Attacks, CISA Warns
Fortinet has disclosed a critical zero-day affecting Fortinet FortiMail that has been observed being exploited in the wild. The flaw, tracked as CVE-2026-104286 with a CVSS score of 9.8, allows unauthenticated attackers to write arbitrary files on the…
Thu 10 Sep· 1 article
-
CISA Flags Cisco, Citrix and Fortinet Flaws Under Active Attack
CISA has added three actively exploited flaws to the Known Exploited Vulnerabilities (KEV) catalog, affecting Cisco, Citrix, and Fortinet products, with a deadline of 12 September 2026 for Federal Civilian Executive Branch (FCEB) agencies to apply patches.…
Mon 18 May· 1 article
-
Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation Flaws
Ivanti, Fortinet, SAP, VMware, and n8n have all released security fixes for a range of flaws that could allow unauthenticated attackers to read data, execute code or bypass authentication. The notable listing starts with Ivanti Xtraction CVE-2026-8043 (CVSS…
Wed 15 Apr· 1 article
-
Exploiters target SAP SQLi and Adobe zero day flaws in April
April’s Patch Tuesday fixes a string of critical flaws across SAP, Adobe, Microsoft, Fortinet and more, led by an SQL injection flaw in SAP Business Planning and Consolidation and SAP Business Warehouse (CVE-2026-27681, CVSS 9.9) that could allow arbitrary…
Tue 14 Apr· 1 article
-
CISA adds six KEV flaws amid active Fortinet exploits
According to The U.S. Cybersecurity and Infrastructure Security Agency (CISA), six vulnerabilities have been added to the Known Exploited Vulnerabilities (KEV) catalog, with evidence of active exploitation cited. The list includes CVE-2026-21643, a…
Sun 5 Apr· 1 article
-
Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS
Fortinet has released out-of-band patches for a critical flaw in FortiClient EMS that has been exploited in the wild. The vulnerability, tracked as CVE-2026-35616 (CVSS 9.1), is described as a pre-authentication API access bypass leading to privilege…
Thu 19 Mar· 1 article
-
ThreatsDay Bulletin: FortiGate RaaS, Citrix Exploits, MCP Abuse, LiveChat Phish & More
ThreatsDay Bulletin revisits FortiGate RaaS activity, led by The Gentlemen, a nascent ransomware-as-a-service (RaaS) operation that allegedly uses CVE-2024-55591, a critical FortiOS/FortiProxy authentication bypass, for initial access. According to Group-IB,…
Tue 10 Feb· 1 article
-
Fortinet Patches Critical SQLi Flaw Enabling Unauthenticated Code Execution
Fortinet has released security updates to address a critical flaw in FortiClientEMS that could allow unauthenticated code execution. The vulnerability is tracked as CVE-2026-21643 and carries a CVSS score of 9.1/10. According to Fortinet, it involves…
Wed 28 Jan· 1 article
-
Fortinet Patches CVE-2026-24858 After Active FortiOS SSO Exploitation Detected
Fortinet has begun releasing security updates to address CVE-2026-24858, a critical authentication bypass in FortiOS SSO that is also affecting FortiManager and FortiAnalyzer, with Fortinet noting the flaw has been under active exploitation in the wild. The…
Mon 26 Jan· 1 article
-
⚡ Weekly Recap: Firewall Flaws, AI-Built Malware, Browser Traps, Critical CVEs & More
The weekly recap paints a picture of risk moving into everyday tools, with Fortinet confirming activity around a FortiCloud SSO authentication bypass on fully patched FortiGate firewalls, tied to an incomplete patch for CVE-2025-59718 and CVE-2025-59719.…
Fri 23 Jan· 1 article
-
Fortinet Confirms Active FortiCloud SSO Bypass on Fully Patched FortiGate Firewalls
Fortinet has officially confirmed that it is working to fully plug a FortiCloud SSO authentication bypass vulnerability after reports of renewed exploitation on fully patched FortiGate firewalls. In a Thursday post, Fortinet Chief Information Security…
No older articles match these filters.