News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Tue 20 Oct· 1 article
-
APT28 Breaches NATO Naval Shipbuilder and Steals Credentials in Week-Long Intrusion
The Hacker News reports that the Russia-linked APT28 group, also known as BlueDelta, Fancy Bear or Forest Blizzard, has been attributed by Symantec Threat Hunter Team (Swallowtail) with breaching multiple NATO-related targets, including a naval shipbuilder…
Wed 14 Oct· 2 articles
-
Windows Defender flaw let attackers bypass a protected enclave
Security researchers demonstrated a local, sandbox-bypassable bug inside a Windows protected enclave used by Defender SmartScreen’s Enhanced Phishing Protection. The flaw, tracked as CVE-2026-83498, existed in the SFAPE[.]dll component that runs inside a VBS…
-
Microsoft patches 1,413 flaws as hackers exploit Windows bug
Microsoft has released a record-breaking Patch Tuesday, delivering fixes for 1,413 vulnerabilities across Windows, Office, Developer Tools, SharePoint Server, and SQL Server. The update slate includes 1,102 Windows flaws, 134 in Office, 61 in Developer…
Mon 5 Oct· 1 article
-
Microsoft Patches Exchange Flaw That Exposes Colleagues’ Mailboxes
Microsoft has released out-of-band security updates for Microsoft Exchange Server to fix a high-severity vulnerability that could allow an authenticated attacker to escalate privileges and read other users’ mail within the same organisation. The flaw is…
Wed 9 Sep· 3 articles
-
Chrome Zero-Day Chain BlueMoon Drops Espionage Backdoors on Windows
Four espionage-linked clusters are openly deploying a previously undocumented Chrome/Windows exploit chain, dubbed BlueMoon, within days of each other. The first attribution goes to APT31 (China-aligned) on 28 August 2026, with subsequent activity from other…
-
Microsoft Defender Zero Day Bypasses Patch to Read Windows Files as SYSTEM
A security researcher going by Chaotic Eclipse has released a proof-of-concept demonstrating a new zero-day in Microsoft Defender, named ShieldCrash. The PoC suggests it bypasses the previously patched ShieldBreak vulnerability, CVE-2026-69414 (CVSS 7.8), by…
-
Microsoft Patches 974 Flaws as Two Windows Zero Days Exploited
Microsoft’s September Patch Tuesday set a new record, with fixes for 974 vulnerabilities across its software stack, including two flaws that were already being exploited in the wild. The breakdown cited by Microsoft shows 723 in Windows, 111 in Office and…
Tue 21 Jul· 1 article
-
SharePoint flaw CVE-2026-50522 under active attack after PoC leak
The article addresses the critical security vulnerability in SharePoint identified as CVE-2026-50522, which is currently being exploited. A proof of concept (PoC) has been made public, escalating the urgency for organizations to patch this flaw to prevent…
Fri 17 Jul· 1 article
-
CISA Adds SharePoint Zero Day Exploit CVE-2026-58644 to KEV Catalog
CISA has added the exploited SharePoint RCE zero-day vulnerability, identified as CVE-2026-58644, to its Known Exploited Vulnerabilities (KEV) catalog. This move emphasizes heightened concerns regarding cybersecurity threats related to Microsoft SharePoint,…
Thu 2 Jul· 1 article
-
SharePoint CVE-2026-45659 added to CISA KEV list amid exploits
The article discusses the recent addition of the SharePoint Remote Code Execution (RCE) vulnerability, identified as CVE-2026-45659, to the Cybersecurity and Infrastructure Security Agency's (CISA) Known Exploited Vulnerabilities (KEV) Catalog due to ongoing…
Tue 26 May· 1 article
-
Microsoft patches critical SharePoint RCE flaw CVE-2026-45659
Microsoft has patched a critical remote code execution vulnerability (CVE-2026-45659) affecting all SharePoint Server versions. This flaw could allow attackers to take complete control of affected systems. The patch is vital for organizations using…
Wed 20 May· 1 article
-
Microsoft fixes BitLocker bypass YellowKey CVE-2026-45585
Microsoft on Tuesday released a mitigation for a BitLocker bypass vulnerability named YellowKey, tracked as CVE-2026-45585, after its public disclosure last week. According to Microsoft, the zero‑day flaw carries a CVSS of 6.8 and is described as a BitLocker…
Mon 18 May· 2 articles
-
Microsoft Exchange zero day bug exploited in the wild
The Hacker News’ weekly recap for 18 May 2026 surveys a flurry of cyber incidents from Exchange 0‑day exploits to a worm propagating through npm packages. It flags On‑Prem Microsoft Exchange Server CVE-2026-42897 as being exploited in the wild, described as…
-
MiniPlasma PoC reveals unpatched Windows privilege escalation flaw
Chaotic Eclipse has released a PoC for a Windows privilege escalation flaw codenamed MiniPlasma, which targets cldflt[.]sys, the Windows Cloud Files Mini Filter Driver, in a routine called HsmOsBlockPlaceholderAccess and can grant attackers SYSTEM privileges…
Fri 15 May· 1 article
-
Microsoft patches Exchange Server XSS spoof flaw CVE-2026-42897
On 15 May 2026 The Hacker News reported that Microsoft has disclosed a new vulnerability in on‑premise versions of Exchange Server, tracked as CVE-2026-42897 (CVSS 8.1), described as a cross-site scripting spoofing flaw in the web page generation process.…
Thu 14 May· 1 article
-
Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation
An anonymous security researcher has disclosed two new zero-days affecting Windows, one a BitLocker bypass named YellowKey and the other a privilege-escalation flaw tied to Windows Collaborative Translation Framework (CTFMON) called GreenPlasma. YellowKey…
Wed 13 May· 2 articles
-
Microsoft’s AI Tool MDASH Finds Two Critical Windows Zero Days
Microsoft has unveiled MDASH, a multi-model agentic scanning harness designed to autonomously discover, validate, and prove exploitable defects in complex codebases like Windows, and it is being tested by some customers in a limited private preview. MDASH…
-
Microsoft fixes 138 bugs, flags critical DNS heap overflow
Microsoft on Tuesday patched 138 security vulnerabilities across its product portfolio, with 30 rated Critical, 104 Important, three Moderate and one Low. Of these, 61 are privilege escalation bugs and 32 are remote code execution flaws, including…
Wed 29 Apr· 1 article
-
CISA Flags Actively Exploited CVE-2024-1708 and Windows Flaw
According to CISA, the U.S. agency added two actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog, affecting ConnectWise ScreenConnect and Microsoft Windows, based on evidence of active exploitation. CVE-2024-1708 is a path…
Tue 28 Apr· 1 article
-
Microsoft Warns of Active Exploit in CVE-2026-32202 Spoof Flaw
Microsoft has revised its advisory to confirm that CVE-2026-32202, a spoofing vulnerability in Windows Shell, has been actively exploited in the wild and was addressed as part this month’s Patch Tuesday. The flaw (CVSS 4.3) could let an attacker access…
Wed 22 Apr· 1 article
-
Microsoft fixes ASP.NET Core privilege escape CVE-2026-40372
Microsoft has released out-of-band updates for ASP[.]NET Core to fix a privilege-escalation vulnerability tracked as CVE-2026-40372, which Microsoft says could allow an attacker to gain SYSTEM privileges over a network. The flaw has a CVSS score of 9.1 out…
Wed 15 Apr· 2 articles
-
Exploiters target SAP SQLi and Adobe zero day flaws in April
April’s Patch Tuesday fixes a string of critical flaws across SAP, Adobe, Microsoft, Fortinet and more, led by an SQL injection flaw in SAP Business Planning and Consolidation and SAP Business Warehouse (CVE-2026-27681, CVSS 9.9) that could allow arbitrary…
-
Microsoft patches 169 flaws, fixes exploited SharePoint bug
Microsoft on Tuesday released patches to address a record 169 security flaws across its product portfolio, including one actively exploited in the wild. Of these, 157 are rated Important, eight Critical, three Moderate and one Low, with the flaws comprising…
Tue 14 Apr· 1 article
-
CISA adds six KEV flaws amid active Fortinet exploits
According to The U.S. Cybersecurity and Infrastructure Security Agency (CISA), six vulnerabilities have been added to the Known Exploited Vulnerabilities (KEV) catalog, with evidence of active exploitation cited. The list includes CVE-2026-21643, a…
Wed 8 Apr· 1 article
-
APT28 Deploys New PRISMEX Malware Against Ukraine and NATO Allies
The Russian threat actor known as APT28, also called Forest Blizzard and Pawn Storm, has been linked to a spear‑phishing campaign targeting Ukraine and NATO allies to deploy a previously undocumented malware suite named PRISMEX. According to Trend Micro…
Tue 7 Apr· 1 article
-
China linked Medusa gang uses zero days to hit UK health, finance
A China-based threat actor linked to Medusa ransomware has been tied to weaponising a mix of zero-day and N-day vulnerabilities to run high-velocity attacks on internet-facing assets. According to Microsoft Threat Intelligence, the group’s rapid tempo and…
Thu 19 Mar· 1 article
-
CISA Warns of Zimbra, SharePoint Flaw Exploits; Cisco Zero-Day Hit in Ransomware Attacks
CISA has urged government agencies to patch two actively publicized flaws in the Zimbra Collaboration Suite and Microsoft Office SharePoint, noting they have been exploited in the wild. The vulnerabilities are CVE-2025-66376, a stored cross-site scripting…
Tue 10 Mar· 1 article
-
SharePoint CVE-2025-53770 highlights value of shrinking exposure
According to Intruder's Head of Security, you cannot control when the next critical vulnerability drops, but you can manage how much of your environment is exposed when it does. The piece notes that for serious vulnerabilities, disclosure to exploitation can…
Mon 2 Mar· 1 article
-
MSHTML CVE-2026-21513 exploited by APT28; patch issued
APT28 has been tied to CVE-2026-21513, a high-severity MSHTML vulnerability that bypasses security features and was patched during February 2026 Patch Tuesday. According to Microsoft, the flaw allows an unauthorised attacker to bypass a security feature over…
Wed 18 Feb· 1 article
-
CISA Flags Four Security Flaws Under Active Exploitation in Latest KEV Update
According to CISA, four security flaws have been added to its Known Exploited Vulnerabilities catalog, with active exploitation evidenced in the wild. The quartet comprises CVE-2026-2441, a use-after-free vulnerability in Google Chrome with a CVSS score of…
Fri 13 Feb· 1 article
-
Researchers Observe In-the-Wild Exploitation of BeyondTrust CVSS 9.9 Vulnerability
According to watchTowr, threat actors are already exploiting a recently disclosed critical flaw in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) with CVE-2026-1731 (CVSS 9.9), enabling unauthenticated remote code execution. They observed…
Tue 3 Feb· 1 article
-
APT28 Uses Microsoft Office CVE-2026-21509 in Espionage-Focused Malware Attacks
According to The Hacker News, the Russia-linked threat actor APT28 (aka UAC-0001) has been linked to attacks exploiting Microsoft Office CVE-2026-21509 as part of Operation Neusploit. Zscaler ThreatLabz observed the group weaponising the flaw on 29 January…
Tue 27 Jan· 1 article
-
Microsoft Office Zero-Day (CVE-2026-21509) - Emergency Patch Issued for Active Exploitation
Microsoft on Monday issued out-of-band security patches for a high-severity Microsoft Office zero-day vulnerability exploited in attacks, tracked as CVE-2026-21509 with a CVSS of 7.8. The vulnerability is described as a security feature bypass in Microsoft…
No older articles match these filters.