News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Fri 16 Oct· 1 article
-
China-linked hackers exploited BeyondTrust zero-day to steal credentials
Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.
Wed 14 Oct· 7 articles
-
Ivanti VPN Zero Days Let Attackers Gain Root Access, Even When Patched
Ivanti reported that two zero-day flaws in its Ivanti Connect Secure (ICS) hardware and software were exploited in the wild, centring on a high-severity authentication bypass combined with unauthenticated remote code execution (RCE) in SSL-VPN and…
-
CISA Flags Actively Exploited Windows Flaw That Bypasses Security Protections
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Microsoft Windows Shell flaw, tracked as CVE-2026-96951, to its Known Exploited Vulnerabilities (KEV) catalog. The advisory notes that the vulnerability is a Windows Shell command…
-
CISA Urges Ivanti Users to Patch Zero Day Behind Data Theft Attacks
CISA has urged organisations to urgently update Ivanti Connect Secure (ICS) appliances to the latest version after the disclosure of a zero-day authentication bypass vulnerability, tracked as CVE-2026-104935 (CVSS 8.6). The flaw affects ICS versions…
-
Ivanti VPN Zero Days Let Hackers Gain Stealthy Root Access
Volexity reports a stealthy Ivanti Connect Secure (ICS) VPN attack that chain-exploited three zero-day vulnerabilities to achieve unauthenticated root access on a fully patched appliance running version 22.8R2.4. The exploit chain combines an authentication…
-
Microsoft Ends Windows 11 24H2 Support for Consumers in October 2026
Microsoft has announced the end of life for Windows 11 consumer editions running version 24H2, with lifecycle support terminating on 13 October 2026. The final security update for these builds (KB5127648) has already been issued, and Microsoft will stop…
-
Citrix, Fortinet and Ivanti Patch Critical Flaws, Exploited Zero Day
Security updates have addressed 29 vulnerabilities across Citrix, Fortinet, and Ivanti products, including several critical-severity flaws that could allow unauthenticated code execution, authentication bypass, DoS, or leakage of sensitive data. Citrix…
-
Broadcom Moves VMware to Monthly Security Updates as AI Speeds Flaw Discovery
Broadcom has announced a shift to a monthly software security update cadence for its VMware product line, citing the increasing capability of AI to identify defects as a driver for faster remediation. The move implies that organisations will need to devote…
Tue 13 Oct· 7 articles
-
Ivanti Patches VPN Zero Days After Attackers Steal Domain Credentials
SecurityWeek reports that Ivanti has disclosed a zero-day chain affecting its Connect Secure (ICS) VPN appliances, tracked as CVE-2026-104935, which allowed unauthenticated remote code execution with elevated privileges. The issue was exploited in the wild,…
-
CISA Flags Ivanti VPN Flaw Enabling Unauthenticated Command Execution
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog. The flaw, CVE-2026-104935, carries a CVSS of 8.6 and is described as an authentication bypass caused…
-
Ivanti VPN Zero Days Let Hackers Gain Root Access Without Logging In
An attacker chained three Ivanti Connect Secure zero-days to gain root-level access without logging in, with the exploitation observed in the wild starting on 3 October and disclosure on 13 October 2026. The first two flaws form an authentication bypass and…
-
Ivanti VPN Zero Day Enables Remote Attacks Before Patches Arrive
Ivanti Connect Secure has a high‑severity zero‑day, CVE-2026-104935, described by Ivanti as an unauthenticated authentication bypass (CWE-290) that allows remote command execution. The vulnerability, rated CVSSv3.0 8.6, affects Ivanti Connect Secure…
-
Attackers Chain Three Zero Days to Gain Root Access to Ivanti VPNs
Ivanti Connect Secure (ICS) devices were found to be exploited in a chained zero‑day sequence, beginning in early October 2026. Security firm Volexity and Ivanti report that a threat actor, tracked as UTA0576, used an authentication bypass to reach a…
-
CISA Warns Ivanti VPN Flaw Enables Unauthenticated Command Execution
CISA added CVE-2026-104935 to its Known Exploited Vulnerabilities (KEV) catalogue on 13 October 2026. The entry affects Ivanti Connect Secure and describes an authentication bypass by spoofing that lets a remote, unauthenticated attacker execute arbitrary…
-
Ivanti Connect Secure flaw bypasses authentication in active attacks
Ivanti Connect Secure has a newly disclosed vulnerability, CVE-2026-104935, which Ivanti confirms is being exploited in the wild. The flaw allows a remote, unauthenticated attacker to bypass authentication by spoofing and then execute arbitrary commands on…
No older articles match these filters.