News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 9 so far |
Thu 22 Oct· 2 articles
-
Microsoft Windows 10 Version 18092 articles this day · securelist.com first
APT41 Uses a BlackX UEFI Bootkit to Bypass Secure Boot in Central Asia · BlackX UEFI bootkit targets Central Asian diplomats via Secure Boot flaw
-
APT41 Uses a BlackX UEFI Bootkit to Bypass Secure Boot in Central Asia
Security researchers have disclosed a new firmware-based intrusion campaign attributed to APT41, in which a BlackX UEFI bootkit targets diplomatic networks in Central Asia. The operation, observed in early 2026 and detailed by Kaspersky GReAT, deploys a…
-
BlackX UEFI bootkit targets Central Asian diplomats via Secure Boot flaw
Kaspersky Securelist reveals that in early 2026 an APT campaign targeting diplomatic organisations in Tajikistan, Uzbekistan and Turkmenistan employed a UEFI bootkit named BlackX, closely resembling the BlackLotus malware. The attackers gained initial access…
-
Tue 20 Oct· 1 article
-
APT28 Breaches NATO Naval Shipbuilder and Steals Credentials in Week-Long Intrusion
The Hacker News reports that the Russia-linked APT28 group, also known as BlueDelta, Fancy Bear or Forest Blizzard, has been attributed by Symantec Threat Hunter Team (Swallowtail) with breaching multiple NATO-related targets, including a naval shipbuilder…
Wed 14 Oct· 10 articles
-
Microsoft Windows7 articles this day · CISA first
CISA Flags Actively Exploited Windows Flaw That Bypasses Security Protections · Microsoft fixes 1,415 flaws as exploited Windows bug puts users at risk
-
CISA Flags Actively Exploited Windows Flaw That Bypasses Security Protections
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Microsoft Windows Shell flaw, tracked as CVE-2026-96951, to its Known Exploited Vulnerabilities (KEV) catalog. The advisory notes that the vulnerability is a Windows Shell command…
-
Microsoft fixes 1,415 flaws as exploited Windows bug puts users at risk
Microsoft Patch Tuesday in October 2026 set a new vulnerability record, addressing 1,415 CVEs across Microsoft products and services. The update cycle, described as the first four-digit/month in Microsoft’s reporting, spans Windows and related components,…
-
Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Zero Day
Microsoft’s October Patch Tuesday patch release has set a new record with fixing 1,413 vulnerabilities, including an actively exploited Windows Shell zero-day. The record-breaking bundle underscores the rapid pace of flaws being disclosed and addressed, with…
-
Microsoft’s record 1,413 fixes include a Windows flaw exploited to bypass security warnings
Microsoft has released its October 2026 Patch Tuesday with a record 1,413 CVE fixes across multiple products, including Windows, Office, developer tools, and SharePoint Server. Microsoft notes that 1,102 of the fixes affect Windows, with additional patches…
-
Microsoft patches 1,413 flaws as hackers exploit Windows bug
Microsoft has released a record-breaking Patch Tuesday, delivering fixes for 1,413 vulnerabilities across Windows, Office, Developer Tools, SharePoint Server, and SQL Server. The update slate includes 1,102 Windows flaws, 134 in Office, 61 in Developer…
-
Microsoft Fixes Actively Exploited Windows Flaw in Record Patch Release
Microsoft’s October 2026 Patch Tuesday fixes a record 1,414 vulnerabilities, including 78 rated critical, making it the largest Microsoft release to date. The update slate includes three zero-day flaws, with one already being actively exploited. CISA has…
-
CISA flags actively exploited Windows flaw with 16 October patch deadline
CISA added CVE-2026-96951 to its Known Exploited Vulnerabilities (KEV) catalogue on 13 October 2026. The vulnerability affects Microsoft Windows and is a command injection flaw in Windows Shell that allows an unauthorised attacker to bypass a security…
-
-
Broadcom Moves VMware to Monthly Security Updates as AI Speeds Flaw Discovery
Broadcom has announced a shift to a monthly software security update cadence for its VMware product line, citing the increasing capability of AI to identify defects as a driver for faster remediation. The move implies that organisations will need to devote…
-
Windows Defender flaw let attackers bypass a protected enclave
Security researchers demonstrated a local, sandbox-bypassable bug inside a Windows protected enclave used by Defender SmartScreen’s Enhanced Phishing Protection. The flaw, tracked as CVE-2026-83498, existed in the SFAPE[.]dll component that runs inside a VBS…
-
Microsoft patches Copilot flaw that could let attackers run code via files
Microsoft has released a Patch Tuesday update to fix CVE-2026-103572, a remote code execution flaw said to affect Visual Studio Copilot and SQL Server Management Studio (SSMS). The vulnerability stems from a shared library,…
Tue 13 Oct· 4 articles
-
Microsoft Windows4 articles this day · thezdi.com first
Microsoft fixes over 1,400 flaws, including a Windows zero day · Microsoft patches actively exploited Windows flaw that bypasses security checks
-
Microsoft fixes over 1,400 flaws, including a Windows zero day
Microsoft has issued a sweeping patch batch fixing more than 1,400 security vulnerabilities across Windows operating systems and related software. The roll-up dwarfs September’s near-1,000 fixes and underscores an unusually large month for Microsoft’s patch…
-
Microsoft patches actively exploited Windows flaw that bypasses security checks
On 13 October 2026, Dark Reading reports Microsoft’s October Patch Tuesday as the largest update yet, with 1,413 Microsoft CVEs disclosed. The haul includes 80 critical flaws and two zero-day bugs, one of which is actively exploited. The patched issues span…
-
Microsoft Patches Windows Shell Zero Day Exploited in the Wild
Microsoft’s October 2026 Patch Tuesday swells to a much larger cycle than last month, with 1,413 disclosed vulnerabilities across its own products, of which 1,102 are in Windows.
-
Adobe and Microsoft Patch Thousands of Flaws in Record Update
The October 2026 security update cycle sees Adobe patching across 11 bulletins addressing 174 CVEs spanning Dimension, Commerce, Substance 3D, Bridge and related tools, with several critical issues. Notably, Adobe ColdFusion (APSB26-144) contains 32 critical…
-
Tue 6 Oct· 1 article
-
Microsoft Patches Exchange Flaw That Could Expose Staff Mailboxes
Microsoft has released out-of-band security updates for Exchange Server to fix a high-severity vulnerability tracked as CVE-2026-96940 (CVSS 8.8). The flaw stems from weak authorisation and allows an authenticated attacker to gain higher privileges on an…
Mon 5 Oct· 1 article
-
Microsoft Patches Exchange Flaw That Exposes Colleagues’ Mailboxes
Microsoft has released out-of-band security updates for Microsoft Exchange Server to fix a high-severity vulnerability that could allow an authenticated attacker to escalate privileges and read other users’ mail within the same organisation. The flaw is…
Sat 3 Oct· 1 article
-
Microsoft Reissues Exchange Updates With New CVE-2026-96940 Flaw
Microsoft has reissued the September 2026 security updates for Exchange Server as a V2 release, adding one new vulnerability: CVE-2026-96940. The Exchange Team says the update was published ahead of schedule and urges admins to apply it promptly. Microsoft…
