News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 61 so far |
Thu 14 Mar 2024· 45 articles
-
Cisco fixed high-severity elevation of privilege and DoS bugs
Cisco this week addressed high-severity elevation of privilege and denial-of-service (DoS) vulnerabilities in IOS RX software. Cisco addressed multiple vulnerabilities in IOS RX software, including three high-severity issues that can be exploited to elevate…
Security AffairsOriginal report -
Red Canary Announces Full Coverage of All Major Cloud Providers
No content available.
Dark ReadingOriginal report -
Expel Releases Updated Toolkit in Response to NIST 2.0
No content available.
Dark ReadingOriginal report -
Nozomi Networks Secures $100M Investment to Defend Critical Infrastructure
No content available.
Dark ReadingOriginal report -
CEO of Data Privacy Company Onerep.com Founded Dozens of People-Search Firms
The data privacy company Onerep.com bills itself as a Virginia-based service for helping people remove their personal information from almost 200 people-search websites. However, an investigation into the history of onerep.com finds this company is operating…
Krebs on SecurityOriginal report -
StopCrypt: Most widely distributed ransomware evolves to evade detection
A new variant of StopCrypt ransomware (aka STOP) was spotted in the wild, employing a multi-stage execution process that involves shellcodes to evade security tools. [...]
BleepingComputerOriginal report -
Recent DarkGate campaign exploited Microsoft Windows zero-day
Researchers recently uncovered a DarkGate campaign in mid-January 2024, which exploited Microsoft zero-day vulnerability. Researchers at the Zero Day Initiative (ZDI) recently uncovered a DarkGate campaign in mid-January 2024, which exploited the Windows…
Security AffairsOriginal report -
FCC Approves Voluntary Cyber Trust Labels for Consumer IoT Products
Here's what IoT device manufacturers need to know to earn a cybersecurity stamp of approval from the government.
Dark ReadingOriginal report -
Fortinet Warns of Yet Another Critical RCE Flaw
CVE-2024-48788, like many other recent Fortinet flaws, will likely be an attractive target, especially for nation-state-backed actors.
Dark ReadingOriginal report -
Alabama Under DDoS Cyberattack by Russian-Backed Hacktivists
The hacktivist group Anonymous Sudan claims credit for a cyberattack that disrupted Alabama state government earlier this week.
Dark ReadingOriginal report -
SIM swappers hijacking phone numbers in eSIM attacks
SIM swappers have adapted their attacks to steal a target's phone number by porting it into a new eSIM card, a digital SIM stored in a rewritable chip present on many recent smartphone models. [...]
BleepingComputerOriginal report -
TikTok Ban Raises Data Security, Control Questions
Approved by the House and moving on to the Senate, the potential ban points up the porousness of governmental control in the digital age.
Dark ReadingOriginal report -
Webinar recap: 6 critical cyberthreats in 2024 and how to counter them
Our webinar on the 2024 State of Malware report is now available on-demand. Featuring cybersecurity experts Mark Stockley and Jérôme Segura, this webinar unpacks 2024’s most critical cyberthreats, including big game ransomware, malvertising, and emerging…
MalwarebytesOriginal report -
TikTok faces ban in US unless it parts ways with Chinese owner ByteDance
The House of Representatives has passed a bill that would effectively ban TikTok from the US unless Chinese owner ByteDance gives up its share of the immensely popular app. TikTok is an immensely popular social media platform that allows users to create,…
MalwarebytesOriginal report -
Tech support firms Restoro, Reimage fined $26 million for scare tactics
Tech support companies Restoro and Reimage will pay $26 million to settle charges that they used scare tactics to trick their customers into paying for unnecessary computer repair services. [...]
BleepingComputerOriginal report -
Ballistic Ventures Closes $360 Million Cybersecurity-Focused Fund
Venture capital firm Ballistic Ventures closed an oversubscribed $360 million fund that will be used to fund cybersecurity companies.
SecurityWeekOriginal report -
Chrome’s Standard Safe Browsing Now Has Real-Time URL Protection
Chrome’s standard Safe Browsing protections now provide real-time malicious site detection and Password Checkup on iOS now flags weak passwords.
SecurityWeekOriginal report -
Malawi Passport System Back Online After Debilitating Cyberattack
Passport printing and distribution will resume first in Lilongwe as the immigration system gets back on its feet.
Dark ReadingOriginal report -
Webinar: CISO Strategies for Boardroom Success
You're invited join SecurityWeek and Gutsy for the webinar, "From Protector to Influencer: CISO Strategies for Boardroom Success," as we address the emerging responsibilities for the CISO role.
SecurityWeekOriginal report -
Boat Dealer MarineMax Hit by Cyberattack
MarineMax, one of the world’s largest retailers of recreational boats and yachts, discloses a cyberattack.
SecurityWeekOriginal report -
Nissan Oceania data breach impacted roughly 100,000 people
The ransomware attack that hit the systems of Nissan Oceania in December 2023 impacted roughly 100,000 individuals. Nissan Oceania, the regional division of the multinational carmaker, announced in December 2023 that it had suffered a cyber attack and…
Security AffairsOriginal report -
Windows SmartScreen Vulnerability Exploited in DarkGate Malware Attacks, Patch CVE-2024-21412 Now
No content available.
SOCRadarOriginal report -
Windows SmartScreen Bypass Flaw Exploited to Drop DarkGate RAT
Attackers use Google redirects in their phishing attack leveraging a now-patched vulnerability that spreads the multifaceted malware.
Dark ReadingOriginal report -
CVE-2024-22259: Spring Framework Update Fixes High-Severity Flaw
The popular Spring Framework, a cornerstone of many Java-based applications, has received a crucial security update. This patch addresses a high-severity vulnerability designated CVE-2024-22259. The responsible disclosure of this issue was provided by…
SecurityOnlineOriginal report -
How to Identify a Cyber Adversary: What to Look For
There are many factors involved in attributing a cyber incident to a specific threat actor.
Dark ReadingOriginal report -
LockBit Ransomware Hacker Ordered to Pay $860,000 After Guilty Plea in Canada
A 34-year-old Russian-Canadian national has been sentenced to nearly four years in jail in Canada for his participation in the LockBit global ransomware operation. Mikhail Vasiliev, an Ontario resident, was originally arrested in November 2022 and charged by…
The Hacker NewsOriginal report -
Cisco Patches High Severity IOS RX Vulnerabilities
No content available.
packetstormsecurity.comOriginal report -
RedLine Malware Top Credential Stealer Of Last 6 Months
No content available.
packetstormsecurity.comOriginal report -
Meta Sues Brazenly Disloyal Former Exec Over Stolen Confidential Docs
No content available.
packetstormsecurity.comOriginal report -
Poking Holes In Google Tech Bagged Bug Hunters $10M
No content available.
packetstormsecurity.comOriginal report -
US Congress Goes Bang, Bang, On Tik-Tok Sale Or Ban Plan
No content available.
packetstormsecurity.comOriginal report -
Bitcoin Fog Operator Convicted Of Laundering $400M In Bitcoins On Darknet
No content available.
packetstormsecurity.comOriginal report -
Side Channel In Most AI Assistants Lets Hackers Read Encrypted Chats
No content available.
packetstormsecurity.comOriginal report -
ChatGPT 0-Click Plugin Exploit Risked Leaked Of Private GitHub Repos
No content available.
packetstormsecurity.comOriginal report -
Cloud security evolution: Years of progress and challenges
Over a decade since its advent, cloud computing continues to enable organizational agility through scalability, efficiency and resilience. As clients shift from early experiments to strategic workloads, persistent security gaps demand urgent attention even…
securityintelligence.comOriginal report -
Researchers Detail Kubernetes Vulnerability That Enables Windows Node Takeover
Details have been made public about a now-patched high-severity flaw in Kubernetes that could allow a malicious attacker to achieve remote code execution with elevated privileges under specific circumstances. “The vulnerability allows remote code execution…
The Hacker NewsOriginal report -
3 Things CISOs Achieve with Cato
Being a CISO is a balancing act: ensuring organizations are secure without compromising users’ productivity. This requires taking multiple elements into consideration, like cost, complexity, performance and user experience. CISOs around the globe use Cato…
The Hacker NewsOriginal report -
RedCurl Cybercrime Group Abuses Windows PCA Tool for Corporate Espionage
The Russian-speaking cybercrime group called RedCurl is leveraging a legitimate Microsoft Windows component called the Program Compatibility Assistant (PCA) to execute malicious commands. “The Program Compatibility Assistant Service (pcalua.exe) is a Windows…
The Hacker NewsOriginal report