News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 62 so far |
Fri 15 Mar 2024· 47 articles
-
'GhostRace' Speculative Execution Attack Impacts All CPU, OS Vendors
Like Spectre, the new GhostRace exploit could give attackers a way to access sensitive information from system memory and take other malicious actions.
Dark ReadingOriginal report -
NHS Breach, HSE Bug Expose Healthcare Data in the British Isles
Whoopsies in Ireland and Scotland speak to a tenuousness of cyber protections for sensitive private healthcare data.
Dark ReadingOriginal report -
International Monetary Fund email accounts hacked in cyberattack
The International Monetary Fund (IMF) disclosed a cyber incident on Friday after unknown attackers breached 11 IMF email accounts earlier this year. [...]
BleepingComputerOriginal report -
Moldovan citizen sentenced in connection with the E-Root cybercrime marketplace case
US DoJ sentenced a Moldovan national (31) to 42 months in federal prison for operating the E-Root cybercrime marketplace. U.S. District Court sentenced the Moldovan national (31) Sandu Boris Diaconu to 42 months in federal prison for conspiracy to commit…
Security AffairsOriginal report -
McDonald's: Global outage was caused by "configuration change"
McDonald's has blamed a third-party service provider's configuration change, not a cyberattack, for the global outage that forced many of its fast-food restaurants to close. [...]
BleepingComputerOriginal report -
US moves to recover $2.3 million from "pig butchers" on Binance
The U.S. Department of Justice (DoJ) is recovering $2.3 million worth of cryptocurrency linked to a "pig butchering" fraud scheme that victimized at least 37 people across the United States. [...]
BleepingComputerOriginal report -
GhostRace – New Data Leak Vulnerability Affects Modern CPUs
A group of researchers has discovered a new data leakage attack impacting modern CPU architectures supporting speculative execution. Dubbed GhostRace (CVE-2024-2193), it is a variation of the transient execution CPU vulnerability known as Spectre v1…
The Hacker NewsOriginal report -
PornHub now also blocks Texas over age verification laws
PornHub has now added Texas to its blocklist, preventing users in the state from accessing its site in protest of age verification laws. [...]
BleepingComputerOriginal report -
Ransomware’s appetite for US healthcare sees known attacks double in a year
Following the February 21 attack on Change Healthcare, scores of people in the US have been living with the brutal, real-world effects of ransomware. Described by the American Hospital Association (AHA) President and CEO Rick Pollack as “the most significant…
MalwarebytesOriginal report -
Microsoft announces Office LTSC 2024 preview starting next month
Microsoft announced that Office LTSC 2024, the next Office LTSC release, will enter a commercial preview phase starting next month and will be generally available later this year. [...]
BleepingComputerOriginal report -
Admin of major stolen account marketplace gets 42 months in prison
Moldovan national Sandu Boris Diaconu has been sentenced to 42 months in prison for operating E-Root, a major online marketplace that sold access to hacked computers worldwide. [...]
BleepingComputerOriginal report -
Former telecom manager admits to doing SIM swaps for $1,000
A former manager at a telecommunications company in New Jersey pleaded guilty to conspiracy charges for accepting money to perform unauthorized SIM swaps that enabled an accomplice to hack customer accounts. [...]
BleepingComputerOriginal report -
Why Does The US Want To ban TikTok, And When Could It Happen?
No content available.
packetstormsecurity.comOriginal report -
Discontinued Security Plugins Expose Many WordPress Sites To Takeover
No content available.
packetstormsecurity.comOriginal report -
Member Of LockBit Ransomware Group Sentenced To 4 Years In Prison
No content available.
packetstormsecurity.comOriginal report -
Banish OEM Self-Signed Certs And Roll Your Own LetsEncrypt
No content available.
packetstormsecurity.comOriginal report -
Cop Shop Rapped For Completely Avoidable Web Form Blunder
No content available.
packetstormsecurity.comOriginal report -
McDonald's IT systems outage impacts restaurants worldwide
McDonald's restaurants are suffering global IT outages that prevent employees from taking orders and accepting payments, causing some stores to close for the day. [...]
BleepingComputerOriginal report -
Critical RCE Vulnerability in Fortra FileCatalyst Workflow Threatens File Transfer Security (CVE-2024-25153)
No content available.
SOCRadarOriginal report -
ChatGPT vs. Gemini: Which Is Better for 10 Common Infosec Tasks?
Compare how well OpenAI's and Google's generative AI products handle infosec professionals' top 10 tasks.
Dark ReadingOriginal report -
Codezero Raises $3.5 Million for DevOps Security Solution
Secure enterprise microservices development firm Codezero raises $3.5 million in seed funding.
SecurityWeekOriginal report -
SOCRadar’s Latest Report Illuminates Cyber Threats in Switzerland’s Digital Landscape
No content available.
SOCRadarOriginal report -
In Other News: CISA Hacked, Chinese Lock Backdoors, Exposed Secrets
Noteworthy stories that might have slipped under the radar: CISA hacked via Ivanti vulnerabilities, Chinese electronic lock backdoors, secrets exposed on GitHub.
SecurityWeekOriginal report -
Multistage RA World Ransomware Exploits Group Policy Infrastructure
The RA World ransomware, previously known as the RA Group, has been a significant threat to organizations worldwide since its emergence in April 2023. Focusing on the healthcare and financial sectors, ransomware has predominantly targeted entities in the…
gbhackers.comOriginal report -
UK Defence Secretary jet hit by an electronic warfare attack in Poland
Russian hackers have knocked down the GPS and communications of Defence Secretary Grant Shapps RAF Dassault Falcon 900 jet with electronic warfare attack. Defence Secretary Grant Shapps RAF Dassault Falcon 900 jet flew from Poland, where he visited British…
Security AffairsOriginal report -
6 CISO Takeaways From the NSA's Zero-Trust Guidance
All companies — not just federal agencies — should aim to adopt the "network and environment" pillar of the National Security Agency's zero-trust guidelines.
Dark ReadingOriginal report -
Discontinued Security Plugins Expose Many WordPress Sites to Takeover
Thousands of WordPress sites are at risk of takeover due to a critical privilege escalation vulnerability in two closed MiniOrange plugins.
SecurityWeekOriginal report -
RedLine Malware Takes Lead in Hijacking Over 170M+ Passwords in 6 Months
The cybersecurity landscape has been shaken by the discovery that a single piece of malware, known as RedLine, has stolen over 170 million passwords in the past six months. This alarming statistic has placed RedLine at the forefront of cyber threats,…
gbhackers.comOriginal report -
Third-Party ChatGPT Plugins Could Lead to Account Takeovers
Cybersecurity researchers have found that third-party plugins available for OpenAI ChatGPT could act as a new attack surface for threat actors looking to gain unauthorized access to sensitive data. According to new research published by Salt Labs, security…
The Hacker NewsOriginal report -
Tech Support Firms Agree to $26M FTC Settlement Over Fake Services
Restoro and Reimage agree to a $26 million settlement after selling fake antivirus and tech services to undercover FTC agents.
SecurityWeekOriginal report -
Critical Update for Spring Framework: CVE-2024-22259 Exposes Applications to Open Redirect, SSRF Attacks
No content available.
SOCRadarOriginal report -
43 Million Possibly Impacted by French Government Agency Data Breach
Recent data breach at unemployment agency France Travail (Pôle Emploi) could impact 43 million people.
SecurityWeekOriginal report -
Threat Detection Report: Cloud Attacks Soar, Mac Threats and Malvertising Escalate
Red Canary’s 2024 Threat Detection Report is based on analysis of almost 60,000 threats across 216 petabytes of telemetry from over 1,000 customers’ endpoints.
SecurityWeekOriginal report -
Google Chrome to Roll Out Real-time Phishing Protection
Google has announced an upgrade to its Safe Browsing technology to provide Chrome users with real-time protection against phishing, malware, and other malicious sites. This enhancement is set to revolutionize how users navigate the web, ensuring safety…
gbhackers.comOriginal report -
Hackers Exploit Windows SmartScreen Vulnerability to Install DarkGate Malware
The operators of DarkGate successfully leveraged a patched Windows Defender SmartScreen vulnerability, identified as CVE-2024-21412, as a zero-day attack to disseminate the complex and ever-evolving DarkGate malware. The vulnerability tracked as…
gbhackers.comOriginal report -
ShadowSyndicate Ransomware Gang Targets aiohttp CVE-2024-23334 Flaw: Patch Now!
A recently patched vulnerability in the popular Python web framework aiohttp has swiftly landed on the radar of notorious ransomware operators, according to a report from Cyble Global Sensor Intelligence (CGSI). The flaw, tracked...
SecurityOnlineOriginal report -
Critical ChatGPT Plugins Flaw Let Attackers Gain Control Over Organization’s Account
Threat actors can exploit ChatGPT’s ecosystem for several illicit purposes, such as crafting prompts to generate malicious code, phishing lures, and disinformation content. Even threat actors can exploit ChatGPT’s exceptional capabilities to craft and launch…
gbhackers.comOriginal report -
Google Introduces Enhanced Real-Time URL Protection for Chrome Users
Google on Thursday announced an enhanced version of Safe Browsing to provide real-time, privacy-preserving URL protection and safeguard users from visiting potentially malicious sites. “The Standard protection mode for Chrome on desktop and iOS will check…
The Hacker NewsOriginal report -
Malicious Ads Targeting Chinese Users with Fake Notepad++ and VNote Installers
Chinese users looking for legitimate software such as Notepad++ and VNote on search engines like Baidu are being targeted with malicious ads and bogus links to distribute trojanized versions of the software and ultimately deploy Geacon, a Golang-based…
The Hacker NewsOriginal report