News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 66 so far |
Mon 18 Mar 2024· 61 articles
-
ML Model Repositories: The Next Big Supply Chain Attack Target
Machine-learning model platforms like Hugging Face are suspectible to the same kind of attacks that threat actors have executed successfully for years via npm, PyPI, and other open source repos.
Dark ReadingOriginal report -
Chinese APT 'Earth Krahang' Compromises 48 Gov't Orgs on 5 Continents
The group uses pretty standard open source tooling and social engineering to burrow into high-level government agencies across the globe.
Dark ReadingOriginal report -
Investment advisers pay $400K to settle ‘AI washing’ charges
The U.S. Securities and Exchange Commission (SEC) announced today that two investment advisers, Delphia (USA) and Global Predictions, have settled charges of making misleading statements regarding the use of artificial intelligence (AI) technology in their…
BleepingComputerOriginal report -
Chinese Earth Krahang hackers breach 70 orgs in 23 countries
A sophisticated hacking campaign attributed to a Chinese Advanced Persistent Threat (APT) group known as 'Earth Krahang' has breached 70 organizations and targeted at least 116 across 45 countries. [...]
BleepingComputerOriginal report -
PoC exploit for critical RCE flaw in Fortra FileCatalyst transfer tool released
Fortra addressed a critical remote code execution vulnerability impacting its FileCatalyst file transfer product. Fortra has released updates to address a critical vulnerability, tracked as CVE-2024-25153 (CVSS score 9.8) impacting its FileCatalyst fi...
Security AffairsOriginal report -
Saudi Arabia's National Cybersecurity Authority Announces the GCF Annual Meeting 2024
No content available.
Dark ReadingOriginal report -
Brazilian Authorities Arrest Members of Banking Trojan Cybercrime Group
Interpol assisted in the operation, in which analysts identified Grandoreiro group members by analyzing and matching malware samples.
Dark ReadingOriginal report -
Fujitsu: Malware on Company Computers Exposed Customer Data
It remains unclear how long the IT services giant's systems were infiltrated and just how the cyberattack unfolded.
Dark ReadingOriginal report -
Microsoft announces deprecation of 1024-bit RSA keys in Windows
Microsoft has announced that RSA keys shorter than 2048 bits will soon be deprecated in Windows Transport Layer Security (TLS) to provide increased security. [...]
BleepingComputerOriginal report -
Fujitsu suffered a malware attack and probably a data breach
Technology giant Fujitsu announced it had suffered a cyberattack that may have resulted in the theft of customer information. Japanese technology giant Fujitsu on Friday announced it had suffered a malware attack, threat actors may have stolen personal and…
Security AffairsOriginal report -
New DEEP#GOSU Malware Campaign Targets Windows Users with Advanced Tactics
A new elaborate attack campaign has been observed employing PowerShell and VBScript malware to infect Windows systems and harvest sensitive information. Cybersecurity company Securonix, which dubbed the campaign DEEP#GOSU, said it's likely associated with…
The Hacker NewsOriginal report -
Apex Legends players worried about RCE flaw after ALGS hacks
Electronic Arts has postponed the North American (NA) finals of the ongoing Apex Legends Global Series (ALGS) after hackers compromised players mid-match during the tournament. [...]
BleepingComputerOriginal report -
CVE-2024-1753: Podman/Buildah Vulnerability Allow Container Escapes
A serious vulnerability (CVE-2024-1753) has been discovered in the popular containerization tools Podman and Buildah. This flaw, rated as important with a CVSS score of 8.6, could allow attackers to escape the confines of...
SecurityOnlineOriginal report -
Hackers Using Weaponized SVG Files in Cyber Attacks
Cybercriminals have repurposed Scalable Vector Graphics (SVG) files to deliver malware, a technique that has evolved significantly with the advent of the AutoSmuggle tool. Introduced in May 2022, AutoSmuggle facilitates embedding malicious files within HTML…
gbhackers.comOriginal report -
CVE-2024-22257: Spring Security Flaw Opens Door to Broken Access Control Attacks
Spring Security, a widely used framework for securing Java-based applications, has a serious vulnerability that could allow attackers to bypass authentication and gain unauthorized access to sensitive systems. The vulnerability tracked as CVE-2024-22257,…
SecurityOnlineOriginal report -
UK Government Releases Cloud SCADA Security Guidance
UK’s NCSC releases security guidance for OT organizations considering migrating their SCADA solutions to the cloud.
SecurityWeekOriginal report -
Fujitsu Data Breach Impacts Personal, Customer Information
Fujitsu says hackers infected internal systems with malware, stole personal and customer information.
SecurityWeekOriginal report -
Pentagon Received Over 50k Vulnerability Reports Since 2016
No content available.
packetstormsecurity.comOriginal report -
Haiti: Machete-Wielding Militias Battle Gangs In Port-au-Prince
No content available.
packetstormsecurity.comOriginal report -
New Attack Shows Risks Of Browser Giving Websites Access To GPU
No content available.
packetstormsecurity.comOriginal report -
Fujitsu found malware on IT systems, confirms data breach
Japanese tech giant Fujitsu discovered that several of its systems were infected by malware and warns that the hackers stole customer data. [...]
BleepingComputerOriginal report -
Tracking Everything on the Dark Web Is Mission Critical
On the Dark Web, stolen secrets are your enemy, and context is your friend.
Dark ReadingOriginal report -
How the New NIST 2.0 Guidelines Help Detect SaaS Threats
NIST just-released its Cybersecurity Framework (CSF) 2.0, which seems to have SaaS security in mind. Learn more from Adaptive Shield about how the NIST 2.0 framework can help detect SaaS threats. [...]
BleepingComputerOriginal report -
Cisco Completes $28 Billion Acquisition of Splunk
The networking giant paid $157 per share in cash for Splunk, a powerhouse in data analysis, security and observability tools, in a deal first announced in September 2023.
SecurityWeekOriginal report -
New Acoustic Keyboard Side Channel Attack Let Attackers Steal Sensitive Data
In recent years, personal data security has surged in importance due to digital device usage. Side-channel attacks exploit system side effects to gather information. Electronic emissions are a known vulnerability to such attacks. Acoustic side-channel…
gbhackers.comOriginal report -
Fortra Patches Critical RCE Vulnerability in FileCatalyst Transfer Tool
Fortra has released details of a now-patched critical security flaw impacting its FileCatalyst file transfer solution that could allow unauthenticated attackers to gain remote code execution on susceptible servers. Tracked as CVE-2024-25153, the shortcoming…
The Hacker NewsOriginal report -
Remove WordPress miniOrange plugins, a critical flaw can allow site takeover
A critical vulnerability in WordPress miniOrange’s Malware Scanner and Web Application Firewall plugins can allow site takeover. On March 1st, 2024, WordPress security firm Wordfence received a submission for a Privilege Escalation vulnerability in…
Security AffairsOriginal report -
Hackers Using Sneaky HTML Smuggling to Deliver Malware via Fake Google Sites
Cybersecurity researchers have discovered a new malware campaign that leverages bogus Google Sites pages and HTML smuggling to distribute a commercial malware called AZORult in order to facilitate information theft. "It uses an unorthodox HTML smuggling…
The Hacker NewsOriginal report -
Pentagon Received Over 50,000 Vulnerability Reports Since 2016
Since 2016, the US DoD has received over 50,000 submissions through its vulnerability disclosure program.
SecurityWeekOriginal report -
Binance Stealer Logs, Exodus Botnet, Instagram 0-day Exploit, and Database Sales
No content available.
SOCRadarOriginal report -
Hacker Conversations: Stephanie ‘Snow’ Carruthers, Chief People Hacker at IBM X-Force Red
The desire to be a hacker is usually innate, and commonly emerges in early life. This did not happen with Snow: she was a married freelance special effects makeup artist when it all began.
SecurityWeekOriginal report -
New Attack Shows Risks of Browsers Giving Websites Access to GPU
Researchers demonstrate remote GPU cache side-channel attack from within browsers against AMD and NVIDIA graphics cards.
SecurityWeekOriginal report -
Discontinued WordPress Plugin Flaw Exposes Websites to Cyber Attacks
A critical vulnerability was discovered in two plugins developed by miniOrange. The affected plugins, miniOrange’s Malware Scanner and Web Application Firewall, contained a severe privilege escalation flaw that could allow unauthenticated attackers to gain…
gbhackers.comOriginal report -
Analysis of Stealer Logs within the Entertainment Industry
No content available.
SOCRadarOriginal report -
The Aviation and Aerospace Sectors Face Skyrocketing Cyber Threats
Resecurity reported about the increasing wave of cyber incidents targeting the aerospace and aviation sectors. The experts emphasized the importance of rigorous cybersecurity risk assessments for airports and proactive threat intelligence in the context of…
Security AffairsOriginal report -
ShadowSyndicate Hackers Exploiting Aiohttp Vulnerability To Access Sensitive Data
A new Aiohttp vulnerability has been discovered, which the threat actor ShadowSyndicate exploits. Aiohttp is an asynchronous HTTP client/server framework that has extensive capabilities and flexibility to make aiohttp perform various asynchronous tasks. The…
gbhackers.comOriginal report -
Moldovan Operator of Credential Marketplace Sentenced to US Prison
Sandu Diaconu has been sentenced to 42 months in prison for operating a marketplace for compromised credentials.
SecurityWeekOriginal report -
PoC Published for Critical Fortra Code Execution Vulnerability
A critical directory traversal vulnerability in Fortra FileCatalyst Workflow could lead to remote code execution.
SecurityWeekOriginal report