News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 68 so far |
Tue 19 Mar 2024· 69 articles
-
Misconfigured Firebase instances leaked 19 million plaintext passwords
Three cybersecurity researchers discovered close to 19 million plaintext passwords exposed on the public internet by misconfigured instances of Firebase, a Google platform for hosting databases, cloud computing, and app development. [...]
BleepingComputerOriginal report -
White House and EPA warn of hackers breaching water systems
U.S. National Security Advisor Jake Sullivan and Environmental Protection Agency (EPA) Administrator Michael Regan warned governors today that hackers are "striking" critical infrastructure across the country's water sector. [...]
BleepingComputerOriginal report -
Airbus Calls Off Planned Acquisition of Atos Cybersecurity Group
The purchase would have given Airbus more capabilities to address rising cyber threats in the aviation and aerospace industry.
Dark ReadingOriginal report -
Fortra Releases Update on Critical Severity RCE Flaw
The flaw has a CVSS rating of 9.8, and the company recommends product upgrades to fix the issue.
Dark ReadingOriginal report -
Ukraine cyber police arrested crooks selling 100 million compromised accounts
Ukraine cyber police, along with the national police, arrested three hackers attempting to sell 100 million compromised emails and Instagram accounts. The Ukraine cyber police and the national police have arrested three individuals who are suspected to have…
Security AffairsOriginal report -
US Defense Dept received 50,000 vulnerability reports since 2016
The Cyber Crime Center (DC3) of the U.S. Department of Defense (DoD) says it has reached the milestone of processing its 50,000th vulnerability report submitted by 5,635 researchers since its inception in November 2016. [...]
BleepingComputerOriginal report -
Cheating Hack Halts Apex Legends E-Sports Tourney
Electronic Arts is trying to track down the RCE exploit that allowed hackers to inject cheats into games during the recent Apex Legends Global Series.
Dark ReadingOriginal report -
5 Ways CISOs Can Navigate Their New Business Role
CISOs can successfully make their business operations more secure and play a larger role in the organization's overall strategy, but there are pitfalls to avoid, Forrester analysts warn.
Dark ReadingOriginal report -
CISA shares critical infrastructure defense tips against Chinese hackers
CISA, the NSA, the FBI, and several other agencies in the U.S. and worldwide warned critical infrastructure leaders to protect their systems against the Chinese Volt Typhoon hacking group. [...]
BleepingComputerOriginal report -
Upcoming webinar: How a leading architecture firm approaches cybersecurity
How does a company navigate over 80 years of technical debt? Which tools do a security team of 5 rely on everyday? What threats are considered most dangerous? On March 28, 2024, Malwarebytes CEO, Marcin Kleczynski, and Payette Associates Director of…
MalwarebytesOriginal report -
FTC warns scammers are impersonating its employees to steal money
The U.S. Federal Trade Commission (FTC) warned today that scammers are impersonating its employees to steal thousands of dollars from Americans. [...]
BleepingComputerOriginal report -
Ukraine arrests hackers trying to sell 100 million stolen accounts
The Ukrainian cyber police, in collaboration with investigators from the national police (ГУНП), have arrested three individuals who are accused of hijacking over 100 million emails and Instagram accounts worldwide. [...]
BleepingComputerOriginal report -
Name That Toon: Bridge the Gap
Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.
Dark ReadingOriginal report -
New Regulations Make D&O Insurance a Must for CISOs
CISOs currently hold all of the responsibility to stop cyberattacks yet have none of the authority to fund the technological defenses that regulations require.
Dark ReadingOriginal report -
Oracle warns that macOS 14.4 update breaks Java on Apple CPUs
Oracle warned Apple customers to delay installing the latest macOS 14.4 Sonoma update because it will break Java on Apple silicon CPUs. [...]
BleepingComputerOriginal report -
APIs Drive the Majority of Internet Traffic and Cybercriminals are Taking Advantage
Application programming interfaces (APIs) are the connective tissue behind digital modernization, helping applications and databases exchange data more effectively. The State of API Security in 2024 Report from Imperva, a Thales company, found that the…
The Hacker NewsOriginal report -
Novel Script-Based Attack That Leverages PowerShell And VBScript
A new campaign has been identified as DEEP#GOSU is likely linked to the Kimsuky group, and it employs a new script-based attack chain that uses numerous PowerShell and VBScript stagers to stealthily infect systems. Its features included data exfiltrati...
gbhackers.comOriginal report -
BunnyLoader 3.0 Detected With Advanced Keylogging Capabilities
BunnyLoader is a rapidly developing malware that can steal information, credentials, and cryptocurrencies while also delivering new malware to its victims. Since its first detection in September 2023, the BunnyLoader malware as a service (MaaS) has regularly…
gbhackers.comOriginal report -
Cloudflare Loses 22% Of Its Domains In Freenom .tk Shutdown
No content available.
packetstormsecurity.comOriginal report -
'PhantomBlu' Cyberattackers Backdoor Microsoft Office Users via OLE
The cyber campaign uses social engineering and sophisticated evasion tactics, including a novel malware-delivery method, to compromise hundreds of Microsoft Office users.
Dark ReadingOriginal report -
New AcidPour wiper targets Linux x86 devices. Is it a Russia’s weapon?
A new variant of the Russia-linked wiper AcidRain, tracked as AcidPour, was spotted targeting Linux x86 devices. A new variant of a data wiper AcidRain, tracked as AcidPour, is specifically designed for targeting Linux x86 devices has been detected in the…
Security AffairsOriginal report -
Apex Legends Esports Final Delayed By Hack Claims
No content available.
packetstormsecurity.comOriginal report -
Nations Direct Mortgage Data Breach Affects 83,000 Individuals
No content available.
packetstormsecurity.comOriginal report -
Update Delays To NIST Vulnerability DB Alarms Researchers
No content available.
packetstormsecurity.comOriginal report -
Chinese APT Hacks 48 Government Organizations
No content available.
packetstormsecurity.comOriginal report -
Fujitsu Reveals Malware Installed On Internal Systems
No content available.
packetstormsecurity.comOriginal report -
New AcidPour data wiper targets Linux x86 network devices
A new destructive malware named AcidPour was spotted in the wild, featuring data-wiper functionality and targeting Linux x86 IoT and networking devices. [...]
BleepingComputerOriginal report -
Avoid high cyber insurance costs by improving Active Directory security
With the growing number of data breaches and cyberattacks, insurance premiums are increasing. Learn more from Specops Software about how securing an Activity Directory could lead to lower cyber insurance premiums. [...]
BleepingComputerOriginal report -
The New CISO: Rethinking the Role
Rising cybersecurity demands are changing the role of the head security officer. CISOs need to make a list, check it at least twice, and document every step.
Dark ReadingOriginal report -
From Deepfakes to Malware: AI's Expanding Role in Cyber Attacks
Large language models (LLMs) powering artificial intelligence (AI) tools today could be exploited to develop self-augmenting malware capable of bypassing YARA rules. "Generative AI can be used to evade string-based YARA rules by augmenting the source code of…
The Hacker NewsOriginal report -
Airbus Pulls Out of Deal to Buy Atos Cybersecurity Unit
Atos shares tank after Airbus decides not to move ahead with discussions to acquire its cybersecurity business.
SecurityWeekOriginal report -
Chinese APT Hacks 48 Government Organizations
Earth Krahang, likely a penetration team of Chinese government contractor I-Soon, has compromised 48 government entities worldwide.
SecurityWeekOriginal report -
How AI can be hacked with prompt injection: NIST report
The National Institute of Standards and Technology (NIST) closely observes the AI lifecycle, and for good reason. As AI proliferates, so does the discovery and exploitation of AI cybersecurity vulnerabilities. Prompt injection is one such vulnerability that…
securityintelligence.comOriginal report -
BigID Raises $60 Million at $1 Billion Valuation
Data security firm BigID raises $60 million in a growth round that brings the total to $320 million and values the company at over $1 billion.
SecurityWeekOriginal report -
Mintlify Data Breach Exposes Customer GitHub Tokens
A renowned software documentation platform has confirmed a security breach that led to the unauthorized access of 91 GitHub tokens. This incident has raised alarms about the potential exposure of private repositories and the overall security measures to…
gbhackers.comOriginal report -
Social media influencers targeted by identity thieves
Social media influencers are attractive targets for identity thieves. With large followings and a literal influence on their followers, it’s no wonder they are targeted by scammers and spreaders of fake news. A subset of influencers are the so-called…
MalwarebytesOriginal report -
'Conversation Overflow' Cyberattacks Bypass AI Security to Target Execs
Credential-stealing emails are getting past artificial intelligence's "known good" email security controls by cloaking malicious payloads within seemingly benign emails. The tactic poses a significant threat to enterprise networks.
Dark ReadingOriginal report -
Nations Direct Mortgage Data Breach Impacts 83,000 Individuals
Nations Direct informs 83,000 individuals that their personal information was compromised in a data breach.
SecurityWeekOriginal report -
900+ websites Exposing 10M+ Passwords: Most in Plaintext
Over 900 websites inadvertently expose over 10 million passwords, many of which are in plaintext, alongside sensitive billing information and personally identifiable information (PII) of approximately 125 million users. This massive data exposure is…
gbhackers.comOriginal report