News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Sun 25 Oct | 13 |
| Today, Mon 26 Oct | 70 so far |
Wed 20 Mar 2024· 73 articles
-
Apex Legends Global Series plagued by hackers
The North American finals of online shooter game Apex Legends has been postponed after games were disrupted by hacking incidents. Apex Legends, published by EA, is currently in an important stage of its Global Series, the regional finals mode. This is a big…
MalwarebytesOriginal report -
Federal Warning Highlights Cyber Vulnerability of US Water Systems
The White House urged operators of water and wastewater systems to review and beef up their security controls against attacks by Iran- and China-based groups.
Dark ReadingOriginal report -
Tax Hackers Blitz Small Business With Phishing Emails
Armed with little more than an email address, scammers are trying to trick small businesses and the self employed into giving up Social Security numbers.
Dark ReadingOriginal report -
New Windows Server updates cause domain controller crashes, reboots
The March 2024 Windows Server updates are causing some domain controllers to crash and restart, according to widespread reports from Windows administrators. [...]
BleepingComputerOriginal report -
Spa Grand Prix email account hacked to phish banking info from fans
Hackers hijacked the official contact email for the Belgian Grand Prix event and used it to lure fans to a fake website promising a €50 gift voucher. [...]
BleepingComputerOriginal report -
Deloitte Launches CyberSphere Platform to Simplify Cyber Operations for Clients
No content available.
Dark ReadingOriginal report -
Loop DoS attack uses CVE-2024-2169, endangering 300k hosts
A new denial-of-service attack dubbed Loop DoS targets application layer protocols and can pair network services into an indefinite communication loop that generates large volumes of traffic, researchers say. The attack uses UDP and is estimated to affect…
-
Critical flaw in Atlassian Bamboo Data Center and Server must be fixed immediately
Atlassian fixed tens of vulnerabilities in Bamboo, Bitbucket, Confluence, and Jira products, including a critical flaw that can be very dangerous. Atlassian addressed multiple vulnerabilities in its Bamboo, Bitbucket, Confluence, and Jira products. The most…
Security AffairsOriginal report -
Pathlock Introduces Continuous Controls Monitoring to Reduce Time and Costs
No content available.
Dark ReadingOriginal report -
Akamai Research Finds 29% of Web Attacks Target APIs
No content available.
Dark ReadingOriginal report -
Kaspersky Identifies Three New Android Malware Threats
No content available.
Dark ReadingOriginal report -
GitHub’s new AI-powered tool auto-fixes vulnerabilities in your code
GitHub introduced a new AI-powered feature capable of speeding up vulnerability fixes while coding. This feature is in public beta and automatically enabled on all private repositories for GitHub Advanced Security (GHAS) customers [...]
BleepingComputerOriginal report -
India's Android Users Hit by Malware-as-a-Service Campaign
Hackers are seeking sensitive personal information on user devices, including banking data and SMS messages.
Dark ReadingOriginal report -
Ivanti fixes critical Standalone Sentry bug reported by NATO
Ivanti warned customers to immediately patch a critical severity Standalone Sentry vulnerability reported by NATO Cyber Security Centre researchers. [...]
BleepingComputerOriginal report -
1 in 4 Organizations Shut Down OT Operations Due to Cyberattacks: Survey
A Palo Alto Networks survey shows many industrial organizations experience cyberattacks and 1 out of 4 has shut down OT operations.
SecurityWeekOriginal report -
Microsoft Hires Influential AI Figure Mustafa Suleyman to Head up Consumer AI Business
Microsoft hired Mustafa Suleyman to head up its new AI business, adding an influential figure to its pool of talent leading the charge to build a technology that Suleyman views as both as a boon and threat to humanity.
SecurityWeekOriginal report -
Don't Answer the Phone: Inside a Real-Life Vishing Attack
Successful attackers focus on the psychological manipulation of human emotions, which is why anyone, even a tech-savvy person, can become a victim.
Dark ReadingOriginal report -
Hacker Caught Stealing Personal Data of 132,000 Individuals Pleads Guilty
Idaho man pleads guilty to hacking charges over cyberattacks he conducted in 2017 and 2018, which involved data theft and extortion.
SecurityWeekOriginal report -
UK bakery Greggs is latest victim of recent POS system outages
UK bakery chain Greggs is the latest victim of recent point of sale system outages that forced store closures at large retail chains over the past few weeks. [...]
BleepingComputerOriginal report -
After LockBit, ALPHV Takedowns, RaaS Startups Go on a Recruiting Drive
Law enforcement action hasn't eradicated ransomware groups, but it has shaken up the cyber underground and sown distrust among thieves.
Dark ReadingOriginal report -
Threat actors actively exploit JetBrains TeamCity flaws to deliver malware
Multiple threat actors are exploiting the recently disclosed JetBrains TeamCity flaw CVE-2024-27198 in attacks in the wild. Trend Micro researchers are exploiting the recently disclosed vulnerabilities CVE-2024-27198 (CVSS score: 9.8) and CVE-2024-27199…
Security AffairsOriginal report -
New 'Loop DoS' Attack Impacts Hundreds of Thousands of Systems
A novel denial-of-service (DoS) attack vector has been found to target application-layer protocols based on User Datagram Protocol (UDP), putting hundreds of thousands of hosts likely at risk. Called Loop DoS attacks, the approach pairs "servers of these…
The Hacker NewsOriginal report -
'Fluffy Wolf' Spreads Meta Stealer in Corporate Phishing Campaign
Unsophisticated threat actor is targeting Russian companies with both readily available malware and authentic software.
Dark ReadingOriginal report -
Google Firebase May Have Exposed 125M Records From Misconfigurations
No content available.
packetstormsecurity.comOriginal report -
Fraud Risk For Vans Customers After Data Breach
No content available.
packetstormsecurity.comOriginal report -
Stalkerware Usage Surging, Despite Data Privacy Concerns
No content available.
packetstormsecurity.comOriginal report -
Chrome 123, Firefox 124 Patch Serious Vulnerabilities
No content available.
packetstormsecurity.comOriginal report -
Five Eyes Agencies Issue New Alert On Chinese APT Volt Typhoon
No content available.
packetstormsecurity.comOriginal report -
300,000 Systems Vulnerable To New Loop DoS Attack
No content available.
packetstormsecurity.comOriginal report -
Disabling Cyberattacks Are Hitting Critical US Water Systems, White House Warns
No content available.
packetstormsecurity.comOriginal report -
Atlassian Patches Critical Vulnerability in Bamboo Data Center and Server
Atlassian releases patches for two dozen vulnerabilities, including a critical-severity bug in Bamboo Data Center and Server.
SecurityWeekOriginal report -
AI Won't Solve Cybersecurity's Retention Problem
To fix retention and skills gaps, we need to encourage more women and minorities to build careers in cybersecurity.
Dark ReadingOriginal report -
Flipper Zero makers respond to Canada’s ‘harmful’ ban proposal
The makers of Flipper Zero have responded to the Canadian government's plan to ban the device in the country, arguing that it is wrongfully accused of facilitating car thefts. [...]
BleepingComputerOriginal report -
NCSC Released an Advisory to Secure Cloud-hosted SCADA
Operational Technology (OT) is a technology that interfaces with the physical world and includes Industrial Control Systems (ICS), Supervisory Control and Data Acquisition (SCADA), and Distributed Control Systems (DCS). OT is different from IT in that OT…
gbhackers.comOriginal report -
Connectivity Standards Alliance Meets Device Security Challenges With a Unified Standard and Certification
The new IoT Device Security Specification 1.0, with accompanying certification, aims to offer a unified industry standard and increase consumer awareness.
Dark ReadingOriginal report -
The UK energy sector faces an expanding OT threat landscape
Critical infrastructure is under attack in almost every country, but especially in the United Kingdom. The UK was the most attacked country in Europe, which is already the region most impacted by cyber incidents. The energy industry is taking the brunt of…
securityintelligence.comOriginal report -
Tax scammer goes after small business owners and self-employed people
While most tax payers don’t particularly look forward to tax season, for some scammers it’s like the opening of their hunting season. So it’s no surprise that our researchers have found yet another tax-related scam. In this most recent scam, we’ve not seen…
MalwarebytesOriginal report -
BunnyLoader 3.0 surfaces in the threat landscape
Researchers found a new variant of the BunnyLoader malware with a modular structure and new evasion capabilities. In October 2023, Zscaler ThreatLabz researchers discovered a new malware-as-a-service (MaaS) called BunnyLoader, which was advertised for sale...
Security AffairsOriginal report -
Detecting Cloud Threats With CloudGrappler
The open-source tool from Permiso can help security teams identify threat actors lurking within their AWS and Azure environments.
Dark ReadingOriginal report -
Five Eyes Agencies Issue New Alert on Chinese APT Volt Typhoon
Government agencies in the Five Eyes countries warn critical infrastructure entities of Chinese state-sponsored hacking group Volt Typhoon.
SecurityWeekOriginal report
