News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 12 Oct | 56 | 6 |
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 0 |
| Thu 22 Oct | 84 | 3 |
| Fri 23 Oct | 68 | 8 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 0 |
| Today, Mon 26 Oct | 72 so far | 5 |
Developing
Wed 20 Mar 202473 articles
- Hackers Selling GlorySprout Malware with Anti-VM Features in underground Fourm for $300
GlorySprout stealer, advertised on the XSS forum in early March 2024, is a C++ stealer sold for $300 with lifetime access and temporary payload encryption, that includes a loader, anti-CIS execution, and a non-functional grabber module. Taurus Stealer, a C++…
gbhackers.com - Androxgh0st Exploits SMTP Services To Extract Critical Data
AndroxGh0st is a malware that specifically targets Laravel applications. The malware scans and extracts login credentials linked to AWS and Twilio from .env files. AndroxGh0st was previously classified as an SMTP cracker since it exploits SMTP using various…
gbhackers.com - Chrome 123, Firefox 124 Patch Serious Vulnerabilities
Chrome and Firefox security updates released on Tuesday resolve a critical-severity and multiple high-severity vulnerabilities.
SecurityWeek - Microsoft Notifies of Major Domain Change With Teams is Coming
In April 2023, Microsoft announced that it would be undertaking a multi-year effort to reduce domain fragmentation among authenticated, user-facing Microsoft 365 apps and services by bringing them onto a single, consistent and cohesive domain:…
gbhackers.com - Executive Interview: Mr. Miroslav on Mastering the Dynamic Cybersecurity Landscape
No content available.
SOCRadar - Hackers Posing as Law Firms Phish Global Orgs in Multiple Languages
Companies trust lawyers with the most sensitive information they've got. Attackers are aiming to exploit that bond to deliver malware.
Dark Reading - Generative AI Security - Secure Your Business in a World Powered by LLMs
Did you know that 79% of organizations are already leveraging Generative AI technologies? Much like the internet defined the 90s and the cloud revolutionized the 2010s, we are now in the era of Large Language Models (LLMs) and Generative AI. The potential of…
The Hacker News - TeamCity Flaw Leads to Surge in Ransomware, Cryptomining, and RAT Attacks
Multiple threat actors are exploiting the recently disclosed security flaws in JetBrains TeamCity software to deploy ransomware, cryptocurrency miners, Cobalt Strike beacons, and a Golang-based remote access trojan called Spark RAT. The attacks entail the…
The Hacker News - Virtual Event Today: Supply Chain & Third-Party Risk Summit 2024
Join the fully immersive virtual event us as we explore the critical nature of software and vendor supply chain security issues
SecurityWeek - Russian Intelligence Targets Victims Worldwide in Rapid-Fire Cyberattacks
Russia's government is pretending to be other governments in emails, with an eye toward stealing strategic intel.
Dark Reading - WordPress Plugin Flaw Exposes 40,000+ Websites to Cyber Attack
A popular WordPress plugin, Automatic (premium version), developed by ValvePress, has been found to harbor critical security vulnerabilities that put over 40,000 websites at risk. This plugin, known for its capability to create posts from various sources,…
gbhackers.com - White House Calls on States to Boost Cybersecurity in Water Sector
The White House is calling on state environmental, health, and homeland security agencies to convene on safeguarding water systems.
SecurityWeek - The ‘AT&T breach’—what you need to know
Earlier this week, the data of over 70 million people was posted for sale on an online cybercrime forum. The person selling the data claims it stems from a 2021 breach at AT&T. Back in 2021, a hacker named Shiny Hunters claimed to have breached AT&T and put…
Malwarebytes - Workings of MalSync Malware Unveiled: DLL Hijacking & PHP Malware
Researchers have discovered the workings of the MalSync malware known as the “DuckTail” or “SYS01”. The analysis of the malware revealed the infection vectors, command line usage, malware capabilities, and other information. The malware seems to have a…
gbhackers.com - Risk Management Firm CyberSaint Raises $21 Million
Cyber risk management firm CyberSaint has raised $21 million in Series A funding, bringing the total investment to $29 million.
SecurityWeek - New BunnyLoader Malware Variant Surfaces with Modular Attack Features
Cybersecurity researchers have discovered an updated variant of a stealer and malware loader called BunnyLoader that modularizes its various functions as well as allow it to evade detection. "BunnyLoader is dynamically developing malware with the capability…
The Hacker News - 300,000 Systems Vulnerable to New Loop DoS Attack
Academic researchers describe a new application-layer loop DoS attack affecting Broadcom, Honeywell, Microsoft and MikroTik.
SecurityWeek - Here's why Twitter sends you to a different site than what you clicked
Users of the social media platform X (Twitter) have often been left puzzled when they click on a post with an external link but arrive at an entirely unexpected website from the one displayed. A Twitter ad spotted below by a security researcher shows…
BleepingComputer - Pokemon Company resets some users’ passwords
The Pokemon Company resets some users’ passwords in response to hacking attempts against some of its users. The Pokemon Company announced it had reset the passwords for some accounts after it had detected hacking attempts, Techcrunch first reported. The…
Security Affairs - Critical TeamCity Flaws Exploited: Ransomware, Cryptominers, and More Target Businesses
A wave of cyberattacks is crashing down on organizations using the TeamCity CI/CD platform, exploiting recently disclosed vulnerabilities that allow hackers to seize control of servers. The Trend Micro cybersecurity team has uncovered a...
SecurityOnline - Tor Unveils WebTunnel – Let Users Bypass Censorship
Tor Project’s Anti-Censorship Team has made a groundbreaking announcement that promises to bolster the fight against internet censorship. On the World Day Against Cyber Censorship occasion, the team proudly introduced WebTunnel, a revolutionary new type of…
gbhackers.com - Ukraine Arrests Trio for Hijacking Over 100 Million Email and Instagram Accounts
The Cyber Police of Ukraine has arrested three individuals on suspicion of hijacking more than 100 million emails and Instagram accounts from users across the world. The suspects, aged between 20 and 40, are said to be part of an organized criminal group…
The Hacker News - Hackers Attacking Critical US Water Systems, White House Warns
In a stark warning issued by the White House, it has been revealed that cyberattacks are increasingly targeting water and wastewater systems across the United States. These critical infrastructures are essential for providing clean and safe drinking water to…
gbhackers.com - Andariel Hackers Leveraging Remote Tools To Exploit Organizations
The Andariel threat group has been discovered to be using MeshAgent when attacking Korean companies. The group has previously attacked Korean Asset management solutions for installing malware, such as AndarLoader and ModeLoader. However, MeshAgent is used…
gbhackers.com - Azorult Malware Abuses Google Sites To Steal Login Credentials
A new evasive Azorult campaign that uses HTML smuggling to deliver a malicious JSON payload from an external website. The JSON file is then loaded using reflective code loading, a fileless technique that bypasses disk-based detection and also employs an AMSI…
gbhackers.com - U.S. EPA Forms Task Force to Protect Water Systems from Cyberattacks
The U.S. Environmental Protection Agency (EPA) said it's forming a new "Water Sector Cybersecurity Task Force" to devise methods to counter the threats faced by the water sector in the country. "In addition to considering the prevalent vulnerabilities of…
The Hacker News - PoC Exploit Available for CVE-2024-1212 (CVSS 10): Patch Kemp LoadMaster Now
Rhino Security Labs published the technical details and proof-of-concept (PoC) exploit for a severe flaw in Progress Kemp LoadMaster load balancers (CVE-2024-1212, CVSS 10). This vulnerability, if left unpatched, lets attackers execute arbitrary commands...
SecurityOnline - CVE-2024-2615: Update Firefox Now! Zero-Click Attacks Possible
Mozilla has released urgent security updates for both its Firefox browser (Firefox 124, Firefox ESR 115.9) and Thunderbird email client (Thunderbird 115.9), addressing 14 vulnerabilities that could leave users open to severe attacks. These...
SecurityOnline - OFFAT: OFFensive Api Tester
OWASP OFFAT OWASP OFFAT (OFFensive Api Tester) is created to automatically test API for common vulnerabilities after generating tests from the openapi specification file. It provides the feature to automatically fuzz inputs and use...
SecurityOnline - Unmasking UAC-0006: Group Behind Smoke Loader Backdoor
In a troubling escalation of cyberattacks linked to the ongoing conflict, Ukraine’s cybersecurity agency (SCPC SSSCIP) reports a relentless wave of assaults using the Smoke Loader backdoor. Working closely with Unit 42 researchers at...
SecurityOnline - AndroxGh0st: The Python Malware Targeting Laravel Apps
In the ever-evolving world of cybersecurity, threats emerge in various forms, preying on vulnerabilities within systems and applications. One such threat, identified and analyzed by Juniper Threat Labs, is AndroxGh0st, a Python-based malware specifically...
SecurityOnline - NIST Launches Cybersecurity Framework (CSF) 2.0
On February 26, 2024, the National Institute of Standards and Technology (NIST) released the official 2.0 version of the Cyber Security Framework (CSF).
trendmicro.com