News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 0 |
| Thu 22 Oct | 84 | 3 |
| Fri 23 Oct | 68 | 8 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 0 |
| Mon 26 Oct | 74 | 5 |
| Today, Tue 27 Oct | 0 so far | 0 |
Developing
Thu 21 Mar 202472 articles
- Ivanti Patches Critical Vulnerabilities in Standalone Sentry, Neurons for ITSM
Ivanti has released patches for two critical-severity vulnerabilities leading to arbitrary command execution.
SecurityWeek - The best free Syslog servers
The Syslog message format is used by many applications and is associated with the Linux operating system. Discover the best free Syslog servers. [...]
BleepingComputer - GitHub Rolls Out ‘Code Scanning Autofix’ in Public Beta
GitHub’s code scanning autofix delivers remediation suggestions for two-thirds of the identified vulnerabilities.
SecurityWeek - How to Accelerate Vendor Risk Assessments in the Age of SaaS Sprawl
In today's digital-first business environment dominated by SaaS applications, organizations increasingly depend on third-party vendors for essential cloud services and software solutions. As more vendors and services are added to the mix, the complexity and…
The Hacker News - North Korea’s Kimsuky Group Equipped to Exploit Windows Help files
Cybersecurity experts have uncovered a sophisticated cyber espionage campaign orchestrated by the North Korean threat actor group Kimsuky, Black Banshee, or Thallium. This group, notorious for its intelligence-gathering missions, has been active since at…
gbhackers.com - The best network monitoring tools
Discover the best network monitoring tools. Find a system that provides both network device monitoring and traffic analysis. [...]
BleepingComputer - New Application-Layer Loop DoS Attack – 300,000 Online Systems At Risk
Denial-of-service (DoS) attacks are usually exploited by hackers to interrupt regular network and website functioning, with motives of making money or for political reasons or simply to create a mess. The websites or networks can be made unavailable through…
gbhackers.com - 19 million plaintext passwords exposed by incorrectly configured Firebase instances
Three researchers scanned the internet for vulnerable Firebase instances, looking for personally identifiable information (PII). Firebase is a platform for hosting databases, cloud computing, and app development. It’s owned by Google and was set up to help…
Malwarebytes - AceCryptor Exploited in Multi-Country Attacks, European Businesses Targeted
Cybersecurity experts at ESET have sounded the alarm on a significant increase in attacks powered by the AceCryptor platform. Long known as a cryptor-as-a-service (CaaS), enabling criminals to disguise their malware, AceCryptor has recently...
SecurityOnline - GitHub Launches AI-Powered Autofix Tool to Assist Devs in Patching Security Flaws
GitHub on Wednesday announced that it's making available a feature called code scanning autofix in public beta for all Advanced Security customers to provide targeted recommendations in an effort to avoid introducing new security issues. "Powered by GitHub…
The Hacker News - Critical Vulnerabilities Patched in OpenText PVCS Version Manager
Recently, Micro Focus has addressed two serious vulnerabilities in OpenText PVCS Version Manager, a widely used version control system. These flaws, tracked as CVE-2024-1147 and CVE-2024-1148, could allow attackers to upload and download sensitive...
SecurityOnline - The best RMM software
There are many RMM platforms available but not all of them are very good. Here, we look at the best RMM software in the business. [...]
BleepingComputer - Ivanti urges customers to fix critical RCE flaw in Standalone Sentry solution
Ivanti urges customers to address a critical remote code execution vulnerability impacting the Standalone Sentry solution. Ivanti addressed a critical remote code execution vulnerability, tracked as CVE-2023-41724 (CVSS score of 9.6), impacting Standalone…
Security Affairs - Hackers Claimed to have Breached the Israeli Nuclear Facility’s Networks
An Iranian hacker group has claimed to have infiltrated the networks of the Dimona nuclear facility located in Israel’s Negev desert. Israeli cybersecurity teams are diligently working to verify the authenticity of the documents allegedly leaked during this…
gbhackers.com - Making Sense of Operational Technology Attacks: The Past, Present, and Future
When you read reports about cyber-attacks affecting operational technology (OT), it’s easy to get caught up in the hype and assume every single one is sophisticated. But are OT environments all over the world really besieged by a constant barrage of complex…
The Hacker News - CVE-2024-2054: Critical Artica Proxy Flaw Exposed, Patch Unavailable, PoC Published
Security researcher Jaggar Henry at KoreLogic, Inc. has uncovered a severe vulnerability in the popular Artica Proxy appliance, leaving over 100,000 installations globally at risk. The vulnerability, tracked as CVE-2024-2054, could allow unauthenticated…
SecurityOnline - $200,000 Awarded at Pwn2Own 2024 for Tesla Hack
Participants earned a total of $732,500 on the first day of Pwn2Own Vancouver 2024 for hacking a Tesla, operating systems, and other software.
SecurityWeek - StealC Infostealer Spreads in New Disguise, Targets User Data
Security experts at AhnLab Security Emergency Response Center (ASEC) have sounded the alarm on a widespread malware campaign employing the notorious StealC Infostealer. The malware is being distributed en masse, disguised as a legitimate...
SecurityOnline - New Loop DoS attack may target 300,000 vulnerable hosts
Boffins devised a new application-layer loop DoS attack based on the UDP protocol that impacts major vendors, including Broadcom, Microsoft and MikroTik. Researchers from the CISPA Helmholtz Center for Information Security (Germany) devised a new…
Security Affairs - Recent Windows Server Updates Trigger Domain Controller Reboots & Crash
Recent updates for Windows Server have been linked to significant disruptions in IT infrastructure, with numerous reports of domain controllers experiencing crashes and forced reboots. The issues have been traced back to the March 2024 cumulative updates for…
gbhackers.com - Authorities Dismantle Grandoreiro Banking Malware Operation
Group-IB, a cybersecurity firm, helped INTERPOL and Brazil dismantle the Grandoreiro banking trojan operation, as their expertise in threat intelligence and investigation was key. Malware samples collected during independent investigations in Brazil and…
gbhackers.com - U.S. Sanctions Russians Behind 'Doppelganger' Cyber Influence Campaign
The U.S. Treasury Department's Office of Foreign Assets Control (OFAC) on Wednesday announced sanctions against two 46-year-old Russian nationals and the respective companies they own for engaging in cyber influence operations. Ilya Andreevich Gambashidze…
The Hacker News - GitHub’s New AI Tool that Fixes Your Code Automatically
GitHub has leaped application security by introducing a new feature that promises to revolutionize how developers address code vulnerabilities. The new tool, code scanning autofix, is now available in public beta for all GitHub Advanced Security customers,…
gbhackers.com - Windows 11, Tesla, and Ubuntu Linux hacked at Pwn2Own Vancouver
On the first day of Pwn2Own Vancouver 2024, contestants demoed Windows 11, Tesla, and Ubuntu Linux zero-day vulnerabilities and exploit chains to win $732,500 and a Tesla Model 3 car. [...]
BleepingComputer - United Arab Emirates Faces Intensified Cyber-Risk
The UAE leads the Middle East in digital-transformation efforts, but slow patching and legacy technology continue to thwart its security posture.
Dark Reading - Ivanti Releases Urgent Fix for Critical Sentry RCE Vulnerability
Ivanti has disclosed details of a critical remote code execution flaw impacting Standalone Sentry, urging customers to apply the fixes immediately to stay protected against potential cyber threats. Tracked as CVE-2023-41724, the vulnerability carries a CVSS…
The Hacker News - Atlassian Releases Fixes for Over 2 Dozen Flaws, Including Critical Bamboo Bug
Atlassian has released patches for more than two dozen security flaws, including a critical bug impacting Bamboo Data Center and Server that could be exploited without requiring user interaction. Tracked as CVE-2024-1597, the vulnerability carries a CVSS…
The Hacker News - The Not-so-True People-Search Network from China
It’s not unusual for the data brokers behind people-search websites to use pseudonyms in their day-to-day lives (you would, too). Some of these personal data purveyors even try to reinvent their online identities in a bid to hide their conflicts of interest.…
Krebs on Security - PhantomBlu Campaign Unleashes Stealthy Attack – Old RAT, Dangerous New Tricks
A sophisticated new malware campaign dubbed “PhantomBlu” is on the prowl, preying on US-based organizations with a potent combination of evasive techniques and the notorious NetSupport RAT (Remote Access Trojan). Security researchers at Perception...
SecurityOnline - OSTE-Meta-Scanner: A comprehensive web vulnerability scanner
OSTE-Meta-Scanner This project aims to simplify the field of Dynamic Application Security Testing. The OSTE meta scanner is a comprehensive web vulnerability scanner that combines multiple DAST scanners, including Nikto Scanner, OWASP ZAP, Nuclei,...
SecurityOnline - BobTheSmuggler: Leverages HTML Smuggling Attack
Bob the Smuggler “Bob the Smuggler” is a tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would compress your binary (EXE/DLL) into 7z/zip...
SecurityOnline - CVE-2024-1800 (CVSS 9.9): Critical RCE Flaw Found in Popular Reporting Platform
A major security flaw (CVE-2024-1800) has been discovered in the Progress Telerik Report Server, a widely used business reporting solution. This vulnerability, rated as critical with a CVSS score of 9.9, allows attackers to...
SecurityOnline