News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 17 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 15 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 1 |
| Mon 26 Oct | 75 | 13 |
| Today, Tue 27 Oct | 19 so far | 5 |
Developing
Tue 2 Apr 202447 articles
- China-Linked Threat Actor Taps 'Peculiar' Malware to Evade Detection
UNAPIMON works by meticulously disabling hooks in Windows APIs for detecting malicious processes.
Dark Reading - Microsoft warns Gmail blocks some Outlook email as spam, shares fix
Microsoft has confirmed that some Outlook.com users are experiencing issues with emails being blocked and marked as spam when trying to email Gmail accounts. [...]
BleepingComputer - Winnti's new UNAPIMON tool hides malware from security software
The Chinese 'Winnti' hacking group was found using a previously undocumented malware called UNAPIMON to let malicous processes run without being detected. [...]
BleepingComputer - AT&T confirms 73 million people affected by data breach
Telecommunications giant AT&T has finally confirmed that 73 million current and former customers have been caught up in a massive dark web data leak. The leaked data includes names, addresses, mobile phone numbers, dates of birth, and social security…
Malwarebytes - Fortanix Builds Private Search for AI
Fortanix is working on technologies to build a security wall around AI search.
Dark Reading - NIST Wants Help Digging Out of Its NVD Backlog
The National Vulnerability Database can't keep up, and the agency is calling for a public-private partnership to manage it going forward.
Dark Reading - Omni Hotels experiencing nationwide IT outage since Friday
Omni Hotels & Resorts has been experiencing a chain-wide outage that brought down its IT systems on Friday, impacting reservation, hotel room door lock, and point-of-sale (POS) systems. [...]
BleepingComputer - HHS Plans for Cyber 'One-Stop Shop' After United Healthcare Attack
The initiative is meant to provide more resources and better strategies for healthcare entities that face an increasing amount of cybersecurity challenges.
Dark Reading - Attackers Abuse Google Ad Feature to Target Slack, Notion Users
Campaign distributes malware disguised as legitimate installers for popular workplace collaboration apps by abusing a traffic-tracking feature.
Dark Reading - XSS flaw in WordPress WP-Members Plugin can lead to script injection
A cross-site scripting vulnerability (XXS) in the WordPress WP-Members Membership plugin can lead to malicious script injection. Researchers from Defiant’s Wordfence research team disclosed a cross-site scripting vulnerability (XXS) in the WordPress…
Security Affairs - Heartbleed Is 10 Years Old - Farewell Heartbleed, Hello QuantumBleed!
No content available.
packetstormsecurity.com - Security Flaw In WP-Members Plugin Leads To Script Injection
No content available.
packetstormsecurity.com - Microsoft Warns Deepfake Election Subversion Is Disturbingly Easy
No content available.
packetstormsecurity.com - Google To Destroy Browsing Data To Settle Consumer Privacy Lawsuit
No content available.
packetstormsecurity.com - Pandabuy Admits To Data Breach Of 1.3 Million Unique Records
No content available.
packetstormsecurity.com - Polish Officials May Face Criminal Charges In Pegasus Spyware Probe
No content available.
packetstormsecurity.com - Prudential Financials Exposed Data Of Nearly 37k Customers
No content available.
packetstormsecurity.com - New Chrome feature aims to stop hackers from using stolen cookies
Google announced a new Chrome security feature that ties cookies to a specific device, blocking hackers from stealing and using them to hijack users' accounts. [...]
BleepingComputer - Authentic8 launches Silo Shield Program to Protect High-Risk Communities in Partnership with CISA
Authentic8, provider of the leading OSINT research platform Silo for Research, today launched their Silo Shield Program to enhance online security for high-risk communities. Also today, the U.S. Cybersecurity and Infrastructure Security Agency (CISA)…
gbhackers.com - Binarly released the free online scanner to detect the CVE-2024-3094 Backdoor
Researchers from the firmware security firm Binarly released a free online scanner to detect the CVE-2024-3094 Backdoor Last week, Microsoft engineer Andres Freund discovered a backdoor issue in the latest versions of the “xz” tools and libraries. The…
Security Affairs - Google agrees to delete Chrome browsing data of 136 million users
Google has agreed to delete billions of data records collected from 136 million Chrome users in the United States, as part of a lawsuit settlement regarding alleged undisclosed browser data collection while in Incognito mode. [...]
BleepingComputer - Chrome to Fight Cookie Theft With Device Bound Session Credentials
Google is bringing to Chrome new features to bind browser sessions to the device and protect users against cookie theft.
SecurityWeek - 5 Major Phishing Campaigns in March 2024
March saw many notable phishing attacks, with criminals using new tactics and approaches to target unsuspecting victims. It is time to explore some of the five most noteworthy campaigns to understand the current threat landscape better. Pay close attention…
gbhackers.com - Russia charges suspects behind theft of 160,000 credit cards
Russia's Prosecutor General's Office has announced the indictment of six suspected "hacking group" members for using malware to steal credit card and payment information from foreign online stores. [...]
BleepingComputer - Security Flaw in WP-Members Plugin Leads to Script Injection
A cross-site scripting vulnerability in the WP-Members Membership plugin could allow attackers to inject scripts into user profile pages.
SecurityWeek - New XZ backdoor scanner detects implant in any Linux binary
Firmware security firm Binarly has released a free online scanner to detect Linux executables impacted by the XZ Utils supply chain attack, tracked as CVE-2024-3094. [...]
BleepingComputer - 4 Incident Triage Best Practices for Your Organization in 2024
Maintaining uninterrupted services is vital for any organization. The backbone of ensuring this continuous uptime lies in the Incident Management process. Incident triage is a significant component of this process. It enables organizations to prioritize and…
gbhackers.com - Trusted Advisor now available for Mac, iOS, and Android
First released for Windows last year, the Malwarebytes Trusted Advisor dashboard is also now available on Mac, iOS and Android. Our Trusted Advisor dashboard provides an easy-to-understand assessment of your device’s security, with a single comprehensive…
Malwarebytes - Pentagon Releases Cybersecurity Strategy To Strengthen Defense Industrial Base
The DoD DIB Cybersecurity Strategy is a three-year plan (FY24-27) to improve cybersecurity for defense contractors that aims to create a secure and resilient information environment for the Defense Industrial Base (DIB). It will be achieved through…
gbhackers.com - Boat Dealer MarineMax Confirms Data Breach
MarineMax confirms suffering a data breach as a result of a recent ransomware attack, with the attackers claiming to have obtained 180,000 files.
SecurityWeek - Earth Freybug’s New Weapon: UNAPIMON Evades Detection
In a recent cyberespionage campaign attributed to Earth Freybug (also a subset of APT41), security researchers from Trend Micro observed a unique malware, dubbed UNAPIMON, designed to evade detection. Earth Freybug is a long-standing...
SecurityOnline - Live Forensic Techniques To Detect Ransomware Infection On Linux Machines
Ransomware, initially a Windows threat, now targets Linux systems, endangering IoT ecosystems. Linux ransomware employs diverse encryption methods, evading traditional forensics. Still developing, it shows potential for Windows-level impact. Early awareness…
gbhackers.com - xz-utils Backdoor Affects Kali Linux Installations – How to Check for Infection
A critical vulnerability has been identified in the xz-utils package, versions 5.6.0 to 5.6.1, which harbors a backdoor capable of compromising system security. This vulnerability, cataloged under CVE-2024-3094, poses a significant threat to the Linux…
gbhackers.com - PandaBuy data breach allegedly impacted over 1.3 million customers
Threat actors claimed the hack of the PandaBuy online shopping platform and leaked data belonging to more than 1.3 million customers. At least two threat actors claimed the hack of the PandaBuy online shopping platform and leaked data of more than 1.3…
Security Affairs - Google to Delete Billions of Browsing Records in 'Incognito Mode' Privacy Lawsuit Settlement
Google has agreed to purge billions of data records reflecting users' browsing activities to settle a class action lawsuit that claimed the search giant tracked them without their knowledge or consent in its Chrome browser. The class action, filed in 2020,…
The Hacker News - Veracode Announces Acquisition of Longbow Security
Veracode, a leading provider in the cybersecurity space, has officially announced its acquisition of Longbow Security. This strategic move is poised to revolutionize how organizations manage and mitigate risks in multi-cloud environments, offering a unified…
gbhackers.com - Cybersecurity Threats Intensify in the Middle East During Ramadan
How security teams in the region fortify their defenses amid short-staffing — and increased DDoS, phishing, and ransomware campaigns — during the Muslim holy month.
Dark Reading - Massive Phishing Campaign Strikes Latin America: Venom RAT Targeting Multiple Sectors
The threat actor known as TA558 has been attributed to a new massive phishing campaign that targets a wide range of sectors in Latin America with the goal of deploying Venom RAT. The attacks primarily singled out hotel, travel, trading, financial,…
The Hacker News