News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 13 Oct | 85 | 11 |
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 17 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 15 |
| Sat 24 Oct | 13 | 3 |
| Sun 25 Oct | 13 | 1 |
| Mon 26 Oct | 75 | 13 |
| Today, Tue 27 Oct | 56 so far | 12 |
Developing
Tue 9 Apr 202415 articles
- New Jamf Tools Give Enterprise IT Security and Compliance Controls
The device management company introduced a Fleet Hardening Score and Privilege Escalation (the good kind) to its endpoint security platform for Apple devices.
Dark Reading - Microsoft fixes two Windows zero-days exploited in malware attacks
Microsoft has fixed two actively exploited zero-day vulnerabilities during the April 2024 Patch Tuesday, although the company failed to initially tag them as such. [...]
BleepingComputer - Microsoft Patch Tuesday Tsunami: No Zero-Days, but an Asterisk
Microsoft patched a record number of 147 new CVEs this month, though only three are rated "Critical."
Dark Reading - Hackers Exploit Google Ads to Target Admins with Fake Software Downloads
Security researchers at Malwarebytes have uncovered a troubling new tactic by cybercriminals. They’re using malicious ads disguised as legitimate software downloads on Google Search to infect the computers of unsuspecting system administrators. The Trap...
SecurityOnline - ESET Launches a New Solution for Small Office/Home Office Businesses
No content available.
Dark Reading - LG Smart TVs at Risk of Attacks, Thanks to 4 OS Vulnerabilities
Scans showed that 91,000 devices are exposed and at risk for unauthorized access and TV set takeover.
Dark Reading - New Spectre Variant (CVE-2024-2201) Exposes Limitations of Current Defenses
Security researchers have disclosed a new Spectre v2 variant (CVE-2024-2201) targeting Branch History Injection (BHI) within modern CPUs that support speculative execution. This vulnerability allows an unauthenticated attacker to leak privileged memory,…
SecurityOnline - April’s Patch Tuesday Brings Record Number of Fixes
If only Patch Tuesdays came around infrequently — like total solar eclipse rare — instead of just creeping up on us each month like The Man in the Moon. Although to be fair, it would be tough for Microsoft to eclipse the number of vulnerabilities fixed in…
Krebs on Security - Critical Rust flaw enables Windows command injection attacks
Threat actors can exploit a security vulnerability in the Rust standard library to target Windows systems in command injection attacks. [...]
BleepingComputer - “Muddled Libra” Hackers Shift Focus to Cloud and SaaS Attacks
In a chilling development that highlights the ever-evolving nature of cyber threats, the infamous “Muddled Libra” hacking group is setting its sights on a new frontier: the cloud and Software-as-a-Service (SaaS). A comprehensive report...
SecurityOnline - CVE-2024-29988: ‘In-the-Wild’ Flaw Among Microsoft’s April 2024 Patch Tuesday
Microsoft’s April 2024 Patch Tuesday release brings a staggering 147 new vulnerability fixes across its software ecosystem. The sheer volume highlights the relentless cybersecurity battle, especially considering reports of a zero-day vulnerability already…
SecurityOnline - Fortinet Patches Multiple Critical Vulnerabilities Affecting FortiClient, FortiSandbox, FortiOS, and FortiProxy
Fortinet has released an urgent security advisory and patches addressing several critical and high-severity vulnerabilities in their popular security products. These vulnerabilities could expose organizations to remote code execution, unauthorized file…
SecurityOnline - Active Nitrogen campaign delivered via malicious ads for PuTTY, FileZilla
In the past couple of weeks, we have observed an ongoing campaign targeting system administrators with fraudulent ads for popular system utilities. The malicious ads are displayed as sponsored results on Google’s search engine page and localized to North…
Malwarebytes - CVE-2024-24576 (CVSS 10): Rust Flaw Exposes Windows Systems to Command Injection Attacks
A critical vulnerability in the Rust standard library has been uncovered, exposing Windows-based systems to the risk of arbitrary code execution. The flaw, tracked as CVE-2024-24576, could potentially be exploited by attackers to gain...
SecurityOnline