Skip to content

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Articles per day, last 14 days

Most articles on Wed 21 Oct (96); 10–13 on weekend days.

13 Oct15171921962325Today90 so faravg 59
  • On CISA KEV CVEs
  • Other coverage
  • Closed-day average
Show as table
Articles per day, last 14 days
DayArticlesOn CISA KEV CVEs
Tue 13 Oct8511
Wed 14 Oct8625
Thu 15 Oct7815
Fri 16 Oct6112
Sat 17 Oct101
Sun 18 Oct100
Mon 19 Oct6012
Tue 20 Oct8616
Wed 21 Oct9618
Thu 22 Oct8411
Fri 23 Oct6816
Sat 24 Oct134
Sun 25 Oct132
Mon 26 Oct7520
Today, Tue 27 Oct90 so far17

Developing

Exploited only
53 articles

Latest days

Mon 15 Apr 202453 articles

  1. Critical PHP Vulnerabilities: Update Now to Prevent Takeovers and Command Injection (CVE-2024-1874, CVE-2024-2756, CVE-2024-3096, CVE-2024-2757)

    Critical PHP Vulnerabilities: Update Now to Prevent Takeovers and Command Injection (CVE-2024-1874, CVE-2024-2756, CVE-2024-3096, CVE-2024-2757) The PHP development team recently announced security updates that addressed several vulnerabilities. The…

    SOCRadar
  2. Palo Alto Networks Releases Fixes for Firewall Zero-Day as First Attribution Attempts Emerge

    Palo Alto Networks has started releasing hotfixes for the firewall zero-day CVE-2024-3400, which some have linked to North Korea’s Lazarus.

    SecurityWeek
  3. LightSpy Hackers Indian Apple Device Users to Steal Sensitive Data

    The revival of the LightSpy malware campaign has been observed, focusing on Indian Apple device users. This sophisticated mobile spyware, suspected to have origins in China, is being used for espionage, targeting a select group of individuals, including…

    gbhackers.com
  4. Chinese-Linked LightSpy iOS Spyware Targets South Asian iPhone Users

    Cybersecurity researchers have discovered a "renewed" cyber espionage campaign targeting users in South Asia with the aim of delivering an Apple iOS spyware implant called LightSpy. "The latest iteration of LightSpy, dubbed 'F_Warehouse,' boasts a modular…

    The Hacker News
  5. Global Cyberattack Campaign Dubbed “SteganoAmor”

    Recently, the notorious TA558 group has escalated its offensive, orchestrating a sophisticated series of cyber attacks targeting an array of institutions and companies worldwide. This pervasive campaign, aptly named “SteganoAmor” due to its use...

    SecurityOnline
  6. Palo Alto Networks Releases Urgent Fixes for Exploited PAN-OS Vulnerability

    Palo Alto Networks has released hotfixes to address a maximum-severity security flaw impacting PAN-OS software that has come under active exploitation in the wild. Tracked as CVE-2024-3400 (CVSS score: 10.0), the critical vulnerability is a case of command…

    The Hacker News
  7. A week in security (April 8 – April 14)

    Last week on Malwarebytes Labs: How to change your Social Security Number Apple warns people of mercenary attacks via threat notification system How to check if your data was exposed in the AT&T breach Microsoft’s April 2024 Patch Tuesday include...

    Malwarebytes
  8. U.S. and Australian police arrested Firebird RAT author and operator

    A joint investigation conducted by U.S. and Australian authorities led to the arrest of two key figures behind the Firebird RAT operation. A joint law enforcement operation conducted by the Australian Federal Police (AFP) and the FBI resulted in the arrest…

    Security Affairs
  9. LightSpy Malware Attacking Android and iOS Users

    A new malware known as LightSpy has been targeting Android and iOS users. This sophisticated surveillance tool raises alarms across the cybersecurity community due to its extensive capabilities to exfiltrate sensitive user data. LightSpy is a modular malware…

    gbhackers.com
  10. Critical PHP Vulnerabilities Patched: Update Immediately to Mitigate Attacks

    The PHP development team has released urgent security patches for multiple vulnerabilities affecting versions 8.1.28, 8.2.18, and 8.3.6. These vulnerabilities, ranging from critical command injection flaws to potential account compromises, require immediate…

    SecurityOnline
  11. Popular Text Editor Notepad++ Compromised in “WikiLoader” Malware Attack

    A sophisticated malware campaign targeting the widely-used Notepad++ text editor has been uncovered by security researchers at AhnLab Security Emergency Response Center (ASEC). Dubbed “WikiLoader,” this attack demonstrates the alarming ingenuity of modern…

    SecurityOnline
  12. Espionage Campaign Returns: LightSpy Targets Southern Asia

    The resurgence of the LightSpy mobile spyware campaign poses a renewed and alarming threat to individuals and organizations in Southern Asia, particularly those potentially connected to India. This sophisticated espionage toolkit, analyzed by the...

    SecurityOnline
  13. Roku Experiences Second Data Breach Incident Affecting Over Half a Million Accounts

    Streaming giant Roku has publicly acknowledged a second data breach incident impacting approximately 576,000 user accounts. This follows an initial breach in March 2024, compromising approximately 15,000 accounts. Credential Stuffing Remains the Prime…

    SecurityOnline
Updated AboutDevelopersSign in