News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 75 | 20 |
| Tue 27 Oct | 93 | 18 |
| Today, Wed 28 Oct | 0 so far | 0 |
Developing
Wed 17 Apr 202465 articles
- New Android Banker “SoumniBot” Employs Clever Tricks to Evade Detection
Researchers at Kaspersky Labs have detailed a sophisticated new Android banking trojan, dubbed “SoumniBot,” that targets Korean users. The malware is notable for its employment of unconventional obfuscation techniques centered on manipulating the Android...
SecurityOnline - Oracle Patches 230 Vulnerabilities With April 2024 CPU
Oracle releases 441 new security patches to address 230 vulnerabilities as part of its April 2024 Critical Patch Update.
SecurityWeek - Hackers Exploit Fortinet Flaw, Deploy ScreenConnect, Metasploit in New Campaign
Cybersecurity researchers have discovered a new campaign that's exploiting a recently disclosed security flaw in Fortinet FortiClient EMS devices to deliver ScreenConnect and Metasploit Powerfun payloads. The activity entails the exploitation of…
The Hacker News - Dark Web Monitoring with Open-Source Tools and Services
Dark Web Monitoring with Open-Source Tools and Services The dark web, intentionally hidden on the internet, is accessible only through specialized browsers or technologies. Defenders monitor it for clues on potential cyber threats, leveraging various tools,…
SOCRadar - 'Sandworm' Group Is Russia's Primary Cyberattack Unit in Ukraine
But even with that focus, the sophisticated threat group has continued operations against targets globally, including the US, says Google's Mandiant.
Dark Reading - Outlook Login Panel Themed Phishing Attack Evaded All Antivirus Detections
Cybersecurity researchers have uncovered a new phishing attack that has bypassed all antivirus detections. The attack, designed to mimic the Outlook login panel, successfully tricking users into revealing their login credentials. Security researcher…
gbhackers.com - Exploitation of Palo Alto Firewall Vulnerability Picking Up After PoC Release
Palo Alto Networks firewall vulnerability CVE-2024-3400 increasingly exploited after PoC code has been released.
SecurityWeek - Cisco Warns Of Massive Brute-Force Attacks Targeting VPNs & SSH Services
Hackers use brute-force attacks since it is an uncomplicated technique to break passwords or get into systems without permission. By systematically trying various combinations of usernames and passwords, attackers can exploit weak credentials. Brute-force…
gbhackers.com - Cisco Warns of Global Surge in Brute-Force Attacks Targeting VPN and SSH Services
Cisco is warning about a global surge in brute-force attacks targeting various devices, including Virtual Private Network (VPN) services, web application authentication interfaces, and SSH services, since at least March 18, 2024. "These attacks all appear to…
The Hacker News - Tor Browser 13.0.14 Released – What’s New!
The Tor Project has released a new version of the Tor Browser, their secure and private web browsing tool. Tor Browser 13.0.14 includes several critical security updates and bug fixes. Key Updates in Tor Browser 13.0.14 The latest release of Tor Browser…
gbhackers.com - Operation MidnightEclipse: Hackers Actively Exploiting Palo Alto Networks Zero-Day Flaw
The Palo Alto Networks PAN-OS software has a critical command injection vulnerability that allows an unauthorized attacker to run arbitrary code on the firewall with root access. The vulnerability is identified as CVE-2024-3400, with a CVSS score of 10.0.…
gbhackers.com - INC Ransom Group Exfiltrates Data Before Encrypting & Threatens Public Exposure
Hackers exfiltrate data first before encrypting it to increase their bargaining power during ransom negotiations. Threats of public exposure of private information accelerate up the urgency for victims to pay a ransom immediately. Secureworks Counter Threat…
gbhackers.com - Iran Launched A Major Cyberattack Against Critical Infrastructure In Israel
Over the weekend, Iran launched missile and drone attacks on Israel, retaliating for a suspected Israeli strike on its Damascus consulate that killed 13 people last week. This escalation arises from the ongoing Israel-Iran rivalry and Israel-Palestine…
gbhackers.com - New Android Malware Mimic Google Chrome to Steal Banking Details
Security researchers have uncovered a new strain of Android malware that masquerades as the popular Google Chrome browser to steal sensitive banking information from unsuspecting users. The malware, dubbed “Mamont Spy Banker,” has been found to target…
gbhackers.com - Israeli Defense Forces Hold Hybrid Cyber & Military Readiness Drills
Israel prepares for a response to Iran's April 14 drone and missile attack.
Dark Reading - UK e-visa rollout begins today: no more immigration cards for millions
Starting today, millions living in the UK will receive email invitations to sign up for an e-visa account that will replace their physical immigration documents like Biometric Residence Permits (BRPs). The move is, according to the Home Office, "a key step…
BleepingComputer - Researchers released exploit code for actively exploited Palo Alto PAN-OS bug
Researchers released an exploit code for the actively exploited vulnerability CVE-2024-3400 in Palo Alto Networks’ PAN-OS. Researchers at watchTowr Labs have released a technical analysis of the vulnerability CVE-2024-3400 in Palo Alto Networks’ PAN-OS and a…
Security Affairs - Cisco warns of large-scale brute-force attacks against VPN and SSH services
Cisco Talos warns of large-scale brute-force attacks against a variety of targets, including VPN services, web application authentication interfaces and SSH services. Cisco Talos researchers warn of large-scale credential brute-force attacks targeting…
Security Affairs - “INC” Ransomware Surge: New GOLD IONIC Group Hits Global Targets
Cybersecurity researchers at Secureworks Counter Threat Unit (CTU) are tracking a significant escalation in activity from the GOLD IONIC ransomware group. This aggressive threat group has rapidly amassed a list of victims since emerging...
SecurityOnline - Beware! Fake Chrome App “Mamont” Steals Banking Details
Cybersecurity researchers at G DATA have uncovered a sneaky new Android banking trojan named “Mamont.” This malware, currently targeting Russian-speaking individuals, masquerades as a fake Google Chrome app to trick unsuspecting users. Once installed,...
SecurityOnline - LightSpy Hackers Target Indian Apple Device Users To Steal Sensitive Data
Hackers target Apple device users because they are perceived to be of higher social classes. This leads to targets who are richer than others and who can possibly provide more money to the hackers in one way or another. Besides this, Apple’s ecosystem is…
gbhackers.com - Unstoppable Malware? Report Warns of “Mobile NotPetya” Outbreak Risk
According to a detailed report by Recorded Future’s Insikt Group, the cybersecurity landscape faces a formidable threat in the form of “Mobile NotPetya,” a potential zero-click, wormable mobile malware that could spread autonomously and...
SecurityOnline - Old Vulnerability, New Attacks: Botnets Swarm Exploited CVE-2023-1389 in TP-Link Routers
Cybersecurity experts at FortiGuard Labs are sounding the alarm about a wave of attacks targeting a known vulnerability in TP-Link Archer AX21 routers. Despite a year-old fix, hackers are exploiting unpatched devices, fueling the...
SecurityOnline - Evil Ant Ransomware Exposed: Flaw Offers Recovery Hope
Cybersecurity researchers at Netskope Threat Labs have uncovered a new ransomware strain dubbed “Evil Ant.” While this ransomware can successfully encrypt a victim’s files, serious flaws in its design offer hope for recovery, even...
SecurityOnline - North Korean Hackers Hone Social Engineering Skills, Abuse DMARC to Target Foreign Policy Experts
A newly released report from cybersecurity leaders at Proofpoint paints a chilling picture of North Korean hacking operations reaching new levels of sophistication. Threat group TA427, aligned with the North Korean government, has been...
SecurityOnline