News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Today, Wed 28 Oct | 20 so far | 4 |
Developing
Fri 26 Apr 202453 articles
- New SSLoad Malware Combined With Tools Hijacking Entire Network Domain
A new attack campaign has been discovered to be employed by the FROZEN#SHADOW, which utilized SSLoad malware for its operations and Cobalt Strike Implants to pivot and take over the entire network. In addition, the threat actors also used Remote Monitoring…
gbhackers.com - Sweden’s liquor supply severely impacted by ransomware attack on logistics company
A ransomware attack on a Swedish logistics company Skanlog severely impacted the country’s liquor supply. Skanlog, a critical distributor for Systembolaget, the Swedish government-owned retail chain suffered a ransomware attack. Systembolaget has a monopoly…
Security Affairs - Palo Alto Networks Shares Remediation Advice for Hacked Firewalls
Palo Alto Networks has issued urgent remediation advice after discovering a critical vulnerability, designated CVE-2024-3400, which threat actors have exploited to gain unauthorized access to several firewall products. The cybersecurity giant has outlined…
gbhackers.com - Hackers Exploiting WP-Automatic Plugin Bug to Create Admin Accounts on WordPress Sites
Threat actors are attempting to actively exploit a critical security flaw in the WP‑Automatic plugin for WordPress that could allow site takeovers. The shortcoming, tracked as CVE-2024-27956, carries a CVSS score of 9.9 out of a maximum of 10. It impacts all…
The Hacker News - PCI Launches Payment Card Cybersecurity Effort in the Middle East
The payment card industry pushes for more security in financial transactions to help combat increasing fraud in the region.
Dark Reading - Alert: “Brokewell” Malware – New Threat Targets Bank Users with Remote Device Takeover
ThreatFabric has unveiled a sophisticated new Android malware strain named “Brokewell.” This potent threat combines extensive data theft capabilities with remote device control, allowing attackers to hijack infected phones for fraudulent financial…
SecurityOnline - Skylab IGX IIoT Gateway Vulnerability (CVE-2024-4163): Root Access for Attackers
A significant vulnerability has been exposed in the widely-used Skylab IGX IIoT Gateway (CVE-2024-4163), allowing attackers to escalate their privileges and potentially take complete control of the affected devices. This flaw puts sensitive industrial...
SecurityOnline - Thousands of API Secrets Exposed on Postman – Are Your Credentials At Risk?
Postman, the tool beloved by developers for testing and building APIs, is unwittingly becoming a treasure trove for hackers. Security firm Truffle Security uncovered a shocking problem: thousands of live API keys, authentication tokens,...
SecurityOnline - Iranian Hacker Group MuddyWater Abuses Legitimate Atera Software to Target Global Organizations
Security researchers at Harfang Lab have uncovered an ongoing MuddyWater campaign that has been escalating since late 2023. MuddyWater, an Iranian state-backed hacking group, is exploiting the legitimate remote monitoring and management (RMM) solution...
SecurityOnline - Hackers Employ Advanced Fileless Attack to Implant AgentTesla Malware
SonicWall Capture Labs threat research team has recently uncovered sophisticated .NET managed code injection methods employed by the notorious AgentTesla malware, marking a significant advancement in malware delivery tactics. The detailed technical analysis…
SecurityOnline - PoC Exploit Releases for Critical Progress Flowmon Bug – CVE-2024-2389 (CVSS 10)
Researchers at Rhino Security Labs have detailed a critical security flaw in Progress Flowmon, a widely used network monitoring tool. Identified as CVE-2024-2389, this vulnerability allows for unauthenticated command injection with a severity score...
SecurityOnline - AI Powers a Phishing Frenzy – Zscaler Report Warns of Unprecedented Threat Wave
Recently, Zscaler ThreatLabz released its 2024 Phishing Report, revealing a disturbing evolution in phishing tactics fueled by generative AI technologies. This detailed analysis, based on over 2 billion phishing transactions in 2023, presents a...
SecurityOnline - Beware of Search Results: Hackers Using Fake Websites to Spread Malware
Security experts at Zscaler ThreatLabz have revealed a widespread campaign where hackers are hijacking legitimate web hosting platforms to distribute dangerous malware. By mimicking legitimate websites and using fraudulent search engine optimization (SEO)…
SecurityOnline