News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Today, Wed 28 Oct | 54 so far | 8 |
Developing
Thu 2 May 202473 articles
- 1,400 GitLab Servers Impacted by Exploited Vulnerability
CISA says a critical GitLab password reset flaw is being exploited in attacks and roughly 1,400 servers have not been patched.
SecurityWeek - Russian Hackers Target Industrial Systems in North America, Europe
Government agencies are sharing recommendations following attacks claimed by pro-Russian hacktivists on ICS/OT systems.
SecurityWeek - Russian Hackers Actively Attacking Small-scale Infrastructure Sectors
Russian hacktivists increasingly target small-scale operational technology (OT) systems across North America and Europe. These attacks, primarily focused on the Water and Wastewater Systems (WWS), Dams, Energy, and Food and Agriculture sectors, pose…
gbhackers.com - CISA adds GitLab flaw to its Known Exploited Vulnerabilities catalog
CISA adds GitLab Community and Enterprise Editions improper access control vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a GitLab Community and Enterprise Editions impro...
Security Affairs - CVE-2024-32114: High-Severity Vulnerability Exposed in Apache ActiveMQ
Apache ActiveMQ, widely regarded as the most popular open-source, multi-protocol, Java-based message broker, facilitates communication across a diverse array of client software and programming languages, including JavaScript, C, C++, Python, .Net, and more.…
SecurityOnline - When is One Vulnerability Scanner Not Enough?
Like antivirus software, vulnerability scans rely on a database of known weaknesses. That’s why websites like VirusTotal exist, to give cyber practitioners a chance to see whether a malware sample is detected by multiple virus scanning engines, but this…
The Hacker News - Dropbox Discloses Breach of Digital Signature Service Affecting All Users
Cloud storage services provider Dropbox on Wednesday disclosed that Dropbox Sign (formerly HelloSign) was breached by unidentified threat actors, who accessed emails, usernames, and general account settings associated with all users of the digital signature…
The Hacker News - New "Goldoon" Botnet Targets D-Link Routers With Decade-Old Flaw
A never-before-seen botnet called Goldoon has been observed targeting D-Link routers with a nearly decade-old critical security flaw with the goal of using the compromised devices for further attacks. The vulnerability in question is CVE-2015-2...
The Hacker News - The Future of Passwordless Authentication in Cybersecurity
The Future of Passwordless Authentication in Cybersecurity Passwordless authentication is a validation method that eliminates the use of traditional passwords. Instead, it leverages alternative methods such as biometric characteristics (like fingerprints or…
SOCRadar - Microsoft Graph API Emerges as a Top Attacker Tool to Plot Data Theft
Weaponizing Microsoft's own services for command-and-control is simple and costless, and it helps attackers better avoid detection.
Dark Reading - Cisco IP Phones Exposed: Vulnerabilities Allow Hackers to Disrupt, Spy, and Even Make Calls
Cisco has issued a security advisory highlighting multiple vulnerabilities in the firmware of several IP Phone models that could allow unauthenticated, remote attackers to engage in detrimental activities ranging from denial of service (DoS)...
SecurityOnline - CVE-2024-32971: Critical Vulnerability in Apollo Router Compromises Data Integrity
A critical-severity vulnerability, identified as CVE-2024-32971 with a CVSS score of 9.1, has been discovered in versions 1.44.0 and 1.45.0 of the Apollo Router, a high-performance graph router written in Rust designed for handling...
SecurityOnline - Threat Actors Attacking MS-SQL Servers to Deploy Ransomware
Cybersecurity experts have uncovered a series of sophisticated cyberattacks targeting poorly managed Microsoft SQL (MS-SQL) servers. The attackers, identified as the TargetCompany ransomware group, have been deploying the Mallox ransomware in a bid to…
gbhackers.com - Iran’s APT42 Spies Target NGOs, Clouds in Espionage Campaign
A new report by cybersecurity firm Mandiant has revealed the inner workings of APT42, an Iranian state-sponsored actor believed to be operating under the aegis of the Islamic Revolutionary Guard Corps Intelligence Organization (IRGC-IO)....
SecurityOnline - Dropbox Data Breach Impacts Customer Information
Dropbox says hackers breached its Sign production environment and accessed customer email addresses and hashed passwords.
SecurityWeek - Panda Restaurant Group disclosed a data breach
Panda Restaurant Group disclosed a data breach that occurred in March, resulting in the theft of associates’ personal information. Panda Restaurant Group disclosed a data breach that occurred in March, resulting in the theft of personal information belonging…
Security Affairs - REvil Ransomware Affiliate Sentenced for 13 Years in Prison
A Ukrainian national, Yaroslav Vasinskyi, has been sentenced to 13 years and seven months in prison. Vasinskyi, known in the cyber underworld as Rabotnik, was also ordered to pay over $16 million in restitution for his role in orchestrating more than 2,500…
gbhackers.com - USB Malware Attacks Targeting Industrial Systems Adapts LOL Tactics
Honeywell’s 2024 GARD USB Threat Report analyzes malware discovered on USB devices used in industrial settings, highlighting a significant increase in malware prevalence, with a 33% rise in detections compared to the prior year. The malware poses a serious…
gbhackers.com - CISA Warns of Active Exploitation of Severe GitLab Password Reset Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical flaw impacting GitLab to its Known Exploited Vulnerabilities (KEV) catalog, owing to active exploitation in the wild. Tracked as CVE-2023-7028 (CVSS score: 10.0), the…
The Hacker News - Attention all Windows Users! The Microsoft April Security Update Could Break Your VPN
In a recent development that has caught the attention of IT administrators and users alike, Microsoft has acknowledged a significant issue affecting VPN connections on Windows devices. This problem has emerged following the installation of the April 2024…
gbhackers.com - New Cuttlefish Malware Hijacks Router Connections, Sniffs for Cloud Credentials
A new malware called Cuttlefish is targeting small office and home office (SOHO) routers with the goal of stealthily monitoring all traffic through the devices and gather authentication data from HTTP GET and POST requests. "This malware is modular,...
The Hacker News - 'DuneQuixote' Shows Stealth Cyberattack Methods Are Evolving. Can Defenders Keep Up?
A recent campaign targeting Middle Eastern government organizations plays standard detection tools like a fiddle. With cyberattackers getting more creative, defenders must start keeping pace.
Dark Reading - CVE-2024-32962 (CVSS 10): Critical Vulnerability in XML-Crypto Affects Millions
A significant security flaw has been discovered in the widely used XML-Crypto npm package, a tool integral to the cryptographic security of XML documents. This vulnerability, identified as CVE-2024-32962, carries the highest severity score...
SecurityOnline - Dropbox Sign Data Breach: What You Need to Know and How to Protect Yourself
Dropbox confirmed a security breach on April 24th within its Dropbox Sign (formerly HelloSign) service, exposing customer data including email addresses, usernames, phone numbers, and hashed passwords. API keys, OAuth tokens, and authentication information...
SecurityOnline - New Cuttlefish Malware Evades Detection, Targets SOHO Routers
Security researchers at Lumen Technologies’ Black Lotus Labs have uncovered a sophisticated new malware campaign targeting enterprise-grade small office/home office (SOHO) routers. Dubbed “Cuttlefish,” the malware is designed to remain undetected while…
SecurityOnline - Adload Adware Quickly Evades Apple’s Expanded XProtect
A recent update of Apple’s XProtect security framework, which included an unprecedented 74 new rules targeting the prolific Adload adware, appears to have been ineffective. Security researchers at SentinelOne have identified new Adload variants...
SecurityOnline - Panda Restaurant Corporate Systems Hacked: Customer Data Exposed
Panda Restaurant Group, Inc., a leading name in the fast-food industry, has confirmed a significant breach in its corporate data systems. The incident, which came to light on March 10, 2024, has potentially compromised the personal information of an…
gbhackers.com - “Dirty Stream” Vulnerability Pattern Uncovered: New Threat Imperils Popular Android Apps
Security researchers at Microsoft Threat Intelligence have revealed a critical vulnerability pattern affecting a wide array of popular Android applications. Dubbed “Dirty Stream,” this vulnerability presents a new method for malicious apps to subvert...
SecurityOnline - HPE Aruba Networking Patches Critical Vulnerabilities in Mobility Controllers and Gateways
Recently, HPE Aruba Networking announced a comprehensive update to its ArubaOS software, targeting multiple critical vulnerabilities that could potentially allow attackers to execute arbitrary code remotely and cause denial-of-service conditions. The…
SecurityOnline - “Goldoon” Botnet Exploits Unpatched D-Link Devices
Security researchers at FortiGuard Labs have uncovered a new botnet campaign. Dubbed “Goldoon,” this botnet is ruthlessly exploiting a nearly decade-old vulnerability in D-Link devices to commandeer them for malicious activities, primarily Distributed…
SecurityOnline - TargetCompany Ransomware Group Escalates Attacks: New Tools and Persistent Targeting of MS-SQL Servers
The world of cybersecurity is witnessing an alarming trend as ransomware groups intensify their attacks on Microsoft SQL (MS-SQL) servers, exploiting weak management practices to deploy devastating malware. The AhnLab Security Intelligence Center (ASEC)...
SecurityOnline - Change Healthcare Cyberattack Was Due to a Lack of Multifactor Authentication, UnitedHealth CEO says
UnitedHealth CEO Andrew Witty said in a U.S. Senate hearing that his company is still trying to understand why the server did not have the additional protection.
SecurityWeek - Deepfake of Principal’s Voice Is the Latest Case of AI Being Used for Harm
Everyone — not just politicians and celebrities — should be concerned about this increasingly powerful deep-fake technology, experts say.
SecurityWeek