News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Today, Wed 28 Oct | 67 so far | 10 |
Developing
Mon 6 May 202452 articles
- Supply Chain Breaches Up 68% Year Over Year, According to DBIR
As Verizon Business redefines "supply chain breach," it could either help organizations address third-party risk holistically or just conflate and confuse.
Dark Reading - LLMs & Malicious Code Injections: 'We Have to Assume It's Coming'
Large language models promise to enhance secure software development life cycles, but there are unintended risks as well, CISO warns at RSAC.
Dark Reading - Google Chrome is getting native support for YouTube-like video chapters
Google is adding a new feature to Google Chrome that allows publishers to add video chapters to videos embedded on websites, similar to how chapters work on YouTube. [...]
BleepingComputer - AttackIQ Partners With Cyber Poverty Line Institute to Provide Academy Courses to Underserved Communities
No content available.
Dark Reading - BigID Launches Industry-First Hybrid Scanning for Cloud Native Workloads
No content available.
Dark Reading - AXA XL Introduces Endorsement to Help Public Companies Address SEC Cyber Reporting Costs
No content available.
Dark Reading - Microsoft tests using MT/s for memory speed in Windows 11 Task Manager
Microsoft is testing showing memory speeds as MT/s (mega-transfers per second) rather than MHz (megahertz) in the Windows 11 Task Manager. [...]
BleepingComputer - Google Debuts New Security Products, Hyping AI and Mandiant Expertise
Google rolls out new threat-intel and security operations products and looks to the magic of AI to tap into the booming cybersecurity market.
SecurityWeek - Microsoft Previews Feature to Block Malicious OAuth Apps
Microsoft is previewing new AI and machine learning capabilities in Defender XDR that will help detect and block malicious OAuth applications.
Dark Reading - New Atomic Stealer Malware Copies Passwords & Wallets from Infected Macs
Several new variants of Atomic macOS Stealer, or AMOS have been observed that are intended to exfiltrate sensitive data from affected Macs. AMOS is transmitted by Trojan horses, which frequently pose as allegedly pirated or “cracked” versions of apps. It is…
gbhackers.com - Tracing what went wrong in 2012 for today’s teens, with Dr. Jean Twenge: Lock and Code S04E10
This week on the Lock and Code podcast… You’ve likely felt it: The dull pull downwards of a smartphone scroll. The “five more minutes” just before bed. The sleep still there after waking. The edges of your calm slowly fraying. After more than a decade of our…
Malwarebytes - APT42 Hackers Posing As Event Organizers To Hijack Victim Network
APT42, a group linked to the Iranian government, is using social engineering tactics such as impersonating journalists and event organizers to trick NGOs, media, academia, legal firms, and activists into providing credentials to access their cloud…
gbhackers.com - Synopsys Sells Software Integrity Business in $2.1 Billion Deal
Synopsys is selling its Software Integrity Group to private equity firms Clearlake Capital and Francisco Partners in a $2.1 billion deal.
SecurityWeek - City of Wichita shuts down IT network after ransomware attack
The City of Wichita, Kansas, disclosed it was forced to shut down portions of its network after suffering a weekend ransomware attack. [...]
BleepingComputer - Why Your VPN May Not Be As Secure As It Claims
Virtual private networking (VPN) companies market their services as a way to prevent anyone from snooping on your Internet usage. But new research suggests this is a dangerous assumption when connecting to a VPN via an untrusted network, because attackers on…
Krebs on Security - Best SIEM Tools List For SOC Team – 2024
The Best SIEM tools for you will depend on your specific requirements, budget, and organizational needs. There are several popular and highly regarded SIEM (Security Information and Event Management) tools available in the market What is SIEM? A security…
gbhackers.com - Critical Tinyproxy Flaw Opens Over 50,000 Hosts to Remote Code Execution
More than 50% of the 90,310 hosts have been found exposing a Tinyproxy service on the internet that's vulnerable to a critical unpatched security flaw in the HTTP/HTTPS proxy tool. The issue, tracked as CVE-2023-49606, carries a CVSS score of 9.8 out of a…
The Hacker News - AT&T Splits Cybersecurity Services Business, Launches LevelBlue
The new company will focus on cybersecurity services as a top-10 managed security service provider, but must expand outside the low-margin managing of security into detection and response.
Dark Reading - China-Linked Hackers Suspected in ArcaneDoor Cyberattacks Targeting Network Devices
The recently uncovered cyber espionage campaign targeting perimeter network devices from several vendors, including Cisco, may have been the work of China-linked actors, according to new findings from attack surface management firm Censys. Dubbed ArcaneDoor...
The Hacker News - City of Wichita hit by a ransomware attack
The City of Wichita in Kansas was forced to shut down its computer systems after a ransomware attack. The City of Wichita, Kansas, was the victim of a ransomware attack and shut down its network to contain the threat. The security breach took place on May…
Security Affairs - Beware of Phishing Attacks Targeting AmericanExpress Card Users
Cybercriminals target American Express cardholders through deceptive emails that mimic official communications from the financial services giant. The scam attempts to trick users into divulging sensitive personal and financial information. How the Scam…
gbhackers.com - Indonesia Emerging As A Hub For Highly Invasive Spyware
In today’s digital age, civil society is facing a serious threat in the form of invasive malware and surveillance technology that has the potential to cause irreparable harm. These malicious tools can infiltrate systems and compromise sensitive information,…
gbhackers.com - Iranian Cyberspies Hit Targets With New Backdoors
Iranian state-sponsored group APT42 is targeting NGOs, government, and intergovernmental organizations with two new backdoors.
SecurityWeek - CyberNut Emerges From Stealth With K-12 Security Awareness Training Solution
CyberNut has emerged from stealth mode with a K-12-focused security awareness training solution and $800k in pre-seed funding.
SecurityWeek - Anetac Emerges From Stealth Mode With $16 Million in Funding
Identity management startup Anetac has emerged from stealth mode with a $16 million investment led by Liberty Global.
SecurityWeek - Get ahead in cybersecurity with $145 off a training course bundle
Cybersecurity is everyone's concern, and for IT workers, a key skill on their resume. This five-course exam prep bundle helps you get more advanced credentials for $49.99, $145 off the $195 MSRP. [...]
BleepingComputer - Lockbit's seized site comes alive to tease new police announcements
The NCA, FBI, and Europol have revived a seized LockBit ransomware data leak site to hint at new information being revealed by law enforcement this Tuesday. [...]
BleepingComputer - Anetac Targets Service Account Security
The new startup’s identity and access management platform uncovers poorly monitored service accounts and secures them from abuse.
Dark Reading - It Costs How Much?!? The Financial Pitfalls of Cyberattacks on SMBs
Cybercriminals are vipers. They’re like snakes in the grass, hiding behind their keyboards, waiting to strike. And if you're a small- and medium-sized business (SMB), your organization is the ideal lair for these serpents to slither into. With cybercriminals…
The Hacker News - El Salvador suffered a massive leak of biometric data
Resecurity found a massive leak involving the exposure of personally identifiable information (PII) of over five million citizens of El Salvador on the Dark Web. Resecurity identified a massive leak of the personally identifiable information (PII) of over…
Security Affairs - US Cyber Command Appoints Morgan Adamski as Executive Director
United States Cyber Command (USCYBERCOM) has named Ms. Morgan M. Adamski as Executive Director effective June 2024.
SecurityWeek - Hackers Use Custom Backdoor & Powershell Scripts to Attack Windows Machines
The Damselfly Advanced Persistent Threat (APT) group, also known as APT42, has been actively utilizing custom backdoor variants, NiceCurl and TameCat, to infiltrate Windows machines. These backdoors are primarily delivered through spear-phishing campaigns,…
gbhackers.com - Xiaomi Android Devices Hit by Multiple Flaws Across Apps and System Components
Multiple security vulnerabilities have been disclosed in various applications and system components within Xiaomi devices running Android. "The vulnerabilities in Xiaomi led to access to arbitrary activities, receivers and services with system privileges,…
The Hacker News - Nestle Brazil Leak, Rakuzan RAT, Access Sales for Japan & UAE Companies
Nestle Brazil Leak, Rakuzan RAT, Access Sales for Japan & UAE Companies Embark on an exploration of the latest Dark Web revelations brought to light by the SOCRadar Dark Web Team. Last week’s findings include a leak involving Nestle Brazil, the sale of…
SOCRadar - Cybersecurity M&A Roundup: 33 Deals Announced in April 2024
Thirty-three cybersecurity-related merger and acquisition (M&A) deals were announced in April 2024.
SecurityWeek - Europe’s Most Wanted Teenage Hacker Arrested
Julius “Zeekill” Kivimäki, once Europe’s most wanted teenage hacker, has been arrested. Kivimäki, known for his involvement with the notorious Lizard Squad, was apprehended after a series of cybercrimes that shocked the continen...
gbhackers.com - City of Wichita Shuts Down Network Following Ransomware Attack
The City of Wichita, Kansas, has shut down its network after falling victim to a file-encrypting ransomware attack.
SecurityWeek - A week in security (April 29 – May 5)
Last week on Malwarebytes Labs: You get a passkey, you get a passkey, everyone should get a passkey Dropbox Sign customer data accessed in breach Watch out for tech support scams lurking in sponsored search results Psychotherapy practice hacker gets...
Malwarebytes - QCSuper: capture raw 2G/3G/4G/ 5G radio frames
QCSuper QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G (and for certain models 5G) radio frames, among other things. It will allow you to generate PCAP captures of it using either...
SecurityOnline