News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Today, Wed 28 Oct | 80 so far | 15 |
Developing
Thu 9 May 202454 articles
- CVE-2024-33861: Patch Released for Qt Vulnerability Affecting Applications
The Qt Group has released a security advisory and accompanying patch in response to a vulnerability (CVE-2024-33861) discovered within its QStringConverter component. While the Qt framework itself is not directly vulnerable to remote attacks,...
SecurityOnline - RSA Conference 2024 – Announcements Summary (Day 3)
Hundreds of companies are showcasing their products and services this week at the 2024 edition of the RSA Conference in San Francisco.
SecurityWeek - F5’s Next Central Manager Vulnerabilities Let Hackers Take Full Device Control Remotely
In a significant cybersecurity development, researchers have uncovered critical vulnerabilities in F5’s Next Central Manager, which could potentially allow attackers to gain full administrative control over the device. This alarming security flaw also…
gbhackers.com - Experts warn of two BIG-IP Next Central Manager flaws that allow device takeover
Two high-severity vulnerabilities in BIG-IP Next Central Manager can be exploited to gain admin control and create hidden accounts on any managed assets. F5 has addressed two high-severity vulnerabilities, respectively tracked as CVE-2024-26026 and…
Security Affairs - Zscaler Investigates Hacking Claims After Data Offered for Sale
Zscaler says its customer, production and corporate environments are not impacted after a notorious hacker offers to sell access.
SecurityWeek - Bangladesh IT Provider Database Compromise: 95k Email Addresses Leaked
Tappware, a prominent IT service provider, faced a breach when approximately 50GB of its database was leaked on a hacker forum. This database contained 2.3 million rows of data, including sensitive personal information such as names, addresses, and phone…
gbhackers.com - Polish Government Under Sophisticated Cyber Attack From APT28 Hacker Group
The Polish computer emergency response team CERT.pl has issued a warning about an ongoing cyberattack campaign by the notorious APT28 hacking group, also known as Fancy Bear or Sofacy. The campaign is targeting various Polish government institutions with a…
gbhackers.com - Critical F5 Central Manager Vulnerabilities Allow Enable Full Device Takeover
Two security vulnerabilities have been discovered in F5 Next Central Manager that could be exploited by a threat actor to seize control of the devices and create hidden rogue administrator accounts for persistence. The remotely exploitable flaws "can give…
The Hacker News - SocGholish Campaign Targets Business Networks via Fake Browser Updates
eSentire’s Threat Response Unit (TRU) has detailed a sophisticated SocGholish campaign by the cyber threat group. Notorious for their hands-on-keyboard attacks, SocGholish has evolved its tactics to include using fake browser updates to initiate...
SecurityOnline - Next-Gen F5 BIG-IP Management System Hit by Serious Vulnerabilities
A recent investigation by Eclypsium, a prominent supply chain security firm, has unveiled a series of critical vulnerabilities in F5’s BIG-IP Next Central Manager, which could potentially allow attackers to gain control over the...
SecurityOnline - CVE-2024-24787 (CVSS 9.8): Go Vulnerability Could Lead to Code Execution
The Go programming language, known for its simplicity and efficiency in software development, has recently issued a crucial security advisory addressing two severe vulnerabilities. These flaws, identified in the Go environment, could potentially allow...
SecurityOnline - Critical Flaws in CyberPower Software Put Power Systems at Risk
Researchers have exposed a dangerous set of vulnerabilities within CyberPower’s PowerPanel Business Software, a critical management tool responsible for maintaining Uninterrupted Power Supply (UPS) stability across countless organizations. Threat actors…
SecurityOnline - Beware! AsyncRAT Shapeshifts to Evade Defenses
McAfee Labs exposes the intricate mechanisms of AsyncRAT, a formidable malware designed to infiltrate computer systems and pilfer sensitive information discreetly. The detailed analysis by McAfee Labs unravels an alarming trend of using non-traditional...
SecurityOnline - CVE-2024-34346: Deno Vulnerability Allows Privilege Elevation
Developers and system administrators using Deno, the popular JavaScript, TypeScript, and WebAssembly runtime known for its security-focused architecture, need to be aware of a critical security vulnerability that has been identified and addressed in...
SecurityOnline