Skip to content

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Articles per day, last 14 days

Most articles on Wed 21 Oct (96); 10–13 on weekend days.

15 Oct17192196232527Today0 so faravg 60
  • On CISA KEV CVEs
  • Other coverage
  • Closed-day average
Show as table
Articles per day, last 14 days
DayArticlesOn CISA KEV CVEs
Thu 15 Oct7815
Fri 16 Oct6112
Sat 17 Oct101
Sun 18 Oct100
Mon 19 Oct6012
Tue 20 Oct8616
Wed 21 Oct9618
Thu 22 Oct8411
Fri 23 Oct6816
Sat 24 Oct134
Sun 25 Oct132
Mon 26 Oct7620
Tue 27 Oct9518
Wed 28 Oct8715
Today, Thu 29 Oct0 so far0

Developing

Exploited only
53 articles

Latest days

Mon 13 May 202453 articles

  1. Romance Scammers Target Cryptocurrency Investors with Social Engineering and Fake Exchanges

    AhnLab’s Mobile Analysis Team has issued an alarm about an insidious new breed of romance scams specifically targeting cryptocurrency enthusiasts. These scams go beyond the typical emotional manipulation seen in traditional romance scams, incorporating...

    SecurityOnline
  2. Apache OFBiz RCE Flaw Let Attackers Execute Malicious Code Remotely

    Many businesses use enterprise resource planning (ERP) systems like Apache OFBiz. However, it has been found to have significant security holes that let attackers run harmful code from afar without being verified. Businesses that depend on Apache OFBiz for…

    gbhackers.com
  3. Microsoft Edge Zero-Day Vulnerability Patched: Urgent Update Needed

    Cybersecurity experts are urging all Microsoft Edge users to immediately install the latest security update, released on May 10th. This critical update addresses several vulnerabilities, including a zero-day flaw (CVE-2024-4671) that was actively being...

    SecurityOnline
  4. Australian Firstmac Limited disclosed a data breach after cyber attack

    Firstmac Limited disclosed a data breach after the new Embargo extortion group leaked over 500GB of data allegedly stolen from the company. Firstmac Limited, one of the largest non-bank lenders in Australia, disclosed a data breach. Firstmac Limited is an…

    Security Affairs
  5. A week in security (May 6 – May 12)

    Last week on Malwarebytes Labs: Dell notifies customers about data breach DocGo patient health data stolen in cyberattack Desperate Taylor Swift fans defrauded by ticket scams Tracing what went wrong in 2012 for today’s teens, with Dr. Jean Twenge: L...

    Malwarebytes
  6. Ohio Lottery Hacked: 500,000+ Customers Data Exposed

    A major cybersecurity breach happened at the Ohio Lottery, letting people into its private systems without permission. The breach wasn’t found until April 5, 2024, so the information of about 538,959 people was out in the open for months. People’s private…

    gbhackers.com
  7. Malicious Python Package Hides Sliver C2 Framework in Fake Requests Library Logo

    Cybersecurity researchers have identified a malicious Python package that purports to be an offshoot of the popular requests library and has been found concealing a Golang-version of the Sliver command-and-control (C2) framework within a PNG image of the…

    The Hacker News
  8. Hackers Exploiting Vulnerabilities 50% Faster, Within 4.76 Days

    Cybersecurity researchers are sounding the alarm that hackers are exploiting software vulnerabilities faster than ever before. A new report from Fortinet found that in the second half of 2023, the average time between a vulnerability being disclosed and…

    gbhackers.com
  9. Security Vulnerability: Researcher Finds FIDO2 Open to Session Hijacking

    A new study by Dor Segal, a security researcher at Silverfort, has revealed a critical vulnerability in FIDO2, the popular passwordless authentication standard designed to protect against phishing and man-in-the-middle (MITM) attacks. The research...

    SecurityOnline
  10. NHS England Digital Warns of Exploited Vulnerabilities in Arcserve UDP

    Recently, NHS England Digital issued an urgent cybersecurity alert following the discovery and remediation of critical vulnerabilities within Arcserve’s Unified Data Protection (UDP) platform. This alert comes in the wake of potential exploitation attempts...

    SecurityOnline
  11. Trinity Ransomware: A New Player with Troubling Connections to Established Threats

    Cyble Research and Intelligence Labs (CRIL) has recently published a detailed analysis of a newly identified ransomware variant named Trinity, highlighting its potential links to the previously known Venus ransomware. This report delves into...

    SecurityOnline
  12. CVE-2024-32113 – RCE Vulnerability in Apache OFBiz: Immediate Action Required

    A serious vulnerability (CVE-2024-32113) has been uncovered in Apache OFBiz, a popular suite of enterprise software tools. This flaw, described as a path traversal issue, could enable attackers to execute malicious code remotely on...

    SecurityOnline
  13. New Phishing Campaigns from Scattered Spider Target Finance and Insurance Industries

    The notorious cybercriminal group, Scattered Spider, previously known for high-profile attacks on MGM and Caesars, has now broadened its scope to aggressively target the finance and insurance industries, according to a recent report from...

    SecurityOnline
Updated AboutDevelopersSign in