News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 15 |
| Today, Thu 29 Oct | 0 so far | 0 |
Developing
Tue 14 May 202467 articles
- 6 Mistakes Organizations Make When Deploying Advanced Authentication
Deploying advanced authentication measures is key to helping organizations address their weakest cybersecurity link: their human users. Having some form of 2-factor authentication in place is a great start, but many organizations may not yet be in that spot…
The Hacker News - Ongoing Campaign Bombarded Enterprises with Spam Emails and Phone Calls
Cybersecurity researchers have uncovered an ongoing social engineering campaign that bombards enterprises with spam emails with the goal of obtaining initial access to their environments for follow-on exploitation. "The incident involves a threat actor…
The Hacker News - Student, Personnel Information Stolen in City of Helsinki Cyberattack
The City of Helsinki says usernames, email addresses, and personal information was stolen in a recent cyberattack.
SecurityWeek - Analysis of UK Password Dictionary: The Ultimate Wordlist
Analysis of UK Password Dictionary: The Ultimate Wordlist Passwords should be strong and unique. They act as the first line of defense in safeguarding our personal and business digital assets. As we explore the most commonly used passwords in the UK, we hope…
SOCRadar - New Botnet Sending Millions of Weaponized Emails with LockBit Black Ransomware
The New Jersey Cybersecurity & Communications Integration Cell (NJCCIC) has detected a formidable new cyber threat. Dubbed LockBit Black, this ransomware campaign is leveraging a botnet to distribute millions of weaponized emails, posing a significant risk…
gbhackers.com - 3 recommendations for adopting generative AI for cyber defense
In the past eighteen months, generative AI (gen AI) has gone from being the source of jaw-dropping demos to a top strategic priority in nearly every industry. A majority of CEOs report feeling under pressure to invest in gen AI. Product teams are now…
securityintelligence.com - MITRE EMB3D Threat Model Officially Released
MITRE announced the public availability of the EMB3D threat model for embedded devices used in critical infrastructure.
SecurityWeek - FCC Warns of ‘Royal Tiger’ Robocall Scammers
The FCC has issued a public notice on robocall scammer group ‘Royal Tiger’, the first designated threat actor.
SecurityWeek - CVE-2024-33006: Critical SAP Vulnerability Exposes Systems to Complete Takeover
German enterprise software giant SAP has announced the release of 14 new security notes and three updates to previously released notes as part of its May 2024 Security Patch Day. The most significant new...
SecurityOnline - Zscaler Concludes Investigation: Only Test Servers Compromised
In a recent development, Zscaler Inc., a prominent cybersecurity firm, has concluded its investigation into a potential data breach initially reported last week. The company confirmed that the breach was confined to an isolated test environment on a single…
gbhackers.com - Threat Actor Selling INC Ransomware Code for $300,000
A notorious threat actor has decided to sell the INC Ransomware code for an unbelievable $300,000. As a result of this change, the number of cyber threats has significantly increased, putting many more businesses at risk of damaging hacks. A recent tweet…
gbhackers.com - Hackers Abuse DNS Tunneling For Covert Communication & Firewall Bypass
As a sneaky scheme, hackers use DNS tunneling to bypass traditional security measures. By wrapping malicious data inside DNS queries and responses, they can smuggle out sensitive information or talk to command and control servers without getting caught. DNS…
gbhackers.com - Apple iTunes for Windows Flaw Let Attackers Execute Malicious Code
iTunes has been found to have an arbitrary code execution vulnerability that might allow attackers to execute malicious code. To fix this vulnerability, Apple has issued a security advisory. It also stated that until an investigation is complete and updates…
gbhackers.com - Hackers Abuse GoTo Meeting Tool to Deploy Remcos RAT
In a sophisticated cyberattack campaign, hackers are using the online meeting platform GoToMeeting to distribute a Remote Access Trojan known as Remcos. This alarming development underscores cybercriminals’ evolving tactics of leveraging trusted software to…
gbhackers.com - Google Chrome emergency update fixes 6th zero-day exploited in 2024
Google has released emergency security updates for the Chrome browser to address a high-severity zero-day vulnerability tagged as exploited in attacks. [...]
BleepingComputer - GPT-4o Released: Faster Model Available for Free to All Users
OpenAI, the top lab for researching artificial intelligence, just released GPT-4o, its newest advance in AI technology.In the field of generative AI, this newest and most advanced model is a big step forward because it can work with voice, vision, and text…
gbhackers.com - Zscaler Confirms Only Isolated Test Server Was Hacked
Zscaler has completed its investigation into the recent hacking claims and found that only an isolated test environment was compromised.
SecurityWeek - Phorpiex botnet sent millions of phishing emails to deliver LockBit Black ransomware
Experts reported that since April, the Phorpiex botnet sent millions of phishing emails to spread LockBit Black ransomware. New Jersey’s Cybersecurity and Communications Integration Cell (NJCCIC) reported that since April, threat actors used the the Phorpiex…
Security Affairs - Apple and Google Launch Cross-Platform Feature to Detect Unwanted Bluetooth Tracking Devices
Apple and Google on Monday officially announced the rollout of a new feature that notifies users across both iOS and Android if a Bluetooth tracking device is being used to stealthily keep tabs on them without their knowledge or consent. "This will help…
The Hacker News - MITRE Releases EMB3D Cybersecurity Threat Model for Embedded Devices
In collaboration with Red Balloon Security, Narf Industries, and Niyo Little Thunder Pearson (ONEGas, Inc.), MITER has unveiled EMB3D, a comprehensive threat model designed to address the growing cybersecurity risks faced by embedded devices in critical…
gbhackers.com - CVE-2023-46012 in Linksys EA7500 Routers Allows Remote Takeover, No Patch, Poc Released
Cybersecurity researchers have unearthed a severe vulnerability in Linksys EA7500 routers that could allow attackers to remotely execute code with root privileges. This critical security flaw, cataloged as CVE-2023-46012 and scored at a perilous...
SecurityOnline - Critical Security Flaws in Cacti: Command Injection (CVE-2024-29895, CVSS 10) and XSS Vulnerabilities
Cacti, a popular open-source network monitoring and graphing tool, has recently released a crucial security update to address two significant vulnerabilities that could leave systems exposed to malicious attacks. These vulnerabilities were found in...
SecurityOnline - GoTo Meeting Exploited to Deliver Remcos RAT via Rust Shellcode Loader
Recently, cybersecurity experts at G Data have uncovered a sophisticated malware campaign that hijacks legitimate applications to execute malicious activities. This particular scheme involves the misuse of GoTo Meeting, a popular online meeting platform,...
SecurityOnline - CVE-2024-4761: Zero-Day Vulnerability Patched in Google Chrome
Google has swiftly moved to address a high-severity zero-day vulnerability in its Chrome browser that was actively exploited in the wild. The vulnerability, identified as CVE-2024-4761, is an “Out of bounds write” flaw found...
SecurityOnline - Sophisticated Social Engineering Campaign Linked to Black Basta Ransomware
Rapid7 analysts have uncovered a new, highly targeted social engineering campaign potentially linked to the Black Basta ransomware group. This multi-pronged attack begins with overwhelming users with spam emails, followed by phone calls impersonating...
SecurityOnline - CVE-2024-35205: Security Flaw in WPS Office Puts Over 500 Million Android Users at Risk
Popular office suite app WPS Office, with over 500 million installs on Android, has been found vulnerable to a path traversal attack dubbed “Dirty Stream,” potentially exposing user data and enabling unauthorized access to...
SecurityOnline - Hackers Target PyPI with Malicious Go Binary Hidden in Image
The Phylum Research Team has uncovered a sophisticated attack targeting the Python Package Index (PyPI), a popular repository for Python software packages. The malicious package, dubbed “requests-darwin-lite,” disguised as a fork of the widely...
SecurityOnline