News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 15 |
| Today, Thu 29 Oct | 5 so far | 1 |
Developing
Thu 16 May 202459 articles
- Addressing the Cybersecurity Vendor Ecosystem Disconnect
How security teams can bridge the gap between short-term profits and long-term business needs.
Dark Reading - Electronic prescription provider MediSecure impacted by a ransomware attack
Electronic prescription provider MediSecure in Australia suffered a ransomware attack likely originate from a third-party vendor. MediSecure is a company that provides digital health solutions, particularly focusing on secure electronic prescription delivery…
Security Affairs - Santander Falls Victim to Data Breach Involving Third-Party Provider
The company reports that customers based in Chile, Spain, and Uruguay were the primary victims of the breach, alongside some former employees of the global bank.
Dark Reading - Asian Threat Actors Use New Techniques to Attack Familiar Targets
Generative AI and software supply chain attacks are being exploited to disrupt, manipulate, and steal.
Dark Reading - US AI Experts Targeted in SugarGh0st RAT Campaign
Researchers believe the attacker is likely China-affiliated, since a previous version of the malware was used by a China nation-state attack group.
Dark Reading - Five charged for cyber schemes to benefit North Korea's weapons program
The U.S. Justice Department charged five individuals today, a U.S. Citizen woman, a Ukrainian man, and three foreign nationals, for their involvement in cyber schemes that generated revenue for North Korea's nuclear weapons program. [...]
BleepingComputer - Norway recommends replacing SSL VPN to prevent breaches
The Norwegian National Cyber Security Centre (NCSC) recommends replacing SSLVPN/WebVPN solutions with alternatives due to the repeated exploitation of related vulnerabilities in edge network devices to breach corporate networks. [...]
BleepingComputer - GE Ultrasound Gear Riddled With Bugs, Open to Ransomware & Data Theft
Thankfully, GE ultrasounds aren't Internet-facing. Exploiting most of the bugs to cause serious damage to patients would require physical device access.
Dark Reading - Microsoft shares temp fix for Outlook encrypted email reply issues
Microsoft has shared a temporary fix for a known issue preventing Microsoft 365 customers from replying to encrypted emails using the Outlook Desktop client. [...]
BleepingComputer - MediSecure e-script firm hit by ‘large-scale’ ransomware data breach
Electronic prescription provider MediSecure in Australia has shut down its website and phone lines following a ransomware attack believed to originate from a third-party vendor. [...]
BleepingComputer - Millions Of IoT Devices Vulnerable To Attacks Leads To Full Takeover
Researchers discovered four significant vulnerabilities in the ThroughTek Kalay Platform, which powers 100 million IoT-enabled devices. Notably, ThroughTek Kalay’s influence emphasizes the importance of protecting homes, companies, and integrators alike with…
gbhackers.com - New Wi-Fi Vulnerability Enables Network Eavesdropping via Downgrade Attacks
Researchers have discovered a new security vulnerability stemming from a design flaw in the IEEE 802.11 Wi-Fi standard that tricks victims into connecting to a less secure wireless network and eavesdrop on their network traffic. The SSID Confusion attack,…
The Hacker News - Russian hackers use new Lunar malware to breach a European govt's agencies
Security researchers discovered two previously unseen backdoors dubbed LunarWeb and LunarMail that were used to compromise a European government's diplomatic institutions abroad. [...]
BleepingComputer - CISA Alerts on Active Exploitation of Flaws in D-Link Routers and Chromium Browser
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning to federal agencies and the wider public about three security vulnerabilities currently being exploited by malicious actors. These flaws, impacting widely-used...
SecurityOnline - Urgent Security Alert for Siemens Fire Protection Systems: Critical Vulnerabilities Discovered
Siemens, a leading provider of fire safety solutions, has issued a critical security advisory warning of severe vulnerabilities in its Cerberus PRO UL and Desigo Fire Safety UL systems. These vulnerabilities could potentially allow...
SecurityOnline - Alkira Raises $100 Million for Secure Network Infrastructure Platform
Network infrastructure as-a-service Alkira has raised $100 million in a Series C funding round led by Tiger Global Management.
SecurityWeek - FCC Reveals 'Royal Tiger' Robocall Campaign
In a first-ever move, the commission's enforcement bureau has high hopes that official classification will allow law enforcement partners to better combat these kinds of threats.
Dark Reading - Microsoft: Windows Server 2019 updates fail with 0x800f0982 errors
Microsoft has acknowledged a new known issue causing this month's KB5037765 security update for Windows Server 2019 to fail to install with 0x800f0982 errors. [...]
BleepingComputer - The Fall of the National Vulnerability Database
Since its inception, three key factors have affected the NVD's ability to classify security concerns — and what we're experiencing now is the result.
Dark Reading - North Korean Hackers Exploit Facebook Messenger in Targeted Malware Campaign
The North Korea-linked Kimsuky hacking group has been attributed to a new social engineering attack that employs fictitious Facebook accounts to targets via Messenger and ultimately delivers malware. "The threat actor created a Facebook account with a fake…
The Hacker News - Legacy of Wisdom: Security Lessons Inspired by My Father
Honoring my father by translating his timeless life lessons into practical wisdom for the cybersecurity profession.
SecurityWeek - Windows Quick Assist Anchors Black Basta Ransomware Gambit
When abused by threat actors with sophisticated social-engineering chops, remote-access tools demand that enterprises remain sharp in both defense strategy and employee-awareness training.
Dark Reading - Critical Security Updates for Git SCM: CVE-2024-32002 & CVE-2024-32004 Lead to RCE
Critical Security Updates for Git SCM: CVE-2024-32002 & CVE-2024-32004 Lead to RCE The Git SCM project has recently announced updates to address a series of critical security vulnerabilities. These vulnerabilities, if left unpatched, could pose significant…
SOCRadar - Kimsuky hackers deploy new Linux backdoor in attacks on South Korea
The North Korean hacker group Kimsuki has been using a new Linux malware called Gomir that is a version of the GoBear backdoor delivered via trojanized software installers. [...]
BleepingComputer - Nissan Data Breach Impacts 53,000 Employees
Nissan North America determined recently that a ransomware attack launched last year resulted in employee personal information compromise.
SecurityWeek - Google fixes seventh actively exploited Chrome zero-day this year, the third in a week
Google released security updates to address a new actively exploited Chrome zero-day vulnerability, the third in a week. Google has released a new emergency security update to address a new vulnerability, tracked as CVE-2024-4947, in the Chrome browser, it…
Security Affairs - Deleted iPhone photos show up again after iOS update
iPhone owners are reporting that photos they’d deleted are now back on their phones, after updating to iOS 17.5. With so many users reporting similar oddities, it would seem something went wrong, or at least different than to be expected. Here are some…
Malwarebytes - United Kingdom Threat Landscape Report: Trends, Threats, and Defensive Strategies
United Kingdom Threat Landscape Report: Trends, Threats, and Defensive Strategies The cyber threat landscape is constantly evolving, with new threats emerging and existing ones becoming more sophisticated. Our latest United Kingdom Threat Landscape Report…
SOCRadar - Patch Now: Another Google Zero-Day Under Exploit in the Wild
Google has rolled an emergency patch for CVE-2024-4947, the third Chrome zero-day it's addressed in the past week.
Dark Reading - BreachForums Seized Once Again, What is Next?
BreachForums Seized Once Again, What is Next? The FBI has taken control of the BreachForums, which was known for leaking and selling stolen corporate data to cybercriminals. The seizure happened yesterday, shortly after the site was used to leak data stolen…
SOCRadar - United States Threat Landscape Report: Insights and Trends
United States Threat Landscape Report: Insights and Trends As we advance through a post-COVID era characterized by rapid digital transformation, the realm of cybersecurity becomes increasingly crucial. This shift highlights the need for robust security…
SOCRadar - Scammers can easily phish your multi-factor authentication codes. Here’s how to avoid it
More and more websites and services are making multi-factor-authentication (MFA) mandatory, which makes it much harder for cybercriminals to access your accounts. That’s a great thing. But as security evolves, so do cybercriminals who are always looking for…
Malwarebytes - Android 15 Brings Improved Fraud and Malware Protections
Google is boosting fraud and malware protections in Android 15 with live threat detection and expanded restricted settings.
SecurityWeek - Personal Information Stolen in City of Wichita Ransomware Attack
The City of Wichita says files containing personal information were exfiltrated in a recent ransomware attack.
SecurityWeek - How to Integrate Vulnerability Intelligence Into SDLC Pipelines?
How to Integrate Vulnerability Intelligence Into SDLC Pipelines? The Software Development Lifecycle (SDLC) is a systematic process utilized by development teams to design, create, and deliver top-notch software. Its primary aim is to mitigate project risks…
SOCRadar - CVE-2024-4984: Yoast SEO Flaw Exposes Millions of WordPress Sites to Attack
Yoast SEO, the widely used WordPress plugin with over 5 million active installations, has been found vulnerable to a Stored Cross-Site Scripting (XSS) flaw. This vulnerability, tracked as CVE-2024-4984, could allow malicious actors to...
SecurityOnline - Apple Has Terminated 370 Million+ developer & Customer Accounts
The App Store will close over 370 million developer and customer accounts in 2023. Apple takes this move to fight fraud and provide a safe and dependable platform for consumers and developers. Apple has led app distribution since 2008, setting industry…
gbhackers.com - Palo Alto Networks Teams Up With IBM, Acquires QRadar SaaS Assets
Palo Alto Networks and IBM have announced a significant partnership to jointly provide cybersecurity solutions.
SecurityWeek - Researchers Uncover 11 Security Flaws in GE HealthCare Ultrasound Machines
Security researchers have disclosed almost a dozen security flaws impacting the GE HealthCare Vivid Ultrasound product family that could be exploited by malicious actors to tamper with patient data and even install ransomware under certain circumstances.…
The Hacker News - VirusTotal’s Crowdsourced AI Initiative to Analyze Macros With Word & Excel Files
VirusTotal has announced a major change to its Crowdsourced AI project: it has added a new AI model that can examine strange macros in Microsoft Office files. This model, created by Dr. Ran Dubin from Ariel University and the ByteDefend Cyber Lab, is meant…
gbhackers.com