News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 15 |
| Today, Thu 29 Oct | 5 so far | 1 |
Developing
Thu 16 May 202459 articles
- Vmware Workstation & Fusion Flaws Let Attackers Execute Arbitrary Code
Multiple security flaws affecting VMware Workstation and Fusion have been addressed by upgrades published by VMware. If these vulnerabilities are successfully exploited, attackers may be able to obtain privileged data from the device, execute arbitrary code,…
gbhackers.com - Santander: a data breach at a third-party provider impacted customers and employees
The Spanish bank Santander disclosed a data breach at a third-party provider that impacted customers in Chile, Spain, and Uruguay. The Spanish financial institution Santander revealed a data breach involving a third-party provider that affected customers in…
Security Affairs - QakBot Malware Exploiting Windows zero-Day To Gain System Privileges
In April 2024, security researchers revisited CVE-2023-36033, a Windows DWM Core Library elevation of privilege vulnerability that was previously discovered and exploited in the wild. As part of their investigation into exploit samples and potential attack…
gbhackers.com - Third Chrome Zero-Day Patched by Google Within One Week
Google releases Chrome 125 to the stable channel with patches for nine vulnerabilities, including a zero-day.
SecurityWeek - Nissan Data breach – 53,000+ Employees Data Stolen
Nissan says that the personal information of more than 53,000 workers has been stolen. The huge automaker is now taking proactive steps to help those who have been affected and limit the damage that could occur from the stolen data. Detail of the Breach…
gbhackers.com - Nigeria Halts Cybersecurity Tax After Public Outrage
In the midst of an economy struggling with soaring inflation, the Nigerian government paused plans to place a levy on domestic transactions that was aimed at enhancing cybersecurity.
Dark Reading - BreachForums Shut Down in Apparent Law Enforcement Operation
The hacking forum BreachForums is displaying a notice claiming that the website is under the control of the FBI.
SecurityWeek - PoC Exploit Released For D-LINK RCE Zero-Day Vulnerability
Two critical vulnerabilities have been discovered in D-Link DIR-X4860 routers which were associated with Authentication bypass due to HNAP port and remote code execution. Moreover, exploiting these vulnerabilities together could lead to a complete compromise…
gbhackers.com - Cybercriminals Exploiting Microsoft’s Quick Assist Feature in Ransomware Attacks
The Microsoft Threat Intelligence team said it has observed a threat it tracks under the name Storm-1811 abusing the client management tool Quick Assist to target users in social engineering attacks. "Storm-1811 is a financially motivated cybercriminal group…
The Hacker News - Wireshark 4.2.5 Released: What’s New!
Wireshark, the world’s foremost and widely used network protocol analyzer, has recently released version 4.2.5, which brings a host of new features and improvements. This latest update promises to enhance the user experience and provide even more powerful…
gbhackers.com - Google Patches Yet Another Actively Exploited Chrome Zero-Day Vulnerability
Google has rolled out fixes to address a set of nine security issues in its Chrome browser, including a new zero-day that has been exploited in the wild. Assigned the CVE identifier CVE-2024-4947, the vulnerability relates to a type confusion bug in the...
The Hacker News - Git Patches Critical RCE Vulnerabilities – CVE-2024-32002 & CVE-2024-32004
The Git project, a cornerstone of software development, has recently addressed a series of critical security vulnerabilities that could expose users to remote code execution (CVE-2024-32002, CVE-2024-32004) and unauthorized data manipulation. Critical Flaws…
SecurityOnline - Beware of Instagram Influencer Scams: McAfee Labs Exposes New Threat
Instagram, a social media giant with over a billion users, has become a fertile ground for scammers and fraudsters. Leveraging the platform’s influencer program, these cybercriminals employ various deceptive tactics to hijack user accounts,...
SecurityOnline - In First AI Dialogue, US Cites ‘Misuse’ of AI by China, Beijing Protests Washington’s Restrictions
China advocates for the United Nations to take a leading role in the global governance of AI, a move that could sideline the U.S.
SecurityWeek - Froxlor Web Hosting Control Panel Vulnerable to Remote Compromise (CVE-2024-34070)
A critical vulnerability (CVE-2024-34070) has been discovered in Froxlor, a popular open-source web hosting control panel. This flaw, rated 9.7 on the CVSS severity scale, could allow an unauthenticated attacker to completely take over...
SecurityOnline - Russia-Linked Threat Actors Continue to Target Critical Infrastructure
In the relentless landscape of cyber warfare, the prowess of Russia-linked Advanced Persistent Threat (APT) groups continues to evolve, posing a significant threat to Operational Technology (OT) globally. The latest report from the ReliaQuest...
SecurityOnline - From Invoice to Infection: Darkgate’s Phishing Campaign Exposed
Forcepoint’s X-Labs research team has uncovered a sophisticated and stealthy phishing campaign orchestrated by the notorious Darkgate malware. This report reveals the intricate details of the campaign, its propagation methods, and the technical nuances...
SecurityOnline - New Malvertising Campaign Leads to Ransomware Through Trojanized Installers of WinSCP and PuTTY
Cybersecurity firm Rapid7 has uncovered a widespread malvertising campaign that is actively targeting individuals searching for popular utilities like WinSCP and PuTTY. This sophisticated attack uses malicious ads on common search engines like Bing,...
SecurityOnline - CVE-2024-4947: New Chrome 0-Day Vulnerability Under Active Exploitation
Google has issued an urgent security update for its Chrome web browser, responding to a newly discovered “zero-day” vulnerability that is actively being exploited by malicious actors. This serious flaw, known as CVE-2024-4947, could...
SecurityOnline