News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 15 |
| Today, Thu 29 Oct | 11 so far | 3 |
Developing
Mon 20 May 202455 articles
- Google Pitches Workspace as Microsoft Email Alternative Citing CSRB Report
The new Secure Alternative Program from Google aims to entice customers away from Exchange Online and break Microsoft's dominance in enterprise.
Dark Reading - Critical Fluent Bit flaw impacts all major cloud providers
A critical Fluent Bit vulnerability that can be exploited in denial-of-service and remote code execution attacks impacts all major cloud providers and many technology giants. [...]
BleepingComputer - CyberArk Picks Up Machine Identity Manager Venafi For $1.54B
The acquisition gives CyberArk new IoT identity and certificate lifecycle management, cryptographic code-signing, and other services to secure the enterprise cloud.
Dark Reading - OmniVision discloses data breach after 2023 ransomware attack
The California-based imaging sensors manufacturer OmniVision is warning of a data breach after the company suffered a Cactus ransomware attack last year. [...]
BleepingComputer - Data Breach Response Provider, CyEx, Acquires Settlement Administrator, Simpluris Inc.
No content available.
Dark Reading - Deepfakes Rank As the Second Most Common Cybersecurity Incident for US Businesses
No content available.
Dark Reading - NRECA Receives $4M in DOE Funding to Boost Electric Co-op Cybersecurity Preparedness
No content available.
Dark Reading - Owner of Incognito dark web drugs market arrested in New York
The owner and operator of Incognito Market, a dark web marketplace for selling illegal narcotics online, was arrested at the John F. Kennedy Airport in New York on May 18. [...]
BleepingComputer - Critical Bug Allows DoS, RCE, Data Leaks in All Major Cloud Platforms
An on-by-default endpoint in ubiquitous logging service Fluent Bit contains an oversight that hackers can toy with to rattle most any cloud environment.
Dark Reading - Students Spot Washing Machine App Flaw That Gives Out Free Cycles
UCSC students say that after reporting the bug months ago they're still able to rack up unlimited free wash loads at their local laundromat.
Dark Reading - Windows 11 Recall AI feature will record everything you do on your PC
Microsoft has announced a new AI-powered feature for Windows 11 called 'Recall,' which records everything you do on your PC and lets you search through your historical activities. [...]
BleepingComputer - Google Cites ‘Monoculture’ Risks in Response to CSRB Report on Microsoft
Google is invoking the 'monoculture' word in response to a scathing U.S. government report on Microsoft's inadequate cybersecurity practices.
SecurityWeek - New BiBi Wiper version also destroys the disk partition table
A new version of the BiBi Wiper malware is now deleting the disk partition table to make data restoration harder, extending the downtime for targeted victims. [...]
BleepingComputer - Iranian MOIS-Linked Hackers Behind Destructive Attacks on Albania and Israel
An Iranian threat actor affiliated with the Ministry of Intelligence and Security (MOIS) has been attributed as behind destructive wiping attacks targeting Albania and Israel under the personas Homeland Justice and Karma, respectively. Cybersecurity firm…
The Hacker News - Your vacation, reservations, and online dates, now chosen by AI: Lock and Code S05E11
This week on the Lock and Code podcast… The irrigation of the internet is coming. For decades, we’ve accessed the internet much like how we, so long ago, accessed water—by traveling to it. We connected (quite literally), we logged on, and we zipped to…
Malwarebytes - Vulnerability Found in Fluent Bit Utility Used by Major Cloud, Tech Companies
Linguistic Lumberjack (CVE-2024-4323) is a critical vulnerability in the Fluent Bit logging utility that can allow DoS, information disclosure and possibly RCE.
SecurityWeek - QNAP QTS zero-day in Share feature gets public RCE exploit
An extensive security audit of QNAP QTS, the operating system for the company's NAS products, has uncovered fifteen vulnerabilities of varying severity, with eleven remaining unfixed. [...]
BleepingComputer - GitCaught campaign relies on Github and Filezilla to deliver multiple malware
Researchers discovered a sophisticated cybercriminal campaign by Russian-speaking threat actors that used GitHub to distribute malware. Recorded Future’s Insikt Group discovered a sophisticated cybercriminal campaign by Russian-speaking threat actors from…
Security Affairs - SWARM – Switchable Backdoor Attack Against Pre-trained Models
In the big data era, pre-training large vision transformer (ViT) models on massive datasets has become prevalent for enhanced performance on downstream tasks. Visual prompting (VP), introducing learnable task-specific parameters while freezing the…
gbhackers.com - What American Enterprises Can Learn From Europe's GDPR Mistakes
As the US braces for a data privacy overhaul, companies need to update data practices, train staff, and ensuring compliance from the outset to avoid Europe's costly missteps.
Dark Reading - Critical Git Vulnerability Let Attackers Execute Remote Code : PoC Published
A critical remote code execution vulnerability has been discovered in the git clone which was assigned with CVE-2024-32002 and the severity has been given as 9.0 (Critical). This particular vulnerability existed in the clone command that is widely used. Git…
gbhackers.com - U.S. Sectors Hit by Cyber Attacks: Telecoms, FBI, and Military Data Allegedly Compromised
U.S. Sectors Hit by Cyber Attacks: Telecoms, FBI, and Military Data Allegedly Compromised Recent findings from the SOCRadar Dark Web Team are of threat actors targeting telecoms, federal agencies, and military operations. These incidents include the sale of…
SOCRadar - Akira Ransomware Escalates Privilege To Exfiltrate Domain Controller Files
In a recent encounter, the Akira ransomware group exploited a novel privilege escalation technique, where the attackers infiltrated the victim’s virtual environment to steal the NTDS.dit file, a critical file containing domain user accounts and passwords…
gbhackers.com - Financial Organizations Need To Disclose Data Breach Within 30-Days
The U.S. Securities and Exchange Commission (SEC) has made changes to Regulation S-P that require financial companies to report data leaks within 30 days. This is a big step toward protecting consumers. This new rule, which goes into force on May 15, 2024,…
gbhackers.com - CyberArk to Acquire Machine Identity Firm Venafi for $1.54 Billion
CyberArk agreed to acquire machine identity management Venafi from Thoma Bravo for $1.54 billion.
SecurityWeek - Android Banking Trojan Antidot Disguised as Google Play Update
Antidot uses overlay attacks and keylogging to target users' financial data.
Dark Reading - What is real-time protection and why do you need it?
The constant barrage of cyber threats can be overwhelming for all of us. And, as those threats evolve and attackers find new ways to compromise us, we need a way to keep on top of everything nasty that’s thrown our way. Malwarebytes’ free version tackles and…
Malwarebytes - Eric Goldstein Leaving CISA for Private Sector Role
CISA executive assistant director for cybersecurity Eric Goldstein is leaving the agency after more than three years.
SecurityWeek - Foxit PDF Reader Flaw Exploited by Hackers to Deliver Diverse Malware Arsenal
Multiple threat actors are weaponizing a design flaw in Foxit PDF Reader to deliver a variety of malware such as Agent Tesla, AsyncRAT, DCRat, NanoCore RAT, NjRAT, Pony, Remcos RAT, and XWorm. "This exploit triggers security warnings that could deceive…
The Hacker News - Cybersecurity Risks for the Upcoming 2024 Elections in Belgium
Cybersecurity Risks for the Upcoming 2024 Elections in Belgium In 2024, a significant part of the world will vote in national elections to select their new leader, and Belgium is one of those nations. Federal elections are scheduled for June 9, 2024, and the…
SOCRadar - 2.4 Million Impacted by WebTPA Data Breach
Health insurance firm WebTPA says the personal information of 2.4 million individuals was compromised in a data breach.
SecurityWeek - Cybersecurity M&A Roundup for First Half of May 2024
Roundup of the cybersecurity-related merger and acquisition (M&A) deals announced in the first half of May 2024.
SecurityWeek - Two Chinese Nationals Arrested for Stealing $73M+ Via Cryptocurrency Scams
Two Chinese people have been arrested on suspicion of being involved in a complex cryptocurrency trading scam that stole more than $73 million from people. In the Central District of California, the accusation was made public. It charges Daren Li, 41, and…
gbhackers.com - Financial institutions ordered to notify customers after a breach, have an incident response plan
The Securities and Exchange Commission (SEC) has announced rules around breaches for certain financial institutions—registered broker-dealers, investment companies, investment advisers, and transfer agents— that require them to have written incident response…
Malwarebytes - Start-Ups: 10 Tips for Navigating the Headwinds Against High-Growth
These strategies can help cybersecurity startups navigate the current market dynamics, focusing on modern buyer behavior, updated KPIs, brand awareness, and effective sales and marketing alignment.
SecurityWeek - Defending Your Commits From Known CVEs With GitGuardian SCA And Git Hooks
All developers want to create secure and dependable software. They should feel proud to release their code with the full confidence they did not introduce any weaknesses or anti-patterns into their applications. Unfortunately, developers are not writing…
The Hacker News - MediSecure Data Breach Impacts Patient and Healthcare Provider Information
MediSecure says data related to prescriptions distributed until November 2023 was compromised in a ransomware attack.
SecurityWeek - American Radio Relay League Hit by Cyberattack
The American Radio Relay League (ARRL) has been targeted in a cyberattack that resulted in disruption and possibly a data breach.
SecurityWeek