News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 15 |
| Today, Thu 29 Oct | 13 so far | 5 |
Developing
Wed 22 May 202464 articles
- The Ultimate SaaS Security Posture Management Checklist, 2025 Edition
Since the first edition of The Ultimate SaaS Security Posture Management (SSPM) Checklist was released three years ago, the corporate SaaS sprawl has been growing at a double-digit pace. In large enterprises, the number of SaaS applications in use today is…
The Hacker News - Chrome 125 Update Patches High-Severity Vulnerabilities
Google released a Chrome 125 update to resolve four high-severity vulnerabilities reported by external researchers.
SecurityWeek - Beware – Your Customer Chatbot is Almost Certainly Insecure: Report
As chatbots become more adventurous, the dangers will increase.
SecurityWeek - Microsoft AI “Recall” feature records everything, secures far less
Developing an AI-powered threat to security, privacy, and identity is certainly a choice, but it’s one that Microsoft was willing to make this week at its “Build” developer conference. On Monday, the computing giant unveiled a new line of PCs that integrate…
Malwarebytes - GHOSTENGINE Exploits Vulnerable Drivers to Disable EDRs in Cryptojacking Attack
Cybersecurity researchers have discovered a new cryptojacking campaign that employs vulnerable drivers to disable known security solutions (EDRs) and thwart detection in what's called a Bring Your Own Vulnerable Driver (BYOVD) attack. Elastic Security Labs…
The Hacker News - CVE-2024-31989: Critical Argo CD Flaw Exposes Kubernetes Clusters to Takeover
Argo CD, a popular GitOps continuous delivery tool for Kubernetes, has disclosed a critical security vulnerability (CVE-2024-31989, CVSS 9.1) that could allow attackers to seize control of Kubernetes clusters. The flaw stems from the...
SecurityOnline - Critical Flaw In Confluence Server Let Attackers Execute Arbitrary Code
The widely used team workspace corporate wiki Confluence has been discovered to have a critical remote code execution vulnerability. This vulnerability has been assigned with CVE-2024-21683 with a severity of 8.3 (High). This vulnerability affects multiple…
gbhackers.com - Threat Actors Leverage Bitbucket Artifacts to Breach AWS Accounts
In a recent investigation into Amazon Web Services (AWS) security breaches, Mandiant uncovered a troubling scenario client-specific secrets were leaked from Atlassian’s code repository tool, Bitbucket, and exploited by threat actors to gain unauthorized…
gbhackers.com - MS Exchange Server Flaws Exploited to Deploy Keylogger in Targeted Attacks
An unknown threat actor is exploiting known security flaws in Microsoft Exchange Server to deploy a keylogger malware in attacks targeting entities in Africa and the Middle East. Russian cybersecurity firm Positive Technologies said it identified over 30…
The Hacker News - OmniVision disclosed a data breach after the 2023 Cactus ransomware attack
The digital imaging products manufacturer OmniVision disclosed a data breach after the 2023 ransomware attack. OmniVision Technologies is a company that specializes in developing advanced digital imaging solutions. In 2023, OmniVision employed 2,200 people…
Security Affairs - Hackers Breached Western Sydney University Microsoft 365 & Sharepoint Environments
Western Sydney University has informed approximately 7,500 individuals today of an unauthorized access incident involving its IT network. The breach, first identified in January 2024, affected the University’s Microsoft Office 365 environment, including…
gbhackers.com - QNAP Patches New Flaws in QTS and QuTS hero Impacting NAS Appliances
Taiwanese company QNAP has rolled out fixes for a set of medium-severity flaws impacting QTS and QuTS hero, some of which could be exploited to achieve code execution on its network-attached storage (NAS) appliances. The issues, which impact QTS 5.1.x and…
The Hacker News - Zoom Adopts NIST-Approved Post-Quantum End-to-End Encryption for Meetings
Popular enterprise services provider Zoom has announced the rollout of post-quantum end-to-end encryption (E2EE) for Zoom Meetings, with support for Zoom Phone and Zoom Rooms coming in the future. "As adversarial threats become more sophisticated, so does…
The Hacker News - CVE-2024-21683: Atlassian Patches RCE Flaw in Confluence Data Center and Server
Atlassian, a leading provider of collaboration and productivity software, has urgently addressed a remote code execution (RCE) vulnerability in its Confluence Data Center and Server products. Tracked as CVE-2024-21683, this flaw could allow authenticated...
SecurityOnline - Critical Veeam Backup Enterprise Manager Flaw Allows Authentication Bypass
Users of Veeam Backup Enterprise Manager are being urged to update to the latest version following the discovery of a critical security flaw that could permit an adversary to bypass authentication protections. Tracked as CVE-2024-29849 (CVSS score: 9.8), the…
The Hacker News - Broadcom Security Alert: VMware Vulnerabilities Expose Data, Enable Attacks
Broadcom has issued an important security advisory detailing several vulnerabilities discovered in various VMware products. These vulnerabilities, if exploited, could lead to severe security breaches, including denial of service, unauthorized code execution,…
SecurityOnline - Multiple Critical Vulnerabilities Discovered in Ivanti Endpoint Manager
Ivanti, a prominent provider of IT management and security solutions, has issued urgent security advisories warning of multiple critical vulnerabilities within its Endpoint Manager (EPM) product. These vulnerabilities, if exploited, could grant attackers…
SecurityOnline - Turla APT Suspected in “Tiny BackDoor” Campaign Leveraging MSBuild to Evade Detection
Cyble Research and Intelligence Labs (CRIL) has identified a sophisticated campaign employing a tiny, stealthy backdoor, now suspected to be the work of the infamous Turla APT group. The campaign uses malicious .LNK files...
SecurityOnline - CVE-2024-29849 (CVSS 9.8): Veeam’s Backup Nightmare, Full System Access Exposed
Veeam Software, a leading provider of backup and recovery solutions, has issued urgent security advisories regarding multiple critical vulnerabilities in its Veeam Backup Enterprise Manager (Enterprise Manager) component. These vulnerabilities could allow…
SecurityOnline - Cybercriminals Leverage Docusign Phishing Templates in Sophisticated Attacks
Abnormal Security, a leading cybersecurity firm, has issued a warning regarding a significant increase in Docusign-themed phishing attacks. The firm’s research reveals that cybercriminals are exploiting customizable templates available on the dark web to...
SecurityOnline - Unauthenticated RCE Flaw in Fortinet FortiSIEM: Researchers Publishes PoC for CVE-2023-34992
Cybersecurity researchers at Horizon3.ai published the technical details and a proof-of-concept (PoC) for a critical unauthenticated remote code execution (RCE) vulnerability (CVE-2023-34992) that has been discovered in Fortinet FortiSIEM, a popular security…
SecurityOnline - Void Manticore: Iranian State-Sponsored Cyber Warfare Exposed
In the complex and rapidly evolving world of cybersecurity, state-sponsored threat actors continue to push the boundaries of their capabilities, posing significant threats to national security and digital infrastructure. Among these malicious entities, Void...
SecurityOnline - Invisible Miners: Unveiling GHOSTENGINE’s Crypto Mining Operations
Elastic Security Labs has shed light on a complex and insidious crypto-mining operation codenamed REF4578, with its core payload, GHOSTENGINE, exhibiting an alarming degree of sophistication in evading detection and maximizing illicit profits. The...
SecurityOnline - WitnessAI Launches With Guardrails for AI
AI safety platform startup WitnessAI claims to help enterprises use AI safely and effectively with its platform addressing AI privacy, governance, and security.
Dark Reading