News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 15 |
| Today, Thu 29 Oct | 15 so far | 6 |
Developing
Thu 23 May 202459 articles
- NYSE Operator Intercontinental Exchange Gets $10M SEC Fine Over 2021 Hack
Intercontinental Exchange, the company that operates NYSE and other exchanges, has agreed to pay a $10 million fine related to a 2021 hack.
SecurityWeek - How AI will change your credit card behind the scenes
Many companies are starting to implement Artificial Intelligence (AI) within their services. Whenever there are large amounts of data involved, AI offers a way to turn that pile of data into actionable insights. And there’s a big chance that our data are…
Malwarebytes - CVE-2024-20360: Cisco FMC Vulnerability Grants Hackers Root Access
Cisco, the global leader in networking solutions, has issued a security advisory regarding a vulnerability discovered in its Firepower Management Center (FMC) software. This flaw, identified as CVE-2024-20360, carries a CVSS score of 8.8,...
SecurityOnline - Third-Party Vendor Breaches: Causes, Key Statistics, Recent Incidents, and Effective Mitigation Strategies
Third-Party Vendor Breaches: Causes, Key Statistics, Recent Incidents, and Effective Mitigation Strategies In modern business operations, most organizations extend their activities beyond their immediate boundaries, relying heavily on a network of…
SOCRadar - China APT Stole Geopolitical Secrets From Middle East, Africa & Asia
One of China's biggest espionage operations owes its success to longstanding Microsoft Exchange bugs, open source tools, and old malware.
Dark Reading - Using AI, Mastercard Expects to Find Compromised Cards Quicker, Before They Get Used by Criminals
Mastercard is integrating AI into its fraud-prediction technology that it expects will be able to see patterns in stolen cards faster and allow banks to replace them before they are used by criminals.
SecurityWeek - Ivanti Patches Critical Remote Code Execution Flaws in Endpoint Manager
Ivanti on Tuesday rolled out fixes to address multiple critical security flaws in Endpoint Manager (EPM) that could be exploited to achieve remote code execution under certain circumstances. Six of the 10 vulnerabilities – from CVE-2024-29822 through…
The Hacker News - Chinese actor ‘Unfading Sea Haze’ remained undetected for five years
A previously unknown China-linked threat actor dubbed ‘Unfading Sea Haze’ has been targeting military and government entities since 2018. Bitdefender researchers discovered a previously unknown China-linked threat actor dubbed ‘Unfading Sea Haze’ that has…
Security Affairs - Microsoft outage affects Bing, Copilot, DuckDuckGo and ChatGPT internet search
A massive Microsoft outage in some regions affects Bing.com, Copilot for web and mobile, Copilot in Windows, ChatGPT internet search and DuckDuckGo. [...]
BleepingComputer - Microsoft Replacing VBScript With JavaScript & PowerShell
Microsoft has shifted its scripting options for web development and task automation. The company is replacing VBScript with more advanced alternatives such as JavaScript and PowerShell to provide users with the most modern and efficient tools. This article…
gbhackers.com - A consumer-grade spyware app found in check-in systems of 3 US hotels
A researcher discovered a consumer-grade spyware app on the check-in systems of at least three Wyndham hotels across the US. The security researcher Eric Daigle discovered a commercial spyware app, called pcTattletale, on the check-in systems of at least…
Security Affairs - Software Supply Chains Threatened: Nexus Repository CVE-2024-4956 Flaw Exposed
Sonatype, a leading provider of software supply chain management solutions, has issued a security advisory regarding a critical vulnerability (CVE-2024-4956) in Nexus Repository, its widely used artifact repository manager. The vulnerability, classified as…
SecurityOnline - The End of an Era: Microsoft Phases Out VBScript for JavaScript and PowerShell
Microsoft on Wednesday outlined its plans to deprecate Visual Basic Script (VBScript) in the second half of 2024 in favor of more advanced alternatives such as JavaScript and PowerShell. "Technology has advanced over the years, giving rise to more powerful…
The Hacker News - Westermo EDW-100 Converter Vulnerable: Critical Flaws Discovered, Replacement Urged
Westermo, a leading provider of industrial data communications equipment, has issued a security advisory highlighting critical vulnerabilities identified in its EDW-100 serial to Ethernet converters. These vulnerabilities, tracked as CVE-2024-36080 and…
SecurityOnline - PoC Releases for Unauthorized RCE Flaw (CVE-2024-29269) Threatens 40K+ Telesquare Routers
Recently, a significant security flaw has been discovered in the Telesquare TLR-2005KSH LTE routers. These routers, widely used in South Korea and produced by the Telesquare company, have been found to possess an unauthorized...
SecurityOnline - Financially Motivated Hackers UAC-0006 Resurface with New Attacks Targeting Ukraine
Ukraine’s Computer Emergency Response Team (CERT-UA) has issued an urgent warning regarding the reemergence of the financially motivated cybercriminal group UAC-0006. After a period of relative inactivity, the group has launched a series of...
SecurityOnline - CVE-2024-4835: GitLab Fixes Account Takeover Vulnerability
GitLab, the popular web-based DevOps platform, has released urgent security patches to address multiple critical vulnerabilities affecting various versions of its Community Edition (CE) and Enterprise Edition (EE). These vulnerabilities, ranging from high…
SecurityOnline - WinRAR Update Patches Text Vulnerability (CVE-2024-33899, CVE-2024-36052)
Security researcher Siddharth Dushantha has uncovered a vulnerability in WinRAR, the popular file compression software, that could be exploited to deceive users or even cause system crashes. The vulnerability, which affects the console versions...
SecurityOnline - New Information Stealer “SamsStealer” Emerges, Threatening Windows Users
CYFIRMA, a leader in cybersecurity research, has recently unveiled a troubling new threat in the form of an information-stealing malware named “SamsStealer.” This malware, a 32-bit Windows executable crafted in .NET, is adept at...
SecurityOnline