News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 15 |
| Today, Thu 29 Oct | 20 so far | 7 |
Developing
Fri 24 May 202456 articles
- Japanese Experts Warn of BLOODALCHEMY Malware Targeting Government Agencies
Cybersecurity researchers have discovered that the malware known as BLOODALCHEMY used in attacks targeting government organizations in Southern and Southeastern Asia is in fact an updated version of Deed RAT, which is believed to be a successor to…
The Hacker News - Usage of TLS in DDNS Services leads to Information Disclosure in Multiple Vendors
The use of Dynamic DNS (DDNS) services embedded in appliances can potentially expose data and devices to attacks. The use of Dynamic DNS (DDNS) services embedded in appliances, such as those provided by vendors like Fortinet or QNAP, carries cybersecurity…
Security Affairs - Beware Of HTML That Masquerade As PDF Viewer Login Pages
Phishing attacks have evolved into increasingly sophisticated schemes to trick users into revealing their personal information. One such method that has gained prominence involves phishing emails masquerading as PDF v...
gbhackers.com - Google Patches Fourth Chrome Zero-Day in Two Weeks
Exploited in the wild, Chrome vulnerability CVE-2024-5274 is a high-severity flaw described as a type confusion in the V8 JavaScript and WebAssembly engine.
SecurityWeek - Recall feature in Microsoft Copilot+ PCs raises privacy and security concerns
UK data watchdog is investigating Microsoft regarding the new Recall feature in Copilot+ PCs that captures screenshots of the user’s laptop every few seconds. The UK data watchdog, the Information Commissioner’s Office (ICO), is investigating a new feature,…
Security Affairs - Explore SOCRadar’s Advanced Certified Training Program
Stay Ahead in Cybersecurity: Explore SOCRadar’s Advanced Certified Training Program The biggest challenge in cybersecurity is staying ahead of threats, and it requires continuous learning and adaptation. SOCRadar is excited to announce its latest training…
SOCRadar - Operation SpecTor: Authorities Seized Dark Markets Offering Illicit Goods
Law enforcement agencies have successfully dismantled several dark web marketplaces offering illicit goods. Dubbed “Operation SpecTor,” this coordinated crackdown marks a significant victory in the ongoing battle against cybercrime and illegal online…
gbhackers.com - DNSBomb: New DDoS Attack Explodes DNS Traffic, Threatening Critical Internet Infrastructure
Researchers from Tsinghua University have unveiled a potent new method for launching distributed denial-of-service (DDoS) attacks, dubbed DNSBomb (CVE-2024-33655). This innovative attack weaponizes DNS (Domain Name System) traffic to overwhelm and disrupt…
SecurityOnline - CVE-2024-36077: Remote Code Execution Threatens Qlik Sense Users
Qlik, a prominent player in the data analytics space, has issued a critical security advisory warning users of a high-risk vulnerability (CVE-2024-36077) in their Qlik Sense Enterprise for Windows platform. With a CVSS score...
SecurityOnline - The Hidden Threat in Man Pages: Kinsing Malware Targets Apache Tomcat Servers
The persistent cyber threat known as Kinsing malware has taken a new and sophisticated approach to its cryptojacking campaign. Tenable Research recently uncovered that the malware is now targeting cloud servers, specifically Apache Tomcat...
SecurityOnline - CVE-2024-34710: Wiki.js Vulnerability Exposes Users to Potential Account Takeover
Wiki.js, a popular open-source wiki engine, has patched a critical security vulnerability that could have allowed attackers to inject malicious code and potentially compromise user accounts, including those with elevated privileges. The vulnerability,…
SecurityOnline - CVE-2024-28064: Critical Flaw Discovered in Totemomail Email Encryption Software
Cybersecurity researchers have uncovered two serious vulnerabilities in Totemomail, a widely used email encryption software now part of Accellion’s Kiteworks platform. These flaws, identified as CVE-2024-28063 and CVE-2024-28064, could allow attackers to…
SecurityOnline - Ransomhub’s SCADA Hack: A Wake-Up Call for Industrial Cybersecurity
The cybersecurity landscape is witnessing an alarming trend as ransomware groups increasingly set their sights on industrial control systems (ICS), the digital backbone of essential infrastructure. A recent attack by the Ransomhub ransomware gang...
SecurityOnline - CVE-2024-5274: Google Patches Zero-Day Vulnerability Actively Exploited in the Wild
Google issued an emergency security update for its Chrome browser Thursday, urgently addressing a zero-day vulnerability (CVE-2024-5274) that threat actors are actively exploiting. The flaw, a high-severity “type confusion” weakness in Chrome’s V8…
SecurityOnline - Researchers Reveals Ikaruz Red Team’s Rising Threat to Philippine Cybersecurity
SentinelOne, a leading cybersecurity firm, has released a comprehensive report detailing the activities of the Ikaruz Red Team (IRT), a hacktivist group increasingly targeting the Philippines with ransomware and other cyberattacks. The report highlights...
SecurityOnline - Microsoft pushes emergency fix for Windows Server 2019 update errors
Microsoft has released an emergency out-of-band (OOB) update for Windows Server 2019 that fixes a bug causing 0x800f0982 errors when attempting to install the May 2024 Patch Tuesday security updates. [...]
BleepingComputer