News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 15 |
| Today, Thu 29 Oct | 38 so far | 10 |
Developing
Tue 28 May 202451 articles
- WordPress Plugin abused to install e-skimmers in e-commerce sites
Threat actors are exploiting a WordPress plugin to insert malicious PHP code in e-commerce sites and steal credit card data. Sucuri researchers observed threat actors using a PHP snippet WordPress plugin to install malicious code in WooCommerce e-stores and…
Security Affairs - WordPress Plugin Exploited to Steal Credit Card Data from E-commerce Sites
Unknown threat actors are abusing lesser-known code snippet plugins for WordPress to insert malicious PHP code in victim sites that are capable of harvesting credit card data. The campaign, observed by Sucuri on May 11, 2024, entails the abuse of a…
The Hacker News - TP-Link Archer C5400X gaming router is affected by a critical flaw
Researchers warn of a critical remote code execution vulnerability in TP-Link Archer C5400X gaming router. Researchers at OneKey discovered a a critical remote code execution (RCE) vulnerability, tracked as CVE-2024-5035 (CVSS score 10.0), in TP-Link Archer…
Security Affairs - TP-Link Gaming Router Vulnerability Exposes Users to Remote Code Attacks
A maximum-severity security flaw has been disclosed in the TP-Link Archer C5400X gaming router that could lead to remote code execution on susceptible devices by sending specially crafted requests. The vulnerability, tracked as CVE-2024-5035, carries a CVSS…
The Hacker News - CVE-2024-5035 (CVSS 10) in TP-Link Archer C5400X Routers Exposes Users to Remote Hacking
In a recent security analysis conducted by a researcher at ONEKEY, a critical vulnerability has been identified in the TP-Link Archer C5400X router. The flaw, tracked as CVE-2024-5035, has been given a maximum CVSS...
SecurityOnline - Researcher Releases Techniques & Burp Extension to Help Bypass WAFs
In the cybersecurity field, web application firewalls (WAFs) are pivotal in defending web applications from malicious attacks. However, recent insights from Shubham Shah, a seasoned security researcher and co-founder of Assetnote, reveal significant…
SecurityOnline - Government Agencies in APAC Targeted by Fake PDF Login Phishing Emails
Forcepoint X-Labs, a leading cybersecurity research team, has issued an urgent warning regarding a surge in sophisticated phishing emails targeting government departments across the Asia-Pacific (APAC) region. These deceptive emails masquerade as login…
SecurityOnline - glibc Flaw (CVE-2024-2961) Opens Door to RCE, PoC Exploit Published
Technical details and a proof-of-concept (PoC) exploit code have emerged about a security flaw (CVE-2024-2961) in GNU C Library that could be chained by threat actors to achieve remote code execution on affected systems....
SecurityOnline - Kaspersky Labs Uncovers ShrinkLocker Ransomware Exploiting Microsoft’s BitLocker
In a recent analysis, Kaspersky Lab’s experts have exposed a new ransomware threat named ShrinkLocker, which cleverly exploits Microsoft’s built-in BitLocker encryption tool to hold corporate data hostage. The ransomware, which has already targeted...
SecurityOnline - Researcher Details Windows Elevation of Privilege Vulnerability (CVE-2024-26238)
Security researcher Guillaume André with Synacktiv has detailed a high-severity vulnerability, CVE-2024-26238 (CVSS 7.8), in Microsoft’s Windows Update component RUXIM (Reusable UX Integration Manager). This flaw allows attackers to exploit a scheduled task…
SecurityOnline - SharpPanda APT Targets Malaysia with Backdoor Malware
In a recent analysis conducted in March and April 2024, the NetbyteSEC Detecx (NBS) team exposed a sophisticated malware campaign orchestrated by the notorious SharpPanda APT group, specifically aimed at targets in Malaysia. The...
SecurityOnline