News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 15 |
| Today, Thu 29 Oct | 38 so far | 10 |
Developing
Thu 30 May 202466 articles
- 8 Degrees of Secure Access Service Edge
Assembling a diverse team, outlining clear objectives, and meticulously assessing your network landscape can enable organizations to successfully navigate SASE migration without hiccups and pitfalls.
SecurityWeek - Europol Shuts Down 100+ Servers Linked to IcedID, TrickBot, and Other Malware
Europol on Thursday said it shut down the infrastructure associated with several malware loader operations such as IcedID, SystemBC, PikaBot, SmokeLoader, Bumblebee, and TrickBot as part of a coordinated law enforcement effort codenamed Operation Endgame.…
The Hacker News - The Ticketmaster “breach”—what you need to know
Earlier this week, a cybercriminal group posted an alleged database up for sale online which, it says, contains customer and card details of 560 million Live Nation/Ticketmaster users. The data was offered for sale on one forum under the name “Shiny…
Malwarebytes - macOS version of elusive 'LightSpy' spyware tool discovered
A macOS version of the LightSpy surveillance framework has been discovered, confirming the extensive reach of a tool only previously known for targeting Android and iOS devices. [...]
BleepingComputer - Massive 911 S5 Botnet Dismantled, Chinese Mastermind Arrested
The US announced that the 911 S5 (Cloud Router) botnet, likely the world’s largest, has been dismantled and its administrator arrested.
SecurityWeek - Ransomware Attack Disrupts Seattle Public Library Services
The Seattle Public Library is scrambling to bring systems online after shutting them down to contain a ransomware attack.
SecurityWeek - Progress Telerik Report Server Receives Security Update for Critical Auth Bypass Vulnerability, CVE-2024-4358
Progress Telerik Report Server Receives Security Update for Critical Auth Bypass Vulnerability, CVE-2024-4358 A critical vulnerability has been discovered in Progress Telerik Report Server, a server-based tool for report management, widely utilized by…
SOCRadar - U.S. Dismantles World's Largest 911 S5 Botnet, with 19 Million Infected Devices
The U.S. Department of Justice (DoJ) on Wednesday said it dismantled what it described as "likely the world's largest botnet ever," which consisted of an army of 19 million infected devices that was leased to other threat actors to commit a wide array of…
The Hacker News - Operation Endgame, the largest law enforcement operation ever against botnets
An international law enforcement operation, called Operation Endgame targeted multiple botnets and their operators. Between 27 and 29 May 2024, an international law enforcement operation coordinated by Europol, codenamed Operation Endgame, targeted malware…
Security Affairs - Check Point VPN Attacks Involve Zero-Day Exploited Since April
The recently disclosed Check Point VPN attacks involve the zero-day vulnerability CVE-2024-24919, which allows hackers to obtain passwords.
SecurityWeek - Police seize over 100 malware loader servers, arrest four cybercriminals
An international law enforcement operation codenamed 'Operation Endgame' has seized over 100 servers worldwide used by multiple major malware loader operations, including IcedID, Pikabot, Trickbot, Bumblebee, Smokeloader, and SystemBC. [...]
BleepingComputer - Law enforcement operation dismantled 911 S5 botnet
An international law enforcement operation led by the U.S. DoJ disrupted the 911 S5 botnet and led to the arrest of its administrator. The U.S. Justice Department led an international law enforcement operation that dismantled the 911 S5 proxy botnet. The law…
Security Affairs - Okta Warns Credential Stuffing Attacks Targeting Customer Identity Cloud
Okta, a leading identity and access management company, has warned about credential stuffing attacks targeting its Customer Identity Cloud (CIC). The company has identified that threat actors are exploiting the cross-origin authentication feature within CIC.…
gbhackers.com - Okta warns of credential stuffing attacks targeting its Cross-Origin Authentication feature
Identity and access management firm Okta warns of credential stuffing attacks targeting the Customer Identity Cloud (CIC) feature. Okta warns of credential stuffing attacks targeting its Customer Identity Cloud (CIC) feature since April. A credential stu...
Security Affairs - Okta Warns of Credential Stuffing Attacks Targeting Customer Identity Cloud
Okta is warning that a cross-origin authentication feature in Customer Identity Cloud (CIC) is susceptible to credential stuffing attacks orchestrated by threat actors. "We observed that the endpoints used to support the cross-origin authentication feature…
The Hacker News - Hackers Claiming Shell Data Breach On Popular Hacking Forum
In a shocking revelation, a threat actor has allegedly leaked sensitive data belonging to Shell, one of the world’s leading energy companies. According to a tweet from Data Web Informer, the May 2024 data was posted on a popular hacking forum, raising…
gbhackers.com - Technical Details Released for Check Point Remote Access VPN 0-Day Flaw
Security researchers at watchTowr Labs have detailed a zero-day vulnerability (CVE-2024-24919) in Check Point’s Remote Access VPN appliances, which is actively being exploited by malicious actors. The vulnerability allows attackers to read sensitive…
SecurityOnline - 9 Tips to Avoid Burnout in Cybersecurity
When security professionals are at the end of their rope — feeling both mentally and physically exhausted — it's often because of burnout. Unfortunately, burnout is becoming more common in the industry. Here are 9 ways to try to combat it.
Dark Reading - CVE-2024-22263 Flaw in Spring Cloud Data Flow Could Lead to Server Takeover
A security vulnerability, identified as CVE-2024-22263, has been discovered in Spring Cloud Data Flow, a framework widely used for microservices-based streaming and batch data processing in Cloud Foundry and Kubernetes environments. This vulnerability,…
SecurityOnline - Kiteshield Packer Emerges as a Significant Threat in Linux Malware Landscape
In a recent analysis, XLab’s Cyber Threat Insight Analysis (CTIA) System uncovered the abuse of the Kiteshield packer by various cyber threat actors targeting Linux environments. Over the past month, XLab detected a batch...
SecurityOnline - CVE-2024-4358: Critical Authentication Bypass Flaw Discovered in Progress Telerik Report Server
A critical vulnerability (CVE-2024-4358) has been discovered in Progress Telerik Report Server, a popular report management solution used by organizations worldwide. This vulnerability, rated with a CVSS score of 9.8 (out of 10), could...
SecurityOnline - Rebirth Botnet Exploiting Gaming Community, Posing Wider Cybersecurity Threat
The Sysdig Threat Research Team (TRT) has exposed the alarming activities of the Rebirth botnet, a Mirai-based DDoS-as-a-Service (DDoSaaS) platform that primarily targets the video gaming community. Based on the notorious Mirai malware family,...
SecurityOnline - Researchers Reveal Sophisticated BlackSuit Ransomware Attack
Cybersecurity firm ReliaQuest has published a detailed analysis of a BlackSuit ransomware attack that occurred in April 2024, shedding light on the sophisticated tactics, techniques, and procedures (TTPs) employed by this increasingly active cybercrime...
SecurityOnline - Android Banking Trojan “Anatsa” Lurking in Google Play Store
Cybersecurity researchers at Zscaler ThreatLabz have uncovered a sophisticated Android banking trojan called Anatsa (also known as TeaBot) that is actively targeting Android users through seemingly harmless apps in the Google Play Store. Anatsa...
SecurityOnline - Cybersecurity Alert: “Free Piano” Email Scam Targets Students and Professionals
A widespread email scam campaign is targeting students, faculty, healthcare workers, and others with offers of free pianos, leading victims into an advance fee fraud (AFF) scheme. Cybersecurity firm Proofpoint has uncovered the operation,...
SecurityOnline - Decoding Water Sigbin's Latest Obfuscation Tricks
Water Sigbin (aka the 8220 Gang) exploited the Oracle WebLogic vulnerabilities CVE-2017-3506 and CVE-2023-21839 to deploy a cryptocurrency miner using a PowerShell script. The threat actor also adopted new techniques to conceal its activities, making attacks…
trendmicro.com