News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 15 |
| Today, Thu 29 Oct | 38 so far | 10 |
Developing
Fri 31 May 202450 articles
- Beware of Fake Browser Updates That Deliver Bitrat & Lumma Stealer
eSentire’s Threat Response Unit (TRU) uncovered a sophisticated malware campaign involving fake browser updates. This campaign has been responsible for delivering two dangerous malware variants:BitRAT and Lumma Stealer. The attackers use fake update…
gbhackers.com - BBC disclosed a data breach impacting its Pension Scheme members
The BBC disclosed a data breach that exposed the personal information of BBC Pension Scheme members. The BBC disclosed a data breach that occurred on May 21. Threat actors gained access to files on a cloud-based service belonging to the British public…
Security Affairs - NGINX Releases Security Updates: HTTP/3 Vulnerabilities Patched
In a recent security advisory, the NGINX development team has released crucial updates for their popular web server software, urging users to upgrade immediately. These updates address four significant vulnerabilities related to the HTTP/3...
SecurityOnline - CVE-2024-5522 (CVSS 10): Critical Security Flaw Threatens Thousands of WordPress Sites
WordPress users who have installed the popular HTML5 Video Player plugin are urged to take immediate action following the discovery of a critical security vulnerability. The flaw, tracked as CVE-2024-5522, allows unauthenticated attackers to...
SecurityOnline - Hackers Actively Exploiting Critical D-Link NAS Vulnerability: 90,000+ Devices at Risk
CYFIRMA, a leading cybersecurity firm, has issued an urgent warning regarding a critical vulnerability (CVE-2024-3273) discovered in multiple end-of-life D-Link network-attached storage (NAS) devices. This vulnerability has been assigned a CVSS base score…
SecurityOnline - CVE-2024-4407: TIBCO Managed File Transfer Server Vulnerability Could Lead to System Takeover
TIBCO has issued a security advisory warning users of a critical-severity vulnerability (CVE-2024-4407) in its Managed File Transfer Platform Server for UNIX and z/Linux. This flaw could allow malicious actors to bypass authentication, gain...
SecurityOnline - New Phishing Campaign Utilizes IObit Antivirus to Deliver AsyncRAT Malware
Recently, S2 Grupo’s intelligence unit, Lab52, identified a sophisticated phishing campaign targeting Colombia. The attackers, masquerading as the Colombian Attorney General’s Office, aim to infect victims’ systems with the AsyncRAT malware. The campaign…
SecurityOnline - Logpoint Patches Critical SAML Authentication Flaw (CVE-2024-36383): Remote Attackers Could Delete Files
Logpoint has issued a security advisory for a critical vulnerability in its SAML Authentication module. This flaw, identified as CVE-2024-36383 and rated with a CVSS score of 9.1, could allow attackers to perform arbitrary...
SecurityOnline - Multiple Critical Vulnerabilities Discovered in D-Link D-View 8
D-Link, in collaboration with the Zero Day Initiative, has issued a critical security advisory regarding four newly discovered vulnerabilities in D-View 8, its network monitoring and management software. These vulnerabilities, tracked as CVE-2024-5296,…
SecurityOnline - Beware of Fake Browser Updates: BitRAT and Lumma Stealer on the Rise
eSentire’s Threat Response Unit (TRU) has issued a critical warning about a new wave of cyberattacks utilizing fake browser updates to deliver malicious payloads. The attacks involve injecting malicious JavaScript code into compromised webpages,...
SecurityOnline