News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Fri 16 Oct | 61 | 13 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Today, Fri 30 Oct | 52 so far | 7 |
Developing
Tue 4 Jun 202455 articles
- Zyxel NAS Devices Vulnerability Let Attackers Execute Code Remotely
Zyxel has released patches addressing critical command injection and remote code execution vulnerabilities in two of its NAS products, NAS326 and NAS542, which have reached end-of-vulnerability support. Users are strongly advised to install these patches to…
gbhackers.com - 37 Vulnerabilities Patched in Android
Android’s June 2024 security update resolves 37 vulnerabilities, including high-severity flaws in Framework and System.
SecurityWeek - Azure Service Tags Vulnerability Exposes Cloud Services to Potential Attacks
In a recent disclosure, Tenable Research has uncovered a significant vulnerability within Microsoft Azure’s Service Tags functionality. This flaw could enable malicious actors to circumvent firewall protections, potentially gaining unauthorized access to…
SecurityOnline - Multiple flaws in Cox modems could have impacted millions of devices
Researcher discovered several authorization bypass vulnerabilities in Cox modems that potentially impacted millions of devices. The security researcher Sam Curry discovered multiple issues in Cox modems that could have been exploited to modify the settings…
Security Affairs - Underground Ransomware Continues to Attack Industries Of Various Sizes
Over the past year, the ransomware actor known as “Underground” has been less active than other groups, yet they remain a threat in the cybersecurity landscape. Despite their reduced activity, Underground continues to target industries of various sizes,…
gbhackers.com - DarkGate Malware Replaces AutoIt with AutoHotkey in Latest Cyber Attacks
Cyber attacks involving the DarkGate malware-as-a-service (MaaS) operation have shifted away from AutoIt scripts to an AutoHotkey mechanism to deliver the last stages, underscoring continued efforts on the part of the threat actors to continuously stay ahead…
The Hacker News - Urgent Security Update for Zyxel NAS Devices: Patches Available for Critical Flaws
Zyxel has released critical security patches for two of its Network Attached Storage (NAS) devices, NAS326 and NAS542, addressing severe vulnerabilities that could allow attackers to execute code remotely and compromise system security. The...
SecurityOnline - Oracle WebLogic Server OS Command Injection Flaw Under Active Attack
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a security flaw impacting the Oracle WebLogic Server to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. Tracked as CVE-2017-3506…
The Hacker News - macOS Root Access Exploit: PoC Code for CVE-2024-27822 Released
A security researcher has published details and proof-of-concept (PoC) code for a macOS CVE-2024-27822 vulnerability that could be exploited to gain root privileges. The security defect was identified and reported in March, with a...
SecurityOnline - CVE-2024-21512: MySQL2 Vulnerability Puts Millions of Downloads at Risk
MySQL2, a popular MySQL client library for Node.js with over 2 million monthly downloads, has been found to contain a severe security vulnerability that could leave countless applications at risk. Tracked as CVE-2024-21512 and...
SecurityOnline - ClearFake Campaign Employs Novel Social Engineering Tactic to Deliver LummaC2 Infostealer
Recently, the ReliaQuest Threat Research Team has unveiled a new execution technique used in the ongoing ClearFake campaign. This JavaScript framework, previously known for its drive-by downloads and fake browser update schemes, has now...
SecurityOnline - CVE-2024-3584: Critical Path Traversal Flaw Exposes Qdrant Vector Database to Remote Takeover
A critical vulnerability has been uncovered in Qdrant, a popular open-source vector similarity search engine widely used for neural network-based matching and semantic search applications. Tracked as CVE-2024-3584, this flaw carries a near-perfect CVSS...
SecurityOnline - Excel File Unleashes Sophisticated Cobalt Strike Cyberattack
FortiGuard Labs has recently unveiled a sophisticated cyberattack that leverages an Excel file embedded with a VBA macro to deploy a DLL file. This multi-stage malware strategy ultimately delivers the notorious “Cobalt Strike” payload,...
SecurityOnline - CVE-2024-5404: Critical Vulnerability Found in moneo IIoT Platform
Germany’s CERT@VDE has issued a high-severity security advisory concerning a critical vulnerability in the Moneo IIoT platform developed by ifm electronic GmbH. The platform, which is designed to facilitate industrial digitalization through a no-code...
SecurityOnline - Wave of Attacks on WordPress: Urgent Update for WP Statistics, WP Meta SEO, LiteSpeed Cache
WordPress, the world’s most popular content management system, is facing a wave of targeted attacks exploiting critical vulnerabilities in several plugins. The Fastly Security Research Team has issued an urgent warning, revealing that malicious...
SecurityOnline