News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Fri 16 Oct | 61 | 13 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Today, Fri 30 Oct | 52 so far | 7 |
Developing
Wed 5 Jun 202460 articles
- Linux version of TargetCompany ransomware focuses on VMware ESXi
Researchers observed a new Linux variant of the TargetCompany ransomware family that targets VMware ESXi environments using a custom shell script to deliver and execute payloads. [...]
BleepingComputer - Webex Bugs Patched Post Exposure Of German Govt Meetings
No content available.
packetstormsecurity.com - Emergency Patches Released For Critical Vulns Impacting EOL Zyxel NAS Boxes
No content available.
packetstormsecurity.com - TikTok Hackers Target Paris Hilton, CNN, And Other High Profile Users
No content available.
packetstormsecurity.com - Windows Recall Demands An Extraordinary Level Of Trust That Microsoft Hasn't Earned
No content available.
packetstormsecurity.com - FBI recovers 7,000 LockBit keys, urges ransomware victims to reach out
The FBI urges past victims of LockBit ransomware attacks to come forward after revealing that it has obtained over 7,000 LockBit decryption keys that they can use to recover encrypted data for free. [...]
BleepingComputer - Google Chrome reduced cookie requests to improve performance
Google shared details on a recently introduced Chrome feature that changes how cookies are requested, with early tests showing increased performance across all platforms. [...]
BleepingComputer - Advance Auto Parts stolen data for sale after Snowflake attack
Threat actors claim to be selling 3TB of data from Advance Auto Parts, a leading automotive aftermarket parts provider, stolen after breaching the company's Snowflake account. [...]
BleepingComputer - RansomHub Actors Exploit ZeroLogon Vuln in Recent Ransomware Attacks
CVE-2020-1472 is a privilege escalation flaw that allows an attacker to take over an organization's domain controllers.
Dark Reading - Malware can steal data collected by the Windows Recall tool, experts warn
Cybersecurity researchers demonstrated how malware could potentially steal data collected by the new Windows Recall tool. The Recall feature of Microsoft Copilot+ is an AI-powered tool designed to help users search for past activities on their PC. The data…
Security Affairs - Check-in terminals used by thousands of hotels leak guest info
Ariane Systems self check-in systems installed at thousands of hotels worldwide are vulnerable to a kiosk mode bypass flaw that could allow access to guests' personal information and the keys for other rooms. [...]
BleepingComputer - Club Penguin fans breached Disney Confluence server, stole 2.5GB of data
Club Penguin fans hacked a Disney Confluence server to steal information about their favorite game but wound up walking away with 2.5 GB of internal corporate data, BleepingComputer has learned. [...]
BleepingComputer - Chinese hacking groups team up in cyber espionage campaign
Chinese state-sponsored actors have been targeting a government agency since at least March 2023 in a cyberespionage campaign that researchers track as Crimson Palace [...]
BleepingComputer - Cloud Security Alliance Survey Finds 70% of Organizations Have Established Dedicated SaaS Security Teams
No content available.
Dark Reading - EV Manufacturer BYD Selects Karamba Security to Meet Global Automotive Cybersecurity Regulations
No content available.
Dark Reading - Notable Capital Launches Rising in Cyber to Spotlight Promising Cybersecurity Startups
No content available.
Dark Reading - Hijacking Scheme Takes Over High-Profile TikTok Accounts
Hijacking malware gets spread through TikTok's direct messaging and doesn't require the victim to click links or download anything.
Dark Reading - Qilin ransomware gang linked to attack on London hospitals
A ransomware attack that hit pathology services provider Synnovis on Monday and impacted several major NHS hospitals in London has now been linked to the Qilin ransomware operation. [...]
BleepingComputer - Kali Linux 2024.2 released with 18 new tools, Y2038 changes
Kali Linux has released version 2024.2, the first version of 2024, with eighteen new tools and fixes for the Y2038 bug. [...]
BleepingComputer - Ransomware Attack Disrupts Operations Across London Hospitals
The incident affecting pathology-services provider Synnovis demonstrates the ripple effect that cyberattacks have on healthcare systems, and demands immediate security response.
Dark Reading - Remote Work's Hidden Dangers
Ten cybersecurity strategies for enterprises to keep remote work safer.
Dark Reading - Cisco addressed Webex flaws used to compromise German government meetings
Cisco addressed vulnerabilities that were exploited to compromise the Webex meetings of the German government. In early May, German media outlet Zeit Online revealed that threat actors exploited vulnerabilities in the German government’s implementation of…
Security Affairs - Financial sextortion scams on the rise
“Hey there!” messaged Savannah, someone 16-year-old Charlie had never met before, but looked cute in her profile picture. She had long blonde hair, blue eyes, and an adorable smile, so he decided to DM with her on Instagram. Soon their flirty exchanges grew…
Malwarebytes - Chinese Hackers Attacking Government Organization In Southeast Asia
Sophos Managed Detection and Response (MDR) has uncovered a sophisticated, long-running cyberespionage campaign dubbed “Crimson Palace,” attributed to Chinese state-sponsored actors. The operation targeted a high-profile government organization in Southeast…
gbhackers.com - Hypr Raises $30 Million for Passwordless Authentication
Passwordless authentication provider Hypr has received a $30 million investment from Silver Lake Waterman.
SecurityWeek - RansomHub extortion gang linked to now-defunct Knight ransomware
Security researchers analyzing the relatively new RansomHub ransomware-as-a-service believe that it has evoloved from the currently defunct Knight ransomware project. [...]
BleepingComputer - Say hello to the fifth generation of Malwarebytes
Announcing the latest version of Malwarebytes, which brings a faster, responsive, and consistent user interface, integrated security and privacy, and expert guidance to keep you secure. Here’s what you can expect: 1. Unified user experience across platforms…
Malwarebytes - Researchers Show How Malware Could Steal Windows Recall Data
Cybersecurity researchers are demonstrating how malware could steal data collected by the new Windows Recall feature.
SecurityWeek - Beware Of Phishing Emails Prompting Execution Via Paste (CTRL+V)
Phishing attackers are distributing malicious HTML files as email attachments, containing code designed to exploit users by prompting them to directly paste and execute the code, which leverages social engineering, as users are tricked into running the…
gbhackers.com - Chinese State-Backed Cyber Espionage Targets Southeast Asian Government
An unnamed high-profile government organization in Southeast Asia emerged as the target of a "complex, long-running" Chinese state-sponsored cyber espionage operation codenamed Crimson Palace. "The overall goal behind the campaign was to maintain access to…
The Hacker News - ‘NsaRescueAngel’ Backdoor Account Again Discovered in Zyxel Products
Critical vulnerabilities in discontinued Zyxel NAS products allow unauthenticated attackers to execute arbitrary code and OS commands.
SecurityWeek - CNN, Paris Hilton, and Sony TikTok accounts hacked via DMs
A vulnerability in the popular video-sharing platform TikTok allowed threat actors to take over the accounts of celebrities. Threat actors exploited a zero-day vulnerability in the video-sharing platform TikTok to hijack high-profile accounts. The…
Security Affairs - Unpacking 2024's SaaS Threat Predictions
Early in 2024, Wing Security released its State of SaaS Security report, offering surprising insights into emerging threats and best practices in the SaaS domain. Now, halfway through the year, several SaaS threat predictions from the report have already…
The Hacker News - Resurgence of Ransomware: Mandiant Observes Sharp Rise in Criminal Extortion Tactics
Mandiant saw an increase in ransomware activity in 2023 compared to 2022, including a 75% increase in posts on data leak sites.
SecurityWeek - 361 Million Unique Email Credentials Leaked On Telegram Channels
Last week, a security researcher sent me 122GB of data scraped out of thousands of Telegram channels. It contained 1.7k files with 2B lines and 361M unique email addresses, of which 151M had never been seen in Have I Been Pwned (HIBP) before. Alongside those…
gbhackers.com - Chinese Threat Clusters Triple-Team a High-Profile Asia Government Org
A trio of Chinese-affiliated clusters performed specialized tasks in a broader attack chain, likely under the watch of a single organization.
Dark Reading - 225,000 More Cybersecurity Workers Needed in US: CyberSeek
There are 1.2 million cybersecurity workers in the US, but 225,000 more are needed to close the talent gap, according to new data.
SecurityWeek - Rebranded Knight Ransomware Targeting Healthcare and Businesses Worldwide
An analysis of a nascent ransomware strain called RansomHub has revealed it to be an updated and rebranded version of Knight ransomware, itself an evolution of another ransomware known as Cyclops. Knight (aka Cyclops 2.0) ransomware first arrived in May…
The Hacker News - Zyxel NAS Devices’ EoL Models Patched for Critical Code Execution Vulnerabilities: CVE-2024-29972, CVE-2024-29973, CVE-2024-29974
Zyxel NAS Devices’ EoL Models Patched for Critical Code Execution Vulnerabilities: CVE-2024-29972, CVE-2024-29973, CVE-2024-29974 Zyxel has issued critical security updates for its NAS (Network-Attached Storage) devices, namely for the NAS326 and NAS542…
SOCRadar