News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Fri 16 Oct | 61 | 13 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Today, Fri 30 Oct | 54 so far | 7 |
Developing
Wed 5 Jun 202460 articles
- Big name TikTok accounts hijacked after opening DM
High profile TikTok accounts, including CNN, Sony, and—er—Paris Hilton have been targeted in a recent attack. CNN was the first account takeover that made the news, with Semafor reporting that the account was down for several days after the incident.…
Malwarebytes - Cisco Patches Webex Bugs Following Exposure of German Government Meetings
Cisco has released a security advisory after researchers discovered that the German government’s Webex meetings were exposed.
SecurityWeek - London Hospitals Cancel Operations and Appointments After Being Hit in Ransomware Attack
Several hospitals in London have canceled operations and appointments after being hit in a ransomware attack.
SecurityWeek - TikTok Hit by Zero-Day Attack: High-Profile Accounts Compromised
In a recent wave of cyberattacks, TikTok has confirmed a zero-day vulnerability within its direct messaging system has been exploited, leading to the compromise of several high-profile accounts, including those of Sony, CNN, and...
SecurityOnline - Microsoft Details AI Jailbreaks And How They Can Be Mitigated
Generative AI systems comprise several components and models geared to enhancing human interactions with the system. However, while being as realistic and useful as possible, these models are protected by defense layers against generating misuse or…
gbhackers.com - Ransomware Gang Leaks Data From Australian Mining Company
The BianLian ransomware gang has leaked data allegedly stolen from Australian mining company Northern Minerals.
SecurityWeek - Threat Actors Weaponize Excel Files To Attack Windows Machines
Attackers are using malicious Excel files with VBA macros to deploy DLLs and ultimately install Cobalt Strike on compromised Windows machines, which use obfuscation and target specific processes to avoid detection by antivirus software. The attacks appear to…
gbhackers.com - Darkcrystal RAT Malware Attacking Government Officials Via Signal Messenger
Cybersecurity experts have discovered that the widely used messaging application Signal is being exploited to deliver DarkCrystal RAT malware to high-profile targets, including government officials, military personnel, and representatives of defense…
gbhackers.com - How Hackers Using Packers To Hide Malware & Bypass Defenses
Hackers use packers maliciously to make their code difficult to recognize, as most antivirus programs are coded to be able to recognize these packers. The packers initialize and encrypt the original malware payload into a new form, which is hard to detect…
gbhackers.com - Zyxel addressed three RCEs in end-of-life NAS devices
Zyxel Networks released an emergency security update to address critical vulnerabilities in end-of-life NAS devices. Zyxel Networks released an emergency security update to address three critical flaws in some of its NAS devices that have reached…
Security Affairs - Zyxel Releases Patches for Firmware Vulnerabilities in EoL NAS Models
Zyxel has released security updates to address critical flaws impacting two of its network-attached storage (NAS) devices that have currently reached end-of-life (EoL) status. Successful exploitation of three of the five vulnerabilities could permit an…
The Hacker News - Celebrity TikTok Accounts Compromised Using Zero-Click Attack via DMs
Popular video-sharing platform TikTok has acknowledged a security issue that has been exploited by threat actors to take control of high-profile accounts on the platform. The development was first reported by Semafor and Forbes, which detailed a zero-click…
The Hacker News - Command Senior Chief Convicted For Setting Up Wi-Fi On US Navy Combat Ship
The former command senior chief of the littoral combat ship Manchester’s gold crew, Senior Chief Grisel Marrero, has been convicted at a court-martial for installing an unauthorized Wi-Fi system aboard the ship and subsequently lying about it to her…
gbhackers.com - Africa Ranks Low on Phishing Cyber Resilience
As threats to Africa's cybersphere continue to grow, the continent faces high risks to its society and economy with a growing cyber skills gap and lack of preparedness.
Dark Reading - Proof-of-Concept Code Released for Linux Kernel Exploit
An independent security researcher published the technical details and a proof-of-concept (PoC) code for a vulnerability, identified as CVE-2023-3390, which has been discovered in the Linux kernel, leaving systems susceptible to local privilege escalation...
SecurityOnline - Apache Wicket Addresses Critical RCE Vulnerability (CVE-2024-36522)
The Apache Wicket Project Management Committee (PMC) has released security updates for their widely-used Java web application framework, addressing a critical remote code execution vulnerability (CVE-2024-36522). The flaw, discovered in earlier versions of…
SecurityOnline - CVE-2024-34331: Parallels Desktop Vulnerability Gives Root to Hackers, PoC Published
Security researcher Mykola Grymalyuk published the technical details and a proof-of-concept (PoC) exploit code for a vulnerability (CVE-2024-34331) in Parallels Desktop for Mac, a popular virtualization software. The flaw could allow attackers to escalate...
SecurityOnline - UNC1151 Escalates Cyber Warfare: Attacks Target Ukrainian Defense Infrastructure
Cyble Research and Intelligence Labs (CRIL) has uncovered a sophisticated cyber campaign linked to the threat actor group UNC1151, known for its ties to the Belarusian government and its involvement in the GhostWriter information...
SecurityOnline - Tripwire Enterprise Faces Critical Authentication Bypass Flaw (CVE-2024-4332)
Fortra, a leading cybersecurity solutions provider, has issued a security advisory for Tripwire Enterprise, its flagship configuration control solution. The advisory details a critical vulnerability, CVE-2024-4332, that could allow unauthenticated attackers…
SecurityOnline - CVE-2024-27348: Apache HugeGraph RCE Vulnerability, PoC Exploit Published
The Apache Software Foundation has issued a critical security advisory warning users of a remote code execution (RCE) vulnerability in its popular graph database, HugeGraph. Tracked as CVE-2024-27348, the flaw affects versions 1.0.0 to...
SecurityOnline