News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Fri 16 Oct | 61 | 13 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Today, Fri 30 Oct | 62 so far | 9 |
Developing
Fri 7 Jun 202460 articles
- UAC-0020 threat actor used the SPECTR Malware to target Ukraine’s defense forces
Ukraine CERT-UA warned of cyber attacks targeting defense forces with SPECTR malware as part of a cyber espionage campaign dubbed SickSync. The Computer Emergency Response Team of Ukraine (CERT-UA) warned of cyber espionage campaign targeting defense forces…
Security Affairs - 750k Impacted by Frontier Communications Data Breach
Frontier Communications has started notifying over 750,000 individuals that their personal information was stolen in a recent data breach. The telecommunications giant says it identified the incident on April 14, when it was forced to shut down certain…
SecurityWeek - Researchers Detail Critical PHP Flaw CVE-2024-4577 with PoC Exploit Code
Cybersecurity researchers at watchTowr published the technical details and a proof-of-concept exploit code for a recently disclosed critical vulnerability (CVE-2024-4577) in PHP, the popular server-side scripting language. The flaw, originally discovered by…
SecurityOnline - Apple Says iPhones Will Get Security Updates for at Least 5 Years
To comply with new UK government regulations, Apple has specified that iPhones will get at least 5 years of security updates.
SecurityWeek - Impacts of Geopolitics to Cyberspace: Sweden Faces Intensifying Hacktivist Attacks
Impacts of Geopolitics to Cyberspace: Sweden Faces Intensifying Hacktivist Attacks On June 28, Salwan Momika, an Iraqi immigrant to Sweden, burned a Qur’an outside a Stockholm mosque. This act, coinciding with the start of the Muslim Eid al-Adha holiday,…
SOCRadar - 300+ Times Downloaded Package from PyPI Contains Wiper Components
ReversingLabs researchers recently uncovered a malicious open-source package named xFileSyncerx on the Python Package Index (PyPI). This package, which had been downloaded nearly 300 times, contained separate malicious “wiper” components. Initially, it…
gbhackers.com - FBI Distributes 7,000 LockBit Ransomware Decryption Keys to Help Victims
The U.S. Federal Bureau of Investigation (FBI) has disclosed that it's in possession of more than 7,000 decryption keys associated with the LockBit ransomware operation to help victims get their data back at no cost. "We are reaching out to known LockBit…
The Hacker News - Chinese threat actor exploits old ThinkPHP flaws since October 2023
Akamai observed a Chinese-speaking group exploiting two flaws, tracked as CVE-2018-20062 and CVE-2019-9082, in ThinkPHP applications. Akamai researchers observed a Chinese threat actor exploiting two old remote code execution vulnerabilities, tracked as…
Security Affairs - SPECTR Malware Targets Ukraine Defense Forces in SickSync Campaign
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of cyber attacks targeting defense forces in the country with a malware called SPECTR as part of an espionage campaign dubbed SickSync. The agency attributed the attacks to a threat actor…
The Hacker News - Tenable Acquires Eureka Security To Provide Data Security Across Infrastructure
Tenable® Holdings, Inc., a leading Exposure Management company, has announced a definitive agreement to acquire Eureka Security, Inc., a prominent provider of data security posture management (DSPM) for cloud environments. This strategic acquisition aims to…
gbhackers.com - Microsoft Details On Using KQL To Hunt For MFA Manipulations
It is difficult to secure cloud accounts from threat actors who exploit multi-factor authentication (MFA) settings. Threat actors usually alter compromised users’ MFA attributes by bypassing the requirements, disabling MFA for others, or enrolling rogue…
gbhackers.com - Commando Cat Cryptojacking Attacks Target Misconfigured Docker Instances
The threat actor known as Commando Cat has been linked to an ongoing cryptojacking attack campaign that leverages poorly secured Docker instances to deploy cryptocurrency miners for financial gain. "The attackers used the cmd.cat/chattr docker image…
The Hacker News - CVE-2024-4577: Critical PHP Vulnerability Exposes Millions of Servers to RCE
Cybersecurity firm DEVCORE has discovered a critical remote code execution vulnerability in the PHP programming language, a cornerstone of the web ecosystem. The vulnerability, tracked as CVE-2024-4577, could potentially allow unauthenticated attackers to…
SecurityOnline - Chinese State-Sponsored Hackers Target Southeast Asian Government in Operation Crimson Palace
Sophos researchers have uncovered a sophisticated and long-running cyberespionage campaign, dubbed Operation Crimson Palace, targeting a high-profile government organization in Southeast Asia. This state-sponsored attack, linked to Chinese threat actors,…
SecurityOnline - Beware of Fake Google Chrome Update Pop-Ups: Malicious Campaign Targets Hundreds of Websites
A new cyberattack campaign is underway, targeting hundreds of websites with deceptive pop-up messages urging users to update their Google Chrome browsers. This scheme, identified by security analyst Puja Srivastava at Sucuri, injects malicious...
SecurityOnline - Muhstik Malware Exploits Apache RocketMQ Flaw: Thousands at Risk
Cybersecurity researchers at Aqua Nautilus have uncovered a concerning campaign where the Muhstik malware is actively targeting Apache RocketMQ installations. This new wave of attacks leverages a known vulnerability (CVE-2023-33246) in RocketMQ versions…
SecurityOnline - CVE-2024-20404/20405: Cisco Finesse Vulnerabilities Open Door to Attacks
Cisco has issued a security advisory, warning users of multiple vulnerabilities in the web-based management interface of Cisco Finesse, a contact center solution widely used by enterprises. The vulnerabilities, tracked as CVE-2024-20404 and CVE-2024-20405,...
SecurityOnline - ThinkPHP Vulnerabilities Under Active Exploit: Researchers Warn
Akamai researchers have identified a concerning resurgence of attacks targeting known vulnerabilities in the ThinkPHP web application framework. These vulnerabilities, CVE-2018-20062 and CVE-2019-9082, continue to be exploited despite being several years…
SecurityOnline - Beware of Fake Advanced IP Scanner: Malicious Installer Delivers CobaltStrike Backdoor
Trustwave SpiderLabs has uncovered a dangerous cyberattack campaign targeting users of the popular network scanning tool, Advanced IP Scanner. Threat actors are distributing a compromised version of the installer through a typo-squatted domain, which...
SecurityOnline - xFileSyncerx: Malicious Package with Wiper Components Discovered on PyPI
In a recent investigation, ReversingLabs researchers uncovered a malicious open-source package on the Python Package Index (PyPI) called xFileSyncerx, which contained dangerous “wiper” components. With close to 300 downloads, this package raised alarms…
SecurityOnline