News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Fri 16 Oct | 61 | 13 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Today, Fri 30 Oct | 64 so far | 9 |
Developing
Mon 10 Jun 202460 articles
- Japanese video-sharing platform Niconico was victim of a cyber attack
The Japanese video-sharing platform, Niconico, was forced to suspend its services following a cybersecurity incident. The Japanese video-sharing platform, Niconico, temporarily suspended its services following a large-scale cyberattack on June 8, 2024. “Due…
Security Affairs - Arm warns of actively exploited flaw in Mali GPU kernel drivers
Arm has issued a security bulletin warning of a memory-related vulnerability in Bifrost and Valhall GPU kernel drivers that is being exploited in the wild. [...]
BleepingComputer - Gitloker attacks abuse GitHub notifications to push malicious oAuth apps
Threat actors impersonate GitHub's security and recruitment teams in phishing attacks to hijack repositories using malicious OAuth apps in an ongoing extortion campaign wiping compromised repos. [...]
BleepingComputer - Microsoft Modifies 'Recall' AI Feature Amid Privacy, Security Failings
In response to recent public outcry, Recall is getting new security accouterments. Will that be enough to quell concerns?
Dark Reading - Apple enters AI arms race with new Apple Intelligence feature
Apple unveiled its new 'Apple Intelligence' feature today at its 2024 Worldwide Developer Conference, finally unveiling its generative AI strategy that will power new personalized experiences on Apple devices. [...]
BleepingComputer - Snowflake Cloud Accounts Felled by Rampant Credential Issues
A threat actor has accessed data belonging to at least 165 organizations using valid credentials to their Snowflake accounts, thanks to no MFA and poor password hygiene.
Dark Reading - Netgear WNR614 flaws allow device takeover, no fix available
Researchers found half a dozen vulnerabilities of varying severity impacting Netgear WNR614 N300, a budget-friendly router that proved popular among home users and small businesses. [...]
BleepingComputer - A Look at the Riskiest Connected Devices of 2024
VoIP gear, hypervisors, medical equipment, building automation, printers, and more pose broad risk to organizations, with many facing danger from a combo of IT, IoT, and OT all at once. This listicle breaks it down.
Dark Reading - UK NHS call for O-type blood donations following ransomware attack on London hospitals
The UK NHS issued an urgent call for O-type blood donations following the recent ransomware attack that hit several London hospitals. The UK National Health Service (NHS) issued an urgent call for O-type blood donations due to the recent ransomware attack on…
Security Affairs - Tokenization Moves Beyond Payments to Personal Privacy
Pseudonymous masking has made credit card transactions more secure, but Visa has even greater plans for tokenization: giving users control of their data.
Dark Reading - New York Times Internal Data Nabbed From GitHub
The tranche of data, lifted from underprotected GitHub repositories, reportedly includes source code, though the country's paper of record has not yet confirmed the nature of the data accessed.
Dark Reading - Smishers Stand Up Fake Phone Tower to Blast Malicious Texts
London cops make arrests in connection with scam SMS messages, purportedly from official organizations, being sent out from bespoke phone mast.
Dark Reading - Cylance confirms data breach linked to 'third-party' platform
Cybersecurity company Cylance confirmed the legitimacy of data being sold on a hacking forum, stating that it is old data stolen from a "third-party platform." [...]
BleepingComputer - Snowflake Attacks: Mandiant Links Data Breaches to Infostealer Infections
Mandiant says it has no evidence to suggest that unauthorized access to Snowflake customer accounts stemmed from a breach of Snowflake's enterprise environment.
SecurityWeek - London hospitals face blood shortage after Synnovis ransomware attack
England's NHS Blood and Transplant (NHSBT) has issued an urgent call to O Positive and O Negative blood donors to book appointments and donate after last week's cyberattack on pathology provider Synnovis impacted multiple hospitals in London. [...]
BleepingComputer - More_eggs Malware Disguised as Resumes Targets Recruiters in Phishing Attack
Cybersecurity researchers have spotted a phishing attack distributing the More_eggs malware by masquerading it as a resume, a technique originally detected more than two years ago. The attack, which was unsuccessful, targeted an unnamed company in the…
The Hacker News - Exploit for critical Veeam auth bypass available, patch now
A proof-of-concept (PoC) exploit for a Veeam Backup Enterprise Manager authentication bypass flaw tracked as CVE-2024-29849 is now publicly available, making it urgent that admins apply the latest security updates. [...]
BleepingComputer - Malvertising Campaign Targets Windows Administrators Using PuTTy and WinSCP
Malvertising Campaign Targets Windows Administrators Using PuTTy and WinSCP An AI illustration of the malvertising campaign using PuTTy and WinSCP In the ever-evolving landscape of digital security, cyber threats are continually adapting and becoming more…
SOCRadar - 23andMe data breach under investigation in UK and Canada
Privacy authorities in Canada and the United Kingdom have launched a joint investigation to assess the scope of sensitive customer information exposed in last year's 23andMe data breach. [...]
BleepingComputer - Fortinet Expands Cloud Security Portfolio with Lacework Acquisition
Fortinet announces plans to acquire Lacework, a late-stage cloud security startup that was once listed as a “unicorn” company valued north of $1 billion.
SecurityWeek - Criminal IP Unveils Innovative Fraud Detection Data Products on Snowflake Marketplace
AI SPERA, a leader in Cyber Threat Intelligence (CTI) solutions, announced that it has started selling its paid threat detection data from its CTI search engine ‘Criminal IP‘ on the Snowflake Marketplace. Criminal IP is committed to offering advanced…
gbhackers.com - Free Android VPNs Suffering Encryption Failures, New Report
VPN apps for Android increase privacy and security over the internet since connection data is encrypted, consequently making it impossible for hackers or other parties to access communication data. They also help unblock region-restricted content through IP…
gbhackers.com - Is a US Nationwide Privacy Law Really Coming?
If passed, APRA will be a giant leap forward for the rights and freedoms of Americans.
Dark Reading - Critical PyTorch Vulnerability Can Lead to Sensitive AI Data Theft
A critical vulnerability in the PyTorch distributed RPC framework could be exploited for remote code execution.
SecurityWeek - Making Choices for Stronger Vulnerability Management
The threat environment will continue to grow in complexity. Now is the time for organizations to streamline how they manage and mitigate overlooked vulnerabilities.
Dark Reading - PHP Patches Critical Remote Code Execution Vulnerability
PHP has released patches for CVE-2024-4577, a critical vulnerability that could lead to arbitrary code execution on remote servers.
SecurityWeek - New York Times Responds to Source Code Leak
The New York Times has issued a statement after someone leaked source code allegedly belonging to the news giant.
SecurityWeek - CISO Guide to Deepfake Scams
CISO Guide to Deepfake Scams Initially perceived as a novelty, deepfakes have evolved into sophisticated fraud, misinformation, and manipulation tools. Utilizing artificial intelligence and machine learning to create incredibly realistic fake videos, images,…
SOCRadar - PHP Updates Urged Over Critical Vuln That Could Lead To RCE
No content available.
packetstormsecurity.com - Microsoft Bows To Public Pressure, Disables Controversial Windows Recall By Default
No content available.
packetstormsecurity.com - Two Arrested In UK Over Fake Cell Tower-Powered Smishing Campaign
No content available.
packetstormsecurity.com - Poc Exploit Released For Veeam Authentication Bypass Vulnerability
A proof-of-concept (PoC) exploit has been released for a critical authentication bypass vulnerability in Veeam Backup Enterprise Manager. The vulnerability, identified as CVE-2024-29849, has a CVSS score of 9.8, indicating its high severity. This article…
gbhackers.com - Christie’s data breach impacted 45,798 individuals
Auction house Christie’s revealed that the data breach caused by the recent ransomware attack impacted 45,000 individuals. At the end of May, the auction house Christie’s disclosed a data breach after the ransomware group RansomHub threatened to leak stolen…
Security Affairs - Nvidia Patches High-Severity GPU Driver Vulnerabilities
Nvidia patches multiple high-severity vulnerabilities in GPU display drivers and virtual GPU software.
SecurityWeek - Cybersecurity CPEs: Unraveling the What, Why & How
Staying Sharp: Cybersecurity CPEs Explained Perhaps even more so than in other professional domains, cybersecurity professionals constantly face new threats. To ensure you stay on top of your game, many certification programs require earning Continuing…
The Hacker News - Azure Service Tags Vulnerability: Microsoft Warns of Potential Abuse by Hackers
Microsoft is warning about the potential abuse of Azure Service Tags by malicious actors to forge requests from a trusted service and get around firewall rules, thereby allowing them to gain unauthorized access to cloud resources. "This case does highlight…
The Hacker News - Cisco Finds 15 Vulnerabilities in AutomationDirect PLCs
Cisco Talos researchers have found over a dozen vulnerabilities in AutomationDirect PLCs, including flaws that could be valuable to attackers.
SecurityWeek