News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Fri 16 Oct | 61 | 13 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Today, Fri 30 Oct | 64 so far | 9 |
Developing
Tue 11 Jun 202466 articles
- Critical MSMQ RCE Bug Opens Microsoft Servers to Complete Takeover
CVE-2024-30080 is the only critical issue in Microsoft's June 2024 Patch Tuesday update, but many others require prompt attention as well.
Dark Reading - Patch Tuesday, June 2024 “Recall” Edition
Microsoft today released updates to fix more than 50 security vulnerabilities in Windows and related software, a relatively light Patch Tuesday this month for Windows users. The software giant also responded to a torrent of negative feedback on a new feature…
Krebs on Security - Checkmarx Application Security Posture Management and Cloud Insights Offer Enterprises Code-to-Cloud Visibility
No content available.
Dark Reading - Backslash Unveils Enterprise-Grade Capabilities to its Reachability-Based AppSec Platform
No content available.
Dark Reading - Darktrace Launches Managed Detection & Response Service to Bolster Security Operations
No content available.
Dark Reading - Canada & UK Partner in Joint 23andMe Data Breach Investigation
The two jurisdictions will work together to investigate the credential-stuffing attack that put the personal data of millions at risk.
Dark Reading - New Windows Server KB5039227 and KB5039217 updates fix LSASS crashes
Microsoft has released the Windows Server 2022 KB5039227 and Windows Server 2019 KB5039217 cumulative updates with security fixes and fixes for a variety of bugs. [...]
BleepingComputer - Blood Shortages Hit London Hospitals After Ransomware Attack
Operations at Synnovis medical labs have been disrupted for more than a week, prompting the NHS to implore the public to donate blood.
Dark Reading - JetBrains warns of IntelliJ IDE bug exposing GitHub access tokens
JetBrains warned customers to patch a critical vulnerability that impacts users of its IntelliJ integrated development environment (IDE) apps and exposes GitHub access tokens. [...]
BleepingComputer - Patch Tuesday: Remote Code Execution Flaw in Microsoft Message Queuing
The Windows vulnerability carries a CVSS severity score of 9.8/10 and can be exploited by via specially crafted malicious MSMQ packets.
SecurityWeek - Cylance confirms the legitimacy of data offered for sale in the dark web
A threat actor is selling the data belonging to BlackBerry’s Cylance cybersecurity unit, he demanded $750,000. A threat actor, that goes online with the moniker Sp1d3r, is selling the stolen data for $750,000. The data includes 34 million customer and…
Security Affairs - Windows 11 KB5039212 update released with 37 changes, fixes
Microsoft is rolling out the KB5039212 cumulative update for Windows 11 version 23H3 with thirty-seven improvements and changes, including better drag-and-drop support in the File Explorer address bar. [...]
BleepingComputer - Adobe Plugs Code Execution Holes in After Effects, Illustrator
Patch Tuesday: Adobe fixes critical flaws and warns of the risk of code execution attacks on Windows and macOS platforms.
SecurityWeek - Windows 10 KB5039211 update released with new feature, 12 fixes
Microsoft has released the KB5039211 cumulative update for Windows 10 21H2 and Windows 10 22H2 with 12 changes, including a Snipping Tool feature that allows you to edit Android photos in Windows. [...]
BleepingComputer - Microsoft June 2024 Patch Tuesday fixes 51 flaws, 18 RCEs
Today is Microsoft's June 2024 Patch Tuesday, which includes security updates for 51 flaws, eighteen remote code execution flaws, and one publicly disclosed zero-day vulnerability. [...]
BleepingComputer - City of Cleveland shuts down IT systems after cyberattack
The City of Cleveland, Ohio, is currently dealing with a cyberattack that has forced it to take citizen-facing services offline, including the public offices and facilities at Erieview and the City Hall. [...]
BleepingComputer - WarmCookie Gives Cyberattackers Tasty New Backdoor for Initial Access
The fresh-baked malware is being widely distributed, but still specifically targets individuals with tailored lures. It's poised to evolve into a bigger threat, researchers warn.
Dark Reading - Chinese hackers breached 20,000 FortiGate systems worldwide
The Dutch Military Intelligence and Security Service (MIVD) warned today that the impact of a Chinese cyber-espionage campaign unveiled earlier this year is "much larger than previously known." [...]
BleepingComputer - How Cynet Makes MSPs Rich & Their Clients Secure
Managed service providers (MSPs) are on the front lines of soaring demand for cybersecurity services as cyberattacks increase in volume and sophistication. Cynet has emerged as the security vendor of choice for MSPs to capitalize on existing relationships…
The Hacker News - New Warmcookie Windows backdoor pushed via fake job offers
A never-before-seen Windows malware named 'Warmcookie' is distributed through fake job offer phishing campaigns to breach corporate networks. [...]
BleepingComputer - Chinese Actor SecShow Conducts Massive DNS Probing on Global Scale
Cybersecurity researchers have shed more light on a Chinese actor codenamed SecShow that has been observed conducting Domain Name System (DNS) on a global scale since at least June 2023. The adversary, according to Infoblox security researchers Dr. Renée…
The Hacker News - TellYouThePass ransomware exploits recent PHP RCE flaw to breach servers
The TellYouThePass ransomware gang has been exploiting the recently patched CVE-2024-4577 remote code execution vulnerability in PHP to deliver webshells and execute the encryptor payload on target systems. [...]
BleepingComputer - Two Arrested in UK for Smishing Campaign Powered by Homemade SMS Blaster
UK authorities have arrested two individuals for allegedly using a homemade mobile antenna to send mass text messages.
SecurityWeek - The CEO Is Next
If CEOs want to avoid being the target of government enforcement actions, they need to take a personal interest in ensuring that their corporation invests in cybersecurity.
Dark Reading - Apple Patches Vision Pro Vulnerability Used in Possibly ‘First Ever Spatial Computing Hack’
Apple has released a visionOS update that patches CVE-2024-27812, which may be the first flaw specific to the VR headset.
SecurityWeek - Ransomware Gangs Are Adopting More Brutal Tactics Amidst Crackdowns
No content available.
packetstormsecurity.com - VSCode Extensions With Malicious Code Installed 229M Times
No content available.
packetstormsecurity.com - Mandiant Links Snowflake Breaches To Infostealer Infections
No content available.
packetstormsecurity.com - Multiple Vulnerabilities Plague Discontinued Netgear WNR614 Routers
Redfox Security warns of multiple vulnerabilities in Netgear WNR614 routers discontinued three years ago.
SecurityWeek - Arm zero-day in Mali GPU Drivers actively exploited in the wild
Semiconductor and software design company Arm warns of an actively exploited zero-day vulnerability in Mali GPU Kernel Driver. Arm is warning of an actively exploited zero-day vulnerability, tracked as CVE-2024-4610, in Mali GPU Kernel Driver. The…
Security Affairs - Pure Storage confirms data breach after Snowflake account hack
Pure Storage, a leading provider of cloud storage systems and services, confirmed on Monday that attackers breached its Snowflake workspace and gained access to what the company describes as telemetry information [...]
BleepingComputer - BlackBerry Cylance Data Offered for Sale on Dark Web
BlackBerry says the Cylance data offered for sale for $750,000 is old and its own systems have not been compromised.
SecurityWeek - Remcos RAT Distributed As UUEncoding (UUE) File To Steal Logins
Researchers identified a campaign distributing Remcos RAT, a Remote Access Trojan, where the attack uses phishing emails disguised as legitimate business communication, such as import/export or quotations. The emails contain a UUEncoded (UUE) file compressed…
gbhackers.com - SSLoad Malware Employs MSI Installer To Kick-Start Delivery Chain
Malware distributors use MSI installers as Windows OS already trusts them to run with administrative rights by bypassing security controls. For this reason, MSI files are a convenient means of spreading ransomware, spyware, and other malware that can be…
gbhackers.com - 23andMe data breach under joint investigation in two countries
The British and Canadian privacy authorities have announced they will undertake a joint investigation into the data breach at global genetic testing company 23andMe that was discovered in October 2023. On Friday October 6, 2023, 23andMe confirmed via a…
Malwarebytes - SAP Patches High-Severity Vulnerabilities in Financial Consolidation, NetWeaver
SAP has released 10 new security notes on June 2024 Security Patch Day, including two addressing high-severity vulnerabilities.
SecurityWeek - Dangerous Liaisons: The Interaction Between Threat Actors and High-Risk Devices
Forescout's 2024 analysis of the riskiest devices highlights vulnerabilities and threat actor interactions across IT, IoT, OT, and IoMT.
SecurityWeek