News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Fri 16 Oct | 61 | 13 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Today, Fri 30 Oct | 68 so far | 10 |
Developing
Wed 12 Jun 202458 articles
- Libraries for Red Teaming Your GenAI Applications
Libraries for Red Teaming Your GenAI Applications It is critical to ensure the security and integrity of Generative AI (GenAI) applications. Red teaming these applications entails proactively identifying and addressing potential vulnerabilities that…
SOCRadar - Chrome 126, Firefox 127 Patch High-Severity Vulnerabilities
Google and Mozilla have released patches for 21 and 15 vulnerabilities in Chrome and Firefox, respectively.
SecurityWeek - Pure Storage Data Breach Following Snowflake Hack: LDAP Usernames, Email Addresses Exposed
Pure Storage has confirmed that a third party temporarily gained unauthorized access to a Snowflake data analytics workspace. This workspace contained telemetry information used by Pure Storage to provide proactive customer support services. The exposed data…
gbhackers.com - Ransomware Group Exploits PHP Vulnerability Days After Disclosure
The TellYouThePass ransomware gang started exploiting a recent code execution flaw in PHP days after public disclosure.
SecurityWeek - New Phishing Campaign Deploys WARMCOOKIE Backdoor Targeting Job Seekers
Cybersecurity researchers have disclosed details of an ongoing phishing campaign that leverages recruiting- and job-themed lures to deliver a Windows-based backdoor named WARMCOOKIE. "WARMCOOKIE appears to be an initial backdoor tool used to scout out victim…
The Hacker News - ICS Patch Tuesday: Advisories Published by Siemens, Schneider Electric, Aveva, CISA
Several ICS vendors released advisories on Tuesday to inform customers about vulnerabilities found in their industrial and OT products.
SecurityWeek - China-Backed Hackers Exploit Fortinet Flaw, Infecting 20,000 Systems Globally
State-sponsored threat actors backed by China gained access to 20,000 Fortinet FortiGate systems worldwide by exploiting a known critical security flaw between 2022 and 2023, indicating that the operation had a broader impact than previously known. "The…
The Hacker News - Microsoft Urges Windows Admins to Patch Microsoft Message Queuing RCE flaw
Microsoft has disclosed two Critical remote code execution vulnerabilities in MSMQ (Microsoft Message Queuing) and the Windows Wi-Fi Driver. The CVE for these vulnerabilities has been assigned with CVE-2024-30080 and CVE-2024-30078. The severity for these…
gbhackers.com - Cleveland City Closes Offices Following Attack on IT Systems
Cleveland City Hall and Erieview offices will remain closed for a second consecutive day, June 11, as officials continue investigating a significant “cyber event” that has disrupted city operations. A recent tweet from the...
gbhackers.com - Microsoft Patch Tuesday security updates for June 2024 fixed only one critical issue
Microsoft Patch Tuesday security updates for June 2024 addressed 49 vulnerabilities, only one of them is a publicly disclosed zero-day flaw. Microsoft Patch Tuesday security updates for June 2024 addressed 49 vulnerabilities in Windows and Windows…
Security Affairs - Microsoft Issues Patches for 51 Flaws, Including Critical MSMQ Vulnerability
Microsoft has released security updates to address 51 flaws as part of its Patch Tuesday updates for June 2024. Of the 51 vulnerabilities, one is rated Critical and 50 are rated Important. This is in addition to 17 vulnerabilities resolved in the…
The Hacker News - CVE-2024-27801: Critical Vulnerability Discovered in Apple Ecosystem, PoC Published
A security researcher has published a proof-of-concept (PoC) exploit code for a CVE-2024-27801 vulnerability affecting multiple Apple platforms, including macOS Sonoma, iOS/iPadOS, and visionOS. This vulnerability has the potential to elevate privileges,…
SecurityOnline - VLC Media Player Patches Two Vulnerabilities: Users Urged to Update Immediately
Videolan, the organization behind the popular VLC media player, has released urgent security updates to address two critical vulnerabilities that could expose users to serious risks. The flaws, discovered in both the desktop and...
SecurityOnline - Urgent Security Alert: SuiteCRM Users Urged to Patch Multiple Critical Vulnerabilities
SuiteCRM, a widely adopted open-source Customer Relationship Management (CRM) platform, has released urgent security patches to address multiple critical vulnerabilities that could expose sensitive customer data and compromise system integrity. These…
SecurityOnline - Forced-Labor Camps Fuel Billions of Dollars in Cyber Scams
Greater collaboration between financial and law enforcement officials is needed to dismantle cybercrime scam centers in Cambodia, Laos, and Myanmar, which rake in tens of billions of dollars annually — and affect victims worldwide.
Dark Reading - Noodle RAT Exposed: A New Backdoor Threat Linked to Chinese-Speaking Groups
Cybersecurity researchers at Trend Micro have unveiled a previously undocumented backdoor malware dubbed “Noodle RAT,” believed to be utilized by Chinese-speaking groups in espionage and cybercrime operations across the Asia-Pacific region since 2022.…
SecurityOnline - Critical Security Flaws Discovered in Popular PHP Package Manager
Composer, the widely-used PHP dependency manager, has issued urgent security updates to address two critical vulnerabilities that could allow attackers to execute malicious code on affected systems. Developers are strongly urged to update to...
SecurityOnline - Schneider Electric Issues Urgent Patches for SAGE RTU Vulnerabilities
Schneider Electric, a global specialist in energy management and automation, has released a critical security patch to address multiple vulnerabilities in its SAGE Remote Terminal Unit (RTU) devices. These vulnerabilities, with CVSS scores ranging...
SecurityOnline