News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Today, Sat 31 Oct | 1 so far | 0 |
Developing
Mon 17 Jun 202458 articles
- Owners of “Empire Market” Charged in Chicago With Operating $430 Million Dark Web Marketplace
U.S. Attorney’s Office, Northern District of Illinois, June 14: CHICAGO — Two men have been charged in federal court in Chicago with operating “Empire Market,” a dark web marketplace that enabled users to anonymously buy and sell more than $430 million in…
DataBreaches - Fake Google Chrome errors trick you into running malicious PowerShell scripts
A new malware distribution campaign uses fake Google Chrome, Word, and OneDrive errors to trick users into running malicious PowerShell "fixes" that install malware. [...]
BleepingComputer - Empire Market owners charged with operating $430M dark web marketplace
Federal authorities charged two individuals with operating the dark web marketplace Empire Market that facilitated over $430 million in illegal transactions. Two men, Thomas Pavey (aka “Dopenugget”) and Raheim Hamilton (aka “Sydney” and “Zero Angel”), have…
Security Affairs - Scattered Spider Boss Cuffed in Spain Boarding a Flight to Italy
Accused of hacking into more than 45 companies in the US, a 22-year-old British man was arrested by Spanish police and found to be in control of more than $27 million in Bitcoin.
Dark Reading - Emojis Control the Malware in Discord Spy Campaign
Pakistani hackers are spying (▀̿Ĺ̯▀̿ ̿) on the highly sensitive organizations in India by using emojis (Ծ_Ծ) as malicious commands (⚆ᗝ⚆) and the old Dirty Pipe Linux flaw.
Dark Reading - DataBee Launches Innovations for Enhanced Threat Monitoring and Zero Trust Implementation
No content available.
Dark Reading - Panera Bread likely paid a ransom in March ransomware attack
Panera Bread, an American chain of fast food restaurants, most likely paid a ransom after being hit by a ransomware attack, suggests language used an internal email sent to employees. [...]
BleepingComputer - Aim Security Closes $18M Series A to Secure Generative AI Enterprise Adoption
No content available.
Dark Reading - LA County Dept. of Public Health Data Breach Impacts 200K
Threat actors were able to breach the department using the credentials accessed through phishing emails.
Dark Reading - China-linked Velvet Ant uses F5 BIG-IP malware in cyber espionage campaign
Chinese cyberespionage group Velvet Ant was spotted using custom malware to target F5 BIG-IP appliances to breach target networks. In late 2023, Sygnia researchers responded to an incident suffered by a large organization that they attributed to a…
Security Affairs - Empire Market owners charged for enabling $430M in dark web transactions
Two men have been charged in a Chicago federal court for operating "Empire Market," a dark web marketplace that facilitated over $430 million in illegal transactions between February 2018 and August 2020. [...]
BleepingComputer - Hackers use F5 BIG-IP malware to stealthily steal data for years
A group of suspected Chinese cyberespionage actors named 'Velvet Ant' are deploying custom malware on F5 BIG-IP appliances to gain a persistent connection to the internal network and steal data. [...]
BleepingComputer - Addressing Misinformation in Critical Infrastructure Security
As the lines between the physical and digital realms blur, widespread understanding of cyber threats to critical infrastructure is of paramount importance.
Dark Reading - Some Skills Should Not Be Ceded to AI
AI tools keep trying to take away all the fun jobs. Here are just a few of the reasons for cybersecurity folks (and others) to skip the writing cheats.
Dark Reading - China's 'Velvet Ant' APT Nests Inside Multiyear Espionage Effort
The campaign is especially notable for the remarkable lengths to which the threat actor went to maintain persistence on the target environment.
Dark Reading - (Almost) everything you always wanted to know about cybersecurity, but were too afraid to ask, with Tjitske de Vries: Lock and Code S05E13
This week on the Lock and Code podcast… Ready to know what Malwarebytes knows?Ask us your questions and get some answers.What is a passphrase and what makes it—what’s the word?Strong? Every day, countless readers, listeners, posters, and users ask us…
Malwarebytes - Notorious Cyber Gang UNC3944 Attacks vSphere And Azure To Run VMs Inside Victims' Infrastructure
No content available.
packetstormsecurity.com - UK Man Suspected Of Being Scattered Spider Leader Arrested
No content available.
packetstormsecurity.com - ASUS Patches Critical Authentication Bypass Flaw in Multiple Router Models
ASUS has shipped software updates to address a critical security flaw impacting its routers that could be exploited by malicious actors to bypass authentication. Tracked as CVE-2024-3080, the vulnerability carries a CVSS score of 9.8 out of a maximum of…
The Hacker News - Alleged Scattered Spider sim-swapper arrested in Spain
A 22-year-old British national allegedly linked to the Scattered Spider hacking group and responsible for attacks on 45 U.S. companies has been arrested in Palma de Mallorca, Spain. [...]
BleepingComputer - Name That Toon: Future Shock
Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.
Dark Reading - Name That Toon: Future Shock
Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.
Dark Reading - Microsoft Recall delayed after privacy and security concerns
Microsoft has announced it will postpone the broadly available preview of the heavily discussed Recall feature for Copilot+ PCs. Copilot+ PCs are personal computers that come equipped with several artificial intelligence (AI) features. The Recall feature…
Malwarebytes - Tech Leaders to Gather for AI Risk Summit at the Ritz-Carlton, Half Moon Bay June 25-26, 2024
SecurityWeek’s AI Risk Summit + CISO Forum bring together business and government stakeholders to provide meaningful guidance on risk management and cybersecurity in the age of artificial intelligence.
SecurityWeek - LA County’s Department of Public Health (DPH) data breach impacted over 200,000 individuals
The County of Los Angeles’ Department of Public Health (DPH) disclosed a data breach that impacted more than 200,000 individuals. The LA County’s Department of Public Health announced that the personal information of more than 200,000 was compromised after a…
Security Affairs - CISA Conducts First AI Cyber Incident Response Exercise
The US cybersecurity agency CISA has conducted a tabletop exercise with the private sector focused on AI cyber incident response.
SecurityWeek - Keytronic Says Personal Information Stolen in Ransomware Attack
Keytronic confirms that personal information was compromised after a ransomware group leaked allegedly stolen data.
SecurityWeek - Operation Celestial Force Employing Android And Windows Malware To Attack Indian Users
A Pakistani threat actor group, Cosmic Leopard, has been conducting a multi-year cyber espionage campaign named Operation Celestial Force, targeting Indian entities. Since 2018, they have used GravityRAT malware, initially for Windows and later for Android,…
gbhackers.com - Insurance Company Globe Life Investigating Data Breach
US insurance company Globe Life is investigating a data breach involving unauthorized access to consumer and policyholder information.
SecurityWeek - Space: The Final Frontier for Cyberattacks
A failure to imagine — and prepare for — threats to outer-space related assets could be a huge mistake at a time when nation-states and private companies are rushing to deploy devices in a frantic new space race.
Dark Reading - Aim Security Raises $18M to Secure Customers’ Implementation of AI Apps
Aim Security has raised a total of $28 million to date and is on a mission to help companies to implement AI products with confidence.
SecurityWeek - China-Linked Hackers Infiltrate East Asian Firm for 3 Years Using F5 Devices
A suspected China-nexus cyber espionage actor has been attributed as behind a prolonged attack against an unnamed organization located in East Asia for a period of about three years, with the adversary establishing persistence using legacy F5 BIG-IP…
The Hacker News - MITRE: US Government Needs to Focus on Critical Infrastructure
With the presidential election this year and increase in cyberattacks and conflict around the world, MITRE has outlined four important areas the incoming presidential administration should focus on next year.
Dark Reading - What is DevSecOps and Why is it Essential for Secure Software Delivery?
Traditional application security practices are not effective in the modern DevOps world. When security scans are run only at the end of the software delivery lifecycle (either right before or after a service is deployed), the ensuing process of compiling and…
The Hacker News - 200,000 Impacted by Data Breach at Los Angeles County Public Health Agency
The LA County’s Department of Public Health says the personal information of 200,000 was compromised in a data breach.
SecurityWeek - Hunt3r Kill3rs Group claims they Infiltrated Schneider Electric Systems in Germany
The notorious cybercriminal group Hunt3r Kill3rs has claimed responsibility for infiltrating Schneider Electric’s systems in Germany. The announcement was made via a post on the social media platform Twitter by the account MonThreat, which is known for…
gbhackers.com - Spanish police arrested an alleged member of the Scattered Spider group
A joint law enforcement operation led to the arrest of a key member of the cybercrime group known as Scattered Spider. Spanish police arrested a 22-year-old British national who is suspected of being a key member of the cybercrime group known as Scattered…
Security Affairs