News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Today, Sat 31 Oct | 3 so far | 0 |
Developing
Tue 18 Jun 202451 articles
- The Financial Dynamics Behind Ransomware Attacks
Over the last few years, ransomware attacks have become one of the most prevalent and expensive forms of cybercrime. Initially, these attacks involved malicious software that encrypts a victim’s data, rendering it inaccessible until a ransom is paid to the…
Security Affairs - Europol Taken Down 13 Websites Linked to Terrorist Operations
Europol and law enforcement agencies from ten countries have taken down 13 websites linked to terrorist operations. The joint operation, known as Operation HOPPER II, targeted online platforms used by religious and politically motivated terrorist…
gbhackers.com - New ARM ‘TIKTAG’ Attack Impacts Google Chrome, Linux Systems
Memory corruption lets attackers hijack control flow, execute code, elevate privileges, and leak data. ARM’s Memory Tagging Extension (MTE) aims to mitigate by tagging memory and checking tags on access. The following researchers found speculative execution…
gbhackers.com - CVE-2024-37079, CVE-2024-37080: Critical VMware vCenter Server Vulnerabilities Demand Immediate Action
In a security advisory released today, Broadcom revealed multiple critical vulnerabilities in VMware vCenter Server, the widely used virtualization management platform. The flaws, identified as CVE-2024-37079, CVE-2024-37080, and CVE-2024-37081, expose…
SecurityOnline - CVE-2024-37902 (CVSS 10): Critical Flaw in Deep Java Library Opens Door to System Takeover
A critical vulnerability (CVE-2024-37902) has been discovered in the Deep Java Library (DJL), a widely-used open-source framework for deep learning projects. The flaw allows attackers to overwrite critical system files, potentially granting them full...
SecurityOnline - CVE-2024-6047 (CVSS 9.8): Urgent Security Risk for GeoVision Users
Taiwan’s CERT has issued a critical security warning regarding a severe vulnerability (CVE-2024-6047) affecting various end-of-life (EOL) GeoVision devices, including IP cameras, video servers, and DVRs. This vulnerability carries a CVSS score of 9.8,...
SecurityOnline - XenForo Issues Urgent Security Patch to Thwart Remote Code Execution Threat
Popular forum software platform, XenForo, has released an urgent security patch to address a critical vulnerability that could leave websites open to remote code execution and cross-site scripting attacks. The flaws, tracked as CVE-2024-38457...
SecurityOnline - Operation Celestial Force: A Persistent Multi-Component Threat Targeting Indian Entities
Cisco Talos, the threat intelligence division of Cisco Systems, has published a comprehensive report detailing a long-running cyber espionage campaign dubbed “Operation Celestial Force.” This operation, attributed with high confidence to a nexus of...
SecurityOnline - Pandora FMS Reveals High-Risk Security Flaws Affecting 50,000+ Installations
Pandora FMS, the renowned open-source monitoring application with over 50,000 installations globally, has issued a critical security advisory highlighting multiple vulnerabilities in versions 700 through <777. The identified vulnerabilities pose significant…
SecurityOnline - TA571 and ClearFake Use Social Engineering to Deliver PowerShell Malware
Proofpoint researchers have discovered a sophisticated social engineering technique that leverages clipboard manipulation to deliver malware through PowerShell scripts. This new method has been employed by threat actors such as TA571 and the ClearFake...
SecurityOnline - Bug Bounty Programs, Hacking Contests Power China's Cyber Offense
With the requirement that all vulnerabilities first get reported to the Chinese government, once-private vulnerability research has become a goldmine for China's offensive cybersecurity programs.
Dark Reading