News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Today, Sat 31 Oct | 3 so far | 0 |
Developing
Wed 19 Jun 202445 articles
- Crown Equipment confirms a cyberattack disrupted manufacturing
Forklift manufacturer Crown Equipment confirmed today that it suffered a cyberattack earlier this month that disrupted manufacturing at its plants. [...]
BleepingComputer - Alleged researchers stole $3 million from Kraken exchange
Alleged researchers have exploited a zero-day in Kraken crypto exchange to steal $3 million worth of cryptocurrency. Kraken Chief Security Officer Nick Percoco revealed that alleged security researchers exploited a zero-day flaw to steal $3 million worth of…
Security Affairs - Advance Auto Parts confirms data breach exposed employee information
Advance Auto Parts has confirmed it suffered a data breach after a threat actor attempted to sell stolen data on a hacking forum earlier this month. [...]
BleepingComputer - Google Chrome 126 update addresses multiple high-severity flaws
Google released Chrome 126 update that addresses a high-severity vulnerability demonstrated at the TyphoonPWN 2024 hacking competition. Google has issued a Chrome 126 security update, addressing six vulnerabilities, including a flaw, tracked as CVE-2024-6100…
Security Affairs - Massachusetts 911 Outage Caused by Errant Firewall
A statewide outage of the Massachusetts 911 system was the result of a firewall that blocked calls from reaching emergency responders.
SecurityWeek - CDK Global cyberattack impacts thousands of US car dealerships
Car dealership software-as-a-service provider CDK Global was hit by a massive cyberattack, causing the company to shut down its systems and leaving clients unable to operate their business normally. [...]
BleepingComputer - 'ONNX' MFA Bypass Targets Microsoft 365 Accounts
The service, likely a rebrand of a previous operation called 'Caffeine,' mainly targets financial institutions in the Americas and EMEA and uses malicious QR codes and other advanced evasion tactics.
Dark Reading - France Seeks to Protect National Interests With Bid for Atos Cybersec
By offering to buy Atos's big data and cybersecurity operations. Paris is trying to make sure key technologies do not fall under foreign control.
Dark Reading - Kraken Crypto Exchange Hit by $3 Million Theft Exploiting Zero-Day Flaw
Crypto exchange Kraken revealed that an unnamed security researcher exploited an "extremely critical" zero-day flaw in its platform to steal $3 million in digital assets and refused to return them. Details of the incident were shared by Kraken's Chief…
The Hacker News - Chinese Cyber Espionage Group Exploits Fortinet, Ivanti and VMware Zero-Days
The China-nexus cyber espionage actor linked to the zero-day exploitation of security flaws in Fortinet, Ivanti, and VMware devices has been observed utilizing multiple persistence mechanisms in order to maintain unfettered access to compromised…
The Hacker News - "Researchers" exploit Kraken exchange bug, steal $3 million in crypto
The Kraken crypto exchange disclosed today that alleged security researchers exploited a zero-day website bug to steal $3 million in cryptocurrency and then refused to return the funds. [...]
BleepingComputer - Amtrak Data Breach: Hackers Accessed User’s Email Address
Amtrak notified its customers regarding a significant security breach involving its Amtrak Guest Rewards accounts. The breach between May 15, 2024, and May 18, 2024, allowed unauthorized parties to access users’ accounts. The company believes the hackers…
gbhackers.com - Chrome Security Update – Patch for 6 Vulnerabilities
Google has announced a new update for the Chrome browser, rolling out version 126.0.6478.114/115 for Windows and Mac and 126.0.6478.114 for Linux. This update, which will be distributed over the coming days and weeks, addresses several security…
gbhackers.com - Cybersecurity M&A Roundup for First Half of June 2024
Roundup of the cybersecurity-related merger and acquisition (M&A) deals announced in the first half of June 2024.
SecurityWeek - Amtrak Says Guest Rewards Accounts Hacked in Credential Stuffing Attacks
National passenger railroad company Amtrak is notifying customers that hackers have breached their Guest Rewards Accounts.
SecurityWeek - Hackers Weaponize Windows Installer (MSI) Files to Deliver Malware
Cybersecurity researchers have uncovered a sophisticated malware campaign orchestrated by a threat actor group, Void Arachne. This group has targeted Chinese-speaking users by distributing malicious Windows Installer (MSI) files. The campaign leverages…
gbhackers.com - Chip maker giant AMD investigates a data breach
AMD announced an investigation after a threat actor attempted to sell data allegedly stolen from its systems. AMD has launched an investigation after the threat actor IntelBroker announced they were selling sensitive data allegedly belonging to the company.…
Security Affairs - Hackers Using VPNs To Exploit Restrictions & Steal Mobile Data
Hackers are offering “free” mobile data access on Telegram channels by exploiting loopholes in telecom provider policies, which target users in Africa and Asia and involve sharing configuration files to mimic zero-rated traffic. The channels function as…
gbhackers.com - US, Allies Publish Guidance on Securing Network Access
Government agencies in the US, New Zealand, and Canada have published new guidance on improving network security.
SecurityWeek - New PhaaS Platform Lets Attackers Bypass Two-Factor Authentication
Several phishing campaign kits have been used widely by threat actors in the past. One popular PhaaS (Phishing-as-a-Platform) was Caffeine, which was first identified and reported by Mandiant researchers. MRxC0DER, an Arabic-speaking threat actor, developed…
gbhackers.com - Stuxnet, The Malware That Propagates To Air-Gapped Networks
Stuxnet, a complex worm discovered in 2010, targeted Supervisory Control and Data Acquisition (SCADA) systems used in industrial facilities. By exploiting multiple vulnerabilities, including zero-days, it breached air-gapped networks (isolated systems) and…
gbhackers.com - F5 Big-IP Appliances Exploited For 3 Years By China Linked Group
No content available.
packetstormsecurity.com - AMD Investigating Breach Claims After Hacker Offers To Sell Data
No content available.
packetstormsecurity.com - New Case Study: Unmanaged GTM Tags Become a Security Nightmare
Are your tags really safe with Google Tag Manager? If you've been thinking that using GTM means that your tracking tags and pixels are safely managed, then it might be time to think again. In this article we look at how a big-ticket seller that does business…
The Hacker News - CISA Warns of PoC Exploit for Vulnerability in RAD SecFlow-2 Industrial Switch
CISA has notified RAD after finding a PoC exploit targeting a high-severity vulnerability in an outdated industrial switch.
SecurityWeek - Threat Actors Claiming Breach of AMD Source Code on Hacking Forums
A threat actor named ” IntelBroker ” claims to have breached AMD in June 2024 and is now selling the allegedly stolen data on hacking forums. The compromised information reportedly includes sensitive data such as future AMD product plans, specification…
gbhackers.com - Void Arachne Uses Deepfakes and AI to Deliver Malicious VPNs to Chinese Users
Chinese-speaking users are the target of a never-before-seen threat activity cluster codenamed Void Arachne that employs malicious Windows Installer (MSI) files for virtual private networks (VPNs) to deliver a command-and-control (C&C) framework called Winos…
The Hacker News - Warning: Markopolo's Scam Targeting Crypto Users via Fake Meeting Software
A threat actor who goes by alias markopolo has been identified as behind a large-scale cross-platform scam that targets digital currency users on social media with information stealer malware and carries out cryptocurrency theft. The attack chains involve…
The Hacker News - The Perilous Role of the CISO: Navigating Modern Minefields
As organizations grapple with the implications of cybersecurity on their bottom line and reputation, the question of whether the CISO role is worth the inherent risks looms large.
SecurityWeek - Beware of Nevermore Actor Promoting Ransomware Builder
A prominent figure from the dark web, known by the alias “Nevermore,” has been found promoting a sophisticated ransomware builder. This alarming development has raised concerns among cybersecurity experts and law enforcement agencies worldwide. The Rise of…
gbhackers.com - Chrome 126 Update Patches Vulnerability Exploited at Hacking Competition
Google has released a Chrome 126 security update with six fixes, including four for externally reported high-severity flaws.
SecurityWeek - Beware Of Fake Microsoft Teams Website That Installs Oyster Malware
Fake websites of authoritative and popular companies claiming to be genuine sites make users believe that the site belongs to that specific company and is safe to use. Besides this, hackers can more easily lure victims into entering sensitive information or…
gbhackers.com - AMD Investigating Breach Claims After Hacker Offers to Sell Data
AMD has launched an investigation after a notorious hacker announced selling sensitive data allegedly belonging to the company.
SecurityWeek - Mailcow Mail Server Flaws Expose Servers to Remote Code Execution
Two security vulnerabilities have been disclosed in the Mailcow open-source mail server suite that could be exploited by malicious actors to achieve arbitrary code execution on susceptible instances. Both shortcomings impact all versions of the software…
The Hacker News - Cryptojacking campaign targets exposed Docker APIs
A malware campaign targets publicly exposed Docker API endpoints to deliver cryptocurrency miners and other payloads. Researchers at Datadog uncovered a new cryptojacking campaign linked to the attackers behind Spinning YARN campaign. The threat actors…
Security Affairs - CVE-2023-32191 (CVSS 10) in Rancher Kubernetes Engine Exposes Sensitive Credentials
A critical vulnerability has been discovered in the Rancher Kubernetes Engine (RKE), a widely used Kubernetes distribution that simplifies the installation and operation of Kubernetes. This vulnerability, identified as CVE-2023-32191 and rated with a...
SecurityOnline - New Undetected Diamorphine Rootkit Targets Linux Systems
Cybersecurity researchers at Avast have unearthed a new and previously undetected variant of the Diamorphine Linux kernel rootkit, a sophisticated piece of malware known for its ability to conceal files, folders, and processes from...
SecurityOnline - CVE-2024-5671 (CVSS 9.8) Exposes Trellix Intrusion Prevention System to Remote Attacks
Trellix, a prominent cybersecurity provider, has issued urgent patches for two critical vulnerabilities discovered in its Intrusion Prevention System (IPS). The flaws, tracked as CVE-2024-5671 and CVE-2024-5731, leave unprotected systems vulnerable to remote…
SecurityOnline