News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Today, Sat 31 Oct | 3 so far | 0 |
Developing
Thu 20 Jun 202461 articles
- Biden bans Kaspersky antivirus software in US over security concerns
Today, the Biden administration has announced an upcoming ban of Kaspersky antivirus software and the pushing of software updates to US companies and consumers, giving customers until September 29, 2024, to find alternative security software. [...]
BleepingComputer - Thousands of Car Dealerships Stalled Out After Software Provider Cyberattack
CDK Global, which makes software for car dealers, experienced a cyber incident that halted vehicle sales and service across the US.
Dark Reading - US bans sale of Kaspersky products due to risks to national security
The US government announced the ban on selling Kaspersky software due to security risks from Russia and urged citizens to replace it. The Biden administration announced it will ban the sale of Kaspersky antivirus software due to the risks posed by Russia to…
Security Affairs - Phoenix UEFI vulnerability impacts hundreds of Intel PC models
A newly discovered vulnerability in Phoenix SecureCore UEFI firmware tracked as CVE-2024-0762 impacts devices running numerous Intel CPUs, with Lenovo already releasing new firmware updates to resolve the flaw. [...]
BleepingComputer - Russia's Midnight Blizzard Seeks to Snow French Diplomats
The notorious cyber espionage group has been harrying French interests for years, and isn't flagging now as the Paris Olympics approach.
Dark Reading - High-Risk Overflow Bug in Intel Chips Likely Impacts 100s of PC Models
The old, but newly disclosed, vulnerability is buried deep inside personal computers, servers, and mobile devices, and their supply chains, making remediation a headache.
Dark Reading - CosmicSting flaw impacts 75% of Adobe Commerce, Magento sites
A vulnerability dubbed "CosmicSting" impacting Adobe Commerce and Magento websites remains largely unpatched nine days after the security update has been made available, leaving millions of sites open to catastrophic attacks. [...]
BleepingComputer - KrebsOnSecurity Threatened with Defamation Lawsuit Over Fake Radaris CEO
On March 8, 2024, KrebsOnSecurity published a deep dive on the consumer data broker Radaris, showing how the original owners are two men in Massachusetts who operated multiple Russian language dating services and affiliate programs, in addition to a dizzying…
Krebs on Security - Linux version of RansomHub ransomware targets VMware ESXi VMs
The RansomHub ransomware operation is using a Linux encryptor designed specifically to encrypt VMware ESXi environments in corporate attacks. [...]
BleepingComputer - Atlassian fixed six high-severity bugs in Confluence Data Center and Server
Australian software company Atlassian addressed multiple high-severity vulnerabilities in its Confluence, Crucible, and Jira solutions. Atlassian June 2024 Security Bulletin addressed nine high-severity vulnerabilities in Confluence, Crucible, and Jira…
Security Affairs - UNC3886 hackers use Linux rootkits to hide on VMware ESXi VMs
A suspected Chinese threat actor tracked as UNC3886 uses publicly available open-source rootkits named 'Reptile' and 'Medusa' to remain hidden on VMware ESXi virtual machines, allowing them to conduct credential theft, command execution, and lateral…
BleepingComputer - DDoS Attack Targets Poland's UEFA Euro Opening Match
The stream was briefly knocked offline, preventing millions of fans from accessing the game. Poland's head of digital services says, "all leads lead to the Russian Federation."
Dark Reading - Water facilities warned to improve cybersecurity
United States water facilities, which include 150,000 public water systems, have become an increasingly high-risk target for cyber criminals in recent years. This rising threat has demanded more attention and policies focused on improving cybersecurity.…
securityintelligence.com - 'Vortax' Meeting Software Builds Elaborate Branding, Spreads Infostealers
The "Markopolo" threat actors built a convincing brand and Web presence for fake software to deliver the dangerous Atomic macOS stealer, among other malware, to carry out cryptocurrency heists.
Dark Reading - SolarWinds Serv-U path-traversal flaw actively exploited in attacks
Threat actors are actively exploiting a SolarWinds Serv-U path-traversal vulnerability, leveraging publicly available proof-of-concept (PoC) exploits. [...]
BleepingComputer - CDK Global hacked again while recovering from first cyberattack
Car dealership SaaS platform CDK Global suffered an additional breach Wednesday night as it was starting to restore systems shut down in an previous cyberattack. [...]
BleepingComputer - Long-Running Chinese Espionage Campaign Targets Telecom Firms in Asian Country
A years-long espionage campaign has targeted telecoms companies in Asia with tools associated with Chinese groups.
SecurityWeek - 1inch partners with Blockaid to enhance Web3 security through the 1inch Shield
1inch, a leading DeFi aggregator that provides advanced security solutions to users across the entire space, has announced today the launch of the 1inch Shield. This solution, that is offering enhanced protection against a wide range of potential threats,…
gbhackers.com - Hackers Exploit Progressive Web Apps to Steal Passwords
In a concerning development for cybersecurity, hackers are increasingly leveraging Progressive Web Apps (PWAs) to execute sophisticated phishing attacks aimed at stealing user credentials. This emerging threat has been highlighted by security researcher…
gbhackers.com - OpenAI Co-Founder Sutskever Sets up New AI Company Devoted to ‘Safe Superintelligence’
Ilya Sutskever's new company is focused on safely developing “superintelligence” - a reference to AI systems that are smarter than humans.
SecurityWeek - Patients at Ascension hospital network given dangerous doses of narcotics after disastrous cyberattack
Alexa Lardieri reports: A cyberattack on a major American hospital system has caused dangerous medication mix ups including patients administered narcotics by mistake, leading to an admission to intensive care for life-threatening breathing difficulties. In…
DataBreaches - China-linked spies target Asian Telcos since at least 2021
A China-linked cyber espionage group has compromised telecom operators in an Asian country since at least 2021. The Symantec Threat Hunter Team reported that an alleged China-linked APT group has infiltrated several telecom operators in a single, unnamed,…
Security Affairs - Dark Web Profile: SpaceBears
Dark Web Profile: SpaceBears Recent history could be termed the Age of Ransomware in the realm of cybercrime. However, threat actors have discovered a way to profit without the need for malware development or sophisticated methods. SpaceBears is a new…
SOCRadar - Researchers Uncover UEFI Vulnerability Affecting Multiple Intel CPUs
Cybersecurity researchers have disclosed details of a now-patched security flaw in Phoenix SecureCore UEFI firmware that affects multiple families of Intel Core desktop and mobile processors. Tracked as CVE-2024-0762 (CVSS score: 7.5), the…
The Hacker News - Hacker Leaks Data of 33,000 Accenture Employees in Third-Party Breach
Waqas writes: A hacker is claiming to have extracted contact details of 33,000 current and former employees of the IT giant Accenture in a breach that involves a third-party firm. A hacker known as “888” has recently leaked a file containing the contact and…
DataBreaches - Access Management Startup Pomerium Raises $13.75 Million
Pomerium raises $13.75 million in Series A funding for dynamic user identity verification and access management platform.
SecurityWeek - French Diplomatic Entities Targeted in Russian-Linked Cyber Attacks
State-sponsored actors with ties to Russia have been linked to targeted cyber attacks aimed at French diplomatic entities, the country's information security agency ANSSI said in an advisory. The attacks have been attributed to a cluster tracked by Microsoft…
The Hacker News - Catching Up on Innovation With NIST CSF 2.0
The updated framework is an equalizer for smaller organizations to meet the industry at its breakneck pace of innovation.
Dark Reading - LockBit Ransomware Again Most Active – Real Attack Surge or Smokescreen?
LockBit appears to once again be the most active ransomware group, but experts believe the hackers may just be inflating their numbers.
SecurityWeek - New Rust infostealer Fickle Stealer spreads through various attack methods
New Rust-based Fickle Malware Uses PowerShell for UAC Bypass and Data Exfiltration A new Rust malware called Fickle Stealer spreads through various attack methods and steals sensitive information. Fortinet FortiGuard Labs researchers detected a new…
Security Affairs - Hundreds of PC, Server Models Possibly Affected by Serious Phoenix UEFI Vulnerability
Hundreds of PC and server models may be affected by CVE-2024-0762, a privilege escalation and code execution flaw in Phoenix SecureCore UEFI firmware.
SecurityWeek - Shedding Light on the Netherlands Threat Landscape Report
Shedding Light on the Netherlands Threat Landscape Report In an era of dynamic change in digital threats, there is more need for knowledge of regional cybersecurity challenges than ever. Therefore, it is with great pleasure that we present the “Netherlands…
SOCRadar - CHERI Alliance Aims to Secure Hardware Memory
The consortium of private companies and academia will focus on ways to protect hardware memory from attacks.
Dark Reading - INE Security: Optimizing Teams for AI and Cybersecurity
2024 is rapidly shaping up to be a defining year in generative AI. While 2023 saw its emergence as a potent new technology, business leaders are now grappling with how to best leverage its transformative power to grow efficiency, security, and revenue. With…
gbhackers.com - How Cybersecurity Can Steer Organizations Toward Sustainability
By integrating environmental initiatives, social responsibility, and governance into their strategies, security helps advance ESG goals.
Dark Reading - AI Weights: Securing the Heart and Soft Underbelly of Artificial Intelligence
AI model weights govern outputs from the system, but altered or ‘poisoned’, they can make the output erroneous and, in extremis, useless and dangerous.
SecurityWeek - Dark Web Profile: DragonForce Ransomware
Dark Web Profile: DragonForce Ransomware DragonForce Ransomware has emerged as an intriguing adversary. Known for its prominent targets and unusual ways of communication, it has quickly gained notoriety among cybersecurity experts and victims alike. This…
SOCRadar - Semperis Eyes IPO With $125 Million in Growth Financing
Enterprise identity company raises new capital from JP Morgan and Hercules Capital as it prepares for an IPO exit.
SecurityWeek - Amtrak Confirms Crooks Are Breaking Into User Accounts, Derailing Email Addresses
No content available.
packetstormsecurity.com - Doctor charged for unauthorized access to personal information of pediatric patients at Texas Children’s Hospital
Is the following case an example of insider threat or it is a whistleblower situation — or both? The U.S. Attorney’s Office of Southern Texas issued the following press release on June 17: A Houston doctor has been indicted for obtaining protected individual…
DataBreaches