News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Today, Sat 31 Oct | 3 so far | 0 |
Developing
Thu 20 Jun 202461 articles
- Association of Texas Professional Educators notifying 414,515 members of data breach
The Association of Texas Professional Educators (ATPE) is notifying more than 414,000 members of a data breach. In a letter to those affected, ATPE explains that they first detected abnormal activity in their network on February 12, 2024. By the conclusion…
DataBreaches - Highly Evasive SquidLoader Malware Targets China
A threat actor targeting Chinese-speaking victims has been using the SquidLoader malware loader in recent attacks.
SecurityWeek - Tool Overload: Why MSPs Are Still Drowning with Countless Cybersecurity Tools in 2024
Highlights Complex Tool Landscape: Explore the wide array of cybersecurity tools used by MSPs, highlighting the common challenge of managing multiple systems that may overlap in functionality but lack integration.Top Cybersecurity Challenges: Discuss the…
The Hacker News - Chinese Cyber Espionage Targets Telecom Operators in Asia Since 2021
Cyber espionage groups associated with China have been linked to a long-running campaign that has infiltrated several telecom operators located in a single Asian country at least since 2021. "The attackers placed backdoors on the networks of targeted…
The Hacker News - Zero-Day Exploits for Windows, Atlassian, Mastodon Data Leak, DDoS Attack on FC Bayern Munich
Zero-Day Exploits for Windows, Atlassian, Mastodon Data Leak, DDoS Attack on FC Bayern Munich The SOCRadar Dark Web Team has recently uncovered several alarming posts on hacker forums and Telegram channels, revealing the sale of zero-day vulnerabilities and…
SOCRadar - TikTok facing fresh lawsuit in US over children’s privacy
The Federal Trade Commission (FTC) has announced it’s referred a complaint against TikTok and parent company ByteDance to the Department of Justice. The investigation originally focused on Musical.ly which was acquired by ByteDance on November 10, 2017, and…
Malwarebytes - Atlassian Patches High-Severity Vulnerabilities in Confluence, Crucible, Jira
Atlassian has released Confluence, Crucible, and Jira updates to address multiple high-severity vulnerabilities.
SecurityWeek - Post-Quantum Cryptography Firm PQShield Raises $37 Million
Post-quantum cryptography (PQC) company PQShield has raised $37 million in Series B funding for its quantum-safe cryptography solutions.
SecurityWeek - Threat Actor Claims Breach of Jollibee Fast-Food Gaint
A threat actor has claimed responsibility for breaching the systems of Jollibee Foods Corporation, the Philippines’ largest fast-food chain. Deepwebkonek, a company known for sharing information related to cyber threats and breaches, made the announcement…
gbhackers.com - An unpatched bug allows anyone to impersonate Microsoft corporate email accounts
A researcher discovered a flaw that allows attackers to impersonate Microsoft corporate email accounts and launch phishing attacks. The security researcher Vsevolod Kokorin (@Slonser) discovered a bug that allows anyone to impersonate Microsoft corporate…
Security Affairs - New Rust-based Fickle Malware Uses PowerShell for UAC Bypass and Data Exfiltration
A new Rust-based information stealer malware called Fickle Stealer has been observed being delivered via multiple attack chains with the goal of harvesting sensitive information from compromised hosts. Fortinet FortiGuard Labs said it's aware of four…
The Hacker News - Smishing Triad Is Targeting Pakistan To Defraud Banking Customers At Scale
Resecurity researchers warn of a new activity of Smishing Triad, which has expanded its operations to Pakistan. Resecurity has identified a new activity of Smishing Triad, which has expanded its operations to Pakistan. The group’s latest tactic involves…
Security Affairs - Threat Actors Claiming Breach of Accenture Employee Data
Threat actors have claimed responsibility for a significant data breach involving Accenture, one of the world’s leading consulting firms. The news broke on Twitter, with the account DarkWebInformer posting a detailed status update on the incident. According…
gbhackers.com - Diamorphine Rootkit Exploiting Linux Systems In The Wild
Threat actors exploit Linux systems because they are prevalent in organizations that host servers, databases, and other important resources. Exploiting vulnerabilities in Linux systems allows attackers to gain access to sensitive data, disrupt services, or…
gbhackers.com - Experts Uncover New Evasive SquidLoader Malware Targeting Chinese Organizations
Cybersecurity researchers have uncovered a new evasive malware loader named SquidLoader that spreads via phishing campaigns targeting Chinese organizations. AT&T LevelBlue Labs, which first observed the malware in late April 2024, said it incorporates…
The Hacker News - Fortra Warns: Hard-Coded Password Vulnerability in FileCatalyst – CVE-2024-5275
Fortra, the developer of the popular FileCatalyst file transfer solutions, has issued a critical security advisory warning users of a high-severity vulnerability (CVE-2024-5275) in both FileCatalyst Direct and FileCatalyst Workflow. The vulnerability,…
SecurityOnline - GreyNoise Warns of Active Exploitation Attempts Targeting SolarWinds Serv-U Vulnerability (CVE-2024-28995)
On June 5, 2024, SolarWinds issued a critical advisory regarding a newly discovered path-traversal vulnerability in Serv-U, identified as CVE-2024-28995. The vulnerability, found by Hussein Daher, affects SolarWinds Serv-U versions 15.4.2 HF 1 and...
SecurityOnline - China-Linked UNC3886: Mandiant Reveals Extensive Espionage TTPs
Cybersecurity firm Mandiant has unveiled a comprehensive report detailing the extensive cyber espionage campaign of UNC3886, a suspected Chinese state-sponsored threat actor. The report exposes the group’s advanced tactics, techniques, and procedures (TTPs)…
SecurityOnline - AWS Under Siege: Attackers Target Vaults, Buckets, and Secrets in Widespread Campaign
DataDog Security Labs has uncovered a concerning campaign targeting Amazon Web Services (AWS) environments, revealing a new wave of malicious activity aimed at compromising valuable cloud resources. The attackers are employing a multi-pronged approach,...
SecurityOnline - Fickle Stealer: A Rust-Based Stealer with Evolving Attack Chains and Flexible Targeting
FortiGuard Labs’ recent report on Fickle Stealer reveals a sophisticated and adaptable cyber threat that warrants closer examination. The malware, crafted in the Rust programming language, showcases a multi-faceted attack chain and an evolving...
SecurityOnline - T-Mobile denies it was hacked, links leaked data to vendor breach
T-Mobile has denied it was breached or that source code was stolen after a threat actor claimed to be selling stolen data from the telecommunications company. [...]
BleepingComputer