News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Today, Sat 31 Oct | 3 so far | 0 |
Developing
Fri 21 Jun 202460 articles
- Kaspersky's US Customers Face Tight Deadline Following Govt. Ban
After Sept. 29, 2024, organizations and individuals that continue using the vendor's products will no longer receive any updates or support.
Dark Reading - Los Angeles Unified confirms student data stolen in Snowflake account hack
The Los Angeles Unified School District has confirmed a data breach after threat actors stole student and employee data by breaching the company's Snowflake account. [...]
BleepingComputer - Abstract Security Announces General Availability of its AI-Powered Data Streaming Platform for Security
No content available.
Dark Reading - 'SneakyChef' APT Slices Up Foreign Affairs With SugarGh0st
Government ministries keep falling victim to relatively standard-fare cyber-espionage attacks, like this latest campaign with hazy Chinese links.
Dark Reading - CISO Corner: Critical Infrastructure Misinformation; France's Atos Bid
Our collection of the most relevant reporting and industry perspectives for those guiding cybersecurity strategies and focused on SecOps. Also included: Inside China's civilian hacker army; outer space threats; and NIST 2.0 Framework secrets for success.
Dark Reading - VicOne Solutions for Detection of Zero-Day Vulnerabilities and Contextualized Attack Paths
No content available.
Dark Reading - Legal Defense Fund Covers Crypto Research
The nonprofit Security Alliance provided funding to protect those who illegally access crypto assets with the aim of improving security.
Dark Reading - US sanctions 12 Kaspersky Lab execs for working in Russian tech sector
The Treasury Department's Office of Foreign Assets Control (OFAC) has sanctioned twelve Kaspersky Lab executives for operating in the technology sector of Russia. [...]
BleepingComputer - Multifactor Authentication Is Not Enough to Protect Cloud Data
Ticketmaster, Santander Bank, and other large firms suffer data leaks from a large cloud-based service, underscoring that companies need to pay attention to authentication.
Dark Reading - Change Healthcare lists the medical data stolen in ransomware attack
UnitedHealth has confirmed for the first time what types of medical and patient data were stolen in the massive Change Healthcare ransomware attack, stating that data breach notifications will be mailed in July. [...]
BleepingComputer - First million breached Ticketmaster records released for free
The cybercriminal acting under the name “Sp1d3r” gave away the first 1 million records that are part of the data set that they claimed to have stolen from Ticketmaster/Live Nation. The files were released without a price, for free. When Malwarebytes Labs…
Malwarebytes - Five men convicted for operating illegal streaming site Jetflicks
A federal jury in Las Vegas convicted five men for their involvement in the operation of Jetflicks, one of the largest and most popular illegal streaming services in the United States. [...]
BleepingComputer - Los Angeles USD confirms data stolen from a vendor
On June 6, an individual calling themself “Satanic,” listed data for sale that was allegedly from the Los Angeles Unified School District. The listing, seeking $5,000.00 claimed to include 24 million student records and additional records from employees. At…
DataBreaches - Tor Browser 13.5 brings Android enhancements, better bridge management
The Tor Project has released Tor Browser 13.5, bringing several improvements and enhancements for Android and desktop versions. [...]
BleepingComputer - Securing Customers' Trust With SOC 2 Type II Compliance
Audit compliance not only demonstrates commitment to data security and privacy but also builds trust with customers and stakeholders.
Dark Reading - Chinese Hackers Deploy SpiceRAT and SugarGh0st in Global Espionage Campaign
A previously undocumented Chinese-speaking threat actor codenamed SneakyChef has been linked to an espionage campaign primarily targeting government entities across Asia and EMEA (Europe, Middle East, and Africa) with SugarGh0st malware since at least August…
The Hacker News - CISO Guide for Quantum Computing: Risks and Opportunities (Part I)
CISO Guide for Quantum Computing: Risks and Opportunities (Part I) For Chief Information Security Officers (CISOs) in charge of cybersecurity, quantum computing brings its paradox. It is both an opportunity to improve security and a massive vulnerability…
SOCRadar - Santander Employee Data Breach Linked to Snowflake Attack
Santander US is notifying over 12,000 employees that their personal information was compromised in a data breach.
SecurityWeek - Military-themed Email Scam Spreads Malware to Infect Pakistani Users
Cybersecurity researchers have shed light on a new phishing campaign that has been identified as targeting people in Pakistan using a custom backdoor. Dubbed PHANTOM#SPIKE by Securonix, the unknown threat actors behind the activity have leveraged…
The Hacker News - How generative AI Is expanding the insider threat attack surface
As the adoption of generative AI (GenAI) soars, so too does the risk of insider threats. This puts even more pressure on businesses to rethink security and confidentiality policies. In just a few years, artificial intelligence (AI) has radically changed the…
securityintelligence.com - Spatial Computing Hack Exploits Apple Vision Pro Flaw to Fill Room With Spiders, Bats
A recently patched Vision Pro vulnerability was classified by Apple as a DoS issue, but a researcher has shown that it’s ‘scary’.
SecurityWeek - In Other News: Microsoft Email Spoofing, Snowflake Hack Ransoms, LogoFail Follow-Up
Noteworthy stories that might have slipped under the radar: Microsoft email spoofing vulnerability, Snowflake hack victims get ransom demands, LogoFail still around.
SecurityWeek - UEFICANHAZBUFFEROVERFLOW flaw in Phoenix SecureCore UEFI firmware potentially impacts hundreds of PC and server models
A serious vulnerability (CVE-2024-0762) in the Phoenix SecureCore UEFI firmware potentially impacts hundreds of PC and server models. Firmware security firm Eclypsium discovered a vulnerability, tracked as CVE-2024-0762 (CVSS of 7.5), in the Phoenix…
Security Affairs - President Biden Bans Kaspersky Antivirus Software Over Russia Ties
No content available.
packetstormsecurity.com - Coding Error In Forgotten API Blamed For Massive Data Breach
No content available.
packetstormsecurity.com - Recent SolarWinds Serv-U Vulnerability Exploited in the Wild
Threat actors are exploiting a recent path traversal vulnerability in SolarWinds Serv-U using public PoC code.
SecurityWeek - Top 10 VPN Vulnerabilities (2022 – H1 2024)
Top 10 VPN Vulnerabilities (2022 – H1 2024) In the landscape of cybersecurity, VPN security has become a critical concern for organizations worldwide. Compared to 2022, there was a staggering 47% increase in VPN vulnerabilities discovered in 2023,…
SOCRadar - CDK warns: threat actors are calling customers, posing as support
CDK Global has cautioned customers about unscrupulous actors calling them and posing as CDK agents or affiliates to gain unauthorized systems access. The warning follows ongoing cyberattacks that have hit CDK, a software-as-a-service (SaaS) platform that…
BleepingComputer - How to Use Tines's SOC Automation Capability Matrix
Created by John Tuckner and the team at automation and AI-powered workflow platform Tines, the SOC Automation Capability Matrix (SOC ACM) is a set of techniques designed to help security operations teams understand their automation capabilities and respond…
The Hacker News - Dark Web Profile: dAn0n Hacker Group
Dark Web Profile: dAn0n Hacker Group Global law enforcement agencies have ramped up their efforts against ransomware, leading to the weakening of groups and even dethroned the long ruled LockBit. However, following these operations, many small groups…
SOCRadar - Personal and Chemical Facility Information Potentially Accessed in CISA Hack
CISA says CFATS program data was likely accessed after an Ivanti Connect Secure appliance was hacked in January.
SecurityWeek - Oyster Backdoor Spreading via Trojanized Popular Software Downloads
A malvertising campaign is leveraging trojanized installers for popular software such as Google Chrome and Microsoft Teams to drop a backdoor called Oyster (aka Broomstick and CleanUpLoader). That's according to findings from Rapid7, which identified…
The Hacker News - US Bans Kaspersky Software
The US government has announced a ban on the sale of Kaspersky software over fears that the company is controlled by the Russian government.
SecurityWeek - Russia-linked APT Nobelium targets French diplomatic entities
French information security agency ANSSI reported that Russia-linked threat actor Nobelium is behind a series of cyber attacks that targeted French diplomatic entities. The French information security agency ANSSI reported that Russia-linked APT Nobelium…
Security Affairs - PrestaShop Website Under Injection Attack Via Facebook Module
A critical vulnerability has been discovered in the “Facebook” module (pkfacebook) from Promokit.eu for PrestaShop. The vulnerability, CVE-2024-36680, allows a guest to perform SQL injection attacks on affected module versions. CVE-2024-36680 – Vulnerability…
gbhackers.com - SolarWinds Serv-U Vulnerability Under Active Attack - Patch Immediately
A recently patched high-severity flaw impacting SolarWinds Serv-U file transfer software is being actively exploited by malicious actors in the wild. The vulnerability, tracked as CVE-2024-28995 (CVSS score: 8.6), concerns a directory transversal bug that…
The Hacker News - Disruptions at Many Car Dealerships Continue as CDK Hack Worsens
Car dealership software provider CDK Global was in the process of restoring services impacted by a cyberattack when it discovered an additional hack.
SecurityWeek