News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Today, Sat 31 Oct | 5 so far | 0 |
Developing
Mon 24 Jun 202460 articles
- WikiLeaks Founder Julian Assange Will Plead Guilty in Deal With US and Return to Australia
Assange will plead guilty to an Espionage Act charge of conspiring to unlawfully obtain and disseminate classified national defense information, the Justice Department said.
SecurityWeek - CDK Attack: Why Contingency Planning Is Critical for SaaS Customers
Daily operations at some 15,000 automotive dealers remain impacted as CDK works to restore its dealer management system, following what appears to be a ransomware attack last week.
Dark Reading - Chemical facilities warned of possible data theft in CISA CSAT breach
CISA is warning that its Chemical Security Assessment Tool (CSAT) environment was breached in January after hackers deployed a webshell on its Ivanti device, potentially exposing sensitive security assessments and plans. [...]
BleepingComputer - Chrome for Android tests feature that securely verifies your ID with sites
Google is testing a new feature called "Digital Credential API" for Chrome on Android that will allow websites to request identity information from mobile wallets using Android's IdentityCredential system. [...]
BleepingComputer - New attack uses MSC files and Windows XSS flaw to breach networks
A novel command execution technique dubbed 'GrimResource' uses specially crafted MSC (Microsoft Saved Console) and an unpatched Windows XSS flaw to perform code execution via the Microsoft Management Console. [...]
BleepingComputer - What Building Application Security Into Shadow IT Looks Like
AppSec is hard for traditional software development, let alone citizen developers. So how did two people resolve 70,000 vulnerabilities in three months?
Dark Reading - Chinese Hackers Have Stepped Up Attacks on Taiwanese Organizations, Cybersecurity Firm Says
A suspected Chinese state-sponsored hacking group has stepped up its targeting of Taiwanese organizations, particularly those in sectors such as government, education, technology and diplomacy.
SecurityWeek - Tech Leaders Gather This Week for AI Risk Summit + CISO Forum at the Ritz-Carlton, Half Moon Bay
SecurityWeek’s AI Risk Summit + CISO Forum brings together business and government stakeholders to provide meaningful guidance on risk management and cybersecurity in the age of artificial intelligence.
SecurityWeek - Threat actors compromised 1,590 CoinStats crypto wallets
Threat actors breached 1,590 cryptocurrency wallets of the cryptocurrency portfolio management and tracking platform CoinStats. The cryptocurrency portfolio management and tracking platform CoinStats suffered a massive security breach. Alleged North Korea…
Security Affairs - Four FIN9 hackers indicted for cyberattacks causing $71M in losses
Four Vietnamese nationals linked to the international cybercrime group FIN9 have been indicted for their involvement in a series of computer intrusions that caused over $71 million in losses to companies in the U.S. [...]
BleepingComputer - Change Healthcare confirms the customer data stolen in ransomware attack
For the first time since news broke about a ransomware attack on Change Healthcare, the company has released details about the data stolen during the attack. First, a quick refresher: On February 21, 2024, Change Healthcare experienced serious system outages…
Malwarebytes - 30M Potentially Affected in Tickettek Australia Cloud Breach
In an incident with direct parallels to the recent Ticketmaster compromise, an Aussie live events giant says it was breached via a third-party cloud provider, as ShinyHunters takes credit.
Dark Reading - New SnailLoad Attack Relies on Network Latency Variations to Infer User Activity
New attack named SnailLoad allows a remote attacker to infer websites and videos viewed by a user without direct access to network traffic.
SecurityWeek - EFF Issues New Warning After Discovery of Automated License Plate Reader Vulnerabilities
The EFF has issued a warning over the use of automated license plate readers following the discovery of serious vulnerabilities.
SecurityWeek - Google Introduces Project Naptime for AI-Powered Vulnerability Research
Google has developed a new framework called Project Naptime that it says enables a large language model (LLM) to carry out vulnerability research with an aim to improve automated discovery approaches. "The Naptime architecture is centered around the…
The Hacker News - CoinStats says North Korean hackers breached 1,590 crypto wallets
CoinStats suffered a massive security breach that compromised 1,590 cryptocurrency wallets, with the attack suspected to have been carried out by North Korean threat actors. [...]
BleepingComputer - An Overview of Intelligence Requirements in CTI
An Overview of Intelligence Requirements in CTI Security, in general, is a complex domain where you need to keep in mind a variety of factors. In a complex field like this, the role of intelligence cannot be overstated. It is impossible to know what to do…
SOCRadar - The NYSE's $10M Wake-up Call
The settlement between the SEC and the owner of the New York Stock Exchange is a critical reminder of the vulnerabilities within financial institutions' cybersecurity frameworks as well as the importance of regulatory oversight.
Dark Reading - LivaNova USA Discloses Data Breach Impacting 130,000 Individuals
LivaNova USA says the personal and medical information of 130,000 individuals was compromised in an October 2023 data breach.
SecurityWeek - Critical RCE Vulnerability Discovered in Ollama AI Infrastructure Tool
Cybersecurity researchers have detailed a now-patch security flaw affecting the Ollama open-source artificial intelligence (AI) infrastructure platform that could be exploited to achieve remote code execution. Tracked as CVE-2024-37032, the vulnerability has…
The Hacker News - Threat Actor Claiming a 0-day in Linux LPE Via GRUB bootloader
A new threat actor has emerged, claiming a zero-day vulnerability in the Linux GRUB bootloader that allows for local privilege escalation (LPE). This alarming development has raised significant concerns within the cybersecurity community. A recent tweet from…
gbhackers.com - Experts observed approximately 120 malicious campaigns using the Rafel RAT
Multiple threat actors are using an open-source Android remote administration tool called Rafel RAT to target Android Devices. Check Point Research identified multiple threat actors using Rafel, an open-source remote administration tool (RAT). The…
Security Affairs - LockBit Ransomware Group Claims Hack of US Federal Reserve
The notorious LockBit ransomware group has claimed responsibility for hacking the U.S. Federal Reserve, allegedly compromising 33 terabytes of sensitive data. The announcement was made on Twitter via the group’s Dark Web Intelligence, sending shockwaves…
gbhackers.com - Vietnamese Members of FIN9 Hacking Group Charged in US
The US has announced charges against four Vietnamese nationals for hacking businesses and causing $71 million in losses.
SecurityWeek - Cyber Attack Compromised Indonesian Datacenter, Ransom Sought
No content available.
packetstormsecurity.com - CDK Global Begins To Restore Systems After Cyber Attack Hits Thousands Of Retailers
No content available.
packetstormsecurity.com - Push Notification Fatigue Leads to LA County Health Department Data Breach
The Los Angeles County Department of Health Services discloses a data breach caused by push notification spamming attack.
SecurityWeek - Levi's And More Affected In Pants Dropping Week Of Data Breaches
No content available.
packetstormsecurity.com - Red Tape Is Making Hospital Ransomware Attacks Worse
Matt Burgess reports: Crippling ransomware attacks against hospitals and health care providers are on the rise. These ruthless cyberattacks can take medical systems offline for weeks—canceling appointments and surgeries and causing harm to patients. Doctors…
DataBreaches - Ng: NIMC Refutes Reports On Database Breach
The National Identity Management Commission of Nigeria (NIMC) has refuted reports of a database breach as misleading. This statement was made by Mr. Kayode Adegoke, Head of Corporate Communications at NIMC, on Saturday in Abuja. Adegoke assured that…
DataBreaches - Cyber attack compromised Indonesia data centre, ransom sought
Reuters reports: A cyber attacker compromised Indonesia’s national data centre, disrupting immigration checks at airports, and asked for an $8 million ransom, the country’s communications minister told Reuters on Monday. The attack disrupted several…
DataBreaches - Za: Critical South African healthcare services hacked
Jan Vermeulen reports: The National Health Laboratory Service (NHLS) has shut down its IT systems following a breach over the weekend. Its emails, website, and system for retrieving and storing patients’ lab test results are offline. Based on a memo from…
DataBreaches - Tracking Down Notorious Ransomware Actors with SOCRadar 2.0
Tracking Down Notorious Ransomware Actors with SOCRadar 2.0 Alex was talking to his security team when his boss called him into his office one day. News about ransomware attacks across the industry has been pretty popular lately, and his manager wanted to…
SOCRadar - US Sanctions 12 Kaspersky Executives
The US has imposed sanctions on 12 individuals who have leadership roles at Kaspersky in Russia and the UK.
SecurityWeek - Ease the Burden with AI-Driven Threat Intelligence Reporting
Learn about critical threats that can impact your organization and the bad actors behind them from Cybersixgill’s threat experts. Each story shines a light on underground activities, the threat actors involved, and why you should care, along with what you…
The Hacker News - Microsoft Power BI Vulnerability Let Attackers Access Organizations Sensitive Data
A vulnerability in Microsoft Power BI allows unauthorized users to access sensitive data underlying reports, which affects tens of thousands of organizations and grants access to employee, customer, and potentially confidential data. By exploiting this…
gbhackers.com - IntelBroker Claims Apple, AMD Data Breaches; NSA Data Allegedly Leaked
IntelBroker Claims Apple, AMD Data Breaches; NSA Data Allegedly Leaked The SOCRadar Dark Web Team has uncovered several alarming posts on hacker forums, revealing significant breaches and data sales involving prominent companies. Notable incidents include…
SOCRadar - XZ backdoor: Hook analysis
Part 1: XZ backdoor story – Initial analysis Part 2: Assessing the Y, and How, of the XZ Utils incident (social engineering) In our first article on the XZ backdoor, we analyzed its code from initial infection to the function hooking it performs. As we…
securelist.com