News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Today, Sat 31 Oct | 8 so far | 2 |
Developing
Wed 26 Jun 202466 articles
- Malwarebytes Premium stops 100% of malware during AV Lab test
Malwarebytes Premium has maintained its long-running, perfect record in protecting users against online threats by blocking 100% of the malware samples deployed in the AV Lab Cybersecurity Foundation’s “Advanced In-The-Wild Malware Test.” For its performance…
Malwarebytes - Polyfill Supply Chain Attack Hits Over 100k Websites
More than 100,000 websites are affected by a supply chain attack injecting malware via a Polyfill domain.
SecurityWeek - New North Korean Actor Distributing Malicious npm Packages To Compromise Organizations
Early in 2024, North Korean threat actors persisted in using the public npm registry to disseminate malicious packages that were similar to those that Jade Sleet had previously used. Initially thought to be an extension of Sleet’s activity, further…
gbhackers.com - Threat Actor Claims 0Day Sandbox Escape RCE in Chrome Browser
A threat actor has claimed to have discovered a zero-day vulnerability in the widely-used Google Chrome browser. The claim was made public via a tweet from the account MonThreat, which has previously been associated with credible cybersecurity disclosures.…
gbhackers.com - Chinese and N. Korean Hackers Target Global Infrastructure with Ransomware
Threat actors with suspected ties to China and North Korea have been linked to ransomware and data encryption attacks targeting government and critical infrastructure sectors across the world between 2021 and 2023. While one cluster of activity has been…
The Hacker News - Julian Assange Released, But the Leak and Extortion Era Began Long Ago
Julian Assange Released, But the Leak and Extortion Era Began Long Ago WikiLeaks founder Julian Assange has been freed in the UK after serving over five years in Belmarsh prison for what the U.S. government described as the “largest compromises of classified…
SOCRadar - 'ChamelGang' APT Disguises Espionage Activities With Ransomware
The China-nexus cyberthreat actor has been operating since at least 2019 and has notched victims in multiple countries.
Dark Reading - Google disrupted over 10,000 instances of DRAGONBRIDGE activity in Q1 2024
Today we are sharing updated insights about DRAGONBRIDGE, the most prolific IO actor Google’s Threat Analysis Group (TAG) tracks.
blog.google - Siemens Sicam Vulnerabilities Could Facilitate Attacks on Energy Sector
Several vulnerabilities patched recently in Siemens Sicam products could be exploited in attacks aimed at the energy sector.
SecurityWeek - Practical Guidance For Securing Your Software Supply Chain
The heightened regulatory and legal pressure on software-producing organizations to secure their supply chains and ensure the integrity of their software should come as no surprise. In the last several years, the software supply chain has become an…
The Hacker News - Apple Patches AirPods Bluetooth Vulnerability That Could Allow Eavesdropping
Apple has released a firmware update for AirPods that could allow a malicious actor to gain access to the headphones in an unauthorized manner. Tracked as CVE-2024-27867, the authentication issue affects AirPods (2nd generation and later), AirPods Pro (all…
The Hacker News - Exploitation Attempts Target New MOVEit Transfer Vulnerability
Exploitation attempts targeting CVE-2024-5806, a critical MOVEit Transfer vulnerability patched recently, have started.
SecurityWeek - FireTail Unveils Free Access for All to Cutting-Edge API Security Platform
FireTail announces a free version of its enterprise-level API security tools, making them accessible to developers and organizations of all sizes. FireTail’s unique combination of open-source code libraries, inline API call evaluation, security posture…
gbhackers.com - New Credit Card Skimmer Targets WordPress, Magento, and OpenCart Sites
Multiple content management system (CMS) platforms like WordPress, Magento, and OpenCart have been targeted by a new credit card web skimmer called Caesar Cipher Skimmer. A web skimmer refers to malware that is injected into e-commerce sites with the goal of…
The Hacker News - New Medusa Android Trojan Targets Banking Users Across 7 Countries
Cybersecurity researchers have discovered an updated version of an Android banking trojan called Medusa that has been used to target users in Canada, France, Italy, Spain, Turkey, the U.K., and the U.S. The new fraud campaigns, observed in May 2024 and…
The Hacker News - Microsoft Announced Copilot for Security TI in Defender XDR
Microsoft has announced the general availability of Copilot for Security threat intelligence embedded experience in the Defender XDR portal. This AI-powered tool aims to revolutionize the way organizations access, operate on, and integrate Microsoft’s threat…
gbhackers.com - Critical Vulnerability in MOVEit Transfer Let Hackers Gain Files Access
A critical security vulnerability, CVE-2024-5806, has been identified in MOVEit Transfer, a widely used managed file transfer software. The vulnerability poses significant risks to organizations relying on the software for secure data transfers....
gbhackers.com - Over 110,000 Websites Affected by Hijacked Polyfill Supply Chain Attack
Google has taken steps to block ads for e-commerce sites that use the Polyfill.io service after a Chinese company acquired the domain and modified the JavaScript library ("polyfill.js") to redirect users to malicious and scam sites. More than 110,000 sites…
The Hacker News - PoC Exploit Published for Windows Kernel Elevation of Privilege Vulnerability (CVE-2024-30088)
A security researcher has published a proof-of-concept (PoC) exploit code targeting a recent high-severity vulnerability (CVE-2024-30088) in Microsoft Windows. This critical flaw holds a risk severity score of 7.0 and impacts systems across the...
SecurityOnline - CVE-2024-5806: MOVEit Transfer Vulnerability Under Active Exploit, PoC Published
A critical vulnerability (CVE-2024-5806) in the widely used MOVEit Transfer file transfer software has been disclosed and is already under active exploitation. Progress Software, the developer of MOVEit, released information about the vulnerability on...
SecurityOnline - Cybercriminals Target Singaporeans: Digital IDs Flood Dark Web
Singapore’s digital landscape is facing a mounting threat as cybercriminals exploit stolen digital identities of its citizens on the Dark Web, according to a recent report by cybersecurity firm Resecurity. The illicit trade of...
SecurityOnline - CVE-2024-5805: Critical SFTP Authentication Bypass Vulnerability in MOVEit Gateway
A critical vulnerability (CVE-2024-5805) has been identified in the MOVEit Gateway software, exposing organizations to the risk of unauthorized access via SFTP. Progress Software, the developer of MOVEit, disclosed the vulnerability today and issued...
SecurityOnline - SEOPress Plugin Alert: CVE-2024-5488 Flaw Exposes 300K Sites
A critical vulnerability tracked as CVE-2024-5488 has been discovered in SEOPress, a popular WordPress plugin with over 300,000 active installations. This flaw enables unauthorized users to bypass authentication and manipulate sensitive data, potentially…
SecurityOnline - Beware of Word: Remcos RAT Lurks in Malicious Documents
A new and sophisticated cyber attack campaign has surfaced, leveraging a weaponized Microsoft Word document to deliver the notorious Remcos Remote Access Trojan (RAT). This insidious malware grants attackers unrestricted control over infected systems,...
SecurityOnline - StrelaStealer Malware Intensifies Attacks on European Email Users, Avoiding Russia
A renewed wave of cyberattacks orchestrated by the StrelaStealer malware is raising concerns across Europe, with a particular focus on compromising email credentials from popular platforms like Outlook and Thunderbird. The SonicWall Capture Labs...
SecurityOnline - WordPress Issues Urgent Security Update to Patch Multiple Vulnerabilities
WordPress, the world’s leading content management system (CMS), has released a critical security update, “WordPress 6.5.5,” to address three significant vulnerabilities that could potentially expose millions of websites to cyber attacks. The vulnerabilities,…
SecurityOnline