News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Today, Sat 31 Oct | 10 so far | 2 |
Developing
Fri 28 Jun 202464 articles
- CVE-2024-36072 (CVSS 10): Unauthenticated RCE Flaw in CoSoSys Endpoint Protector
CoSoSys, a leading data loss prevention (DLP) solutions provider, has urgently released patches to address four severe vulnerabilities discovered in their Endpoint Protector and Unify products. These vulnerabilities, discovered by Sangjun Song and Junwoo...
SecurityOnline - MerkSpy Spyware Campaign Exploits Microsoft Office Flaw
Cybersecurity researchers at FortiGuard Labs have uncovered a sophisticated cyberattack that leverages a known vulnerability in Microsoft Office to deliver a potent spyware payload known as MerkSpy. This insidious malware is designed to infiltrate...
SecurityOnline - A cyberattack shut down the University Hospital Centre Zagreb in Croatia
A cyber attack started targeting the University Hospital Centre Zagreb (KBC Zagreb) on Wednesday night, reported the Croatian Radiotelevision. A cyber attack began targeting the University Hospital Centre Zagreb (KBC Zagreb), the largest Croatian hospital,…
Security Affairs - The Mount Kisco Surgery Center LLC d/b/a The Ambulatory Surgery Center of Westchester - Notice of Data Security Incident
No content available.
Dark Reading - TeamViewer Credits Network Segmentation for Rebuffing APT29 Attack
Despite warnings from Health-ISAC and the NCC Group, the remote access software maker says defense-in-depth kept customers' data safe from Midnight Blizzard.
Dark Reading - Cybersecurity Veteran Kevin Mandia Named General Partner of Ballistic Ventures
No content available.
Dark Reading - Critical GitLab Bug Threatens Software Development Pipelines
The company is urging users running vulnerable versions to patch CVE-2024-5655 immediately, to avoid CI/CD malfeasance.
Dark Reading - CISO Corner: The NYSE & the SEC; Ransomware Negotiation Tips
Our collection of the most relevant reporting and industry perspectives for those guiding cybersecurity strategies and focused on SecOps.
Dark Reading - Infosys McCamish says LockBit stole data of 6 million people
Infosys McCamish Systems (IMS) disclosed that the LockBit ransomware attack it suffered earlier this year impacted sensitive information of more than six million individuals. [...]
BleepingComputer - CISA's Flags Memory-Unsafe Code in Major Open Source Projects
Despite more than 50% of all open source code being written in memory-unsafe languages like C++, we are unlikely to see a massive overhaul to code bases anytime soon.
Dark Reading - Hundreds of Thousands Impacted in Children's Hospital Cyberattack
Though the Chicago-area hospital did not pay a ransom, a host of sensitive medical information is now at risk.
Dark Reading - Dairy giant Agropur says data breach exposed customer info
Agropur, one of the largest dairy cooperatives in North America, is notifying customers of a data breach after some of its shared online directories were exposed. [...]
BleepingComputer - Ticketmaster sends notifications about recent massive data breach
Ticketmaster has started to notify customers who were impacted by a data breach after hackers stole the company's Snowflake database, containing the data of millions of people. [...]
BleepingComputer - Microsoft Alerts More Customers to Email Theft in Expanding Midnight Blizzard Hack
Shockwaves from the Russian government's hack of Microsoft's corporate infrastructure continue to spread as the victim pool widens.
SecurityWeek - Pediatric Urology Associates was allegedly locked and hacked. What are they doing about it?
There has been a proliferation of new ransomware or hacking groups in the past six months, and some of them are still flying under the media radar. One of those groups is the dAn0n Hacker Group. On March 26, dAn0n added Pediatric Urology Associates (“PUA”)…
DataBreaches - Mac Users Served Info Stealer Malware Through Google Ads
No content available.
packetstormsecurity.com - Google Cuts Ties With Entrust In Chrome Over Trust Issues
No content available.
packetstormsecurity.com - Kimsuky Using TRANSLATEXT Chrome Extension to Steal Sensitive Data
The North Korea-linked threat actor known as Kimsuky has been linked to the use of a new malicious Google Chrome extension that's designed to steal sensitive information as part of an ongoing intelligence collection effort. Zscaler ThreatLabz, which observed…
The Hacker News - TEMU sued for being “dangerous malware” by Arkansas Attorney General
Chinese online shopping giant Temu is facing a lawsuit filed by State of Arkansas Attorney General Tim Griffin, alleging that the retailer’s mobile app spies on users. “Temu purports to be an online shopping platform, but it is dangerous malware,…
Malwarebytes - LockBit Attack Targets Evolve Bank, Not Federal Reserve
The ransomware group claimed it had breached the Federal Reserve, but the target now appears to have been an Arkansas-based bank, Evolve.
Dark Reading - TeamViewer links corporate cyberattack to Russian state hackers
RMM software developer TeamViewer says a Russian state-sponsored hacking group known as Midnight Blizzard is believed to be behind a breach of their corporate network this week. [...]
BleepingComputer - GitLab Releases Patch for Critical CI/CD Pipeline Vulnerability and 13 Others
GitLab has released security updates to address 14 security flaws, including one critical vulnerability that could be exploited to run continuous integration and continuous deployment (CI/CD) pipelines as any user. The weaknesses, which affect GitLab…
The Hacker News - Unfounded Fears: AI Extinction-Level Threats & the AI Arms Race
There is an extreme lack of evidence of AI-related danger, and proposing or implementing limits on technological advancement isn't the answer.
Dark Reading - Top 10 Phishing Simulation Tools
Top 10 Phishing Simulation Tools Phishing attacks continue to pose a significant threat, affecting both individuals and organizations. To combat these threats, a variety of phishing simulation tools have been created to train employees and improve their…
SOCRadar - GetReal Labs Emerges From Stealth to Tackle Deepfakes
Incubated for two years by Ballistic Ventures, GetReal Labs has launched to combat manipulated content and deepfakes.
SecurityWeek - AuthZed Raises $12 Million for Permissions Management Technology
Permissions management technology startup AuthZed has raised $12 million in a Series A funding round led by General Catalyst.
SecurityWeek - 1Touch.io Integrates AI Into Mainframe Security
Just because mainframes are old doesn't mean they're not in use. Mainframe Security Posture Management brings continuous monitoring and vigilance to the platform.
Dark Reading - Don't Forget to Report a Breach: A Cautionary Tale
Responding to an incident quickly is important, but it shouldn't come at the expense of reporting it to the appropriate regulatory bodies.
Dark Reading - In Other News: Malware Delivered by ISP, Temu Spying, Critical Dataverse Vulnerability
Noteworthy stories that might have slipped under the radar: Korean ISP delivers malware to customers, Temu sued for allegedly spying on users, Microsoft patches a critical Dataverse vulnerability.
SecurityWeek - Polyfill.io, BootCDN, Bootcss, Staticfile attack traced to 1 operator
The recent large scale supply chain attack conducted via multiple CDNs, namely Polyfill.io, BootCDN, Bootcss, and Staticfile that affected up to tens of millions of websites has been traced to a common operator. Researchers discovered a public GitHub…
BleepingComputer - Vulnerability management empowered by AI
Vulnerability management involves an ongoing cycle of identifying, prioritizing and mitigating vulnerabilities within software applications, networks and computer systems. This proactive strategy is essential for safeguarding an organization’s digital assets…
securityintelligence.com - Judge denies motion to dismiss cybersecurity lawsuit against Clark County schools
Rocio Hernandez reports: A Clark County judge on Thursday denied the Clark County School District (CCSD)’s motion to dismiss a class action lawsuit over a 2023 cybersecurity breach — an unexpected development considering the judge previously said she leaned…
DataBreaches - Palomar Health Medical Group’s computer systems still down nearly 2 months after ‘suspicious activities’
Alexander Nguyen reports: Palomar Health Medical Group’s (PHMG) phones and computer systems are still down after “suspicious activities” nearly two months ago. Palomar Health said it discovered the problem on May 5, which was affecting certain computer…
DataBreaches - Blackcat may be gone, but recovery from its attacks is not over
The AlphV (aka Blackcat) ransomware group may have disappeared after a law enforcement seizure in December, and then an exit scam by its admin in March, but the impact of some of its breaches continues. While the Change Healthcare breach continues to make…
DataBreaches - Microsoft Details ‘Skeleton Key’ AI Jailbreak Technique
Microsoft has tricked several gen-AI models into providing forbidden information using a jailbreak technique named Skeleton Key.
SecurityWeek - 8220 Gang Exploits Oracle WebLogic Server Flaws for Cryptocurrency Mining
Security researchers have shed more light on the cryptocurrency mining operation conducted by the 8220 Gang by exploiting known security flaws in the Oracle WebLogic Server. "The threat actor employs fileless execution techniques, using DLL reflective and…
The Hacker News - Fortra Patches Critical SQL Injection in FileCatalyst Workflow
Fortra has patched a critical-severity vulnerability in FileCatalyst Workflow leading to the creation of administrator accounts.
SecurityWeek