News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Today, Sat 31 Oct | 10 so far | 2 |
Developing
Fri 28 Jun 202464 articles
- Combatting the Evolving SaaS Kill Chain: How to Stay Ahead of Threat Actors
The modern kill chain is eluding enterprises because they aren’t protecting the infrastructure of modern business: SaaS. SaaS continues to dominate software adoption, and it accounts for the greatest share of public cloud spending. But enterprises and SMBs…
The Hacker News - Chicago Children’s Hospital Says 791,000 Impacted by Ransomware Attack
Ann & Robert H. Lurie Children’s Hospital of Chicago says the recent data breach caused by a ransomware attack impacts 791,000 people.
SecurityWeek - Dark Web Profile: IntelBroker
Dark Web Profile: IntelBroker IntelBroker, a notorious figure known for orchestrating high-profile cyberattacks, operates within BreachForums. Specializing in identifying and selling access to compromised systems, sensitive data leaks, and possibly…
SOCRadar - New SnailLoad Attack Exploits Network Latency to Spy on Users' Web Activities
A group of security researchers from the Graz University of Technology have demonstrated a new side-channel attack known as SnailLoad that could be used to remotely infer a user's web activity. "SnailLoad exploits a bottleneck present on all Internet…
The Hacker News - Snowblind Abuses Android seccomp Sandbox To Bypass Security Mechanisms
A new Android banking trojan named Snowblind was discovered that exploits the Linux kernel feature seccomp, traditionally used for security, which installs a seccomp filter to intercept system calls and bypasses anti-tampering mechanisms in apps, even those…
gbhackers.com - TeamViewer Internal Systems Accessed by APT Hackers
TeamViewer, a leading provider of remote access software, announced that attackers had compromised its internal corporate IT environment. The company’s security team detected the breach, who noticed an “irregularity” in their internal systems, prompting an…
gbhackers.com - Polyfill Domain Shut Down as Owner Disputes Accusations of Malicious Activity
Namecheap shut down polyfill.io amid reports of malicious activity, but the Chinese owner claims it has good intentions.
SecurityWeek - Russian APT Reportedly Behind New TeamViewer Hack
TeamViewer’s corporate network was hacked and some reports say the Russian group APT29 is behind the attack.
SecurityWeek - U.S. Department of Justice Announced $10 Million Reward For Russian Hacker
The U.S. Department of Justice has announced a $10 million reward for information leading to the arrest of Amin Timovich Stigal (Амин Тимович Стигал), a 22-year-old Russian citizen charged with conspiracy to hack into and destroy computer systems and data. A…
gbhackers.com - Researchers Warn of Flaws in Widely Used Industrial Gas Analysis Equipment
Multiple security flaws have been disclosed in Emerson Rosemount gas chromatographs that could be exploited by malicious actors to obtain sensitive information, induce a denial-of-service (DoS) condition, and even execute arbitrary commands. The flaws impact…
The Hacker News - Chinese Hacker Groups Using Off-The-Shelf Tools To Deploy Ransomware
Cyberespionage actors are increasingly using ransomware as a final attack stage for financial gain, disruption, or to cover their tracks, as the report details previously undisclosed attacks by a suspected Chinese APT group, ChamelGang, who used CatB…
gbhackers.com - Former IT Employee Stolen 1 Million Geisinger Patient’s Personal Data
Geisinger Health System discovered a data breach involving the personal information of over one million patients. The breach was traced back to a former employee of Nuance Communications Inc., an external vendor providing IT services to Geisinger. The…
gbhackers.com - US announces a $10M reward for Russia’s GRU hacker behind attacks on Ukraine
The US DoJ announced charges against a member of Russia’s military intelligence service GRU for conducting wiper attacks on Ukraine in 2022. The US Department of Justice (DoJ) announced charges against Russian national Amin Timovich Stigal, who is a member…
Security Affairs - TeamViewer Detects Security Breach in Corporate IT Environment
TeamViewer on Thursday disclosed it detected an "irregularity" in its internal corporate IT environment on June 26, 2024. "We immediately activated our response team and procedures, started investigations together with a team of globally renowned cyber…
The Hacker News - TeamViewer Confirms Cyberattack by Notorious APT Group
TeamViewer, a remote control tool trusted by millions of users globally, has disclosed a significant cyberattack. A sophisticated hacker group identified as APT29, or “Midnight Blizzard,” successfully infiltrated TeamViewer’s systems through unknown methods.…
SecurityOnline - Critical Supply Chain Breach: Beware of Trojanized Notezilla, RecentX, Copywhiz Installers
Rapid7, a prominent cybersecurity firm, has uncovered a sophisticated supply chain attack targeting users of well-known Windows software tools Notezilla, RecentX, and Copywhiz. The attack involves the distribution of trojanized installers that, alongside…
SecurityOnline - CVE-2024-2973 (CVSS 10): Juniper Session Smart Router Authentication Bypass Vulnerability
In a recent cybersecurity advisory, Juniper Networks disclosed a critical vulnerability identified as CVE-2024-2973, which has earned a severity rating of 10 on the CVSS scale. This vulnerability affects the Session Smart Router (SSR),...
SecurityOnline - PoC Released for Unauthenticated RCE Vulnerability in TP-Link VIGI NVR4032H Network Video Recorder
A critical security vulnerability has been discovered in TP-Link’s VIGI NVR4032H network video recorder, a device widely used in professional surveillance systems. This flaw could allow remote attackers to gain complete control of the...
SecurityOnline - UAC-0184’s XWorm RAT Campaign Targets Ukraine with Python and DLL Sideloading
The Cyble Research and Intelligence Labs (CRIL) has uncovered a persistent malware campaign specifically targeting Ukrainian individuals and organizations. This campaign, attributed to the threat actor group UAC-0184, leverages sophisticated techniques like…
SecurityOnline - Avaya IP Office Users Urged to Patch Critical Flaws (CVE-2024-4196 & CVE-2024-4197)
The Avaya IP Office, a popular telephony system used by businesses worldwide, is facing a critical security threat. Two newly discovered vulnerabilities, CVE-2024-4196 and CVE-2024-4197, have been identified and could potentially allow remote attackers...
SecurityOnline - Malicious npm Package Exposes AWS Users to Backdoor
ReversingLabs researchers have uncovered a malicious package named “legacyreact-aws-s3-typescript” on the npm registry. The package, designed to mimic a legitimate tool for uploading files to Amazon S3 buckets, was found to contain a hidden...
SecurityOnline - Critical Vulnerabilities Uncovered in Rockwell Automation’s ThinManager: Immediate Action Required
Rockwell Automation, a global leader in industrial automation and digital transformation, has issued a security advisory urging users of its ThinManager software to update to the latest versions following the discovery of three critical...
SecurityOnline - DBatLoader: A Malware Distribution via CMD Files
AhnLab Security Intelligence Center (ASEC) has issued a warning regarding the re-emergence of the DBatLoader malware, a notorious downloader known for its historical involvement in phishing campaigns. The malware has resurfaced with enhanced evasion...
SecurityOnline - Examining Water Sigbin's Infection Routine Leading to an XMRig Cryptominer
We analyze the multi-stage loading technique used by Water Sigbin to deliver the PureCrypter loader and XMRIG crypto miner.
trendmicro.com