News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Today, Sat 31 Oct | 11 so far | 2 |
Developing
Mon 1 Jul 202463 articles
- Juniper Networks Warns of Critical Authentication Bypass Vulnerability
Juniper Networks warns of a critical authentication bypass flaw impacting Session Smart routers and conductors.
SecurityWeek - Alleged Data Leaks of Truist Bank, Twilio Authy, Genesis Market, and Skull OTP BOT
Alleged Data Leaks of Truist Bank, Twilio Authy, Genesis Market, and Skull OTP BOT The SOCRadar Dark Web Team has identified several critical cyber incidents involving major financial institutions and technology companies. Notable breaches include the…
SOCRadar - Prudential Financial Data Breach Impacts 2.5 Million
Prudential Financial has updated the February data breach impact estimate to 2.5 million individuals.
SecurityWeek - CVE-2024-6387: Critical OpenSSH Unauthenticated RCE Flaw ‘regreSSHion’ Exposes Millions of Linux Systems
The Qualys Threat Research Unit (TRU) has detailed a severe security flaw, dubbed ‘regreSSHion,’ that leaves millions of Linux systems vulnerable to remote code execution. The vulnerability, identified as CVE-2024-6387, affects OpenSSH’s server (sshd)...
SecurityOnline - Hackers Using Google Ads To Deliver ‘Poseidon’ Mac Stealer
Hackers abuse Mac Stealer to covertly extract sensitive information such as passwords, financial data, and personal files from macOS devices. Besides this, macOS users or Mac users are considered valuer targets. On June 24th, Malwarebytes researchers…
gbhackers.com - Microsoft Alerts More Users in Update to Midnight Blizzard Hack
Microsoft has issued a new alert to its users, updating them on the continued threat posed by Midnight Blizzard, a Russian state-sponsored hacking group also known as NOBELIUM. The alert follows the initial detection of the attack by Microsoft’s Security…
gbhackers.com - New Hacker Group Attacking Systems With 10 Malware At Same Time
A malware campaign of huge magnitude, and perhaps run by just one group, is using artificially nested files for distribution named ‘WEXTRACT.EXE .MUI’. More than 50,000 files worldwide featuring this method are delivered by differen...
gbhackers.com - Router maker's support portal hacked, replies with MetaMask phishing
BleepingComputer has verified that the helpdesk portal of a router manufacturer is currently sending MetaMask phishing emails in response to newly filed support tickets, in what appears to be a compromise. [...]
BleepingComputer - Router maker's support portal responds with MetaMask phishing
BleepingComputer has verified that the helpdesk portal of a router manufacturer is currently sending MetaMask phishing emails in response to newly filed support tickets, in what appears to be a compromise. [...]
BleepingComputer - Google to Drop Entrust Certificates from Chrome Starting November 2024
In a significant move that underscores the critical nature of digital security, Google has announced that, starting November 1, 2024, Chrome 127 and all subsequent versions will no longer trust newly issued digital certificates...
SecurityOnline - Juniper Networks fixed a critical authentication bypass flaw in some of its routers
Juniper Networks released out-of-band security updates to address a critical authentication bypass vulnerability impacting some of its routers. Juniper Networks has released out-of-band security updates to address a critical vulnerability, tracked as…
Security Affairs - TeamViewer Hack Officially Attributed to Russian Cyberspies
TeamViewer has confirmed that the Russian cyberespionage group APT29 appears to be behind the recent hack.
SecurityWeek - Juniper Releases Out-Of-Cycle Critical Update for Smart Routers
Juniper Networks has released an out-of-cycle critical update to address a severe vulnerability affecting its Session Smart Router, Session Smart Conductor, and WAN Assurance Router products. The security flaw, identified as CVE-2024-2973, allows…
gbhackers.com - Threat actors actively exploit D-Link DIR-859 router flaw CVE-2024-0769
Experts spotted threat actors exploiting the critical vulnerability CVE-2024-0769 affects all D-Link DIR-859 WiFi routers. Researchers from cybersecurity firm GreyNoise have spotted exploitation attempts for the critical vulnerability CVE-2024-0769 (CVSS…
Security Affairs - A week in security (June 24 – June 30)
Last week on Malwarebytes Labs: TEMU sued for being “dangerous malware” by Arkansas Attorney General Driving licences and other official documents leaked by authentication service used by Uber, TikTok, X, and more “Poseidon” Mac stealer distributed via Goog...
Malwarebytes - Juniper Networks Releases Critical Security Update for Routers
Juniper Networks has released out-of-band security updates to address a critical security flaw that could lead to an authentication bypass in some of its routers. The vulnerability, tracked as CVE-2024-2973, carries a CVSS score of 10.0, indicating maximum…
The Hacker News - Sony Enters Crypto Exchange Arena with Acquisition of Amber
Sony Group, the Japanese conglomerate renowned for its gaming, music, and camera prowess, has officially entered the crypto exchange market. According to crypto reporter Wu Blockchain, Sony has acquired Amber Japan, a regulated digital asset trading service…
gbhackers.com - PoC Exploit Published for Linux Kernel Privilege Escalation Flaw (CVE-2024-0193)
A security researcher has released proof-of-concept (PoC) exploit code targeting a high-severity vulnerability (CVE-2024-0193) within the Linux kernel. This use-after-free flaw in the netfilter subsystem, scored 7.8 on the CVSS scale, can be exploited...
SecurityOnline - CVE-2024-5261 (CVSS 10): LibreOffice Patches Critical Vulnerability in LibreOfficeKit
The Document Foundation, the organization behind the popular open-source office suite LibreOffice, has issued an urgent security advisory regarding a critical vulnerability (CVE-2024-5261) in its LibreOfficeKit component. This flaw could allow attackers to…
SecurityOnline - Indirector – High-Precision Branch Target Injection Attacks: A New Threat to Intel CPUs
Researchers at the University of California San Diego have published a groundbreaking paper detailing a new class of security vulnerabilities in Intel’s high-end CPUs. These vulnerabilities, dubbed “Indirector” attacks, exploit weaknesses in the chip’s...
SecurityOnline - Water Sigbin Threat Actor Targets Oracle WebLogic Servers to Deploy XMRig Cryptominer
Security researchers at Trend Micro have uncovered a sophisticated campaign by the Water Sigbin threat actor, also known as the 8220 Gang, targeting Oracle WebLogic servers to deploy XMRig cryptocurrency miners. This group, primarily...
SecurityOnline - Critical Vulnerability in WebRTC Media Servers Threatens Real-Time Communication
A critical denial-of-service (DoS) vulnerability has been identified in media servers handling WebRTC’s DTLS-SRTP. This flaw, stemming from a race condition between ICE and DTLS traffic, can disrupt media sessions, threatening the availability of...
SecurityOnline - Attackers Leveraging Public Cobalt Strike Profiles to Evade Detection
In a recent report, Unit 42 researchers have revealed a concerning trend: threat actors are increasingly exploiting publicly available Cobalt Strike profiles to mask their malicious activities and bypass security measures. Cobalt Strike, a...
SecurityOnline