News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Today, Sat 31 Oct | 11 so far | 2 |
Developing
Tue 2 Jul 202465 articles
- Passkey Redaction Attacks Subvert GitHub, Microsoft Authentication
Adversary-in-the-middle attacks can strip out the passkey option from login pages that users see, leaving targets with only authentication choices that force them to give up credentials.
Dark Reading - Fintech Frenzy: Affirm & Others Emerge as Victims in Evolve Breach
A ransomware attack has become a supply chain issue, thanks to the victim's partnerships with other financial services companies.
Dark Reading - Xbox is down worldwide with users unable to login, play games
The Xbox Live service is currently down due to a major outage, impacting customers worldwide and preventing them from signing into their Xbox accounts and playing games. [...]
BleepingComputer - PTC License Server Bug Needs Immediate Patch Against Critical Flaw
Creo Elements/Direct License Servers, which enable industrial design and modeling software, are exposed to the Internet, leaving critical infrastructure vulnerable to remote code execution.
Dark Reading - SecTemplates.com Releases Incident Response Program Pack 1.0
No content available.
packetstormsecurity.com - Evolve Bank data breach impacted fintech firms Wise and Affirm
Fintech firms Wise and Affirm confirmed they were both impacted by the recent data breach suffered by Evolve Bank. Fintech companies Wise and Affirm have confirmed that they were both affected by the recent data breach at Evolve Bank. At the end of June, the…
Security Affairs - Cyber Workforce Numbers Rise for Larger Organizations
Some organizations are also reaching record-high levels of cyber maturity, at 80% to 90%.
Dark Reading - Google now pays $250,000 for KVM zero-day vulnerabilities
Google has launched kvmCTF, a new vulnerability reward program (VRP) first announced in October 2023 to improve the security of the Kernel-based Virtual Machine (KVM) hypervisor that comes with $250,000 bounties for full VM escape exploits. [...]
BleepingComputer - Patelco shuts down banking systems following ransomware attack
Patelco Credit Union has disclosed it experienced a ransomware attack that led to the proactive shutdown of several of its customer-facing banking systems to contain the incident's impact. [...]
BleepingComputer - Implementing Zero Trust and Mitigating Risk: ISC2 Courses to Support Your Development
No content available.
Dark Reading - Interlock Launches ThreatSlayer Web3 Security Extension and Incentivized Crowdsourced Internet Security Community
No content available.
Dark Reading - Odaseva Raises $54M Series C Round to Expand Product Offerings and Continue Category Leadership
No content available.
Dark Reading - Affirm says cardholders impacted by Evolve Bank data breach
Buy now, pay later loan company Affirm is warning that holders of its payment cards had their personal information exposed due to a data breach at its third-party issuer, Evolve Bank & Trust (Evolve). [...]
BleepingComputer - Insider Threat: Fake Therapist Fooled Hundreds Online Until She Died, State Records Say
In April 2023, Brightside Health, Inc. reported a breach to HHS that affected 767 patients. The incident was coded as “unauthorized access/disclosure” of information located in “EMR, other.” HHS’s closing statement on the public breach tool described the…
DataBreaches - HHS Office for Civil Rights Settles HIPAA Security Rule Failures for $950,000
Settlement with Heritage Valley Health System marks OCR’s third ransomware settlement as the agency sees 264% increase in large ransomware breaches since 2018 The U.S. Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) announced a…
DataBreaches - How many clients and patients were affected by a ransomware attack on EqualizeRCM? We have no idea.
On August 17, 2023, SysInformation Healthcare Services, LLC, d/b/a EqualizeRCM (“SysInformation”) notified HHS of a breach. The firm, a business associate that provides revenue and billing cycle management services, reported that 501 patients had been…
DataBreaches - Google Patches 25 Android Flaws, Including Critical Privilege Escalation Bug
No content available.
packetstormsecurity.com - Splunk Patches High-Severity Vulnerabilities In Enterprise Product
No content available.
packetstormsecurity.com - TeamViewer Hack Officially Attributed To Russian Cyberspies
No content available.
packetstormsecurity.com - Almost Every Apple Device Vulnerable To CocoaPods Supply Chain Attack
No content available.
packetstormsecurity.com - Google Patches 25 Android Flaws, Including Critical Privilege Escalation Bug
Google ships an Android security update with fixes for 15 vulnerabilities, including a critical-severity flaw in Framework.
SecurityWeek - Stress-Testing Our Security Assumptions in a World of New & Novel Risks
Categorizing and stress-testing fundamental assumptions is a necessary exercise for any leader interested in ensuring long-term security and resilience in the face of an uncertain future.
Dark Reading - What Cybersecurity Defense Looks Like for School Districts
Dark Reading chats with Johnathan Kim, director of technology at the Woodland Hills School District in North Braddock, Penn., about why cybercriminals target schools — and what they can do about it.
Dark Reading - Google Pixel 6 series phones bricked after factory reset
Multiple owners of Google Pixel 6 series phones (6, 6a, 6 Pro) have been reporting in the past week that their devices were "bricked" after they performed a factory reset. [...]
BleepingComputer - Top 10 Deepfake Scams Impacting Industries Worldwide
Top 10 Deepfake Scams Impacting Industries Worldwide Deepfake technology has emerged as an effective tool for both creative and malicious purposes. This technology employs AI to generate highly realistic fake videos, audios, and images that are frequently…
SOCRadar - Hackers Using Polyglot Files In the Wild, Here Comes PolyConv For Detection
Polyglot files have to fit in several file format specifications and respond differently depending on the calling program. This poses a significant risk to endpoint detection and response (EDR) systems and file uploaders, which mainly rely on format…
gbhackers.com - Patch Now: Cisco Zero-Day Under Fire From Chinese APT
Threat actor "Velvet Ant" has been exploiting a vulnerability in Cisco's NX-OS Software for managing a variety of switches, executing commands and dropping custom malware.
Dark Reading - Prudential Financial data breach impacts 2.5 million people, not 36,000 as first thought
In February 2024, Prudential Financial reported it had fallen victim to a ransomware attack. The attack was discovered one day after it started, but not before some 2.5 million people had been impacted by the resulting data breach. As one of the largest…
Malwarebytes - It all adds up: Pretexting in executive compromise
Executives hold the keys to the corporate kingdom. If attackers can gain the trust of executives using layered social engineering techniques, they may be able to access sensitive corporate information such as intellectual property, financial data or…
securityintelligence.com - Evolve Bank Shares Data Breach Details as Fintech Firms Report Being Hit
Fintech companies Wise and Affirm are impacted by the data breach at Evolve Bank, which has shared additional details on the recent ransomware attack.
SecurityWeek - Google to offer $250,000 for Full VM Escape Zero-day Vulnerability
Google has unveiled kvmCTF, a new vulnerability reward program (VRP) explicitly targeting the Kernel-based Virtual Machine (KVM) hypervisor. This initiative, first announced in October 2023, underscores Google’s commitment to enhancing the security of…
gbhackers.com - Splunk Patches High-Severity Vulnerabilities in Enterprise Product
Splunk has patched multiple vulnerabilities in Splunk Enterprise, including high-severity remote code execution bugs.
SecurityWeek - “Sadly for the feds I have not been arrested” – RansomedVC
The man known as “Kmeta,” “Impotent,” “RansomedVC,” and other monikers says he is not “Emil Kyulev” and has not been arrested. On June 30, DataBreaches reported on the arrest of a 21-year-old Bulgarian man, Teodor Iliev, who is accused of being the threat…
DataBreaches - Critical CocoaPods Flaws Exposed Many iOS, macOS Apps to Supply Chain Attacks
EVA Information Security has shared details on three CocoaPods vulnerabilities impacting millions of macOS and iOS applications.
SecurityWeek - Za: Cybersecurity breach causes lab test delays, says Gauteng health department
TimesLIVE reports an update on a ransomware attack on the National Health Laboratory Services. The attack was confirmed by NHLS on June 25 and is still significantly impacting services. DataBreaches has not spotted any ransomware group or threat actor…
DataBreaches - Russian hackers attack KBC Zagreb, Croatia’s largest hospital
TVP World reports: Russian hackers have claimed responsibility for carrying out a cyberattack on Croatia’s largest hospital. They demanded that the facility’s authorities pay a ransom by July 18, Serbian website Danas reported on Monday. The Zagreb teaching…
DataBreaches - How MFA Failures are Fueling a 500% Surge in Ransomware Losses
The cybersecurity threat landscape has witnessed a dramatic and alarming rise in the average ransomware payment, an increase exceeding 500%. Sophos, a global leader in cybersecurity, revealed in its annual "State of Ransomware 2024" report that the average…
The Hacker News - Cyberinsurance Premiums are Going Down: Here’s Why and What to Expect
The change in premium rates is more likely to be the insurers’ correction than the insureds’ improvement in security.
SecurityWeek