News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Today, Sat 31 Oct | 11 so far | 2 |
Developing
Wed 3 Jul 202458 articles
- Any IoT Device Can Be Hacked, Even Grills
Researchers uncover a way to hack the summer cookout — but firmware updates will stop that grilled meat (or tofu) from turning into an inedible mess.
Dark Reading - HealthEquity data breach exposes protected health information
Healthcare fintech firm HealthEquity is warning that it suffered a data breach after a partner's account was compromised and used to access the Company's systems to steal protected health information. [...]
BleepingComputer - Bay Area Credit Union Struggles to Recover After Ransomware Attack
Tens of thousands of Patelco customers remain without access to their accounts, with no estimates for when systems will be restored.
Dark Reading - Europol Announces Crackdown on Cobalt Strike Servers Used by Cybercriminals
European law enforcement agency announces the takedown of nearly 600 Cobalt Strike servers linked to criminal activity.
SecurityWeek - Operation Morpheus took down 593 Cobalt Strike servers used by threat actors
An international law enforcement operation code-named Operation Morpheus led to the takedown of 593 Cobalt Strike servers used by crooks. An international law enforcement operation, code-named Operation Morpheus, aimed at combatting the criminal abuse of an…
Security Affairs - OVHcloud blames record-breaking DDoS attack on MikroTik botnet
OVHcloud, a global cloud services provider and one of the largest of its kind in Europe, says it mitigated a record-breaking distributed denial of service (DDoS) attack earlier this year that reached an unprecedented packet rate of 840 million packets per…
BleepingComputer - Hacker Busted for 'Evil Twin' Wi-Fi That Steals Airline Passenger Data
Australian cops arrest man found with a portable Wi-Fi access device in his carry-on luggage, allegedly used for standing up scam Wi-Fi networks on flights.
Dark Reading - Networking Without the Hangover
How Sober in Cyber is redefining professional connections in the security industry.
Dark Reading - Hackers abused API to verify millions of Authy MFA phone numbers
Twilio has confirmed that an unsecured API endpoint allowed threat actors to verify the phone numbers of millions of Authy multi-factor authentication users, potentially making them vulnerable to SMS phishing and SIM swapping attacks. [...]
BleepingComputer - The Not-So-Secret Network Access Broker x999xx
Most accomplished cybercriminals go out of their way to separate their real names from their hacker handles. But among certain old-school Russian hackers it is not uncommon to find major players who have done little to prevent people from figuring out who…
Krebs on Security - Ransomware Eruption: Novel Locker Malware Flows From ‘Volcano Demon'
Attackers clear logs before exploitation and use "no caller ID" numbers to negotiate ransoms, complicating detection and forensics efforts.
Dark Reading - Ransomware Extortion Demands Soar to $5.2M per Attack
The highest ransom demanded by threat actors this year so far was nearly 20 times last year's average.
Dark Reading - Formula 1 governing body discloses data breach after email hacks
FIA (Fédération Internationale de l'Automobile), the auto racing governing body since the 1950s, says attackers gained access to personal data after compromising several FIA email accounts in a phishing attack. [...]
BleepingComputer - Infostealer malware logs used to identify child abuse website members
Thousands of pedophiles who download and share child sexual abuse material (CSAM) were identified through information-stealing malware logs leaked on the dark web, highlighting a new dimension of using stolen credentials in law enforcement investigations.…
BleepingComputer - Florida Community Health Centers to notify almost 300,000 of ransomware attack
As DataBreaches recently reported, in June 2023, SysInformation Healthcare Services d/b/a EqualizeRCM discovered a ransomware attack. One year later, we still don’t know how many clients and patients were affected. But SysInformation wasn’t the only entity…
DataBreaches - Over 380k Hosts Still Referencing Malicious Polyfill Domain
No content available.
packetstormsecurity.com - Intel Dismisses Reported Side-Channel Vulnerability In CPU Cores
No content available.
packetstormsecurity.com - German Military's New Spy Satellites Appear To Have Failed In Orbit
No content available.
packetstormsecurity.com - Evolve Bank Ransomware Raid May Mean Customer Info Stolen
No content available.
packetstormsecurity.com - Europol takes down 593 Cobalt Strike servers used by cybercriminals
Europol coordinated a joint law enforcement action known as Operation Morpheus, which led to the takedown of almost 600 Cobalt Strike servers used by cybercriminals to infiltrate victims' networks. [...]
BleepingComputer - LockBit group claims the hack of the Fairfield Memorial Hospital in the US
The LockBit ransomware group breached another hospital in the United States, the victim is the Fairfield Memorial Hospital in Illinois. It has happened again, another US healthcare organization suffered a security breach, this time the victim is the…
Security Affairs - Intel CPUs Face Spectre-Like 'Indirector' Attack That Leaks Data
"Indirector" targets a speculative execution component in silicon that previous research has largely overlooked.
Dark Reading - Friend or Foe? AI's Complicated Role in Cybersecurity
Staying informed about the latest AI security solutions and best practices is critical in remaining a step ahead of increasingly clever cyberattacks.
Dark Reading - Everything You Need to Know About Dark Web and Deep Web
Everything You Need to Know About Dark Web and Deep Web The Internet encompasses an extensive and intricate network that goes well beyond the familiar surface websites we frequently visit. Two terms that often emerge in discussions about the hidden parts of…
SOCRadar - TotalEnergies Cyber Attack: Data of 210,715 Customers Exposed
TotalEnergies Clientes SAU has reported a significant cyberattack that has compromised the personal data of 210,715 customers. The incident has raised serious concerns about data security and the integrity of digital infrastructures in the energy sector.…
gbhackers.com - Does your business have an AI blind spot? Navigating the risks of shadow AI
With AI now an integral part of business operations, shadow AI has become the next frontier in information security. Here’s what that means for managing risk. For many organizations, 2023 was the breakout year for generative AI. Now, large language models…
securityintelligence.com - Over 380k Hosts Still Referencing Malicious Polyfill Domain: Censys
Censys has discovered more than 380,000 hosts, including major platforms, still referencing the malicious polyfill.io domain.
SecurityWeek - Odaseva Raises $54 Million for Salesforce Enterprise Data Security Platform
Enterprise data security platform Odaseva raises $54 million in a Series C funding round led by Silver Lake Waterman.
SecurityWeek - Juniper SRX Vulnerability Allows Attackers Trigger DoS Condition
A vulnerability in Junos OS on SRX Series devices allows attackers to trigger a DoS attack by sending crafted valid traffic, which is caused by improper handling of exceptional conditions within the Packet Forwarding Engine (PFE) and leads to PFE crashes and…
gbhackers.com - Gogs Vulnerabilities Let Attackers Hack Instances And Steal Source Code
Gogs is a standard open-source code hosting system used by many developers. Several Gogs vulnerabilities have been discovered recently by the cybersecurity researchers at SonarSource. Gogs can be hacked through these flaws, which put its instances at risk of…
gbhackers.com - Hiap Seng Industries Servers Attacked by Ransomware
Hiap Seng Industries, a prominent engineering and construction company, has fallen victim to a ransomware attack that compromised its servers. The company has swiftly taken measures to contain the breach and ensure the continuity of its business operations.…
gbhackers.com - Cybersecurity M&A Roundup: 29 Deals Announced in June 2024
Roundup of the more than two dozen cybersecurity-related merger and acquisition (M&A) deals announced in June 2024.
SecurityWeek - Velvet Ant’s Strategic Targeting: A Long-Term Cyber Espionage Campaign Against F5 BIG-IP Systems
Velvet Ant’s Strategic Targeting: A Long-Term Cyber Espionage Campaign Against F5 BIG-IP Systems In the constantly evolving landscape of cybersecurity, the Velvet Ant Advanced Persistent Threat (APT) group, allegedly supported by the Chinese government, has…
SOCRadar - Brazil Data Regulator Bans Meta From Mining Data to Train AI Models
Brazil’s national data protection authority has determined that Meta cannot use data originating in the country to train its artificial intelligence.
SecurityWeek - 300k Affected by Year-Old Data Breach at Florida Community Health Centers
Florida Community Health Centers says the information of 300,000 individuals was stolen in a June 2023 ransomware attack.
SecurityWeek - Affirm says Evolve Bank data breach also compromised some of its customers
‘Buy now, pay later’ payment specialist Affirm has warned that holders of its payment cards had their personal information exposed after a ransomware attack and data breach at Evolve Bank & Trust. In a form 8-K, submitted to the Securities and Exchange…
Malwarebytes - The Emerging Role of AI in Open-Source Intelligence
Recently the Office of the Director of National Intelligence (ODNI) unveiled a new strategy for open-source intelligence (OSINT) and referred to OSINT as the “INT of first resort”. Public and private sector organizations are realizing the value that the…
The Hacker News - Patelco Credit Union Scrambling to Restore Systems Following Ransomware Attack
Patelco Credit Union shuts down banking systems and suspends electronic operations in response to a ransomware attack.
SecurityWeek - Intel Says No New Mitigations Required for Indirector CPU Attack
Researchers disclosed a new high-precision Branch Target Injection attack method named Indirector, but Intel says no new mitigations are needed.
SecurityWeek - Proton launches free, privacy-focused Google Docs alternative
Proton has launched 'Docs in Proton Drive,' a free and open-source end-to-end encrypted web-based document editing and collaboration tool. [...]
BleepingComputer