News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Today, Sat 31 Oct | 14 so far | 3 |
Developing
Wed 10 Jul 202468 articles
- Microsoft 365, Office users hit by wave of ‘30088-27’ update errors
Over the last month, Microsoft 365 and Microsoft Office users have been experiencing "30088-27" errors when attempting to update the application. [...]
BleepingComputer - Gen Launches Scam Artists to Highlight Emotional Toll of Cybercrime Through Creative Artwork
No content available.
Dark Reading - Saviynt Expands Capabilities With EY Alliance, Elevating Approach to External User Management With its Identity Cloud
No content available.
Dark Reading - Peloton Takes a Spin Through Court, Thanks to AI Privacy Lawsuit
The case alleges a third-party marketer for the exercise giant improperly used customer chat data to train its AI models.
Dark Reading - Huione Guarantee exposed as a $11 billion marketplace for cybercrime
The seemingly legitimate online marketplace Huione Guarantee is being used as a platform for laundering money from online scams, especially "pig butchering" investment fraud, researchers say. [...]
BleepingComputer - GitLab: Critical bug lets attackers run pipelines as other users
GitLab warned today that a critical vulnerability in its product's GitLab Community and Enterprise editions allows attackers to run pipeline jobs as any other user. [...]
BleepingComputer - Attackers Have Been Leveraging Microsoft Zero-Day for 18 Months
Likely two separate threat actors are using the just-patched CVE-2024-38112 in targeted, concurrent infostealer campaigns.
Dark Reading - ViperSoftX malware covertly runs PowerShell using AutoIT scripting
The latest variants of the ViperSoftX info-stealing malware use the common language runtime (CLR) to load and execute PowerShell commands within AutoIt scripts to evade detection. [...]
BleepingComputer - CISA urges devs to weed out OS command injection vulnerabilities
CISA and the FBI urged software companies on Wednesday to review their products and eliminate path OS command injection vulnerabilities before shipping. [...]
BleepingComputer - Feds Uncover Sprawling, GenAI-Enabled Russian Troll Farm
The bot farm was created using AI-enhanced software that was able to create a host of different false personas to spread disinformation in convincing and unsettling ways.
Dark Reading - Japan warns of attacks linked to North Korean Kimsuky hackers
Japan's Computer Emergency Response Team Coordination Center (JPCERT/CC) is warning that Japanese organizations are being targeted in attacks by the North Korean 'Kimsuky' threat actors. [...]
BleepingComputer - VMware Patches Critical SQL-Injection Flaw in Aria Automation
VMware warns that authenticated malicious users could enter specially crafted SQL queries and perform unauthorized read/write operations in the database.
SecurityWeek - The Stark Truth Behind the Resurgence of Russia’s Fin7
The Russia-based cybercrime group dubbed “Fin7,” known for phishing and malware attacks that have cost victim organizations an estimated $3 billion in losses since 2013, was declared dead last year by U.S. authorities. But experts say Fin7 has roared back to…
Krebs on Security - Windows MSHTML zero-day used in malware attacks for over a year
Microsoft fixed a Windows zero-day vulnerability that has been actively exploited in attacks for eighteen months to launch malicious scripts while bypassing built-in security features. [...]
BleepingComputer - Cytactic Snags $16M Seed Funding for Cyber Crisis Management Technology
Israeli startup raises $16 million in seed funding to build what is being described as a “cyber crisis readiness and management” platform.
SecurityWeek - Microsoft fixes Windows 11 bug causing reboot loops, taskbar freezes
Microsoft has fixed a known issue causing restart loops and taskbar problems on Windows 11 systems after installing the June KB5039302 preview update. [...]
BleepingComputer - Poco RAT Burrows Deep Into Mining Sector
The novel malware targets Spanish-speaking users via malicious Google Drive links, and taps a popular C++ library to evade detection.
Dark Reading - Citrix fixed critical and high-severity bugs in NetScaler product
IT giant Citrix addressed multiple vulnerabilities, including critical and high-severity issues in its NetScaler product. Citrix released security updates to address critical and high-severity issues in its NetScaler product. The most severe issue is an…
Security Affairs - Privacy & Security Concerns With AI Meeting Tools
Businesses need to find a balance between harnessing the benefits of AI assistants and safeguarding sensitive information — maintaining trust with employees and clients.
Dark Reading - Peloton accused of providing customer chat data to train AI
It seems that Peloton may have been providing more training than just for its customers, as it’s set to face court in California accused of using user chat data to train AI. Peloton Interactive, Inc. is a US-based exercise equipment and media company, known…
Malwarebytes - Citrix Patches Critical NetScaler Console Vulnerability
Citrix rolls out patches for multiple security vulnerabilities, including critical and high-severity issues in the NetScaler product line.
SecurityWeek - Update: Bulgarian accused of being “Emil Kyulev” and “Magadans” released on recognizance
As previously reported on DataBreaches.net, a 21-year-old Bulgarian named Teodor Iliev was arrested on June 29 and charged with allegedly committing crimes under the monikers of “Emil Külev” (“Emil Kyulev”) and “Magadans.” [Related: “Sadly for the feds I…
DataBreaches - July 2024 Patch Tuesday Fixes 139 CVEs, Actively Exploited Zero-Days; CISA Highlights Citrix Updates
July 2024 Patch Tuesday Fixes 139 CVEs, Actively Exploited Zero-Days; CISA Highlights Citrix Updates Microsoft has issued the July 2024 Patch Tuesday updates, working to strengthen its products against numerous security threats through fixes and…
SOCRadar - Multiple cybersecurity agencies warn of China-linked APT40 ‘s capabilities
Multiple cybersecurity agencies released a joint advisory warning about a China-linked group APT40 ‘s capability to rapidly exploit disclosed security flaws. Cybersecurity agencies from Australia, Canada, Germany, Japan, New Zealand, South Korea, the U.K.,…
Security Affairs - New Eldorado Ransomware Attacking Windows And Linux Systems
Ransomware-as-a-service (RaaS) has evolved into sophisticated enterprise-like model. From 2022 to 2023, ransomware programs advertised on the dark web increased by half, with 27 ads identified. The RAMP forum was made the main hub of hiring for ransomware.…
gbhackers.com - New Ransomware Group Exploiting Veeam Backup Software Vulnerability
A now-patched security flaw in Veeam Backup & Replication software is being exploited by a nascent ransomware operation known as EstateRansomware. Singapore-headquartered Group-IB, which discovered the threat actor in early April 2024, said the modus…
The Hacker News - What's Bugging the NSA? A Vuln in Its 'SkillTree' Training Platform
Even the NSA leaves bugs in its software. In this case, it's the kind of cross-site issue that regularly slips past developers.
Dark Reading - Deep Dive on Supplement Scams: How AI Drives ‘Miracle Cures’ and Sponsored Health-Related Scams on Social Media
Sponsored social media content has become increasingly present on feeds. Sponsored ads can often be beneficial as they are customized to suit online personas, offering relevant content tailored specifically for you. While personalized ads can help enhance…
bitdefender.com - Digital solidarity vs. digital sovereignty: Which side are you on?
The landscape of international cyber policy continues to evolve rapidly, reflecting the dynamic nature of technology and global geopolitics. Central to this evolution are two competing concepts: digital solidarity and digital sovereignty. The U.S. Department…
securityintelligence.com - Scammers hack animal rescue sites to get your personal information and money — beware!
Bosque Animal Rescue Kennels (BARK) is trying to alert people after their website was hacked and scammers started posting pictures of purebred puppies available for adoption. If people were interested, they would fill out an adoption application with their…
DataBreaches - Passkeys Available for Passkeys high-risk Users in the Advanced Protection Program
Google has announced the integration of passkeys into its Advanced Protection Program (APP). This development aims to provide an easier and more secure alternative to traditional passwords, enhancing protection against common cyber threats such as phishing,…
gbhackers.com - Chinese APT40 Is Ready To Exploit New Vulnerabilities Within Hours Of Release
Multiple international cybersecurity agencies jointly warn of a PRC state-sponsored cyber group, linked to the Ministry of State Security and known by various names like APT40, Leviathan. The group, based in Hainan Province, has targeted organizations…
gbhackers.com - Can AI be Meaningfully Regulated, or is Regulation a Deceitful Fudge?
Few people understand AI, nor how to use nor control it, nor where it is going. Yet politicians wish to regulate it.
SecurityWeek - US Disrupts AI-Powered Russian Bot Farm on X
The US and allies blame Russian state-sponsored threat actors for using Meliorator AI software to create a social media bot farm.
SecurityWeek - Smash-and-Grab Extortion
The Problem The “2024 Attack Intelligence Report” from the staff at Rapid7 [1] is a well-researched, well-written report that is worthy of careful study. Some key takeaways are: 53% of the over 30 new vulnerabilities that were widely exploited in 2023 and at…
The Hacker News