News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 0 so far | 0 |
Developing
Thu 11 Jul 202461 articles
- Akira Ransomware: Lightning-Fast Data Exfiltration in 2-Ish Hours
The gang's time from initial access to draining data out of a Veeam server is shockingly fast; after which the attackers went on to deploy actual ransomware in less than a day.
Dark Reading - ARRL finally confirms ransomware gang stole data in cyberattack
The American Radio Relay League (ARRL) finally confirmed that some of its employees' data was stolen in a May ransomware attack initially described as a "serious incident." [...]
BleepingComputer - CDK breach compromises customer data from 15,000 car dealers
In late June, more than 15,000 car dealerships across North America were affected by a cyberattack on CDK Global, which provides software to car dealers. After two cyberattacks over two days, CDK shut down all systems, which caused delays for car buyers and…
securityintelligence.com - Signal downplays encryption key flaw, fixes it after X drama
Signal is finally tightening its desktop client's security by changing how it stores plain text encryption keys for the data store after downplaying the issue since 2018. [...]
BleepingComputer - CrystalRay operations have scaled 10x to over 1,500 victims
A threat actor known as CrystalRay targeted 1,500 victims since February using tools like SSH-Snake and various open-source utilities. The Sysdig Threat Research Team (TRT) first spotted the threat actor CrystalRay on February 2024 and observed it using…
Security Affairs - Apple Warns iPhone Users in 98 Countries of More Spyware Attacks
Users receiving the warnings are likely being targeted based on who they are or what they do, according to the vendor.
Dark Reading - Trade the Comfort of Security Theater for True Security
It's time to wipe off the flattering grease paint and instead make executives see the real face of cybersecurity that works.
Dark Reading - Advance Auto Parts Data Breach Affects 2.3M Customers
Threat actors had access to the automotive provider's networks for more than a month before they were discovered.
Dark Reading - Introducing A New Vulnerability Class: False File Immutability
No content available.
packetstormsecurity.com - Google increases bug bounty rewards five times, up to $151K
Google has announced a fivefold increase in payouts for bugs found in its systems and applications reported through its Vulnerability Reward Program, with a new maximum bounty of $151,515 for a single security flaw. [...]
BleepingComputer - Notorious Hacker Kingpin ‘Tank’ Is Finally Going to Prison
Matt Burgess reports: For more than a decade, Vyacheslav Igorevich Penchukov—a Ukrainian who used the online hacker name “Tank”—managed to evade cops. When FBI and Ukrainian officials raided his Donetsk apartment in 2010, the place was deserted and Penchukov…
DataBreaches - Dallas County: Data of 200,000 exposed in 2023 ransomware attack
Dallas County is notifying over 200,000 people that the Play ransomware attack, which occurred in October 2023, exposed their personal data to cybercriminals. [...]
BleepingComputer - FishXProxy Phishing Kit Outfits Cybercriminals for Success
A new end-to-end toolkit circulating on the Dark Web significantly lowers the barrier to entry for creating sophisticated campaigns that can avoid most traditional security detection and protection systems.
Dark Reading - Palo Alto Networks Patches Critical Flaw in Expedition Migration Tool
Palo Alto Networks has released security updates to address five security flaws impacting its products, including a critical bug that could lead to an authentication bypass. Cataloged as CVE-2024-5910 (CVSS score: 9.3), the vulnerability has been described…
The Hacker News - Microsoft Melds Identity & SSE With Entra Suite
The integration of Entra Identity offerings with new security service edge (SSE) services to provide unified conditional access is seeking enterprise approval.
Dark Reading - Microsoft Fixes CVE-2024-38112 After Over a Year of Exploitation; Zero-Click Threat of CVE-2024-38021
Microsoft Fixes CVE-2024-38112 After Over a Year of Exploitation; Zero-Click Threat of CVE-2024-38021 Microsoft’s most recent Patch Tuesday updates addressed a high-severity zero-day vulnerability that was known to be actively exploited. Alarmingly, threat…
SOCRadar - CRYSTALRAY hacker expands to 1,500 breached systems using SSH-Snake tool
A new threat actor known as CRYSTALRAY has significantly broadened its targeting scope with new tactics and exploits, now counting over 1,500 victims whose credentials were stolen and cryptominers deployed. [...]
BleepingComputer - Tracebit Raises $5 Million for Threat Deception Solution
London startup Tracebit has raised $5 million in seed funding for its cloud-native threat detection and deception solution.
SecurityWeek - 60 New Malicious Packages Uncovered in NuGet Supply Chain Attack
Threat actors have been observed publishing a new wave of malicious packages to the NuGet package manager as part of an ongoing campaign that began in August 2023, while also adding a new layer of stealth to evade detection. The fresh packages, about 60 in…
The Hacker News - Multiple threat actors exploit PHP flaw CVE-2024-4577 to deliver malware
Multiple threat actors exploit a recently disclosed security PHP flaw CVE-2024-4577 to deliver multiple malware families. The Akamai Security Intelligence Response Team (SIRT) warns that multiple threat actors are exploiting the PHP vulnerability…
Security Affairs - ‘CrystalRay’ Expands Arsenal, Hits 1,500 Targets with SSH-Snake and Open Source Tools
A threat actor tracked as CrystalRay has hit 1,500 victims since February, stealing credentials and deploying backdoors.
SecurityWeek - Advance Auto Parts data breach impacts 2.3 million people
Advance Auto Parts is sending data breach notifications to over 2.3 million people whose personal data was stolen in recent Snowflake data theft attacks. [...]
BleepingComputer - GitLab Ships Update for Critical Pipeline Execution Vulnerability
GitLab issues an advisory for a critical-severity vulnerability that allows an attacker to trigger a pipeline as another user.
SecurityWeek - 'Crystalray' Attacks Jump 10X, Using Only OSS to Steal Credentials
Remember when hackers used to write their own malware? Kids these days don't want to work, they just want freely available tools to do it for them.
Dark Reading - Centralized Cyber-Incident Reporting Can Improve Effectiveness
Companies need robust cyber-response plans and a straightforward path to transparency.
Dark Reading - State, Local Governments Facing Deluge Of Phishing Attacks
No content available.
packetstormsecurity.com - Threat Actors Exploited Windows 0-Day For More Than A Year Before Microsoft Fixed It
No content available.
packetstormsecurity.com - Japanese Space Agency Spotted Zero-Day Attacks While Cleaning Up Attack On M365
No content available.
packetstormsecurity.com - VMware Patches Critical SQL Injection Flaw In Aria Automation
No content available.
packetstormsecurity.com - You Had A Year To Patch This Veeam Flaw And Now It's Going To Hurt
No content available.
packetstormsecurity.com - 39% of MSPs report major setbacks when adapting to advanced security technologies
SOPHOS, a leading global provider of managed security solutions, has recently released its annual MSP Perspectives report for 2024. This most recent report provides insights from 350 different managed service providers (MSPs) across the United States, United…
securityintelligence.com - Chinese APT41 Upgrades Malware Arsenal with DodgeBox and MoonWalk
The China-linked advanced persistent threat (APT) group codenamed APT41 is suspected to be using an "advanced and upgraded version" of a known malware called StealthVector to deliver a previously undocumented backdoor dubbed MoonWalk. The new variant of…
The Hacker News - Hackers Created 700+ Fake Domains to Sell Olympic Games Tickets
As the world eagerly anticipates the Olympic Games Paris 2024, a cybersecurity threat has emerged, targeting fans and attendees. Cybersecurity firm QuoIntelligence has uncovered a sophisticated fraudulent campaign involving over 700 fake domains designed to…
gbhackers.com - CISA, FBI Urge Immediate Action on OS Command Injection Vulnerabilities in Network Devices
In response to recent intrusions, CISA and the FBI are urging businesses and device manufacturers to eliminate OS command injection vulnerabilities at the source.
SecurityWeek - Streamlined Security Solutions: PAM for Small to Medium-sized Businesses
Today, all organizations are exposed to the threat of cyber breaches, irrespective of their scale. Historically, larger companies were frequent targets due to their substantial resources, sensitive data, and regulatory responsibilities, whereas smaller…
The Hacker News - State attorneys general send warnings of Change Healthcare breach, urge residents to respond
Read Change Healthcare’s Substitute Notice. Individual notices will go out at the end of July, but they may not have your address to notify you individually. Chad Van Alstin writes: Multiple state attorney generals have sent notices, informing residents…
DataBreaches - Meow Leaks: The Interview
Over on SuspectFile, Marco A. De Felice writes: We are exclusively publishing the interview that we conducted with the Meow Leaks group and which they gave us in these last hours. We had known the Meow Leaks group as a group attributable, at least for the…
DataBreaches - Insider Threat Research by Binghamton University: Are mass layoffs and data breaches connected?
Binghamton University press release by Anthony Borrelli: The WARN notice gets filed, and among the hundreds of workers who will get the proverbial pink slip, one spiteful ex-employee performs a hack that triggers a massive leak of confidential data ranging…
DataBreaches - Za: South African mining giant hacked
Myles Illidge reports: Local mining giant Sibanye-Stillwater, one of the world’s biggest producers of platinum and gold, has revealed that its global IT systems have suffered a cyberattack. In a notice informing stakeholders, the company said it has…
DataBreaches