News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 0 so far | 0 |
Developing
Thu 11 Jul 202461 articles
- Ph: NBI nabs 5 alleged members of hacking syndicate
GMA News Online reports: Five suspected members of a hacking syndicate victimizing government websites and companies were arrested by the National Bureau of Investigation In a statement on Thursday, the NBI said their surveillance operation showed that…
DataBreaches - New Poco RAT Targets Spanish-Speaking Victims in Phishing Campaign
Spanish language victims are the target of an email phishing campaign that delivers a new remote access trojan (RAT) called Poco RAT since at least February 2024. The attacks primarily single out mining, manufacturing, hospitality, and utilities sectors,…
The Hacker News - Palo Alto Networks Addresses BlastRADIUS Vulnerability, Fixes Critical Bug in Expedition Tool
Palo Alto Networks patched a critical vulnerability in its Expedition tool and addressed the impact of the recently disclosed BlastRADIUS vulnerability.
SecurityWeek - When spear phishing met mass phishing
Introduction Bulk phishing email campaigns tend to target large audiences. They use catch-all wordings and simplistic formatting, and typos are not uncommon. Targeted attacks take greater effort, with attackers sending personalized messages that include…
securelist.com - Major Cyber Attacks in Review: June 2024
Major Cyber Attacks in Review: June 2024 June 2024 has been a whirlwind of significant cyber attacks targeting high-profile organizations worldwide. Following the ongoing Snowflake-related issues, the past month has seen cases such as a TeamViewer data…
SOCRadar - Japanese Space Agency Spotted zero-day via Microsoft 365 Services
The Japan Aerospace Exploration Agency (JAXA) has revealed details of a cybersecurity incident that occurred last year, involving unauthorized access to its internal servers. The breach, detected in October 2023, has prompted JAXA to implement robust…
gbhackers.com - AI-Powered Russia’s bot farm operates on X, US and its allies warn
The US and its allies disrupted an AI-powered Russia-linked bot farm on the social media platform X relying on the Meliorator AI software. The U.S. FBI and Cyber National Mission Force, along with Dutch and Canadian intelligence and security agencies, warned…
Security Affairs - Top 10 Active Directory Management Tools – 2024
Active Directory Management Tools are essential for IT administrators to manage and secure Active Directory (AD) environments efficiently. These tools streamline tasks such as user and group management, permissions assignment, and policy enforcement,…
gbhackers.com - Microsoft's Partnership With Middle East AI Firm Under Scrutiny
The US government worries that Group 42 Holdings, an AI firm based in the United Arab Emirates, could become a backdoor for technology leaks to China.
Dark Reading - PHP Vulnerability Exploited to Spread Malware and Launch DDoS Attacks
Multiple threat actors have been observed exploiting a recently disclosed security flaw in PHP to deliver remote access trojans, cryptocurrency miners, and distributed denial-of-service (DDoS) botnets. The vulnerability in question is CVE-2024-4577 (CVSS…
The Hacker News - GitLab Patches Critical Flaw Allowing Unauthorized Pipeline Jobs
GitLab has shipped another round of updates to close out security flaws in its software development platform, including a critical bug that allows an attacker to run pipeline jobs as an arbitrary user. Tracked as CVE-2024-6385, the vulnerability carries a…
The Hacker News - CVE-2024-36451 (CVSS 8.8): Webmin Vulnerability Allows Session Hijacking
Webmin and Usermin, popular web-based system administration tools used by millions worldwide, have been found to contain multiple security vulnerabilities, according to Japan’s CERT. These vulnerabilities could potentially allow attackers to execute…
SecurityOnline - CVE-2024-5910: Critical Vulnerability Threatens Palo Alto Networks’ Expedition
Palo Alto Networks, a leading cybersecurity firm, has released a critical security advisory detailing multiple vulnerabilities across its product lines, including PAN-OS, Cortex XDR, and Expedition. These flaws range in severity and impact, but...
SecurityOnline - New Mirai Botnet Variants with AI-Powered Attacks Observed
A new report from Imperva Threat Research reveals a concerning resurgence of the Mirai botnet, a notorious malware known for its history of large-scale distributed denial-of-service (DDoS) attacks. The research indicates that Mirai has...
SecurityOnline - Vulnerability in lighttpd Web Server Exposes Sensitive Data: Urgent Patch Required
The Carnegie Mellon CERT Coordination Center (CERT/CC) has issued a critical vulnerability note regarding a use-after-free vulnerability in lighttpd versions 1.4.50 and earlier. This vulnerability allows remote, unauthenticated attackers to exploit crafted…
SecurityOnline - EstateRansomware Exploits Veeam Vulnerability (CVE-2023-27532) in Sophisticated Attack
A recently disclosed vulnerability in Veeam Backup & Replication software has culminated in a significant ransomware incident. Yeo Zi Wei, a Junior Incident Response and Digital Forensics Analyst at Group-IB, provides a detailed examination...
SecurityOnline - GitLab Patches Critical Security Vulnerability (CVE-2024-6385), Urges Immediate Upgrade
In a security advisory released today, GitLab, the popular web-based DevOps platform, disclosed several critical vulnerabilities affecting various versions of their Community Edition (CE) and Enterprise Edition (EE) products. The most severe of these,...
SecurityOnline - Critical Vulnerabilities Expose ifm Smart PLCs to Remote Attacks
Germany’s CERT@VDE has issued a warning about a series of critical security flaws impacting ifm Smart PLC controllers running firmware versions up to 4.3.17. These vulnerabilities, assigned CVEs 2024-28747 through 2024-28751, could allow attackers...
SecurityOnline - From Meetings to Malware: Vortax’s Elaborate Crypto-Stealing Scheme Uncovered
Recorded Future’s Insikt Group has exposed “Vortax,” a seemingly legitimate virtual meeting software, as a sophisticated front for a massive malware operation targeting cryptocurrency users. This elaborate scheme, primarily disseminated through social media…
SecurityOnline - VMware fixed critical SQL-Injection in Aria Automation product
VMware addressed a critical SQL-Injection vulnerability, tracked as CVE-2024-22280, impacting Aria Automation. Virtualization giant VMware addressed a high-severity SQL-injection vulnerability, tracked as CVE-2024-22280 (CVSSv3 base score of 8.5), in its…
Security Affairs - Fujitsu Suffers Worm-Like Attack From Something That Wasn't Ransomware
The CE giant released its investigative findings regarding a March cyberattack that resulted in data exfiltration affecting its Japanese operations.
Dark Reading