News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 0 so far | 0 |
Developing
Fri 12 Jul 202456 articles
- New AT&T data breach exposed call logs of almost all customers
AT&T disclosed a new data breach that exposed phone call and text message records for approximately 110 million people. AT&T suffered a massive data breach, attackers stole the call logs for approximately 110 million customers, which are almost all of the…
Security Affairs - Healthcare Industry Urged to Adopt Exponential IT for Improved Patient Outcomes and Efficiency
No content available.
Dark Reading - Critical Exim bug bypasses security filters on 1.5 million mail servers
Censys warns that over 1.5 million Exim mail transfer agent (MTA) instances are unpatched against a critical vulnerability that lets threat actors bypass security filters. [...]
BleepingComputer - GitLab Sends Users Scrambling Again With New CI/CD Pipeline Takeover Vuln
The bug (CVE-2024-6385) is similar — but not identical — to a critical flaw GitLab patched just two weeks ago.
Dark Reading - AT&T Breach May Also Impact Millions of Boost, Cricket, H2O Customers
In the scrum, countless call and text records leaked, other cell companies caught strays, the DoJ became involved, and someone has already been arrested.
Dark Reading - Critical flaw in Exim MTA could allow to deliver malware to users’ inboxes
A critical vulnerability in Exim mail server allows attackers to deliver malicious executable attachments to mailboxes. Attackers can exploit a critical security flaw, tracked as CVE-2024-39929 (CVSS score of 9.1), in the Exim mail transfer agent to deliver…
Security Affairs - Rite Aid confirms data breach after June ransomware attack
Pharmacy giant Rite Aid confirmed a data breach after suffering a cyberattack in June, which was claimed by the RansomHub ransomware operation. [...]
BleepingComputer - DNS hijacks target crypto platforms registered with Squarespace
A wave of coordinated DNS hijacking attacks targets decentralized finance (DeFi) cryptocurrency domains using the Squarespace registrar, redirecting visitors to phishing sites hosting wallet drainers. [...]
BleepingComputer - Australian Spycatchers Snatch Pair of Married Russian Operatives
Both are accused of espionage and face a maximum penalty of 15 years imprisonment each for their crimes.
Dark Reading - Unprecedented: Cloud Giants, Feds Team on Unified Security Intelligence
The Cloud Safe Task Force aims to unite the US government and cloud service providers, like Amazon, Google, IBM, Microsoft, and Oracle, to provide a "National Cyber Feed": a continuous threat-monitoring tool for federal agencies.
Dark Reading - Hackers Steal Phone, SMS Records for Nearly All AT&T Customers
AT&T Corp. disclosed today that a new data breach has exposed phone call and text message records for roughly 110 million people — nearly all of its customers. AT&T said it delayed disclosing the incident in response to “national security and public safety…
Krebs on Security - Fake Microsoft Teams for Mac delivers Atomic Stealer
Competition between stealers for macOS is heating up, with a new malvertising campaign luring Mac users via a fraudulent advert for Microsoft Teams. This attacks comes on the heels of Poseidon (OSX.RodStealer), another threat using a similar code base and…
Malwarebytes - Netgear warns users to patch auth bypass, XSS router flaws
Netgear warned customers to update their devices to the latest available firmware, which patches stored cross-site scripting (XSS) and authentication bypass vulnerabilities in several WiFi 6 router models. [...]
BleepingComputer - Dangerous monitoring tool mSpy suffers data breach, exposes customer details
In a new episode of Spy vs Spy, the mobile monitoring app mSpy has suffered a data breach that exposed information about millions of its customers. As Malwarebytes Labs has reported before, the types of companies that make mobile applications that enable…
Malwarebytes - In Other News: Apple’s Spyware Warning, CDK Global Ransom Payment, Sibanye Cyberattack
Noteworthy stories that might have slipped under the radar: Microsoft details Rockwell HMI vulnerabilities, smart grills hacked, Predator spyware activity drops.
SecurityWeek - Critical Exim Flaw Allows Attackers to Deliver Malicious Executables to Mailboxes
Successful exploitation could allow attackers to deliver executable attachments to inboxes.
SecurityWeek - DarkGate Malware Exploits Samba File Shares in Short-Lived Campaign
Cybersecurity researchers have shed light on a short-lived DarkGate malware campaign that leveraged Samba file shares to initiate the infections. Palo Alto Networks Unit 42 said the activity spanned the months of March and April 2024, with the infection…
The Hacker News - CISA, FBI Warn of OS Command-Injection Vulnerabilities
Agencies say flaws are preventable and can be addressed with secure-by-design principles.
Dark Reading - Computer Company Breaks Quantum Supremacy Record Set By Google
No content available.
packetstormsecurity.com - China's APT41 Crew Adds A Stealthy Malware Loader And Fresh Backdoor To Its Toolbox
No content available.
packetstormsecurity.com - GitLab Patches Second Critical Pipeline Vulnerability In Last Month
No content available.
packetstormsecurity.com - Nearly All AT&T Cell Customers’ Call And Text Records Exposed
No content available.
packetstormsecurity.com - Gay Furry Hackers Say They Have Disbanded After Raiding Project 2025's Heritage Foundation
No content available.
packetstormsecurity.com - Will Smaller Companies Buckle Under the SEC's New Requirements?
Even though the new incident reporting rules create pressure, they serve as a forcing function for building a strong security foundation.
Dark Reading - Millions Impacted by Breach at Advance Auto Parts Linked to Snowflake Incident
Advance Auto Parts says the personal information of 2.3 million was compromised after hackers accessed its Snowflake account.
SecurityWeek - Palo Alto Networks fixed a critical bug in the Expedition tool
Palo Alto Networks addressed five vulnerabilities impacting its products, including a critical authentication bypass issue. Palo Alto Networks released security updates to address five security flaws impacting its products, the most severe issue, tracked a...
Security Affairs - “Nearly all” AT&T customers had phone records stolen in new data breach disclosure
In a déjà-vu nightmare, US phone giant AT&T has notified customers that cybercriminals managed to download phone call and text message records of “nearly all of AT&T cellular customers from May 1, 2022 to October 31, 2022 as well as on January 2, 2023”. In a…
Malwarebytes - Massive AT&T data breach exposes call logs of 109 million customers
AT&T is warning of a massive data breach where threat actors stole the call logs for approximately 109 million customers, or nearly all of its mobile customers, from an online database on the company's Snowflake account. [...]
BleepingComputer - CISA Red Team Exercise Finds Critical Vulnerabilities in Federal Civilian Agency
CISA says a SILENTSHIELD red team assessment found gaping holes in the security posture of a federal civilian executive branch organization.
SecurityWeek - Brands are changing cybersecurity strategies due to AI threats
Over the past 18 months, AI has changed how we do many things in our work and professional lives — from helping us write emails to affecting how we approach cybersecurity. A recent Voice of SecOps 2024 study found that AI was a huge reason for many shifts in…
securityintelligence.com - AT&T Data Breach: ‘Nearly All’ Wireless Customers Exposed in Massive Hack
Data breach exposed records of call and text interactions for nearly all AT&T’s wireless customers and has been linked to the recent attacks targeting Snowflake customers.
SecurityWeek - Australian Defence Force Private and Husband Charged with Espionage for Russia
Two Russian-born Australian citizens have been arrested and charged in the country for spying on behalf of Russia as part of a "complex" law enforcement operation codenamed BURGAZADA. This includes a 40-year-old woman, an Australian Defence Force (ADF) Army…
The Hacker News - Year-Old Veeam Vulnerability Exploited in Fresh Ransomware Attacks
Akira and EstateRansomware cybercrime gangs have been exploiting a year-old Veeam Backup & Replication vulnerability in recent attacks.
SecurityWeek - mSpy Data Breach: Millions of Customers’ Data Exposed
mSpy, a widely used phone spyware application, has suffered a significant data breach, exposing the sensitive information of millions of its customers. The breach, which Brainstack, mSpy’s parent company, has not publicly acknowledged, has raised serious…
gbhackers.com - AT&T Says New Hack Includes Records of Customer Calls, Texts
Christopher Palmieri reports: AT&T Inc. suffered a massive hack of customer data — separate from one reported earlier this year — that included records of calls and texts for nearly all of its mobile-phone users for a six-month period in 2022, one of the…
DataBreaches - Data breach exposes millions of mSpy spyware customers
Zack Whittaker reports: A data breach at the phone surveillance operation mSpy has exposed millions of its customers who bought access to the phone spyware app over the past decade, as well as the Ukrainian company behind it. Unknown attackers stole millions…
DataBreaches