News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 0 so far | 0 |
Developing
Mon 15 Jul 202461 articles
- Ransomware groups target Veeam Backup & Replication bug
Multiple ransomware groups were spotted exploiting a vulnerability, tracked as CVE-2023-27532, in Veeam Backup & Replication. The vulnerability CVE-2023-275327 (CVSS score of 7.5) impacts the Veeam Backup & Replication component. An attacker can exploit the…
Security Affairs - 'Trial' DDoS Attacks on French Sites Portend Greater Olympics Threats
Russian hacktivists claim DDoS attacks against basic tourist websites. Is it real, or just smoke and mirrors?
Dark Reading - SEXi Ransomware Rebrands as 'APT Inc.,' Keeps Old Methods
The cybercrime group demands ransoms of varying degrees, from thousands to even millions of dollars — in some cases, 2 bitcoin per encrypted customer.
Dark Reading - Infoseccers Claim Squarespace Migration Linked To DNS Hijackings At Web3 Firms
No content available.
packetstormsecurity.com - Google Reportedly In Talked To Buy Infosec Outfit Wiz For $23 Billion
No content available.
packetstormsecurity.com - 5 Questions To Ask About The Latest News Surrounding The AT&T Breach
No content available.
packetstormsecurity.com - ZDI Shames MS For Yet Another Coordinated Vuln Disclosure Snafu
No content available.
packetstormsecurity.com - Kaspersky is shutting down its business in the United States
Russian cybersecurity company and antivirus software provider Kaspersky Lab will start shutting down operations in the United States on July 20. [...]
BleepingComputer - AT&T paid a $370,000 ransom to prevent stolen data from being leaked
Wired attributes the recently disclosed AT&T data breach to a hacker living in Turkey and reported the company paid a $370,000 ransom. An American hacker who lives in Turkey claimed responsibility for the recently disclosed AT&T data breach. The man also…
Security Affairs - New BugSleep malware implant deployed in MuddyWater attacks
The Iranian-backed MuddyWatter hacking group has partially switched to using a new custom-tailored malware implant to steal files and run commands on compromised systems. [...]
BleepingComputer - Well-Established Cybercriminal Ecosystem Blooming in Iraq
A malicious Telegram bot is the key to a veritable flourishing garden of nefarious cybercriminal activity, which was discovered via a series of Python packages.
Dark Reading - Students’ Personal Data Mismanaged; Data Sent to Foreign Businesses, Used to Update Apps
The Yomiuri Shimbun reports: Local governments have authorized Recruit Co. — a provider of educational apps — to directly obtain public school students’ personal data and manage it, The Yomiuri Shimbun has learned. The problem is connected to devices, such…
DataBreaches - Rite Aid Becomes RansomHub's Latest Victim After Data Breach
The breach affects older customer information involved in purchases made from June 6, 2017, up until July 30, 2018.
Dark Reading - GitHub Token Leak Exposes Python's Core Repositories to Potential Attacks
Cybersecurity researchers said they discovered an accidentally leaked GitHub token that could have granted elevated access to the GitHub repositories of the Python language, Python Package Index (PyPI), and the Python Software Foundation (PSF) repositories.…
The Hacker News - Microsoft shares temp fix for Windows 11 Photos not launching
Microsoft has provided a temporary workaround for a known issue preventing the Microsoft Photos app from launching on some Windows 11 systems. [...]
BleepingComputer - CVE-2024-36401 (CVSS 9.8): Critical GeoServer Flaw Under Active Attack, PoC Available
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding a critical vulnerability in OSGeo GeoServer GeoTools, a widely-used open-source software server for geospatial data. This flaw, identified as…
SecurityOnline - How an AI “artist” stole a woman’s face, with Ali Diamond (Lock and Code S05E15)
This week on the Lock and Code podcast… Full-time software engineer and part-time Twitch streamer Ali Diamond is used to seeing herself on screen, probably because she’s the one who turns the camera on. But when Diamond received a Direct Message (DM) on…
Malwarebytes - Researchers: Weak Security Defaults Enabled Squarespace Domains Hijacks
At least a dozen organizations with domain names at domain registrar Squarespace saw their websites hijacked last week. Squarespace bought all assets of Google Domains a year ago, but many customers still haven’t set up their new accounts. Experts say…
Krebs on Security - Disney “breached”, data dumped online
A group of cybercriminals going by the handle NullBulge claims to have downloaded the Slack channels used by Disney’s developers. “#DisneySlackLeak #Disney has had their entire dev slack dumped. 1.1TiB of files and chat messages. Anything we could get our...
Malwarebytes - SEXi ransomware rebrands to APT INC, continues VMware ESXi attacks
The SEXi ransomware operation, known for targeting VMware ESXi servers, has rebranded under the name APT INC and has targeted numerous organizations in recent attacks. [...]
BleepingComputer - June Windows Server updates break Microsoft 365 Defender features
Microsoft has confirmed that Windows Server updates from last month's Patch Tuesday break some Microsoft 365 Defender features that use the network data reporting service. [...]
BleepingComputer - How Manufacturers Can Secure Themselves Against Cyber Threats
Good risk management is necessary to protect customers, ensure operational continuity, safeguard intellectual property, and maintain fiscal responsibility.
Dark Reading - It’s the biggest breach reported so far to Massachusetts in 2024 but you probably didn’t hear about it.
Do you know the single biggest breach report filed with Massachusetts so far this year? It would be understandable if you guessed Change Healthcare, but there is no publicly listed report from them yet to Massachusetts, so it’s not them. And it’s not the…
DataBreaches - Data of Millions of mSpy Customers Leaked Online
Over 310 GB of data from mSpy, including 2.4 million email addresses and other user data, was leaked online.
SecurityWeek - 7 Tips for Navigating Cybersecurity Risks in M&As
Careful planning and proactive measures can ensure smooth and secure transitions, paving the way for a successful merger or acquisition.
Dark Reading - 7 Tips for Navigating Cybersecurity Risks in M&As
Careful planning and proactive measures can ensure smooth and secure transitions, paving the way for a successful merger or acquisition.
Dark Reading - IoT Security Firm Exein Raises $16.3 Million
IoT cybersecurity company Exein has raised €15 million (~$16.3 million) in a Series B funding round led by 33N.
SecurityWeek - Cybersecurity crisis communication: What to do
Cybersecurity experts tell organizations that the question is not if they will become the target of a cyberattack but when. Often, the focus of response preparedness is on the technical aspects — how to stop the breach from continuing, recovering data and…
securityintelligence.com - Facebook ads for Windows desktop themes push info-stealing malware
Cybercriminals use Facebook business pages and advertisements to promote fake Windows themes that infect unsuspecting users with the SYS01 password-stealing malware. [...]
BleepingComputer - AT&T Breach Linked to American Hacker, Telecom Giant Paid $370k Ransom: Reports
The massive AT&T breach has been linked to an American hacker living in Turkey and reports say the telecom giant paid a $370,000 ransom.
SecurityWeek - Critical Cellopoint Secure Email Gateway Flaw Let Attackers Execute Arbitrary Code
A critical vulnerability has been discovered in the Cellopoint Secure Email Gateway, identified as CVE-2024-6744. This flaw assigned a CVSS score of 9.8, poses a severe risk to organizations using this email security solution. CVE-2024-6744: A Critical…
gbhackers.com - Urgent Zero-Day Vulnerability Discovered in Alibaba’s Nacos Platform, PoC Published
A critical zero-day vulnerability has been identified in Alibaba’s Nacos platform, a widely used open-source tool for dynamic service discovery and configuration management. This discovery, disclosed by an independent security researcher, has raised serious...
SecurityOnline - HardBit ransomware version 4.0 supports new obfuscation techniques
Cybersecurity researchers detailed a new version of the HardBit ransomware that supports new obfuscation techniques to avoid detection. The new version (version 4.0) of the HardBit ransomware comes with the Binary Obfuscation Enhancement with passphrase…
Security Affairs - 10,000 Victims a Day: Infostealer Garden of Low-Hanging Fruit
Imagine you could gain access to any Fortune 100 company for $10 or less, or even for free. Terrifying thought, isn’t it? Or exciting, depending on which side of the cybersecurity barricade you are on. Well, that’s basically the state of things today.…
The Hacker News - Microsoft Says Windows Not Impacted by regreSSHion as Second OpenSSH Bug Is Found
A second remote code execution vulnerability, tracked as CVE-2024-6409, was found in OpenSSH during an analysis of the regreSSHion flaw.
SecurityWeek - CRYSTALRAY Hackers Infect Over 1,500 Victims Using Network Mapping Tool
A threat actor that was previously observed using an open-source network mapping tool has greatly expanded their operations to infect over 1,500 victims. Sysdig, which is tracking the cluster under the name CRYSTALRAY, said the activities have witnessed a…
The Hacker News - Ukrainian Sentenced to Prison in US for Role in Zeus, IcedID Malware Operations
Vyacheslav Igorevich Penchukov was sentenced to nine years in prison for his role in the Zeus and IcedID malware operations.
SecurityWeek - Singapore Banks to Phase out OTPs for Bank Account Logins Within 3 Months
The Monetary Authority of Singapore (MAS) and The Association of Banks in Singapore (ABS) announced today that major retail banks will phase out the use of One-Time Passwords (OTPs) for bank account logins within the next three months. This change will apply…
gbhackers.com