News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 0 so far | 0 |
Developing
Mon 15 Jul 202461 articles
- GuardZoo Android Malware Attacking military personnel via WhatsApp To Steal Sensitive Data
A Houthi-aligned group has been deploying Android surveillanceware called GuardZoo since October 2019 to target military personnel in the Middle East by leveraging social engineering tactics and using military-themed lures to trick victims into downloading…
gbhackers.com - A week in security (July 8 – July 14)
Last week on Malwarebytes Labs: “Nearly all” AT&T customers had phone records stolen in new data breach disclosure Fake Microsoft Teams for Mac delivers Atomic Stealer Dangerous monitoring tool mSpy suffers data breach, exposes customer details i...
Malwarebytes - ViperSoftX Weaponizing AutoIt & CLR For Stealthy PowerShell Execution
ViperSoftX is an advanced malware that has become more complicated since its recognition in 2020, to the extent that eBooks are used on Torrent sites to spread across systems. Unlike other kinds of malware developers who mainly focus on developing new code…
gbhackers.com - Malicious NuGet Campaign Tricking Developers To Inject Malicious Code
Hackers often target NuGet as it’s a popular package manager for .NET, which developers widely use to share and consume reusable code. Threat actors can distribute malicious code to many projects by compromising the NuGet packages. In August 2023,…
gbhackers.com - CVE-2024-6744: Cellopoint Secure Email Gateway Flaw Exposes Organizations to Critical Risk
In a recent advisory issued by the Taiwan Computer Emergency Response Team/Coordination Center (TWCERT/CC), a severe security flaw has been identified in the Cellopoint Secure Email Gateway (SEG), a renowned solution for pre-delivery email...
SecurityOnline - Singapore Banks to Phase Out OTPs for Online Logins Within 3 Months
Retail banking institutions in Singapore have three months to phase out the use of one-time passwords (OTPs) for authentication purposes when signing into online accounts to mitigate the risk of phishing attacks. The decision was announced by the Monetary…
The Hacker News - Akira Ransomware Attacking Airline Industry With Legitimate Tools
Airlines often become the target of hackers as they contain sensitive personal and financial details of passengers as well as travel schedules and loyalty programs. Since airlines are attractive to threat actors, disrupting their operations can be quite…
gbhackers.com - DarkGate Malware Exploiting Excel Files And SMB File Shares
DarkGate, a Malware-as-a-Service (MaaS) platform, experienced a surge in activity since September 2023, employing various distribution methods, including email attachments, malicious ads, and compromised Samba shares. Initially a human-operated…
gbhackers.com - Beware Of Weaponized EBooks That Deliver AsyncRAT
EBooks are popular, and their popularity lucrative threat actors the most, as they are widely shared digital assets that can easily circumvent security measures. Threat actors exploit users’ trust in seemingly harmless documents by embedding malware in eBook…
gbhackers.com - Threat Actor Claiming Breach of Coingecko Database, 1.9M Email Address
A threat actor has claimed responsibility for breaching the database of CoinGecko, a leading cryptocurrency data aggregator. The alleged breach has reportedly compromised 1.9 million email addresses, raising significant concerns about data security in the…
gbhackers.com - Match Systems’ CEO Andrei Kutin Provides Insight on DMM Bitcoin Breach
On May 31, 2024, as a result of the hacking 4502.9 BTC (worth approximately $308M) were stolen from the Japanese exchange Bitcoin.DMM.com. The cybersecurity agency Match Systems conducted the current situation of the case. Japanese cryptocurrency exchange…
gbhackers.com - New HardBit Ransomware 4.0 Uses Passphrase Protection to Evade Detection
Cybersecurity researchers have shed light on a new version of a ransomware strain called HardBit that comes packaged with new obfuscation techniques to deter analysis efforts. "Unlike previous versions, HardBit Ransomware group enhanced the version 4.0 with…
The Hacker News - Dark Gate malware campaign uses Samba file shares
A Dark Gate malware campaign from March-April 2024 demonstrates how attackers exploit legitimate tools and services to distribute malware. Palo Alto Networks Unit 42 researchers shared details about a DarkGate malware campaign from March-April 2024. Threat…
Security Affairs - Alphabet to Acquire Cybersecurity Powerhouse Wiz for $23 Billion
Alphabet, Google’s parent company, plans to acquire the cybersecurity startup Wiz for $23 billion, with the deal potentially concluding soon. Founded in January 2020 and headquartered in New York, Wiz was established by Assaf...
SecurityOnline - Squarespace Customers Targeted in Domain Hijacking Campaign
Squarespace, a popular website building and hosting platform, has recently issued a security advisory warning its customers of an ongoing domain hijacking campaign. The attacks, which began around July 10, 2024, have primarily targeted...
SecurityOnline - Critical Vulnerabilities Patched in SonicWall SMA100, PoC Published
In a recent vulnerability analysis by SSD Secure Disclosure, critical security flaws were discovered in the SonicWall SMA100 series. Discovered by SeongJoon Cho of SSD Labs Korea, these vulnerabilities, which include a pre-auth stored...
SecurityOnline - Supermicro Motherboards Vulnerable to Critical RCE Flaw (CVE-2024-36435)
Supermicro Computer, a leading provider of server and motherboard solutions, has disclosed a critical security vulnerability (CVE-2024-36435) that could expose a wide range of its products to remote code execution attacks. The vulnerability, discovered...
SecurityOnline - MSI’s Massive Security Breach: 600K+ Warranties Exposed
Earlier, motherboard manufacturer Zotac was found to have leaked a significant amount of detailed customer information due to a failure to configure server permissions properly. This oversight allowed search engine crawlers to directly index...
SecurityOnline - Netgear Patches Multiple Vulnerabilities in CAX30, XR1000, and R7000 Routers
Netgear, a leading provider of networking hardware, has issued a security advisory urging users to update the firmware on several of its popular product models. The advisory addresses a range of vulnerabilities, including authentication...
SecurityOnline - Mitel Issues Critical Security Advisory for PHP Argument Injection Vulnerability
Mitel, a global leader in business communications solutions, has issued two critical security advisories warning users of a severe vulnerability in the PHP scripting engine. The vulnerability, identified as CVE-2024-4577 (CVSS 9.8), affects PHP...
SecurityOnline - Malicious NuGet Campaign Exploits Homoglyphs and Code Injection to Fool Developers
ReversingLabs, a leading software supply chain security firm, has uncovered a sophisticated malicious campaign targeting the NuGet package manager, a widely-used platform for distributing .NET software components. This campaign, active since August 2023,…
SecurityOnline