News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 0 so far | 0 |
Developing
Tue 16 Jul 202462 articles
- CISA warns critical Geoserver GeoTools RCE flaw is exploited in attacks
CISA is warning that a critical GeoServer GeoTools remote code execution flaw tracked as CVE-2024-36401 is being actively exploited in attacks. [...]
BleepingComputer - The Linux Foundation and OpenSSF Release Report on the State of Education in Secure Software Development
No content available.
Dark Reading - Cloud Security, PowerShell Expertise Emerge as Key SOC Analyst Skills
SOC analysts should also cultivate skills like incident handling and response, threat hunting, digital forensics, Python, and bash scripting.
Dark Reading - Secureworks Elevates State of Cybersecurity for Mid-Market Customers With Managed Detection and Response Offering
No content available.
Dark Reading - Microsoft: Scattered Spider Widens Web With RansomHub & Qilin
The gang already uses varied tools in its attacks, such as phishing, SIM swapping, and MFA fatigue.
Dark Reading - Microsoft: Scattered Spider Widens Web With RansomHub & Qilin
The gang already uses varied tools in its attacks, such as phishing, SIM swapping, and MFA fatigue.
Dark Reading - Cyberattack costs growing at UnitedHealth Group, could reach $2.45 billion for this year
Christopher Snowbeck reports: Second quarter earnings beat analyst expectations at UnitedHealth Group, even as the Minnetonka-based health care giant said it saw more expenses handling the fallout from a massive cyberattack earlier this year. The company now…
DataBreaches - Hackers claim Disney data theft in protest against AI-generated artwork
Alex Hern reports: Hacktivists claim to have stolen more than a terabyte of data from Disney’s internal chat platform and are leaking the information online in a protest against what they say is the company’s anti-artist stance. The group, which calls itself…
DataBreaches - Au: Healthed data breach exposes personal details
Michelle Wisbey reports: The personal details of a large number of GPs have been published online, in a data breach leaving doctors feeling ‘significantly concerned’. Australian healthcare educator Healthed confirmed that late on Sunday, 14 July, the company…
DataBreaches - Email addresses of 15 million Trello users leaked on hacking forum
A threat actor has released over 15 million email addresses associated with Trello accounts that were collected using an unsecured API in January. [...]
BleepingComputer - Name That Toon: Near Miss
Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.
Dark Reading - Microsoft announces new Windows 'checkpoint' cumulative updates
Microsoft will introduce checkpoint cumulative updates starting in late 2024 for systems running devices running Windows Server 2025 and Windows 11, version 24H2 or later. [...]
BleepingComputer - Shadowroot Ransomware Lures Turkish Victims via Phishing Attacks
The ransomware is rudimentary with basic functionalities, likely having been created by an inexperienced developer — but it's effective at locking up files and sucking up memory capacity.
Dark Reading - APT Exploits Windows Zero-Day To Execute Code Via Disabled Internet Explorer
No content available.
packetstormsecurity.com - Organizations Warned Of Exploited GeoServer Vulnerability
No content available.
packetstormsecurity.com - Case Of Man Who Falsely Claimed To Be Bitcoin Inventor Referred To CPS
No content available.
packetstormsecurity.com - New Phishing Tactic Hijacks Email Protections To Mask Links
No content available.
packetstormsecurity.com - Kaspersky Culls Staff, Closes Doors In US Amid Biden's Ban
No content available.
packetstormsecurity.com - CISA adds OSGeo GeoServer GeoTools bug to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds an OSGeo GeoServer GeoTools bug to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an OSGeo GeoServer GeoTools eval…
Security Affairs - The 2024 Mid-Year Cybersecurity Review Report
The 2024 Mid-Year Cybersecurity Review Report In a time when cyber threats continue to escalate in sophistication and frequency, understanding the evolving landscape is more crucial than ever. Therefore, we are pleased to present the “2024 Mid-Year…
SOCRadar - Rite Aid says June data breach impacts 2.2 million people
Rite Aid, the third-largest drugstore chain in the United States, says that 2.2 million customers' personal information was stolen last month in what it described as a "data security incident." [...]
BleepingComputer - Void Banshee APT Exploits Microsoft Zero-Day in Spear-Phishing Attacks
The threat group used CVE-2024-38112 and a "zombie" version of IE to spread Atlantida Stealer through purported PDF versions of reference books.
Dark Reading - Organizations Warned of Exploited GeoServer Vulnerability
CISA says it has evidence that a recent critical-severity vulnerability in GeoServer is exploited in the wild.
SecurityWeek - AI device Rabbit r1 logged user interactions without an option to erase them before selling
Rabbit, the manufacturer of the Artificial Intelligence (AI) assistant r1 has issued a security advisory telling users it’s found a potential security risk. If a user loses or sells their device, a person in possession of the r1 could potentially jailbreak…
Malwarebytes - APT Exploits Windows Zero-Day to Execute Code via Disabled Internet Explorer
The Void Banshee APT exploited the CVE-2024-38112 Windows zero-day to infect systems with the Atlantida stealer.
SecurityWeek - Void Banshee APT Exploits Microsoft Zero-Day in Spear-Phishing Attacks
No content available.
Dark Reading - The Need to Recruit Cyber Talent in the Government
Bad actors are launching unprecedented waves of attacks against government agencies — and the federal government is woefully underprepared.
Dark Reading - Ex-GitHub Engineers Raise $20M to Enhance Pen-Testing with AI-Powered XBOW
A team of former GitHub engineers has secured $20 million in venture capital funding from Sequoia to build AI-powered security tools.
SecurityWeek - Microsoft links Scattered Spider hackers to Qilin ransomware attacks
Microsoft says the Scattered Spider cybercrime gang has added Qilin ransomware to its arsenal and is now using it in attacks. [...]
BleepingComputer - Void Banshee APT Exploits Microsoft Zero-Day in Spear-Phishing Attacks
The threat group used CVE-2024-38112 and a "zombie" version of IE to spread Atlantida Stealer through purported PDF versions of reference books.
Dark Reading - 'Konfety' Ad Fraud Uses 250+ Google Play Decoy Apps to Hide Malicious Twins
Details have emerged about a "massive ad fraud operation" that leverages hundreds of apps on the Google Play Store to perform a host of nefarious activities. The campaign has been codenamed Konfety – the Russian word for Candy – owing to its abuse of a…
The Hacker News - MirrorFace Attacking Organizations Exploiting Vulnerabilities In Internet-Facing Assets
MirrorFace threat actors have been targeting media, political organizations, and academic institutions since 2022, shifting focus to manufacturers and research institutions in 2023. The attack method evolved from spear phishing to exploiting vulnerabilities…
gbhackers.com - Microsoft finally fixes Outlook alerts bug caused by December updates
Microsoft has finally fixed a known Outlook issue, confirmed in February, which was triggering incorrect security alerts after installing the December security updates for Outlook Desktop. [...]
BleepingComputer - CISO Conversations: Frank Kim (YL Ventures) and Charles Blauner (Team8)
Frank Kim and Charles Blauner are responsible for security at both their own company and for the companies in which their firms invest.
SecurityWeek - AutoNation Says CDK Global Ransomware Attack Impacted Earnings
Car dealership AutoNation has informed the SEC that the CDK Global ransomware attack impacted its quarterly earnings.
SecurityWeek - HardBit Ransomware Using Passphrase Protection To Evade Detection
In 2022, HardBit Ransomware emerged as version 4.0. Unlike typical ransomware groups, this ransomware doesn’t use leak sites or double extortion. Their tactics include data theft, encryption, and ransom requests with threats of other attacks. Cybersecurity…
gbhackers.com - Latest Dark Web Leaks: Disney Slack, U.S. Credit Cards, 1TX Vendor Database
Latest Dark Web Leaks: Disney Slack, U.S. Credit Cards, 1TX Vendor Database The SOCRadar Dark Web Team has identified several significant data breaches and cyber threats involving prominent organizations and large-scale databases. Notable incidents include…
SOCRadar - Hackers Exploit Flaw in Squarespace Migration to Hijack Domains
Hackers exploited a flaw to hijack cryptocurrency domains that were migrated from Google Domains to Squarespace.
SecurityWeek