News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 0 so far | 0 |
Developing
Tue 16 Jul 202462 articles
- Threat Prevention & Detection in SaaS Environments - 101
Identity-based threats on SaaS applications are a growing concern among security professionals, although few have the capabilities to detect and respond to them. According to the US Cybersecurity and Infrastructure Security Agency (CISA), 90% of all…
The Hacker News - Disney Investigating Hacker Group’s Data Theft Claims
Disney has launched an investigation after a hacker group named NullBulge leaked data allegedly stolen from the company.
SecurityWeek - Malicious npm Packages Found Using Image Files to Hide Backdoor Code
Cybersecurity researchers have identified two malicious packages on the npm package registry that concealed backdoor code to execute malicious commands sent from a remote server. The packages in question – img-aws-s3-object-multipart-copy and…
The Hacker News - Major Cyber Attacks Targeting the Automotive Industry
Major Cyber Attacks Targeting the Automotive Industry Due to its growing connectivity and perceived vulnerabilities, the Automotive Industry is increasingly targeted by cyberattacks, like data breaches and ransomware. As we all know, cyber threats can cause…
SOCRadar - New Poco RAT Weaponizing 7zip Files Using Google Drive
The hackers weaponize 7zip files to pass through security measures and deliver malware effectively. These archived files can hide malicious content, which makes it more difficult for antivirus programs to identify threats. In early 2024, Cofense researchers…
gbhackers.com - Kaspersky Leaving US Following Government Ban
Kaspersky is shutting down operations in the US and laying off employees following the recent Commerce Department ban.
SecurityWeek - Kaspersky leaves U.S. market following the ban on the sale of its software in the country
Kaspersky is leaving the U.S. market following the recent ban on the sales of its software imposed by the Commerce Department. Russian cybersecurity firm Kaspersky announced its exit from the U.S. market following the ban on the sale of its software in the…
Security Affairs - New ShadowRoot Ransomware Attacking Business Via Weaponized PDF’s
X-Labs identified basic ransomware targeting Turkish businesses, delivered via PDF attachments in suspicious emails from the internet[.]ru domain. PDF links trigger exe payload downloads, which encrypt files with the “.shadowroot” extension, which is…
gbhackers.com - Iranian Hackers Deploy New BugSleep Backdoor in Middle East Cyber Attacks
The Iranian nation-state actor known as MuddyWater has been observed using a never-before-seen backdoor as part of a recent attack campaign, shifting away from its well-known tactic of deploying legitimate remote monitoring and management (RMM) software for…
The Hacker News - Void Banshee APT Exploits Microsoft MHTML Flaw to Spread Atlantida Stealer
An advanced persistent threat (APT) group called Void Banshee has been observed exploiting a recently disclosed security flaw in the Microsoft MHTML browser engine as a zero-day to deliver an information stealer called Atlantida. Cybersecurity firm Trend…
The Hacker News - Hacktivist Groups Preparing for DDoS Attacks Targeting Paris Olympics
Cyble Research & Intelligence Labs (CRIL) researchers have identified a cyber threat targeting the upcoming Paris Olympics. On June 23, 2024, a Russian hacktivist group known as the “People’s Cyber Army” (Народная Cyber Армия) and their allies, HackNeT,…
gbhackers.com - Kaspersky Exits U.S. Market Following Commerce Department Ban
Russian security vendor Kaspersky has said it's exiting the U.S. market nearly a month after the Commerce Department announced a ban on the sale of its software in the country citing a national security risk. News of the closure was first reported by…
The Hacker News - CISA Warns of Actively Exploited RCE Flaw in GeoServer GeoTools Software
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical security flaw impacting OSGeo GeoServer GeoTools to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. GeoServer is an…
The Hacker News - CVE-2024-6695 (CVSS 9.8) in Popular WordPress Plugin Exposes 50,000 Sites to Admin Hijacking
Security researcher John Castro has uncovered a critical vulnerability (CVE-2024-6695) in Profile Builder, a widely used WordPress plugin with over 50,000 active installations. This flaw, rated 9.8 on the CVSS scale, could potentially allow...
SecurityOnline - Security Flaw CVE-2024-6345 in Setuptools Exposes Python Projects to RCE
A severe security vulnerability has been identified in Setuptools, a widely-used library for packaging, distributing, and installing Python projects. This flaw, designated CVE-2024-6345 with a CVSS score of 8.8, exposes systems to remote code...
SecurityOnline - CVE-2024-1086: Linux Kernel Vulnerability Impacts Numerous Moxa Products
A high-severity vulnerability in the Linux kernel has been found to affect a wide range of Moxa industrial networking and computing products. The vulnerability, identified as CVE-2024-1086 (CVSS 7.8), could allow attackers to crash...
SecurityOnline - Critical Magento Flaw Exploited: CosmicSting (CVE-2024-34102) Strikes Global Brands
A critical vulnerability known as CosmicSting (CVE-2024-34102), previously identified as a severe threat to Adobe Commerce and Magento stores, is now actively being exploited in the wild. New findings from security firm Sansec reveal...
SecurityOnline - Jellyfish Loader: Stealthy .NET Malware Raises Cybersecurity Concerns
Recently, researchers at Cyble Research and Intelligence Labs (CRIL) uncovered a new threat in the form of a .NET-based shellcode loader dubbed “Jellyfish Loader.” CRIL indicates that this malicious tool could potentially be linked...
SecurityOnline - Security Vulnerabilities in Apache Linkis Expose Systems to Arbitrary File Reading and RCE
Apache Linkis, a popular computation middleware used to connect applications with data engines, has released security patches to address three vulnerabilities in its DataSource module. These vulnerabilities, identified as CVE-2023-41916, CVE-2023-46801, and…
SecurityOnline - Cybercriminals Escalate Attacks with Sophisticated HR-themed Phishing Scam
A new, insidious phishing scam targeting employees’ Microsoft credentials has been unveiled by cybersecurity experts at Cofense. The scam, which masquerades as an official communication from a company’s Human Resources department, is meticulously designed...
SecurityOnline - Singapore Banks Ditch One-Time Passwords
Retail banks in the nation-state will eliminate the use of one-time passwords (OTPs) by bank customers in an effort to thwart phishing.
Dark Reading - FBI unlocked the phone of the suspect in the assassination attempt on Donald Trump
The FBI gained access to the password-protected phone of the suspect in the assassination attempt on Donald Trump. The independent website 404 Media first reported that the FBI had successfully accessed the password-protected phone of Thomas Matthew Crooks,…
Security Affairs