News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 0 so far | 0 |
Developing
Wed 17 Jul 202477 articles
- A critical flaw in Cisco SSM On-Prem allows attackers to change any user’s password
A vulnerability in Cisco Smart Software Manager On-Prem (Cisco SSM On-Prem) license servers allows threat actors to change any user’s password. Cisco has addressed a critical vulnerability, tracked as CVE-2024-20419 (CVSS score of 10.0), in Cisco Smart…
Security Affairs - Notorious FIN7 hackers sell EDR killer to other threat actors
The notorious FIN7 hacking group has been spotted selling its custom "AvNeutralizer" tool, used to evade detection by killing enterprise endpoint protection software on corporate networks. [...]
BleepingComputer - Threat Actors Ramp Up Use of Encoded URLs to Bypass Secure Email
The tactic is not new, but there has been a steady increase in its use as of this spring.
Dark Reading - MxD Research Reveals Major Disconnect Between Perceived and Actual Cybersecurity Capabilities in US Manufacturing
No content available.
Dark Reading - Aura Partners With Mosaic Compliance Services to Launch a Program to Protect Auto Dealers and Buyers From Cybercrime
No content available.
Dark Reading - Exchange Online adds Inbound DANE with DNSSEC for security boost
Microsoft is rolling out inbound SMTP DANE with DNSSEC for Exchange Online in public preview, a new capability to boost email integrity and security. [...]
BleepingComputer - DPRK Hackers Tweak Malware to Lure MacOS Users into Video Calls
North Korean espionage campaign delivers updated BeaverTail info stealer by spoofing legitimate video calling service, researcher finds.
Dark Reading - West African Crime Syndicate Taken Down by Interpol Operation
Law enforcement managed to arrest numerous members of Black Axe, a notorious group engaged in a wide variety of criminal activity.
Dark Reading - No need to hack when it’s leaking, Wednesday edition: Nearly 150,000 Records Were Exposed Online by On-Site Medical Service Provider
Website Planet reports that Jeremiah Fowler discovered a non-password-protected database that contained 148,000 records belonging to InHouse Physicians — a healthcare provider that offers on-site medical services and wellness programs to organizations,…
DataBreaches - MarineMax data breach impacted over 123,000 individuals
The world’s largest recreational boat and yacht retailer MarineMax, disclosed a data breach following a cyber attack. The world’s largest recreational boat and yacht retailer MarineMax disclosed a data breach that impacted over 123,000 individuals. In March,…
Security Affairs - Cisco SSM On-Prem bug lets hackers change any user's password
Cisco has fixed a maximum severity vulnerability that allows attackers to change any user's password on vulnerable Cisco Smart Software Manager On-Prem (Cisco SSM On-Prem) license servers, including administrators. [...]
BleepingComputer - CVE-2024-20419 (CVSS 10): Critical Flaw in Cisco Smart Software Manager Opens Door to Account Takeover
Cisco has issued an urgent security alert regarding a critical vulnerability (CVE-2024-20419) discovered in its Smart Software Manager (SSM) On-Prem and Satellite products. This vulnerability, with the highest possible severity rating (CVSS 10), could...
SecurityOnline - Ransomware Continues To Pile On Costs For Critical Infrastructure Victims
No content available.
packetstormsecurity.com - Atlassian Patches High Severity Vulns In Bamboo, Confluence, Jira
No content available.
packetstormsecurity.com - NullBulge: The Cybercriminal Group Targeting AI and Gaming Communities with Ransomware
A new threat actor group, NullBulge, has emerged with a captivating narrative: hacktivists fighting against AI’s encroachment on the art world. But beneath this veneer of activism lies a more complex reality, revealed by...
SecurityOnline - Critical Security Flaw in Cisco Secure Email Gateway: CVE-2024-20401
Cisco has issued an urgent security advisory regarding a critical vulnerability (CVE-2024-20401) found in its Secure Email Gateway product. This flaw, with a CVSS score of 9.8, could allow attackers to overwrite arbitrary files...
SecurityOnline - CISA Adds Three New Vulnerabilities to Known Exploited Vulnerabilities Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning, adding three actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. This move highlights the urgent need for organizations to...
SecurityOnline - Over 400,000 Life360 user phone numbers leaked via unsecured API
A threat actor has leaked a database containing the personal information of 442,519 Life360 customers collected by abusing a flaw in the login API. [...]
BleepingComputer - Atlassian Patches High-Severity Vulnerabilities in Bamboo, Confluence, Jira
Atlassian releases security-themed updates to fix several high-severity vulnerabilities in its Bamboo, Confluence and Jira products.
SecurityWeek - North Korean Hackers Update BeaverTail Malware to Target MacOS Users
Cybersecurity researchers have discovered an updated variant of a known stealer malware that attackers affiliated with the Democratic People's Republic of Korea (DPRK) have delivered as part of prior cyber espionage campaigns targeting job seekers. The…
The Hacker News - Volcano Demon Group Attacking Organizations With LukaLocker Ransomware
The Volcano Demon group has been discovered spreading a new ransomware called LukaLocker, which targets Idealease Inc., a truck leasing company. The malware targets several security, monitoring, and backup services, including antivirus software like Trend…
gbhackers.com - SolarWinds Patches Multiple Critical Vulnerabilities in Access Rights Manager
SolarWinds, a leading provider of IT management software, has issued an urgent security advisory regarding multiple critical vulnerabilities discovered in its Access Rights Manager (ARM) product. These flaws expose organizations to a range of...
SecurityOnline - Orgs Are Finally Making Moves to Mitigate GenAI Risks
With AI use ramping up rapidly, a growing number of enterprise security teams have begun putting controls in place to protect sensitive data from accidental exposure and leaks.
Dark Reading - 'BadPack' APK Files Make Android Malware Hard to Detect
Manipulated header info within files, in mobile Trojans like TeaBot and others, makes it difficult for defenders to analyze and detect them.
Dark Reading - Yacht giant MarineMax data breach impacts over 123,000 people
MarineMax, self-described as the world's largest recreational boat and yacht retailer, is notifying over 123,000 customers whose personal information was stolen in a March security breach claimed by the Rhysida ransomware gang. [...]
BleepingComputer - Void Banshee exploits CVE-2024-38112 zero-day to spread malware
Void Banshee APT group exploited the Windows zero-day CVE-2024-38112 to execute code via the disabled Internet Explorer. An APT group tracked as Void Banshee was spotted exploiting the Windows zero-day CVE-2024-38112 (CVSS score of 7.5) to execute code…
Security Affairs - Training at Black Hat to Focus on Equipping Cybersecurity Leaders With Soft Skills
A two-day presentation will examine the social-behavioral aspects of cybersecurity leadership to drive team success.
Dark Reading - 5 steps to automate user access reviews and simplify IT compliance
While SaaS tools are a boon for worker productivity, they introduce complexity when it comes to IT audits and compliance. Learn more from Nudge Security about automating user access reviews to simplify this process. [...]
BleepingComputer - SOCRadar’s Global Ransomware Report 2024: Gain Insights Into Worldwide Ransomware Trends
SOCRadar’s Global Ransomware Report 2024: Gain Insights Into Worldwide Ransomware Trends As 2024 passes by, ransomware remains a major concern for organizations across the globe. In order to see the threat landscape and take the necessary measures, we are…
SOCRadar - Resonance Launches Harmony to Monitor and Detect Threats to Web2 and Web3 Apps
Quick take: Harmony is the fourth cybersecurity application Resonance developed to address the disconnect in cybersecurity practices. Harmony captures continuous snapshots of the web state including DNS records and scripts. It also utilises artificial intel...
gbhackers.com - Pindrop Security Raises $100 Million to Expand Deepfake Detection Technology
The additional funds will be used to further the development of new tools to counter the expanding threat of AI-generated voice deepfakes.
SecurityWeek - Shame on Interserver.net for not responding to notification of exposed sensitive and stolen data
Shame on Interserver.net. On July 10, DataBreaches notified hostdepartment.com by email that an IP address was exposing hundreds of data leaks/dumps that had been caught up in hacking or ransomware incidents. When they didn’t respond, I called them the next…
DataBreaches - AI Consortium Plans Toolkit to Rate AI Model Safety
An AI consortium consisting of top tech companies will release a toolkit later this year for measuring the safety of generative AI models.
Dark Reading - Rite Aid says 2.2 million people affected in data breach
The US’ third-largest pharmacy chain Rite Aid has filed a data breach notification in which it reports that the data stolen during a June ransomware attack compromised the data of some 2.2 million people. Ransomware group RansomHub claimed responsibility for…
Malwarebytes - Ransomware Attack Disrupts Bassett Furniture Manufacturing Facilities
Furniture manufacturer Bassett Furniture was recently targeted in a ransomware attack that resulted in a shutdown of manufacturing facilities.
SecurityWeek