News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 0 so far | 0 |
Developing
Wed 17 Jul 202477 articles
- Genetic Testing Firm 23andMe Settles Data Breach Lawsuits
Amanda Bronstad reports: 23andMe has reached a settlement in principle of class actions brought over last year’s data breach, lawyers disclosed at a Tuesday court hearing in San Francisco. The amount and details of the settlement weren’t disclosed, but, in…
DataBreaches - Senate demands answers from AT&T about breach
In what might be described as the regulatory equivalent of being called to the principal’s office, AT&T has been sent a demand letter by Senators about its breach. The letter, signed by Senators Richard Blumenthal and Josh Hawley, the Chair and Ranking…
DataBreaches - Bassett Furniture shuts down manufacturing facilities after ransomware attack
Jonathan Greig reports: One of the largest furniture companies in the U.S. was forced to shut down its manufacturing facilities following a ransomware attack that began last week. Bassett Furniture Industries said it shut down some of its information…
DataBreaches - London Borough of Hackney reprimanded following cyber-attack
From the Information Commissioner’s Office: We have issued the London Borough of Hackey with a reprimand following a cyber-attack in 2020 that led to hackers gaining access to and encrypting 440,000 files, affecting at least 280,000 residents and other…
DataBreaches - Car dealer software slinger CDK Global said to have paid $25M ransom after cyberattack
Matthew Connaster reports: CDK Global reportedly paid a $25 million ransom in Bitcoin after its servers were knocked offline by crippling ransomware. Last week, CDK restored services to car dealerships across the US after a two-week outage caused by a “cyber…
DataBreaches - Microsoft links Scattered Spider hackers to Qilin and RansomHub ransomware attacks
Sergiu Gatlan reports: Microsoft says the Scattered Spider cybercrime gang has added Qilin ransomware to its arsenal and is now using it in attacks. “In the second quarter of 2024, financially motivated threat actor Octo Tempest, our most closely tracked…
DataBreaches - Interpol Arrests 300 People in a Global Crackdown on West African Crime Groups Across 5 Continents
Interpol arrests 300 people in a global crackdown on West African crime groups specializing in online financial fraud.
SecurityWeek - Navigating Insider Risks: Are your Employees Enabling External Threats?
Attacks on your network are often meticulously planned operations launched by sophisticated threats. Sometimes your technical fortifications provide a formidable challenge, and the attack requires assistance from the inside to succeed. For example, in 2022,…
The Hacker News - Shedding Light on France’s Cyber Threat Landscape
Shedding Light on France’s Cyber Threat Landscape In an era of dynamic change in digital threats, there is more need for knowledge of regional cybersecurity challenges than ever. Therefore, it is with great pleasure that we present the “France Threat…
SOCRadar - MNGI Digestive Health Data Breach Impacts 765,000 Individuals
MNGI Digestive Health tells the Maine AGO that hackers accessed the personal information of 765,000 individuals.
SecurityWeek - Apache HugeGraph Vulnerability Exploited in Wild
A recently patched Apache HugeGraph-Server vulnerability tracked as CVE-2024-27348 is being targeted in attacks.
SecurityWeek - FIN7 Group Advertises Security-Bypassing Tool on Dark Web Forums
The financially motivated threat actor known as FIN7 has been observed using multiple pseudonyms across several underground forums to likely advertise a tool known to be used by ransomware groups like Black Basta. "AvNeutralizer (aka AuKill), a highly…
The Hacker News - Ivanti Patches SQLi Vulnerability (CVE-2024-37381) in Endpoint Management Software
Ivanti, a prominent provider of endpoint management solutions, has promptly addressed a SQL Injection vulnerability in its Endpoint Management (EPM) software. This vulnerability, designated as CVE-2024-37381, could have enabled authenticated attackers within…
SecurityOnline - Virtual Event Today: Cloud & Data Security Summit | 2024
Join us as we explore the latest trends in the world of SaaS security, cyberattacks against cloud infrastructure, data security posture management (DSPM), and the hype and promise of AI and LLM technologies.
SecurityWeek - Key Threat Intelligence Sources to Access Current Threat Insights
Key Threat Intelligence Sources to Access Current Threat Insights Using various threat intelligence sources can make the difference between preventing an attack and falling victim to one. An AI illustration on Threat Intelligence Sources & Insights (DALL-E)…
SOCRadar - Security End-Run: 'AuKill' Shuts Down Windows-Reliant EDR Processes
Russian threat actor FIN17 has shifted gears multiple times in recent years, focusing now on helping ransomware groups be even more covertly effective.
Dark Reading - GitLab Explores Sale, Sparks Bidding War Among Tech Giants
Reports indicate that GitLab is in discussions with investment bankers regarding a potential sale, attracting interest from industry peers like Datadog. However, reaching a definitive agreement may take several weeks. Notably, Alphabet, Google’s parent...
SecurityOnline - Beware! of New Phishing Tactics Mimic as HR Attacking Employees
Phishing attacks are becoming increasingly sophisticated, and the latest strategy targeting employees highlights this evolution. This new phishing attempt impersonates a company’s Human Resources (HR) department, presenting a significant threat to corporate…
gbhackers.com - Chrome 126 Updates Patch High-Severity Vulnerabilities
Chrome 126 security updates released this week resolve high-severity vulnerabilities reported by external researchers.
SecurityWeek - Oracle Patches 240 Vulnerabilities With July 2024 CPU
Oracle releases 386 new security patches to resolve roughly 240 unique CVEs as part of its July 2024 Critical Patch Update.
SecurityWeek - China-linked APT17 Targets Italian Companies with 9002 RAT Malware
A China-linked threat actor called APT17 has been observed targeting Italian companies and government entities using a variant of a known malware referred to as 9002 RAT. The two targeted attacks took place on June 24 and July 2, 2024, Italian cybersecurity…
The Hacker News - Rite Aid Says Hack Impacts 2.2M People as Ransomware Gang Threatens to Leak Data
Pharmacy chain Rite Aid says 2.2 million people are impacted by a recent data breach for which the RansomHub group has taken credit.
SecurityWeek - The Octo Tempest group adds RansomHub and Qilin ransomware to its arsenal
Microsoft said that in Q2 2024, the Octo Tempest cybercrime gang added RansomHub and Qilin ransomware to its arsenal. In the second quarter of 2024, financially motivated threat actor Octo Tempest (aka Scattered Spider, UNC3944, and 0ktapus), added RansomHub…
Security Affairs - IDF Has Rebuffed 3B Cyberattacks Since Oct. 7, Colonel Claims
Israel's military computer systems have been under constant barrage in recent months.
Dark Reading - Scattered Spider Adopts RansomHub and Qilin Ransomware for Cyber Attacks
The infamous cybercrime group known as Scattered Spider has incorporated ransomware strains such as RansomHub and Qilin into its arsenal, Microsoft has revealed. Scattered Spider is the designation given to a threat actor that's known for its sophisticated…
The Hacker News - Critical Apache HugeGraph Vulnerability Under Attack - Patch ASAP
Threat actors are actively exploiting a recently disclosed critical security flaw impacting Apache HugeGraph-Server that could lead to remote code execution attacks. Tracked as CVE-2024-27348 (CVSS score: 9.8), the vulnerability impacts all versions of the…
The Hacker News - CVE-2024-39877: Apache Airflow Security Update Addresses Code Execution Vulnerability
Apache Airflow, the popular open-source workflow management platform, has released a security update to address a potentially severe code execution vulnerability (CVE-2024-39877) affecting versions 2.4.0 through 2.9.2. This vulnerability could allow…
SecurityOnline - NATO to Establish New Cyber Center in Belgium
NATO will establish a new cyber center to better protect against increasingly sophisticated cyber threats.
SecurityWeek - CVE-2024-6457 (CVSS 9.8): Critical Flaw in HUSKY Plugin Threatens 100K+ WooCommerce Stores
A critical vulnerability has been discovered in the widely-used WordPress plugin, HUSKY – Products Filter Professional for WooCommerce. This security flaw, tracked as CVE-2024-6457 with a CVSS score of 9.8 (Critical), leaves over 100,000...
SecurityOnline - Atlassian Fixes CVE-2024-21687 & CVE-2024-21686 Vulnerabilities in Bamboo and Confluence
In a recent security advisory, Atlassian, a renowned software company known for its collaboration and productivity tools, has disclosed two high-severity vulnerabilities affecting its widely used products, Bamboo and Confluence. These security flaws have...
SecurityOnline - Active Exploits Targeting Apache HugeGraph Flaw (CVE-2024-27348): PoC Code Released
A remote code execution (RCE) vulnerability, tracked as CVE-2024-27348, is currently under active exploitation in the wild, targeting Apache HugeGraph-Server deployments. This discovery comes from the Shadowserver Foundation, a non-profit cybersecurity…
SecurityOnline - JPCERT/CC Warns: MirrorFace LODEINFO & NOOPDOOR Malware Targeting Industry
JPCERT Coordination Center (JPCERT/CC) has released a comprehensive report detailing ongoing cyberattacks by the notorious MirrorFace LODEINFO and NOOPDOOR malware against Japanese organizations. MirrorFace, a persistent threat actor observed since 2022,…
SecurityOnline - Critical Security Update Needed for baramundi Management Suite
baramundi software GmbH has issued a critical security advisory regarding vulnerabilities discovered in their widely-used IT management solution, baramundi Management Suite (bMS). These vulnerabilities, classified as high to critical risk, could potentially…
SecurityOnline - Malicious AWS Packages Deliver Malware Through JPEGs
The Phylum Research Team recently uncovered a sophisticated cyberattack targeting developers using the npm package registry. On July 13th, 2024, researchers identified two seemingly legitimate packages, clones of existing libraries, concealing malicious code…
SecurityOnline - UnitedHealth Sticks to 2024 Outlook Despite Strong Quarter With Costs From Massive Cyberattack High
UnitedHealth booked $1.1 billion in total costs from the cyberattack in the second quarter.
SecurityWeek - Snowflake Account Attacks Driven by Exposed Legitimate Credentials
Credential management gets a boost with the latest infostealers' extortion campaign built on info stolen from cloud storage systems.
Dark Reading - The Potential Impact of the OpenSSH Vulnerabilities CVE-2024–6387 and CVE-2024-6409
We check the OpenSSH vulnerabilities CVE-2024–6387 and CVE-2024-6409, examining their potential real-world impact and the possibility of exploitation for CVE-2024–6387 in x64 systems.
trendmicro.com