News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 7 so far | 0 |
Developing
Fri 19 Jul 202456 articles
- Cisco fixed a critical flaw in Security Email Gateway that could allow attackers to add root users
Cisco has addressed a critical vulnerability that could allow attackers to add new root users to Security Email Gateway (SEG) appliances. Cisco fixed a critical vulnerability, tracked as CVE-2024-20401 (CVSS score 9.8), that could allow unauthenticated,…
Security Affairs - $300,000 Offered for WhatsApp Exploit at Pwn2Own Ireland
The Pwn2Own hacking competition is moving to Ireland and $300,000 is being offered for a zero-click exploit against WhatsApp.
SecurityWeek - CrowdStrike Falcon Sensor Crash Triggers Global IT Outage, Emergency Patch Released
A critical crash error in CrowdStrike’s Falcon Sensor platform has caused widespread IT disruptions across the globe, affecting critical services like 911 call centers, airlines, banks, and major media outlets. Over the past 24...
SecurityOnline - Urgent Security Advisory: Mitel Exposed Critical Vulnerability in Unify OpenScape 4000
Mitel, a global leader in business communications, has issued an urgent security advisory regarding a critical vulnerability discovered in its Unify OpenScape 4000 communication system and related components. This vulnerability, categorized as a command...
SecurityOnline - CrowdStrike Update Causing Blue Screen of Death and Microsoft 365/Azure Outage
CrowdStrike Update Causing Blue Screen of Death and Microsoft 365/Azure Outage The tech world is now experiencing significant turbulence due to two major incidents. The first involves CrowdStrike, whose latest update may have resulted in critical issues for…
SOCRadar - APT41 Infiltrates Networks in Italy, Spain, Taiwan, Turkey, and the U.K.
Several organizations operating within global shipping and logistics, media and entertainment, technology, and automotive sectors in Italy, Spain, Taiwan, Thailand, Turkey, and the U.K. have become the target of a "sustained campaign" by the prolific…
The Hacker News - SolarWinds Patches 11 Critical Flaws in Access Rights Manager Software
SolarWinds has addressed a set of critical security flaws impacting its Access Rights Manager (ARM) software that could be exploited to access sensitive information or execute arbitrary code. Of the 11 vulnerabilities, seven are rated Critical in severity…
The Hacker News - Operation Spincaster Disrupts Approval Phishing Technique that Drains Victim’s Wallets
Chainalysis has launched Operation Spincaster, an initiative to disrupt approval phishing scams that have drained billions from victims’ wallets. This operation, which brings together public and private sectors, has yielded promising results and offers a…
gbhackers.com - WazirX Cryptocurrency Exchange Loses $230 Million in Major Security Breach
Indian cryptocurrency exchange WazirX has confirmed that it was the target of a security breach that led to the theft of $230 million in cryptocurrency assets. "A cyber attack occurred in one of our [multi-signature] wallets involving a loss of funds…
The Hacker News - Oracle WebLogic Users Urged to Patch Critical Vulnerability (CVE-2024-21181, CVSS 9.8)
Oracle has issued a warning to users of its WebLogic Server, urging them to immediately patch a critical vulnerability (CVE-2024-21181) that could lead to a complete takeover of the server. The vulnerability, rated with...
SecurityOnline - China-Linked GhostEmperor Resurfaces: Enhanced Demodex Rootkit Targets Southeast Asia
The notorious threat group GhostEmperor has resurfaced with an updated version of its sophisticated Demodex rootkit, according to a new report from Sygnia’s Incident Response team. Sygnia’s in-depth analysis uncovered a multi-stage infection chain...
SecurityOnline - CVE-2024-22442 (CVSS 9.8): HPE Patches Critical 3PAR Service Processor Flaw
Hewlett Packard Enterprise (HPE) has released a security update to address a critical vulnerability (CVE-2024-22442) in its 3PAR Service Processor software. This flaw could allow remote attackers to bypass authentication and gain unauthorized access...
SecurityOnline - Cyber Espionage Alert: APT41 Strikes Global Industries, Steals Sensitive Data
Mandiant, in collaboration with Google’s Threat Analysis Group (TAG), has uncovered a widespread cyber espionage campaign orchestrated by the notorious advanced persistent threat (APT) group known as APT41. This sustained operation has compromised multiple...
SecurityOnline - SonicWall Patches Unauthenticated DoS Flaw (CVE-2024-40764) in SonicOS IPSec VPN
SonicWall, a leading cybersecurity provider, has issued a security patch to address a heap-based buffer overflow vulnerability in its SonicOS operating system. This vulnerability, identified as CVE-2024-40764 with a CVSS score of 7.5, could...
SecurityOnline - Cryptocurrency Traders Beware: New Malware Exploits RDPWrapper and Tailscale
Cyble Research and Intelligence Labs (CRIL) has uncovered a sophisticated cyberattack campaign targeting cryptocurrency users. This multi-stage attack utilizes a combination of phishing emails, malicious shortcut files, PowerShell scripts, and legitimate…
SecurityOnline - Play Ransomware Group’s New Linux Variant Targets ESXi, Shows Ties With Prolific Puma
Trend Micro threat hunters discovered that the Play ransomware group has been deploying a new Linux variant that targets ESXi environments. Read our blog entry to know more.
trendmicro.com