News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 10 so far | 0 |
Developing
Mon 22 Jul 202468 articles
- Greece’s Land Registry agency breached in wave of 400 cyberattacks
The Land Registry agency in Greece has announced that it suffered a limited-scope data breach following a wave of 400 cyberattacks targeting its IT infrastructure over the last week. [...]
BleepingComputer - Google rolls back decision to kill third-party cookies in Chrome
Google has scrapped its plan to kill third-party cookies in Chrome and will instead introduce a new browser experience to allows users to limit how these cookies are used. [...]
BleepingComputer - EvilVideo, a Telegram Android zero-day allowed sending malicious APKs disguised as videos
EvilVideo is a zero-day in the Telegram App for Android that allowed attackers to send malicious APK payloads disguised as videos. ESET researchers discovered a zero-day exploit named EvilVideo that targets the Telegram app for Android. The exploit was for…
Security Affairs - Check Point Research Reports Highest Increase of Global Cyber Attacks Seen in Last Two Years
No content available.
Dark Reading - Two Foreign Nationals Plead Guilty to Participating in LockBit Ransomware Group
No content available.
Dark Reading - Seemplicity 2024 Remediation Operations Report: Rising Exposure Management Risk
No content available.
Dark Reading - EC-Council Democratizes Hands-On Cybersecurity Training With 8 Cyber Courses
No content available.
Dark Reading - Cloud Security Alliance Sets New Standard in Cloud Security Expertise With the Certificate of Cloud Security Knowledge
No content available.
Dark Reading - Teenage Scattered Spider Suspect Arrested in Global Cybercrime Sting
The authorities intend to send a message to these cybercrime groups that their criminal offenses and ransomware attacks are not worth the fallout.
Dark Reading - Swipe Right for Data Leaks: Dating Apps Expose Location, More
Apps like Tinder, Bumble, Grindr, Badoo, OKCupid, MeetMe, and Hinge all have API vulnerabilities that expose sensitive user data, and six allow a threat actor to pinpoint exactly where someone is.
Dark Reading - US sanctions Russian hacktivists who breached water facilities
The US government has imposed sanctions on two Russian cybercriminals for cyberattacks targeting critical infrastructure. [...]
BleepingComputer - Linx Security Raises $33M to Tackle Digital Identity Threats
New York startup with roots in Israel banks a hefty $33 million early stage funding round.
SecurityWeek - Russian Hacktivists Sanctioned for US Critical Infrastructure Attacks
"CARR" hackers have managed to gain control over ICS and SCADA systems in the US and Europe.
Dark Reading - New Play ransomware Linux version targets VMware ESXi VMs
Play ransomware is the latest ransomware gang to start deploying a dedicated locker for encrypting Linux devices and specifically targeting VMware ESXi virtual machines. [...]
BleepingComputer - Quantum Leap: Advanced Computing Is a Vulnerable Cyber Target
At Black Hat USA, researchers from Bitdefender and Transilvania Quantum will showcase how attackers can target quantum-based infrastructure.
Dark Reading - Police infiltrates, takes down DigitalStress DDoS-for-hire service
DDoS-for-hire service DigitalStress was taken down on July 2 in a joint law enforcement operation led by the United Kingdom's National Crime Agency (NCA). [...]
BleepingComputer - EvilVideo Vulnerability: Zero-Day Threat Targets Telegram for Android
Researchers from ESET have identified a zero-day exploit targeting Telegram for Android. Dubbed EvilVideo vulnerability, the exploit surfaced on an underground forum on June 6, 2024. Hackers employed this vulnerability to disseminate malicious files...
SecurityOnline - Safety Equipment Giant Cadre Holdings Hit by Cyberattack
Safety equipment product maker Cadre Holdings was hit by a cyberattack that has impacted some of the company’s operations.
SecurityWeek - Heritage Foundation data breach containing personal data is available online
The Heritage Foundation this month denied that it had suffered an earlier system breach and the subsequent leaking of internal data. But the organization had to admit that cybercriminals gained access to an archive of Heritage’s affiliated media site, The…
Malwarebytes - Telegram zero-day allowed sending malicious Android APKs as videos
A Telegram for Android zero-day vulnerability dubbed 'EvilVideo' allowed attackers to send malicious Android APK payloads disguised as video files. [...]
BleepingComputer - Los Angeles Superior Court shuts down after ransomware attack
The largest trial court in the United States, the Superior Court of Los Angeles County, closed all 36 courthouse locations on Monday to restore systems affected by a Friday ransomware attack. [...]
BleepingComputer - Two Members of LockBit Ransomware Group Plead Guilty in US Court
A Russian national and a dual Canadian and Russian national pleaded guilty in the US for roles in LockBit ransomware attacks.
SecurityWeek - End-user cybersecurity errors that can cost you millions
An innocent mistake can lead to a corporate nightmare. Learn from Specops Software about five of the most frequent cybersecurity blunders that can let attackers breach a network. [...]
BleepingComputer - Kaspersky Is an Unacceptable Risk Threatening the Nation's Cyber Defense
As geopolitical tensions rise, foreign software presents a grave supply chain risk and an ideal attack vector for nation-state adversaries.
Dark Reading - US Sanctions Russian Hacktivists for Targeting Critical Infrastructure
US has announced sanctions against two CARR hacktivists for roles in cyberattacks targeting critical infrastructure.
SecurityWeek - SonicOS IPSec VPN Vulnerability Let Attackers Cause Dos Condition
SonicWall has disclosed a critical heap-based buffer overflow vulnerability in its SonicOS IPSec VPN. This flaw, identified as CVE-2024-40764, can potentially allow unauthenticated, remote attackers to cause a Denial of Service (DoS) condition. The…
gbhackers.com - Spain arrests three for using DDoSia hacktivist platform
The Spanish authorities have arrested three individuals for using DDoSia, a distributed denial of service platform operated by pro-Russian hacktivists, to conduct DDoS attacks against governments and organizations in NATO countries. [...]
BleepingComputer - Experts Uncover Chinese Cybercrime Network Behind Gambling and Human Trafficking
The relationship between various TDSs and DNS associated with Vigorish Viper and the final landing experience for the user A Chinese organized crime syndicate with links to money laundering and human trafficking across Southeast Asia has been using an…
The Hacker News - Chinese Forced-Labor Ring Sponsors Football Clubs, Hides Behind Stealth Tech
An illegal gambling empire fueled by modern-day slavery is being propped up by high-profile sponsorships — and defended with sophisticated anti-detection software.
Dark Reading - Delta Cancels Another 600 Flights On Monday In Wake Of Cyber Outage
No content available.
packetstormsecurity.com - CrowdStrike's Falcon Sensor Also Linked To Linux Kernel Panics
No content available.
packetstormsecurity.com - Two Russian Sanctioned Over Cyberattacks On US Critical Infrastructure
No content available.
packetstormsecurity.com - Hackers Registered 500k+ Domains Using Algorithms For Extensive Cyber Attack
Hackers often register new domains for phishing attacks, spreading malware, and other deceitful activities. Such domains are capable of pretending to be trusted entities, which helps to make individuals disclose their sensitive details or download harmful…
gbhackers.com - PINEAPPLE and FLUXROOT Hacker Groups Abuse Google Cloud for Credential Phishing
A Latin America (LATAM)-based financially motivated actor codenamed FLUXROOT has been observed leveraging Google Cloud serverless projects to orchestrate credential phishing activity, highlighting the abuse of the cloud computing model for malicious…
The Hacker News - Kuwait Court Drops Case Against Notorious Pentagon Hacker
Asharq Al-Awsat reports: The Kuwaiti Court of Cassation upheld on Sunday the dismissal of criminal charges against a notorious Kuwaiti hacker who had infiltrated hundreds of websites around the world, including the US Department of Defense’s (Pentagon)…
DataBreaches - Fallout from Faulty Friday CrowdStrike Update Persists
Historic IT outage expected to spur regulatory scrutiny, soul-searching over "monoculture" of IT infrastructure - and cyberattack threats.
Dark Reading - Hackers Claim Breach of Daikin: 40 GB of Confidential Data Exposed
Daikin, the world’s largest air conditioner manufacturer, has become the latest target of the notorious Meow hacking group. The USA branch of Daikin has been listed as a victim, with hackers demanding a ransom of $40,000. The incident has raised significant…
gbhackers.com - Application Security Startup Heeler Raises $8.5 Million in Seed Funding
Heeler Security has raised $8.5 million in seed funding for its ProductDNA application security technology.
SecurityWeek