News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 10 so far | 0 |
Developing
Mon 22 Jul 202468 articles
- Suspected Scattered Spider Member Arrested in UK
UK authorities have arrested a 17-year-old suspected of being a member of the Scattered Spider cybercrime gang.
SecurityWeek - How to Set up an Automated SMS Analysis Service with AI in Tines
The opportunities to use AI in workflow automation are many and varied, but one of the simplest ways to use AI to save time and enhance your organization’s security posture is by building an automated SMS analysis service. Workflow automation platform Tines…
The Hacker News - SocGholish malware used to spread AsyncRAT malware
The JavaScript downloader SocGholish (aka FakeUpdates) is being used to deliver the AsyncRAT and the legitimate open-source project BOINC. Huntress researchers observed the JavaScript downloader malware SocGholish (aka FakeUpdates) that is being used to…
Security Affairs - Emojis Are To Express Emotions, But CyberCriminals For Attacks
There are 3,664 emojis that can be used to express emotions, ideas, or objects in digital communication. While seemingly harmless, criminals are increasingly exploiting emojis for covert communication in illegal activities. This allows them to conduct…
gbhackers.com - Beware Of Fake Browser Updates That Installs Malicious BOINC Infrastructre
SocGholish malware, also known as FakeUpdates, has exhibited new behavior since July 4th, 2024, as the infection chain still begins with a compromised website prompting a fake browser update. Downloading the update triggers malicious code that fetches…
gbhackers.com - MSPs & MSSPs: How to Increase Engagement with Your Cybersecurity Clients Through vCISO Reporting
As a vCISO, you are responsible for your client's cybersecurity strategy and risk governance. This incorporates multiple disciplines, from research to execution to reporting. Recently, we published a comprehensive playbook for vCISOs, “Your First 100 Days as…
The Hacker News - Data Breach Increases by Over 1,000% Annually
The Identity Theft Resource Center® (ITRC), a nationally recognized nonprofit organization established to support identity crime victims, released its U.S. data breach findings for the second quarter (Q2) and the first half (H1) of 2024. The results are…
gbhackers.com - California Officials Say Largest Trial Court in US Victim of Ransomware Attack
The Superior Court of Los Angeles County, the largest trial court in the US, has been the victim of a ransomware attack.
SecurityWeek - Alleged Adobe Database Leak, DJI Access Sale, and DDoS Attacks on Polish Websites
Alleged Adobe Database Leak, DJI Access Sale, and DDoS Attacks on Polish Websites The SOCRadar Dark Web Team discovered several alarming posts on hacker forums and Telegram channels, indicating serious cyber threats and data breaches. Recent incidents…
SOCRadar - CrowdStrike Incident Leveraged for Malware Delivery, Phishing, Scams
The major IT outage caused by CrowdStrike is being leveraged by threat actors for phishing, scams, and malware delivery.
SecurityWeek - CVE-2024-39907 (CVSS 9.8): SQLi Flaw Exposes 1Panel Users to Remote Takeover, PoC Published
A critical-severity vulnerability has been discovered in 1Panel, an open-source, web-based server management control panel. Designated as CVE-2024-39907, this SQL injection flaw has a CVSS score of 9.8, underscoring its potential for significant impact....
SecurityOnline - UK Police Arrested 17-year-old Boy Responsible for MGM Resorts Hack
UK police have arrested a 17-year-old boy from Walsall in connection with a notorious cyber hacking group. This group has targeted significant organizations worldwide, including MGM Resorts in the United States, with sophisticated ransomware attacks. Arrest…
gbhackers.com - Mandatory Ransomware Reporting: UK’s New Cyber Defense
The British government has introduced a new Cyber Security and Resilience Bill, aimed at updating existing cybersecurity regulations. The decision was announced in the King’s Speech at the opening of Parliament, in response to...
SecurityOnline - Hardware Acceleration Arrives in OpenBSD, Ending Long Wait
OpenBSD, a Unix-like operating system and a successor of the BSD system, has long lacked support for hardware acceleration. While this omission has little impact on server users, it significantly affects the user experience...
SecurityOnline - CrowdStrike Outage: Microsoft Points Finger at EU Agreement
The blue screen of the death incident caused by the cybersecurity company CrowdStrike is still unfolding. Although the problematic update has been withdrawn, a large number of damaged Windows systems require IT administrators to...
SecurityOnline - A week in security (July 15 – July 21)
Last week on Malwarebytes Labs: CrowdStrike update at center of Windows “Blue Screen of Death” outage Number of data breach victims goes up 1,000% Gen Z breakups tainted by login abuse for spying and stalking, research shows Rite Aid says 2.2 million...
Malwarebytes - UK police arrested a 17-year-old linked to the Scattered Spider gang
Law enforcement arrested a 17-year-old boy from Walsall, U.K., for suspected involvement in the Scattered Spider cybercrime syndicate. Law enforcement in the U.K. arrested a 17-year-old teenager from Walsall who is suspected to be a member of the Scattered…
Security Affairs - SocGholish Malware Exploits BOINC Project for Covert Cyberattacks
The JavaScript downloader malware known as SocGholish (aka FakeUpdates) is being used to deliver a remote access trojan called AsyncRAT as well as a legitimate open-source project called BOINC. BOINC, short for Berkeley Open Infrastructure Network Computing…
The Hacker News - Under-Resourced Maintainers Pose Risk to Africa's Open Source Push
Many nations see open source software as a great equalizer, giving the Global South the tools necessary for sustainable development. But recent supply chain attacks highlight the need for security.
Dark Reading - New Linux Variant of Play Ransomware Targeting VMWare ESXi Systems
Cybersecurity researchers have discovered a new Linux variant of a ransomware strain known as Play (aka Balloonfly and PlayCrypt) that's designed to target VMWare ESXi environments. "This development suggests that the group could be broadening its attacks…
The Hacker News - Cybercriminals Seize Chaos Amidst CrowdStrike Outage, Deploying Deceptive Domains
In the wake of a widespread system outage triggered by a faulty CrowdStrike update, cybercriminals have wasted no time exploiting the chaos. Within 24 hours of the incident, which affected millions of Windows devices...
SecurityOnline - CVE-2024-40628 & CVE-2024-40629: Two Maximum Severity Flaws in JumpServer
JumpServer, a widely used open-source privileged access management (PAM) tool, has disclosed two critical vulnerabilities that could allow attackers to gain unauthorized access to sensitive systems and data. The vulnerabilities, identified as CVE-2024-40628…
SecurityOnline - CVE-2024-41107: Apache CloudStack Vulnerability Exposes User Accounts to Compromise
The Apache Software Foundation has issued a security advisory regarding a critical vulnerability (CVE-2024-41107) in its open-source cloud computing platform, Apache CloudStack. This flaw affects the Security Assertion Markup Language (SAML) authentication…
SecurityOnline - BlackSuit’s Advanced Ransomware Tactics Exposed: Masquerades as Antivirus
In a recent series of events that disrupted major operations, the KADOKAWA Corporation experienced service outages that extended to multiple websites. What initially appeared to be a technical glitch soon escalated into a full-blown...
SecurityOnline - Widespread Outage: CrowdStrike Update Affects 8.5 Million Windows Users
Issues with the software update from CrowdStrike Holdings Inc. impacted 8.5 million devices worldwide running the Microsoft Windows operating system. Representatives from Microsoft Corp. clarified that the affected devices constitute less than 1% of...
SecurityOnline - Fake Browser Updates Lead to Malicious BOINC Installations
Huntress, a prominent cybersecurity firm, has recently uncovered a new wave of malicious activities involving the well-known SocGholish or FakeUpdates malware. The attackers have recently been observed leveraging the legitimate BOINC (Berkeley Open…
SecurityOnline - AWS Security Update: CVE-2024-30164 and CVE-2024-30165 Flaws Found in Client VPN
Amazon Web Services (AWS) has issued a security bulletin regarding two vulnerabilities discovered in its Client VPN service. These flaws, identified as CVE-2024-30164 and CVE-2024-30165, could potentially allow malicious actors with access to a...
SecurityOnline - Microsoft releases Windows repair tool to remove CrowdStrike driver
Microsoft has released a custom WinPE recovery tool to find and remove the faulty CrowdStrike update that crashed an estimated 8.5 million Windows devices on Friday. [...]
BleepingComputer