News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 11 so far | 0 |
Developing
Tue 23 Jul 202466 articles
- Law Enforcement Disrupts DDoS-for-Hire Service DigitalStress
Authorities in the UK infiltrated and disrupted the DDoS-for-hire service DigitalStress, and one suspect was arrested.
SecurityWeek - Meta Given Deadline to Address E.U. Concerns Over 'Pay or Consent' Model
Meta has been given time till September 1, 2024, to respond to concerns raised by the European Commission over its "pay or consent" advertising model or risk-facing enforcement measures, including sanctions. The European Commission said the Consumer…
The Hacker News - Operation PowerOff: Major Blow to Global DDoS-for-Hire Service
The law enforcement agencies of the United Kingdom have reported a successful operation infiltrating the systems of the DDoS service, during which the alleged head of the DigitalStress service was arrested. The authorities’ actions...
SecurityOnline - FrostyGoop ICS Malware Left Ukrainian City’s Residents Without Heating
The FrostyGoop ICS malware was used recently in an attack against a Ukrainian energy firm that resulted in loss of heating for many buildings.
SecurityWeek - Ukrainian Institutions Targeted Using HATVIBE and CHERRYSPY Malware
The Computer Emergency Response Team of Ukraine (CERT-UA) has alerted of a spear-phishing campaign targeting a scientific research institution in the country with malware known as HATVIBE and CHERRYSPY. The agency attributed the attack to a threat actor it…
The Hacker News - Novel ICS Malware Sabotaged Water-Heating Services in Ukraine
Newly discovered "FrostyGoop" is the first ICS malware that can communicate directly with operational technology systems via the Modbus protocol.
Dark Reading - US Gov sanctioned key members of the Cyber Army of Russia Reborn hacktivists group
The US government sanctioned two Russian hacktivists for their cyberattacks targeting critical infrastructure, including breaches of water facilities. The United States sanctioned Russian hacktivists Yuliya Vladimirovna Pankratova and Denis Olegovich…
Security Affairs - Ransomware Attack Forces Closure of LA County Courts
On July 22, all 36 courts of the Superior Court of Los Angeles County, the largest trial court in the United States, were closed to restore systems following a ransomware attack that occurred on...
SecurityOnline - $115 Million Payout: Oracle Ends User Data Privacy Battle
Oracle has agreed to pay $115 million to settle a two-year class-action lawsuit regarding the improper use of user data. The settlement provides compensation for 220 million affected users. Oracle will contribute $115 million...
SecurityOnline - Threat Actors Taking Advantage of CrowdStrike BSOD Bug to Deliver Malware
Threat actors have been found exploiting a recently discovered bug in CrowdStrike’s software that causes a Blue Screen of Death (BSOD) on affected systems. This vulnerability has given cybercriminals a unique opportunity to spread malware, posing significant…
gbhackers.com - NCA Shut’s Down the Most Popular “digitalstress” DDoS-for-hire Service
The National Crime Agency (NCA) has successfully infiltrated and dismantled one of the most notorious Distributed Denial of Service (DDoS) for hire services, digitalstress.su. This criminal marketplace, responsible for tens of thousands of attacks weekly…
gbhackers.com - No Deal: Wiz Rejects Google, Sets Sights on IPO
Under the impetus of its cloud computing team, Google previously invested $23 billion to acquire the rapidly growing cloud cybersecurity company Wiz. This company primarily safeguards enterprise cloud infrastructure by creating a normative layer...
SecurityOnline - Google Keeps Third-Party Cookies, Enhances User Control in Chrome
To reconcile the conflict between advertising networks and privacy protection, Google announced years ago that it would gradually phase out third-party cookies to prevent direct user tracking by advertising networks. Google’s proposed alternative is...
SecurityOnline - Play Ransomware’s Linux Variant Attacking VMware ESXi Servers
A new Linux variant of Play ransomware targets VMware ESXi environments, which encrypts virtual machine files and appends the “.PLAY” extension by leveraging obfuscation techniques to bypass detection and is compressed with a Windows variant in a RAR…
gbhackers.com - Wiz to Pursue IPO as It Walks Away From $23 Billion Google Deal
Cloud security giant Wiz will stick to its original plan and pursue an IPO, walking away from a $23 billion deal with Google.
SecurityWeek - Google Abandons Plan to Phase Out Third-Party Cookies in Chrome
Google on Monday abandoned plans to phase out third-party tracking cookies in its Chrome web browser more than four years after it introduced the option as part of a larger set of a controversial proposal called the Privacy Sandbox. "Instead of deprecating…
The Hacker News - NI VeriStand Gateway Vulnerability Exposes Critical Systems to Risk
National Instruments (NI) has issued an urgent security advisory regarding a critical vulnerability in its VeriStand Gateway software, a cornerstone of the VeriStand real-time testing and simulation framework. This vulnerability, impacting VeriStand 2024 Q2...
SecurityOnline - Oracle Exploit Drains $7.6 Million from Rho Markets, White-Hat Hackers Negotiate Return
Stablecoins USDC and USDT totaling over $7.6 million were withdrawn from the Rho Markets lending protocol, which operates on the Scroll blockchain. A group of white-hat hackers expressed their willingness to return the funds...
SecurityOnline - Okta Patches Cross-Site Scripting Flaw (CVE-2024-0981) in Browser Plugin
Okta, a leading identity and access management provider, has recently patched a high-severity cross-site scripting (XSS) vulnerability (CVE-2024-0981) in its browser plugin. This vulnerability affected versions 6.5.0 through 6.31.0 of the Okta Browser…
SecurityOnline - CVE-2024-33352: BlueStacks Vulnerability Puts Millions of Gamers at Risk
A vulnerability in BlueStacks, a popular Android emulator used by millions of gamers worldwide, has been discovered by security researcher Maciej Miszczyk. The vulnerability, tracked as CVE-2024-33352, could allow attackers to gain full control...
SecurityOnline - Kimsuky APT: New TTPs Revealed in Rapid7 Cybersecurity Report
Rapid7, a leading cybersecurity firm, has released a comprehensive report detailing the evolving tactics, techniques, and procedures (TTPs) of the Kimsuky advanced persistent threat (APT) group. Kimsuky, a North Korean state-sponsored actor, has been...
SecurityOnline - 1Panel Users Urged to Patch After Critical SQLi Flaws (CVE-2024-39911, CVSS 10) Discovered
A critical SQL injection vulnerability, collectively endangering millions of Linux servers worldwide found in the popular open-source server management tool, 1Panel. Identified as CVE-2024-39911, this SQL injection flaw, carries a maximum CVSS score of...
SecurityOnline - Cloudflare WARP Abused to Hijack Cloud Services, Cado Security Report Reveals
Cado Security researchers have recently unveiled several campaigns exploiting Cloudflare’s WARP service to attack vulnerable internet-facing services. WARP, a free VPN service designed to optimize user traffic, is being leveraged by attackers to mask...
SecurityOnline - New ‘False File Immutability’ Vulnerability Poses Significant Threat to Windows Security
A newly discovered vulnerability class, termed “False File Immutability” (FFI), has raised serious concerns within the cybersecurity community due to its potential to circumvent Windows Code Integrity (CI), a critical security mechanism. The vulnerability,...
SecurityOnline - IPFire Fortifies Against SYN Flood Attacks with New Protection Feature
In a significant move to combat the escalating threat of Denial-of-Service (DoS) attacks, IPFire, the renowned open-source firewall distribution, has introduced robust SYN Flood Protection for its enterprise users. This innovative feature empowers…
SecurityOnline - Patchwork Group Expands Cyber Espionage with Advanced Tools
Recently, the Knownsec 404 Advanced Threat Intelligence team identified suspicious activity by the Patchwork group targeting Bhutan. The attack utilized an updated backdoor written in Go, known as PGoShell, as well as a new...
SecurityOnline