News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 11 so far | 0 |
Developing
Wed 24 Jul 202479 articles
- Small Businesses Need Default Security in Products Now
Small businesses are increasingly being targeted by cyberattackers. Why, then, are security features priced at a premium?
Dark Reading - Over 3,000 GitHub accounts used by malware distribution service
Threat actors known as 'Stargazer Goblin' have created a malware Distribution-as-a-Service (DaaS) from over 3,000 fake accounts on GitHub that push information-stealing malware. [...]
BleepingComputer - Fighting Third-Party Risk With Threat Intelligence
With every new third-party provider and partner, an organization's attack surface grows. How, then, do enterprises use threat intelligence to enhance their third-party risk management efforts?
Dark Reading - Docker Patches Critical AuthZ Plugin Bypass Vulnerability Dating Back to 2018
The vulnerability, tagged as CVE-2024-41110 with a CVSS severity score of 10/10, was originally found and fixed in 2018.
SecurityWeek - U.S. CISA adds Microsoft Internet Explorer and Twilio Authy bugs to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Internet Explorer and Twilio Authy bugs to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following…
Security Affairs - 'Stargazer Goblin' Amasses Rogue GitHub Accounts to Spread Malware
The threat group uses its "Stargazers Ghost Network" to star, fork, and watch malicious repos to make them seem legitimate, all to distribute a variety of notorious information-stealers-as-a-service.
Dark Reading - CA: Legal services vendor hacked in April, medical information acquired by hacker
Another legal services vendor discloses a breach: Compex Legal Services Inc. (“Compex”) recently discovered an incident that may have impacted the privacy of information related to certain individuals. Compex provides record retrieval and litigation support…
DataBreaches - Docker fixes critical 5-year old authentication bypass flaw
Docker has issued security updates to address a critical vulnerability impacting certain versions of Docker Engine that could allow an attacker to bypass authorization plugins (AuthZ) under certain circumstances. [...]
BleepingComputer - 39 healthcare providers sue UnitedHealth over Change hack
There’s no way that DataBreaches has enough time to track all of the lawsuits filed against UnitedHealth Group and its subsidiaries, Optum and Change Healthcare, as a result of the Change Healthcare hack, but over on Becker’s Hospital Review, Giles Bruce…
DataBreaches - Cyberattackers Exploit Microsoft SmartScreen Bug in Stealer Campaign
The good news: Only organizations far behind on standard Windows patching have anything to worry about.
Dark Reading - Zest Security Aims to Resolve, Not Just Mitigate Cloud Risks
Zest Security emerged from stealth with $5 million funding and an AI-powered platform that resolves the root source of risk in the cloud.
SecurityWeek - Microsoft fixes bug behind Windows 10 Connected Cache delivery issues
Microsoft has fixed a known Windows 10 update issue that broke Microsoft Connected Cache (MCC) node discovery on enterprise networks. [...]
BleepingComputer - Third-party breach resulted in Singapore Moneylenders Credit Bureau being leaked by GhostR
Threat actors known as GhostR claim to have stolen more than 50 GB of files on loan borrowers from the Singapore MLCB (the Moneylenders Credit Bureau). They have offered some of the data as a leak on a popular hacking forum and provided proof of claims in…
DataBreaches - TracFone will pay $16 million to settle FCC data breach investigation
Following three separate data breaches between 2021 and 2023 which exposed the proprietary information (PI) of TracFone Wireless customers, the Federal Communications Commission (FCC) announced that the Verizon-owned company has agreed to pay a $16 million…
Malwarebytes - KnowBe4 mistakenly hires North Korean hacker, faces infostealer attack
American cybersecurity company KnowBe4 says a person it recently hired as a Principal Software Engineer turned out to be a North Korean state actor who attempted to install information-stealing on its devices. [...]
BleepingComputer - Dazz Scores Hefty $50M Investment for AI-Powered Risk Remediation Tech
The new financing brings the total raised by Dazz to $110 million as investors double down on bets in the cloud security remediation space.
SecurityWeek - Hamster Kombat Players Threatened by Spyware & Infostealers
Players can only access the game by first joining its Telegram channel, with some going astray in copycat channels with hidden malware.
Dark Reading - Google Chrome now warns about risky password-protected archives
Google Chrome now warns when downloading risky password-protected files and provides improved alerts with more information about potentially malicious downloaded files. [...]
BleepingComputer - CVE-2024-39700 (CVSS 9.9): Severe Flaw in JupyterLab Template Discovered
A critical vulnerability, designated CVE-2024-39700, has been discovered in the widely-used JupyterLab extension template. This flaw could enable attackers to remotely execute code on affected systems, potentially leading to widespread compromise and data…
SecurityOnline - Docker Fixed an AuthZ Bypass Flaw Leading to Privilege Escalation: CVE-2024-41110
Docker Fixed an AuthZ Bypass Flaw Leading to Privilege Escalation: CVE-2024-41110 On July 23, 2024, Docker issued an advisory regarding a security vulnerability in the authorization plugins (AuthZ), used for access control. The vulnerability affects Docker…
SOCRadar - Is GhostEmperor Back? Sygnia Finds Clues in Recent Cyber Incident
Sygnia discovered what it believes to be a variant of the GhostEmperor infection chain leading to the Demodex rootkit – which was first seen and described in 2021.
SecurityWeek - ShadowRoot Ransomware Attacking Organizations With Weaponized PDF Documents
A rudimentary ransomware targets Turkish businesses through phishing emails with “.ru” domain sender addresses. Clicking a PDF attachment’s link triggers downloading a malicious executable from a compromised GitHub account. The executable encrypts crucial…
gbhackers.com - CrowdStrike Blames Crash on Buggy Security Content Update
CrowdStrike vows to provide customers with greater control over the delivery of future content updates by allowing granular selection of when and where these updates are deployed.
Dark Reading - CrowdStrike: 'Content Validator' bug let faulty update pass checks
CrowdStrike released a Preliminary Post Incident Review (PIR) on the faulty Falcon update explaining that a bug allowed bad data to pass its Content Validator and cause millions of Windows systems to crash on July 19, 2024. [...]
BleepingComputer - Hot topics: Can’t-miss sessions at Mandiant’s 2024 mWISE event
Now that the mWISE 2024 session catalog is out, it's time to take a closer look at the topics. Learn more from @mWISEConference about the three hottest tracks in this year's conference. [...]
BleepingComputer - Navigating the Complex Landscape of Web Browser Security
The more we use the cloud, the more maintaining browser security becomes crucial.
Dark Reading - BreachForumsV1 Database Leaked: Private messages, Emails & IP Exposed
BreachForumsV1, a notorious online platform for facilitating illegal activities, has reportedly suffered a massive data breach. According to a recent post on X by DailyDarkWeb, the database of BreachForumsV1 has been leaked, exposing a treasure trove of…
gbhackers.com - 250 Million Hamster Kombat Players Targeted Via Android And Windows Malware
Despite having simple gameplay, the new Telegram clicker game Hamster Kombat has become very well-liked among gamers who use cryptocurrencies because of the potential rewards of a brand-new cryptocoin that the developers intend to launch. The game’s success…
gbhackers.com - Beware Of Malicious Python Packages That Steal Users Sensitive Data
Malicious Python packages uploaded by “dsfsdfds” to PyPI infiltrated user systems by exfiltrating sensitive data to a Telegram bot likely linked to Iraqi cybercriminals. Active since 2022 and containing more than 90,000 Arabic messages, it has functioned as…
gbhackers.com - Chinese Hackers Using Shared Framework To Create Multi-Platform Malware
Shared frameworks are often prone to hackers’ abuses as they have been built into various applications, which offer a range of systems that can be exploited at the same time. By attacking shared framework vulnerabilities, hackers can get into many apps and…
gbhackers.com - BlueStacks Emulator For Windows Flaw Exposes Millions Of Gamers To Cyber Attack
A significant vulnerability was discovered in BlueStacks, the world’s fastest Android emulator and cloud gaming platform. When used against a victim, this gives attackers complete access to the machine. The American technology business BlueStacks, also known…
gbhackers.com - Organizations Warned of Exploited Twilio Authy Vulnerability
CISA warns of the in-the-wild exploitation of CVE-2024-39891, a Twilio Authy bug leading to the disclosure of phone number data.
SecurityWeek - 57,000 Patients Impacted by Michigan Medicine Data Breach
Michigan Medicine is notifying roughly 57,000 individuals of a data breach impacting their personal and health information.
SecurityWeek - Physicists Just Created An Element Using A Particle Beam
No content available.
packetstormsecurity.com - CrowdStrike Explains Why Bad Update Was Not Properly Tested
No content available.
packetstormsecurity.com - How Russian Malware Cut Heat To 600 Heat To Ukrainian Buildings In Deep Winter
No content available.
packetstormsecurity.com - School Gets An F For Using Facial Recognition On Kids In Canteen
No content available.
packetstormsecurity.com - Google Chrome 127 Released with a fix for 24 Security Vulnerabilities
Google has unveiled the latest version of its Chrome browser, Chrome 127, which is now available on the Stable channel. The update, identified as version 127.0.6533.72/73 for Windows and Mac, and 127.0.6533.72 for Linux, will be rolled out over the coming…
gbhackers.com