News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 12 so far | 0 |
Developing
Wed 24 Jul 202479 articles
- Crisis communication: What NOT to do
Read the 1st blog in this series, Cybersecurity crisis communication: What to do When an organization experiences a cyberattack, tensions are high, customers are concerned and the business is typically not operating at full capacity. Every move you make at…
securityintelligence.com - Siemens Patches Power Grid Product Flaw Allowing Backdoor Deployment
Siemens has released out-of-band updates to patch two potentially serious vulnerabilities in products used in energy supply.
SecurityWeek - Verizon Subsidiary Settles With FCC for $16M Over Three Data Breaches
Verizon subsidiary TracFone Wireless settles for $16 million with the FCC over three old data breaches.
SecurityWeek - Vanta Raises $150 Million at $2.45 Billion Valuation
Vanta has raised $150 million in a Series C funding round and it plans on using the money to fuel expansion and AI innovation.
SecurityWeek - KY: Cyberattack closes Jefferson County Clerk’s Office, all motor vehicle branches
Matthew Keck reports: If you were planning to visit the Jefferson County Clerk’s Office or a motor vehicle branch on Tuesday, you’ll have to reschedule. A cyber attack forced the Jefferson County Clerk’s Office to close its eight branches this week. The…
DataBreaches - North Korean Hackers Targeted Cybersecurity Firm KnowBe4 with Fake IT Worker
James Coker reports: Cybersecurity awareness training company KnowBe4 has revealed it was duped into hiring a fake IT worker from North Korea, resulting in attempted insider threat activity. The malicious activity was identified and prevented before any…
DataBreaches - Ransomware ecosystem fragmenting, but not necessarily great news
Alexander Martin reports: Veteran cybercriminals involved in ransomware attacks are increasingly shying away from large ransomware-as-a-service (RaaS) platforms following a spate of law enforcement disruption operations, as well as the AlphV/BlackCat gang’s…
DataBreaches - Chrome 127 Patches 24 Vulnerabilities
Chrome 127 was promoted to the stable channel with patches for 24 vulnerabilities, including 16 reported externally.
SecurityWeek - Laravel Framework Affected by a New Critical Vulnerability (CVE-2024-40075): Patch Now
Laravel Framework Affected by a New Critical Vulnerability (CVE-2024-40075): Patch Now A very critical vulnerability, designated as CVE-2024-40075, has emerged in the Laravel PHP framework. This flaw could allow attackers to execute arbitrary commands, read…
SOCRadar - How a Trust Center Solves Your Security Questionnaire Problem
Security questionnaires aren’t just an inconvenience — they’re a recurring problem for security and sales teams. They bleed time from organizations, filling the schedules of professionals with monotonous, automatable work. But what if there were a way to…
The Hacker News - Researchers Detail on How Defenders Eliminate Detection Gaps in AWS Environments
As enterprises increasingly migrate their workloads to cloud infrastructure, the need for robust security measures becomes more pressing. Unlike traditional data centers, cloud environments offer business agility at a reduced cost, making them attractive…
gbhackers.com - Windows July security updates send PCs into BitLocker recovery
Microsoft warned that some Windows devices will boot into BitLocker recovery after installing the July 2024 Windows security updates. [...]
BleepingComputer - China-linked APT group uses new Macma macOS backdoor version
China-linked APT group Daggerfly (aka Evasive Panda, Bronze Highland) Evasive Panda has been spotted using an updated version of the macOS backdoor Macma. The China-linked APT group Daggerfly (aka Evasive Panda or Bronze Highland) has significantly updated…
Security Affairs - How to Reduce SaaS Spend and Risk Without Impacting Productivity
There is one simple driver behind the modern explosion in SaaS adoption: productivity. We have reached an era where purpose-built tools exist for almost every aspect of modern business and it’s incredibly easy (and tempting) for your workforce to adopt these…
The Hacker News - Threat Intelligence Maturity Model (TIMM) – Utilizing TIP (Threat Intelligence Provider)
Threat Intelligence Maturity Model (TIMM) – Utilizing TIP (Threat Intelligence Provider) Many organizations lack sufficient knowledge about the threats they face and their own security posture as well, making it difficult for them to defend themselves…
SOCRadar - CrowdStrike Explains Why Bad Update Was Not Properly Tested
CrowdStrike has shared a preliminary incident review, explaining why the update that caused global chaos was not caught by testing.
SecurityWeek - Patchwork Hackers Target Bhutan with Advanced Brute Ratel C4 Tool
The threat actor known as Patchwork has been linked to a cyber attack targeting entities with ties to Bhutan to deliver the Brute Ratel C4 framework and an updated version of a backdoor called PGoShell. The development marks the first time the adversary has…
The Hacker News - Pentagon IT Service Provider Hacked: U.S. Government Secrets Exposed
A massive breach in cybersecurity has occurred at Leidos Holdings Inc., which is a key provider of information technology services to the United States government. Hackers have released internal information, which has raised significant worries regarding the…
gbhackers.com - CrowdStrike Explains Friday Incident Crashing Millions of Windows Devices
Cybersecurity firm CrowdStrike on Wednesday blamed an issue in its validation system for causing millions of Windows devices to crash as part of a widespread outage late last week. "On Friday, July 19, 2024 at 04:09 UTC, as part of regular operations,…
The Hacker News - KnowBe4 Exposes North Korean Cyber Espionage: A Fake Employee Unmasked
KnowBe4, a cybersecurity company, has unveiled an attempt to infiltrate its IT system through a fake employee from North Korea. All company data remained secure thanks to the timely actions of the IT security...
SecurityOnline - Swiss Government Goes All-In on Open Source with New Law
After nearly 13 years of deliberation, the Swiss government has finally enacted the Federal Law on the Use of Electronic Means for the Performance of Government Tasks (EMBAG). This law mandates that all public...
SecurityOnline - Cybercriminals Exploit CrowdStrike Update Incident with New Stealer Malware, Connecio
CrowdStrike, a leading cybersecurity firm, has issued a warning about a new information-stealing malware dubbed “Connecio” that’s being distributed by threat actors using a cunning disguise: a fake CrowdStrike Falcon sensor update. This malicious...
SecurityOnline - Google Chrome 127 Arrives with Security Patches: What Users Need to Know
Google has rolled out the latest version of its renowned browser, Chrome 127. This release brings a host of improvements, prominently featuring 24 security-related fixes. Available for Windows, macOS, and Linux, the new update...
SecurityOnline - Microsoft Defender Flaw Exploited to Deliver ACR, Lumma, and Meduza Stealers
A now-patched security flaw in the Microsoft Defender SmartScreen has been exploited as part of a new campaign designed to deliver information stealers such as ACR Stealer, Lumma, and Meduza. Fortinet FortiGuard Labs said it detected the stealer campaign…
The Hacker News - CISA Adds Twilio Authy and IE Flaws to Exploited Vulnerabilities List
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerabilities are listed below - CVE-2012-4792 (CVSS score:…
The Hacker News - Linux Users Hit by CrowdStrike Fallout: Kernel Panics Reported
Last Friday, the world experienced an unprecedented outage that disrupted multiple industries, including finance, media, transportation, and logistics. Many domestic users also encountered Windows system crashes, affecting their work and propelling the…
SecurityOnline - CVE-2024-3246: LiteSpeed Cache Plugin Vulnerability Puts Millions of WordPress Sites at Risk
A vulnerability was discovered in LiteSpeed Cache (LS Cache), a widely used WordPress plugin installed on over five million sites. The vulnerability, tracked as CVE-2024-3246, allows attackers to inject malicious code into websites, potentially...
SecurityOnline - Let’s Encrypt Announces Intent to End OCSP Support: A Move Towards Privacy and Efficiency
Let’s Encrypt, a leading provider of free SSL/TLS certificates, has announced its intention to discontinue support for the Online Certificate Status Protocol (OCSP) in favor of Certificate Revocation Lists (CRLs). This strategic move aims...
SecurityOnline - CISA Warns: Critical Exploits Targeting Microsoft and Twilio Authy Discovered in the Wild
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding two actively exploited vulnerabilities affecting Microsoft Internet Explorer and Twilio Authy, a popular two-factor authentication app. The…
SecurityOnline - Docker Users Beware: CVE-2024-41110 (CVSS 10) Could Lead to System Takeover
Docker has issued a security advisory for a critical vulnerability affecting certain versions of Docker Engine. This vulnerability, identified as CVE-2024-41110, has a CVSS score of 10, indicating a critical severity. The issue allows...
SecurityOnline - CVE-2024-40075: XXE Vulnerability Found in Laravel v11.x
A significant vulnerability has been identified in Laravel v11.x, the popular PHP web framework renowned for building modern, elegant web applications. This vulnerability, designated as CVE-2024-40075, is an XML External Entity (XXE) flaw that...
SecurityOnline - Texas Man Jailed for Running DDoS-for-Hire Website
A US resident has been sentenced to 9 months in prison for creating and managing the Astrostress service, which allowed users to launch powerful DDoS attacks. The defendant was also given a 2-year probation...
SecurityOnline - Critical Vulnerabilities in NI VeriStand Expose Industrial Systems to Remote Attacks
National Instruments (NI) has issued a critical security advisory warning users of its widely-used real-time testing software, VeriStand, about two severe vulnerabilities that could allow attackers to execute malicious code on affected systems remotely....
SecurityOnline - Cybersecurity Alert: FIN7 Expands Arsenal with New AvNeutralizer Variant
Experts at SentinelLabs have uncovered new evidence that the infamous hacker group FIN7 continues to refine its attack methods and expand its influence in the criminal underworld. According to recent research, the hackers use numerous...
SecurityOnline - PyPI Packages Leak User Data to Telegram Bot, Iraqi Cybercriminals Suspected
Experts at Checkmarx have uncovered PyPI packages containing a malicious script in the “init.py” file that transmits user data to a Telegram bot. The malicious packages, uploaded by a user named “dsfsdfds,” were part...
SecurityOnline - 17-Year-Old Suspected Cybercriminal Nabbed in UK, Tied to MGM Hack
In the United Kingdom, a 17-year-old youth from Walsall has been detained, suspected of belonging to the notorious cybercriminal group Scattered Spider, which has targeted numerous major organizations with ransomware, including the American entertainment...
SecurityOnline - R0bl0ch0n TDS – New Affiliate Fraud Scheme Impacts 110 Million Users
A team of specialists from World Watch has discovered a new Traffic Distribution System (TDS) closely linked to affiliate marketing and actively used in fraudulent schemes. This system, named R0bl0ch0n TDS due to the...
SecurityOnline - Most Airlines Except One Are Recovering From the CrowdStrike Tech Outage. The Feds Have Noticed
Delta has canceled more than 5,500 flights since the outage started early Friday morning.
SecurityWeek - KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware
KnowBe4 chief executive Stu Sjouwerman: “We sent them their Mac workstation, and the moment it was received, it immediately started to load malware."
SecurityWeek