News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 12 so far | 0 |
Developing
Thu 25 Jul 202464 articles
- PKfail Secure Boot bypass lets attackers install UEFI malware
Hundreds of UEFI products from 10 vendors are susceptible to compromise due to a critical firmware supply-chain issue known as PKfail, which allows attackers to bypass Secure Boot and install malware. [...]
BleepingComputer - North Korean Government Hacker Charged for Involvement in Ransomware Attacks Targeting U.S. Hospitals and Health Care Providers
Hacking Group Known as “Andariel” Used Ransom Proceeds to Fund Theft of Sensitive Information from Defense and Technology Organizations Worldwide, Including U.S. Government Agencies A grand jury in Kansas City, Kansas, returned an indictment on Wednesday…
DataBreaches - Critical ServiceNow RCE flaws actively exploited to steal credentials
Threat actors are chaining together ServiceNow flaws using publicly available exploits to breach government agencies and private firms in data theft attacks. [...]
BleepingComputer - CrowdStrike 'Updates' Deliver Malware & More as Attacks Snowball
Phishing and fraud surges during any national news story. This time though, the activity is both more voluminous and more targeted.
Dark Reading - Progress Software fixed critical RCE CVE-2024-6327 in the Telerik Report Server
Progress Software addressed a critical remote code execution vulnerability, tracked as CVE-2024-6327, in the Telerik Report Server. Telerik Report Server is a web-based application designed for creating, managing, and delivering reports in various formats.…
Security Affairs - Microsoft's Internet Explorer Gets Revived to Lure in Windows Victims
Though IE was officially retired in June 2022, the vulnerability ramped up in January 2023 and has been going strong since.
Dark Reading - North Korean Charged in Ransomware Attacks on American Hospitals
A man who allegedly carried out attacks for a North Korean military intelligence agency has been indicted in a conspiracy to hack healthcare firms, NASA, military bases and other entities.
SecurityWeek - Windows 11 KB5040527 update fixes Windows Backup failures
Microsoft has released the optional KB5040527 preview cumulative update for Windows 11 23H2 and 22H2, which includes fixes for Windows Backup and upgrade failures. [...]
BleepingComputer - Unexpected Lessons Learned From the CrowdStrike Event
How your organization can leverage the disruptive CrowdStrike update to become more resilient.
Dark Reading - US offers $10M for tips on DPRK hacker linked to Maui ransomware attacks
The U.S. State Department is offering a reward of up to $10 million for information that could lead to the identification or location of a North Korean military hacker. [...]
BleepingComputer - Meta nukes massive Instagram sextortion network of 63,000 accounts
Meta has removed 63,000 Instagram accounts from Nigeria that were involved in sextortion scams, including a coordinated network of 2,500 accounts linked to 20 individuals targeting primarily adult men in the United States. [...]
BleepingComputer - Windows update may present users with a BitLocker recovery screen
Some Windows users may see a BitLocker Recovery screen after applying the Microsoft patch Tuesday updates. BitLocker is a Windows security feature that encrypts entire drives. It prevents someone that has obtained a stolen or lost device from reading the…
Malwarebytes - Chainguard Raises $140 Million, Expands Tech to Secure AI Workloads
Software supply chain security startup Chainguard raises a $140 million Series C round that values the company at $1.2 billion.
SecurityWeek - Progress warns of critical RCE bug in Telerik Report Server
Progress Software has warned customers to patch a critical remote code execution security flaw in the Telerik Report Server that can be used to compromise vulnerable devices. [...]
BleepingComputer - Security Firm Accidentally Hires North Korean Hacker, Did Not KnowBe4
A software engineer hired for an internal IT AI team immediately became an insider threat by loading malware onto his workstation.
Dark Reading - French police push PlugX malware self-destruct payload to clean PCs
The French police and Europol are pushing out a "disinfection solution" that automatically removes the PlugX malware from infected devices in France. [...]
BleepingComputer - Critical bug in Docker Engine allowed attackers to bypass authorization plugins
A critical flaw in some versions of Docker Engine can be exploited to bypass authorization plugins (AuthZ) under specific circumstances. A vulnerability, tracked as CVE-2024-41110 (CVSS score of 10.0), in certain versions of Docker Engine can allow an…
Security Affairs - Threat Actors Claiming Leak of IOC list with 250M Data, CrowdStrike Responded
A hacktivist entity known as USDoD has asserted that it has leaked CrowdStrike’s “entire threat actor list” and claims to possess the company’s “entire IOC [indicators of compromise] list,” which purportedly contains over 250 million data points. Details of…
gbhackers.com - North Korean Hackers Shift from Cyber Espionage to Ransomware Attacks
A North Korea-linked threat actor known for its cyber espionage operations has gradually expanded into financially-motivated attacks that involve the deployment of ransomware, setting it apart from other nation-state hacking groups linked to the country.…
The Hacker News - Is Our Water Safe to Drink? Securing Our Critical Infrastructure
Our critical systems can be protected from looming threats by embracing a proactive approach, investing in education, and fostering collaboration between IT and OT professionals.
Dark Reading - CVE-2024-37084 (CVSS 9.8): Remote code execution in Spring Cloud Data Flow
In a recent security advisory, a critical vulnerability has been identified in Spring Cloud Data Flow, a popular microservices-based streaming and batch data processing platform used in Cloud Foundry and Kubernetes environments. This vulnerability,...
SecurityOnline - Why Multivendor Cybersecurity Stacks Are Increasingly Obsolete
Multivendor tech stacks are costly and complex to integrate and manage. Learn more from Cynet about how an All-in-One approach reduces costs for MSPs and SMEs, while offering increased security. [...]
BleepingComputer - Major Cyber Attacks Targeting the Finance Industry
Major Cyber Attacks Targeting the Finance Industry The finance industry is an attractive target for cybercriminals due to the large amount of sensitive data and financial assets at stake. Over the past decade, we have witnessed a series of high-profile…
SOCRadar - CrowdStrike Data Leak Claims Spark Concern, Hacktivist Credibility Questioned
In a recent claim, hacktivist group USDoD announced on July 24th, 2024, via the cybercrime forum BreachForums, that they had successfully breached CrowdStrike, a leading cybersecurity firm. The group alleges to have exfiltrated CrowdStrike’s...
SecurityOnline - Google Chrome Warns of Malicious Files While Downloading
Google Chrome has introduced a revamped download experience with comprehensive warnings about potentially malicious files. This update is part of Chrome’s ongoing effort to keep users secure while interacting with downloaded content. Last year, Google Chrome…
gbhackers.com - Network Of 3,000 GitHub Accounts Used For Malware Distribution
No content available.
packetstormsecurity.com - KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware
No content available.
packetstormsecurity.com - Hackers Bypass Windows SmartScreen Flaw To Launch Malware
No content available.
packetstormsecurity.com - HHS Audit Finds Serious Gaps In Cloud Security At Agency Office
No content available.
packetstormsecurity.com - BIND Updates Resolve High-Severity DoS Vulnerabilities
The latest BIND security updates address remotely exploitable vulnerabilities leading to denial-of-service.
SecurityWeek - Unveiling the latest banking trojan threats in LATAM
This post was made possible through the research contributions of Amir Gendler. In our most recent research in the Latin American (LATAM) region, we at IBM Security Lab have observed a surge in campaigns linked with malicious Chrome extensions. These…
securityintelligence.com - 6 Types of Applications Security Testing You Must Know About
While the specifics for security testing vary for applications, web applications, and APIs, a holistic and proactive applications security strategy is essential for all three types. There are six core types of testing that every security professional should…
The Hacker News - Microsoft’s Windows Hello for Business Flaw Let Attackers Bypass Authentication
Researchers have uncovered a vulnerability in Microsoft’s Windows Hello for Business (WHfB) that allows attackers to bypass its robust authentication mechanism. This flaw, which downgrades the authentication process to a less secure method, has raised…
gbhackers.com - Network of 3,000 GitHub Accounts Used for Malware Distribution
Stargazer Goblin has created a network of over 3,000 GitHub accounts to distribute malware through phishing repositories.
SecurityWeek - Hackers exploit Microsoft Defender SmartScreen bug CVE-2024-21412 to deliver ACR, Lumma, and Meduza Stealers
The CVE-2024-21412 flaw in the Microsoft Defender SmartScreen has been exploited to deliver information stealers such as ACR Stealer, Lumma, and Meduza. Fortinet FortiGuard Labs researchers observed a malware campaign exploiting the vulnerability…
Security Affairs - Meta Removes 63,000 Instagram Accounts Linked to Nigerian Sextortion Scams
Meta Platforms on Wednesday said it took steps to remove around 63,000 Instagram accounts in Nigeria that were found to target people with financial sextortion scams. "These included a smaller coordinated network of around 2,500 accounts that we were able to…
The Hacker News - Mandiant Shines Spotlight on APT45 Behind North Korea’s Digital Military Machine
A fresh Mandiant report documents North Korea's APT45 as a distinct hacking team conducting cyberespionage and ransomware operations.
SecurityWeek - Webinar: Securing the Modern Workspace: What Enterprises MUST Know about Enterprise Browser Security
The browser is the nerve center of the modern workspace. Ironically, however, the browser is also one of the least protected threat surfaces of the modern enterprise. Traditional security tools provide little protection against browser-based threats, leaving…
The Hacker News - LummaC2 Malware Using Steam Gaming Platform as C2 Server
Cybersecurity experts have uncovered a sophisticated variant of the LummaC2 malware that leverages the popular Steam gaming platform as a Command-and-Control (C2) server. This new tactic marks a significant evolution in the malware’s distribution and…
gbhackers.com - Google Boosts Chrome Protections Against Malicious Files
Google has announced improved protections for Chrome users when downloading files from the internet.
SecurityWeek