News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 12 so far | 0 |
Developing
Thu 25 Jul 202464 articles
- Researchers Reveal ConfusedFunction Vulnerability in Google Cloud Platform
Cybersecurity researchers have disclosed a privilege escalation vulnerability impacting Google Cloud Platform's Cloud Functions service that an attacker could exploit to access other services and sensitive data in an unauthorized manner. Tenable has given…
The Hacker News - Phone Lines Down in Multiple Courts Across California After Ransomware Attack
Phone lines down in multiple courts across California after ransomware attack on state’s largest trial court in Los Angeles County.
SecurityWeek - ServiceNow Exploits Used in Global Reconnaissance Campaign
Resecurity has uncovered a widespread campaign exploiting critical vulnerabilities in ServiceNow, a popular platform for digital workflows. The flaws, identified as CVE-2024-4879, CVE-2024-5217, and CVE-2024-5178, allowed unauthenticated attackers to execute…
SecurityOnline - Enhanced Security in Chrome: New Alerts for Suspicious File Downloads
Google Chrome has introduced a new warning system for downloading potentially dangerous, password-protected files. This two-tier warning system for downloads is based on the results of AI malware analysis within the “Safe Browsing” mode....
SecurityOnline - Nvidia Patches High-Severity Vulnerabilities in AI, Networking Products
Nvidia has patched high-severity vulnerabilities in its Jetson, Mellanox OS, OnyX, Skyway, and MetroX products.
SecurityWeek - Critical Vulnerability in Windows Hello for Business Discovered by Researcher
Researcher Yehuda Smirnov has uncovered a critical vulnerability in Microsoft’s Windows Hello for Business (WHfB) authentication system. His discovery calls into question the reliability of biometric security, once considered invincible. WHfB, introduced by…
SecurityOnline - Red Art Games Hit by Major Cyberattack, Customer Data Exposed
Red Art Games has announced that it has fallen victim to a large-scale cyberattack, resulting in the compromise of numerous customer data. Order processing and returns will be suspended for the next few days...
SecurityOnline - Researchers Uncover Massive Quad7 Botnet Targeting Microsoft 365
Sekoia.io, in collaboration with Intrinsec, conducted an in-depth analysis of the Quad7 (7777) botnet, which utilizes TCP port 7777 on infected routers and carries out brute-force attacks on Microsoft 365 accounts worldwide. Experts detected...
SecurityOnline - Reddit Restricts Search Indexing, Google Gets Exclusive Pass
In a move that’s sending ripples through the tech world, Reddit has implemented a sweeping block on major search engine crawlers, with the notable exception of Google, according to a report from 404 Media. This...
SecurityOnline - Ukraine Hackers Hit Major Russian banks with DDoS attacks
Several prominent Russian bank clients experienced issues with their mobile apps and websites. According to Downdetector, complaints began to surge around 09:30 Moscow time. The affected banks included Gazprombank, Alfa-Bank, VTB, and Rosbank. By midday,…
gbhackers.com - Critical Docker Engine Flaw Allows Attackers to Bypass Authorization Plugins
Docker is warning of a critical flaw impacting certain versions of Docker Engine that could allow an attacker to sidestep authorization plugins (AuthZ) under specific circumstances. Tracked as CVE-2024-41110, the bypass and privilege escalation vulnerability…
The Hacker News - CISA Warns of Exploitable Vulnerabilities in Popular BIND 9 DNS Software
The Internet Systems Consortium (ISC) has released patches to address multiple security vulnerabilities in the Berkeley Internet Name Domain (BIND) 9 Domain Name System (DNS) software suite that could be exploited to trigger a denial-of-service (DoS)…
The Hacker News - New Chrome Feature Scans Password-Protected Files for Malicious Content
Google said it's adding new security warnings when downloading potentially suspicious and malicious files via its Chrome web browser. "We have replaced our previous warning messages with more detailed ones that convey more nuance about the nature of the…
The Hacker News - Pro-Palestinian Actor Levels 6-Day DDoS Attack on UAE Bank
DDoS cyberattack campaign averaged 4.5 million requests per second, putting the bank under attack 70% of the time.
Dark Reading - Critical Flaws in Progress Telerik Reporting Tools Put Organizations at Risk of Remote Takeover
Progress Software’s widely used Telerik Reporting tools are facing serious security vulnerabilities that could lead to full system compromise, the company warned today. Two flaws, one rated “critical,” allow attackers to remotely execute code...
SecurityOnline - CVE-2024-41827: Expired Tokens Still Active in JetBrains TeamCity, Urgent Update Required
JetBrains TeamCity, a widely used continuous integration and continuous delivery (CI/CD) platform, has been found to contain a high-severity security vulnerability (CVE-2024-41827). This flaw allows deleted or expired access tokens to continue functioning,…
SecurityOnline - GitLab Patches Six Security Flaws, Urges Immediate Update
GitLab, the widely-used code collaboration platform, released a security update today that addresses a half-dozen vulnerabilities across multiple versions of its software. While none of the flaws are classified as “critical,” one high-severity cross-site...
SecurityOnline - Siemens SICAM Products Vulnerable to Critical Flaws, Urgent Update Needed
Siemens, a global industrial automation giant, has issued a critical security advisory warning users of multiple SICAM products about serious vulnerabilities that could lead to unauthorized access and data leaks. The affected products include...
SecurityOnline - HotPage.exe Unmasked: Hidden Malware with Advanced Capabilities
At the end of 2023, researchers stumbled upon an intriguing discovery—a setup file named HotPage.exe. At first glance, this application appeared to be yet another piece of adware. However, deeper analysis revealed that behind...
SecurityOnline - BIND Security Updates: Patch Your DNS Servers Now
The Internet Systems Consortium (ISC), the maintainers of the widely-used BIND Domain Name System (DNS) server software, has released critical security updates to address four high-severity vulnerabilities. These flaws could allow attackers to cause...
SecurityOnline - EV Fast Chargers Vulnerable to Remote Hacking, Study Finds
Engineers at Southwest Research Institute (SwRI), located in Texas, discovered a vulnerability in fast charging stations for electric vehicles that allows hackers to gain unauthorized access and even modify embedded software. Power Line Communication...
SecurityOnline - Espionage Group Daggerfly Revamps Toolset, Expands Targets in Wake of Malware Exposure
The notorious espionage group Daggerfly, also known as Evasive Panda and Bronze Highland, has undergone a significant overhaul of its cyber arsenal, likely spurred by the public disclosure of its older malware variants. According...
SecurityOnline - Record Cyberattack: Suffolk County’s $25.7M Recovery Plan
Suffolk County, New York, has approved an allocation of $25.7 million for recovery efforts following one of the most devastating cyberattacks on a municipality in the United States. On September 8, 2022, the ALPHV/BlackCat...
SecurityOnline - Michigan Medicine data breach impacted 56953 patients
A cyber attack against Michigan Medicine resulted in the compromise of the personal and health information of approximately 57,000 patients. The academic medical center of the University of Michigan, Michigan Medicine, suffered a data breach that impacted…
Security Affairs