News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 12 so far | 0 |
Developing
Fri 26 Jul 202458 articles
- Cross Fork Object Reference (CFOR): GitHub’s New Security Vulnerability
Experts at Truffle Security have discovered that data from deleted forks, repositories, and even private repositories on GitHub may remain accessible indefinitely. This issue is not only known to the company but is also...
SecurityOnline - China Targets U.S. Tech Startups through Investments, NCSC Reveals
The National Counterintelligence and Security Center (NCSC) of the United States has issued a warning to technology startups about the risks associated with foreign investments. According to the NCSC, foreign states, particularly China, are...
SecurityOnline - 10 Million Users Compromised in Z-Library Phishing Site Hack
On the popular pirate e-book site Z-Library, or rather its phishing clone Z-lib, created in late 2022, there was a recent data breach affecting nearly 10 million users. On June 27, 2024, the Cybernews...
SecurityOnline - 97% of Devices Disrupted by CrowdStrike Restored as Insurer Estimates Billions in Losses
CrowdStrike says 97% of Windows systems impacted by its bad update are back online, just as an insurer predicts billions in losses for major companies.
SecurityWeek - Inside the Operations of Stargazer Goblin: Unveiling the Malicious Repositories
Check Point has uncovered a network of 3,000 fake accounts on GitHub, actively disseminating malicious programs and phishing links. The activities began at least as early as May of the previous year. The most...
SecurityOnline - OpenAI Introduces SearchGPT Prototype
In May, there were rumors that OpenAI would launch its search engine. However, during the OpenAI Spring Release on May 13th, this search engine was not announced. At that time, Sam Altman stated that...
SecurityOnline - Terrorist Activity is Accelerating in Cyberspace – Risk Precursor to Summer Olympics and Elections
Terrorist groups are increasingly using cyberspace and digital communication channels to plan and execute attacks. Yesterday Federal Bureau of Investigation (FBI) Director Christopher Wray expressed growing concerns over the potential for a coordinated…
Security Affairs - Play & LockBit Ransomware Join Hands to Launch Cyber Attacks
Play Ransomware and LockBit Ransomware have reportedly allied to enhance their capabilities in launching cyber attacks. This collaboration, which involves a significant financial transaction and training exchange, has raised alarms among cybersecurity…
gbhackers.com - Ongoing Cyberattack Targets Exposed Selenium Grid Services for Crypto Mining
Cybersecurity researchers are sounding the alarm over an ongoing campaign that's leveraging internet-exposed Selenium Grid services for illicit cryptocurrency mining. Cloud security Wiz is tracking the activity under the name SeleniumGreed. The campaign,…
The Hacker News - CrowdStrike Warns of New Phishing Scam Targeting German Customers
CrowdStrike is alerting about an unfamiliar threat actor attempting to capitalize on the Falcon Sensor update fiasco to distribute dubious installers targeting German customers as part of a highly targeted campaign. The cybersecurity company said it…
The Hacker News - Critical Flaw in Telerik Report Server Poses Remote Code Execution Risk
Progress Software is urging users to update their Telerik Report Server instances following the discovery of a critical security flaw that could result in remote code execution. The vulnerability, tracked as CVE-2024-6327 (CVSS score: 9.9), impacts Report…
The Hacker News - CVE-2024-40767: OpenStack Nova Vulnerability Exposes Cloud Servers to Data Theft Risk
A critical vulnerability (CVE-2024-40767) has been discovered in OpenStack Nova, the open-source cloud computing platform’s core component for managing virtual servers. This flaw could allow unauthorized users to access sensitive data on cloud servers,...
SecurityOnline - HPE Servers Exposed: Critical Vulnerability Demands Urgent Firmware Update
A critical security vulnerability, CVE-2021-38578, has been discovered in a wide range of HPE ProLiant, Alletra, Synergy, Apollo, and Edgeline servers. This vulnerability, rated with a severity score of 9.8, could allow remote attackers...
SecurityOnline - FLUXROOT: Phishing Hackers Exploit Serverless Google Cloud
A financially motivated hacker group, codenamed FLUXROOT, has been identified in Latin America, utilizing serverless Google Cloud projects to orchestrate phishing attacks. These assaults aim to steal credentials, highlighting the misuse of cloud computing...
SecurityOnline - Critical Flaws in LangChain Expose Millions of AI Apps to Attack
Researchers from Palo Alto Networks have recently detailed two significant security vulnerabilities in LangChain, a widely used open-source generative AI framework boasting nearly 90,000 stars on GitHub. These vulnerabilities, identified as CVE-2023-46229…
SecurityOnline - Malicious Stealer Campaign Exploits Windows SmartScreen Flaw (CVE-2024-21412)
A stealthy cyber campaign is leveraging a critical flaw in Microsoft Windows SmartScreen, the built-in security feature designed to protect users from malicious downloads. This vulnerability, tracked as CVE-2024-21412, has been weaponized by multiple...
SecurityOnline - Acronis Cyber Infrastructure Users Urged to Patch Critical Vulnerability (CVE-2023-45249)
A critical vulnerability, CVE-2023-45249 (CVSS 9.8), has been discovered in Acronis Cyber Infrastructure (ACI), a popular software-defined infrastructure solution used by numerous organizations for cyber protection. The vulnerability, stemming from the use…
SecurityOnline - New Auto Blocker in Samsung OneUI 6.1.1: Blocking APK Sideloading for Enhanced Security
Starting with OneUI 6.1.1, Samsung has implemented a default setting that blocks users from sideloading APK files. This setting is now applied to Samsung’s latest Android devices, even if the REQUEST_INSTALL_PACKAGES permission has been...
SecurityOnline