News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 15 so far | 0 |
Developing
Mon 29 Jul 202469 articles
- SecurityWeek Analysis: 178 Cybersecurity M&A Deals Announced in First Half of 2024
178 cybersecurity M&A deals were announced in the first half of 2024, the smallest half year number since SecurityWeek started tracking them.
SecurityWeek - ImageMagick AppImage Vulnerability Opens Door to Arbitrary Code Execution
ImageMagick, a popular image processing library used in a wide range of industries, has issued a security advisory warning users of a vulnerability in its AppImage version. The flaw, discovered by security researcher lebr0nli,...
SecurityOnline - Malicious Python Package Attacking macOS Developers To Steal Google Cloud Logins
Hackers continuously exploit malicious Python packages to attack developer environments and inject harmful code that enables them to steal sensitive information, install malware, or create backdoors. The method takes advantage of the widely-used repositories…
gbhackers.com - Selenium Grid Instances Exploited for Cryptomining
Wiz has detailed SeleniumGreed, a campaign in which threat actors target exposed Selenium Grid instances for cryptomining.
SecurityWeek - PKfail, Critical Firmware Supply-Chain Issue Let Attackers Bypass Secure Boot
Hackers often attack secure boot during the boot process to execute unauthorized code, which gives them the ability to bypass a system’s security measures. By compromising Secure Boot, they can install rootkits and malware at a low level, gaining persistent…
gbhackers.com - Hackers Attacking Users Searching For W2 Form
A malicious campaign emerged on June 21, 2024, distributing a JavaScript file hosted on grupotefex.com, which executes an MSI installer, subsequently dropping a Brute Ratel Badger DLL into the user’s AppData. The command-and-control framework Brute Ratel…
gbhackers.com - North Korean Onyx Sleet Using Group Of Malware And Exploits to Gain Intelligence
Onyx Sleet, a cyber espionage group also known as SILENT CHOLLIMA, Andariel, DarkSeoul, Stonefly, and TDrop2, mainly targets the military, defense sector, and technology in the United States, South Korea, and India. The group historically used…
gbhackers.com - Cisco Patches the Products Impacted by RADIUS Protocol Vulnerability
Cisco has issued patches for multiple products affected by a critical vulnerability in the RADIUS protocol. The vulnerability, identified as CVE-2024-3596, was disclosed by security researchers on July 7, 2024. This flaw allows an on-path attacker to forge…
gbhackers.com - A week in security (July 22 – July 28)
Last week on Malwarebytes Labs: Meta takes down 63,000 sextortion-related accounts on Instagram Windows update may present users with a BitLocker recovery screen TracFone will pay $16 million to settle FCC data breach investigation Google admits it c...
Malwarebytes - Google Patches Workspace Authentication Flaw, Thwarting Account Takeover Attempts
Google has recently addressed a critical security flaw in its Google Workspace platform that allowed threat actors to bypass email verification during account creation, as reported by KrebsOnSecurity. This flaw potentially enabled attackers to...
SecurityOnline - RaspAP Vulnerability: Root Access at Risk for Raspberry Pi Users
Security researcher Zonifer has uncovered a critical vulnerability (CVE-2024-41637) in RaspAP, a popular open-source tool used to turn Raspberry Pi devices into wireless access points. This vulnerability could allow a local attacker to escalate...
SecurityOnline - French Govt Investigating Recent Malware Attack that Compromised 3,000 Machines
The French government has investigated a malware attack that compromised approximately 3,000 machines within the country. The attack, part of a more extensive botnet operation affecting millions globally, has raised serious concerns about cybersecurity as…
gbhackers.com - 'Stargazer Goblin' Creates 3,000 Fake GitHub Accounts for Malware Spread
A threat actor known as Stargazer Goblin has set up a network of inauthentic GitHub accounts to fuel a Distribution-as-a-Service (DaaS) that propagates a variety of information-stealing malware and netting them $100,000 in illicit profits over the past year.…
The Hacker News - Google Patches Chrome Password Manager Bug After Mass Outage
Google has apologized for a malfunction that prevented many Windows users from finding or saving their passwords in the Chrome browser. The issue, which arose on July 24 and persisted for nearly 18 hours...
SecurityOnline - Cybersecurity in Focus: ECB Stress Test Exposes Banks’ Vulnerabilities
The European Central Bank (ECB) has concluded an extensive cybersecurity stress test of European banks, initiated in January 2024. The regulator assessed the readiness of financial institutions to withstand and recover from significant cyberattacks....
SecurityOnline - Fake Falcon crash reporter installer used to target German Crowdstrike users
CrowdStrike warns about a new threat actor targeting German customers by exploiting a recent issue with Falcon Sensor updates. On July 24, 2024, CrowdStrike experts identified a spear-phishing campaign targeting German customers by exploiting the recent…
Security Affairs - Belarus-linked APT Ghostwriter targeted Ukraine with PicassoLoader malware
Belarus-linked APT group GhostWriter targeted Ukrainian organizations with a malware family known as PicassoLoader, used to deliver various malicious payloads. The Ukrainian Government’s Computer Emergency Response Team (CERT-UA) reported a surge in activity…
Security Affairs - Gh0st RAT Trojan Targets Chinese Windows Users via Fake Chrome Site
The remote access trojan known as Gh0st RAT has been observed being delivered by an "evasive dropper" called Gh0stGambit as part of a drive-by download scheme targeting Chinese-speaking Windows users. These infections stem from a fake website…
The Hacker News - Critical Vulnerabilities Discovered in WinMatrix IT Management System
Taiwan’s CERT (Computer Emergency Response Team) has issued a critical warning regarding two severe vulnerabilities [1, 2] discovered in Simopro Technology’s WinMatrix IT resource management system. These vulnerabilities, identified as CVE-2024-7201 and…
SecurityOnline - Cyberattack Surge: SMBs Grapple with 8% Rise in Malware
Kaspersky’s most recent report reveals a concerning 5% surge in malware infections among small and medium-sized enterprises (SMBs) during the first quarter of 2024, compared to the corresponding period in the preceding year. A...
SecurityOnline - Kaspersky’s Proactive Audit Offer Rejected by U.S. Amid Ban
The prominent Russian cybersecurity firm Kaspersky proactively proposed a third-party source code audit before its ban in the United States, as reported by The Register. This strategic move aimed to unequivocally demonstrate that the...
SecurityOnline - Microsoft Edge Update Tackles 18 Vulnerabilities, Including Proprietary Fixes
Microsoft has recently released a security update for its Edge browser, version 127.0.2651.74, addressing a total of 18 vulnerabilities. The update incorporates patches for 16 vulnerabilities found in the open-source Chromium project, upon which...
SecurityOnline - CVE-2024-34693: Apache Superset Arbitrary File Read Vulnerability, PoC Published
The Apache Software Foundation recently released security updates to address an arbitrary file read vulnerability (CVE-2024-34693) in Apache Superset. This vulnerability could allow an attacker to read arbitrary files on the server, potentially leading...
SecurityOnline - Cisco Confirms Critical RADIUS Protocol Vulnerability in Multi Products: Patch Now!
Cisco has issued a security advisory for a critical vulnerability (CVE-2024-3596) in the RADIUS protocol, a widely used authentication and authorization framework for network access. This vulnerability could allow an attacker to bypass multi-factor...
SecurityOnline - Microsoft Remains Top Phishing Target, Adidas and WhatsApp Join Top 10
Phishing attacks remain one of the most prevalent cyber threats and often serve as the precursor to larger-scale supply chain campaigns. Recently, Check Point Research (CPR), the threat intelligence arm of Check Point® Software...
SecurityOnline - CVE-2024-6922: SSRF Flaw Found in Automation Anywhere, 3,500+ Servers Exposed
A vulnerability, identified as CVE-2024-6922, has been discovered in Automation Anywhere Automation 360, a widely used robotic process automation (RPA) platform. The vulnerability, unauthenticated Server-Side Request Forgery (SSRF), could allow attackers to…
SecurityOnline - AI’s Dark Side: Hackers Harnessing ChatGPT and LLMs for Malicious Attacks
In a concerning trend, cybercriminals are increasingly leveraging Large Language Models (LLMs) like ChatGPT to craft sophisticated and deceptive attacks, according to a recent report from Symantec. While LLMs like ChatGPT have proven to...
SecurityOnline - Operation ShadowCat Targets Indian Political Observers
Cyble Research & Intelligence Labs (CRIL) has uncovered a sophisticated cyber espionage campaign dubbed “Operation ShadowCat.” This campaign targets individuals with a keen interest in Indian political affairs, including government officials, political…
SecurityOnline - Cyberattacks Soar in Q2 2024: BEC and Ransomware Dominate
The second quarter of 2024 marked a period of heightened cyberattacks, with business email compromise (BEC) and ransomware emerging as the primary threats, according to a report by Cisco Talos Incident Response (Talos IR)....
SecurityOnline