News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 16 so far | 0 |
Developing
Tue 30 Jul 202474 articles
- Threat Actor Allegedly Claiming Hack of Microsoft Employee’s Device
A threat actor has taken to social media to claim responsibility for hacking into a Microsoft employee’s device. The announcement was made via a Telegram post, accompanied by a video purportedly showing the breach’s aftermath, as per a tweet by ThreatMon, a…
gbhackers.com - Critical OpenSSH “regreSSHion” Vulnerability Impacted macOS Systems, Patch Now
A serious flaw in OpenSSH servers, dubbed “regreSSHion,” affects macOS systems and could allow a remote attacker to execute arbitrary code. A few weeks ago, Qualys’ threat research unit discovered this vulnerability, which has been identified as regreSSHion…
gbhackers.com - ICO reprimands the Electoral Commission after cyber attack compromises servers
The U.K.’s Information Commissioner’s Office issued the following statement today: We have issued a reprimand to the Electoral Commission after hackers gained access to servers that contained the personal information of approximately 40 million people. In…
DataBreaches - Curbing liabilities for hacked health systems
Daniel Payne, Ben Leonard, and Chelsea Cirruzzo report: THE LIABILITY QUESTION — State lawmakers, concerned by what they consider to be overreaching class-action lawsuits against health care organizations over data breaches, are moving to curb liability for…
DataBreaches - SocGholish Malware Attacking Windows Users Using Fake Browser Update
The SocGholish downloader has been in operation since 2017 and it is still evolving. This malware, which poses as a browser update, is favored by multiple threat groups such as the Russian-operated Evil Corp (Manatee Tempest) and the Initial Access Broker…
gbhackers.com - AcidPour Malware Attacking Linux Data Storage Devices To Wipe Out Data
In March 2024, a new variant of the AcidRain wiper malware dubbed “AcidPour” was noticed. It targets Linux data storage devices and permanently erases data from the targeted systems, making them inoperative. It targets crucial sectors of Linux devices such…
gbhackers.com - Cybercriminals Target Polish Businesses with Agent Tesla and Formbook Malware
Cybersecurity researchers have detailed widespread phishing campaigns targeting small and medium-sized businesses (SMBs) in Poland during May 2024 that led to the deployment of several malware families like Agent Tesla, Formbook, and Remcos RAT. Some of the…
The Hacker News - Cyber Threat Intelligence: Illuminating the Deep, Dark Cybercriminal Underground
Learn about critical threats that can impact your organization and the bad actors behind them from Cybersixgill’s threat experts. Each story shines a light on underground activities, the threat actors involved, and why you should care, along with what you…
The Hacker News - Threat Actor Allegedly Claiming Breach of Cyepr
A threat actor has allegedly claimed responsibility for breaching Cyepro Solutions, a company known for its cloud solutions tailored to the automotive sales industry. The breach, reportedly in July 2024, has potentially compromised the personal information…
gbhackers.com - Hacker Attacking Bank Users With AI-powered Phishing Tools and Android Malware
Cybersecurity firm Group-IB has uncovered a sophisticated cybercrime operation targeting Spanish banking customers. The criminal group GXC Team has been using AI-powered phishing tools and Android malware to steal sensitive banking information. This article…
gbhackers.com - ShadowRoot Ransomware Campaign
ShadowRoot Ransomware Campaign The ShadowRoot ransomware campaign represents a significant cybersecurity threat targeting Turkish businesses. This campaign, identified by the X-Labs research team, utilizes phishing emails to distribute malicious PDF…
SOCRadar - Cyber Insurance Provider Cowbell Raises $60 Million
Zurich Insurance Group has invested $60 million in cyber insurance firm Cowbell to help it scale operations and deliver new products.
SecurityWeek - Apple Rolls Out Security Updates for iOS, macOS
Apple has released security patches for dozens of vulnerabilities in iOS, macOS, tvOS, visionOS, watchOS, and Safari.
SecurityWeek - A crafty phishing campaign targets Microsoft OneDrive users
Researchers detected a sophisticated phishing campaign targeting Microsoft OneDrive users to trick them into executing a PowerShell script. Over the past few weeks, the Trellix Advanced Research Center observed a sophisticated phishing campaign targeting…
Security Affairs - New SideWinder Cyber Attacks Target Maritime Facilities in Multiple Countries
The nation-state threat actor known as SideWinder has been attributed to a new cyber espionage campaign targeting ports and maritime facilities in the Indian Ocean and Mediterranean Sea. The BlackBerry Research and Intelligence Team, which discovered the…
The Hacker News - DigiCert to Revoke Thousands of Certificates Following Domain Validation Error
DigiCert, a leading digital certificate provider, has announced the revocation of thousands of certificates due to a domain validation error. This decision follows the discovery of a critical issue in their Domain Control Validation (DCV) process, which has…
gbhackers.com - EchoSpoofing: Millions Targeted in Proofpoint Email Breach
An unknown attacker exploited a vulnerability in the email routing settings of Proofpoint to send mass fraudulent messages impersonating well-known companies such as Best Buy, IBM, Nike, and Walt Disney. According to a researcher...
SecurityOnline - Network Equipment Under Siege: New Report Exposes Widespread Vulnerabilities
A new report by NetRise analyzes the software composition, vulnerabilities, and non-CVE risks present in corporate network equipment—routers, switches, firewalls, VPN gateways, and wireless access points. NetRise highlights that organizations employ a…
SecurityOnline - AI-Driven Phishing-as-a-Service: GXC Team Raises the Stakes in Cybercrime
Group-IB reports on the activities of the Spanish-speaking cyber group GXC Team, which uses phishing kits with malicious Android applications. The cybercriminals offer comprehensive MaaS solutions, significantly enhancing the effectiveness of their attacks.…
SecurityOnline - ZeroTier Raises $13.5 Million in Series A Funding
Virtual networking provider ZeroTier has raised $13.5 million in a Series A funding round led by Battery Ventures.
SecurityWeek - OneDrive Phishing Scam Tricks Users into Running Malicious PowerShell Script
Cybersecurity researchers are warning about a new phishing campaign that targets Microsoft OneDrive users with the aim of executing a malicious PowerShell script. "This campaign heavily relies on social engineering tactics to deceive users into executing a…
The Hacker News - Report: DDoS Attacks Decline, But Large-Scale Threats Surge
The Dutch National Scrubbing Center (NaWas), which protects its participants from DDoS attacks, recorded a significant decrease in the number of attacks in the second quarter of this year. Between April and June, the...
SecurityOnline - North Korean Hacker Indicted: Ransomware on Hospitals Funds Military Espionage
A North Korean hacker has been indicted in the U.S. for allegedly using ransomware attacks on American hospitals to finance espionage activities against military and government targets. The hacker, Rim Jong Hyok, is accused...
SecurityOnline - VMware ESXi Flaw Exploited by Ransomware Groups for Admin Access
A recently patched security flaw impacting VMware ESXi hypervisors has been actively exploited by "several" ransomware groups to gain elevated permissions and deploy file-encrypting malware. The attacks involve the exploitation of CVE-2024-37085 (CVSS score:…
The Hacker News - DigiCert Forced to Revoke Thousands of Certificates Due to Domain Validation Error
Leading digital certificate authority DigiCert has announced an urgent revocation of thousands of its SSL/TLS certificates due to a non-compliance issue in its domain control verification (DCV) process. What Happened? A technical oversight in...
SecurityOnline - Critical OpenSSH Vulnerability “regreSSHion” Threatens macOS Users
Apple has confirmed that macOS systems are vulnerable to a severe OpenSSH vulnerability dubbed “regreSSHion” (CVE-2024-6387). This unauthenticated remote code execution (RCE) flaw could allow attackers to gain full root access to affected servers,...
SecurityOnline - 4.3 Million HealthEquity Users Hit by Major Data Breach
HealthEquity, one of the largest providers of health savings accounts in the United States, reported a significant data breach affecting the information of 4.3 million individuals. The company discovered unauthorized access to sensitive health...
SecurityOnline - Apple Extends Zero-Day Patch to Older Macs, Urges Immediate Update
Apple has expanded its security efforts by backporting a critical zero-day patch to older Mac models running macOS Monterey 12.7.6. The vulnerability, tracked as CVE-2024-23296, was previously addressed in March for newer devices but...
SecurityOnline - CVE-2024-41714 (CVSS 9.9): Command Injection Flaw Discovered in Mitel MiCollab and MiVB SVI
Mitel, a leading provider of business communication solutions, has issued a critical security advisory (24-0021-001) regarding a command injection vulnerability (CVE-2024-41714) found in the MiCollab Client Server of its MiCollab and MiVB SVI products....
SecurityOnline - Cuckoo Spear Threat Alert: APT10 Targets Japan’s Critical Infrastructure
A newly published threat analysis report from Cybereason Security Services reveals “Cuckoo Spear,” a sophisticated and persistent cyber espionage campaign targeting Japanese companies and critical infrastructure sectors. The campaign, attributed to the…
SecurityOnline - CVE-2024-37085: VMware ESXi Vulnerability Exploited by Ransomware Gangs
Microsoft Threat Intelligence has disclosed a vulnerability (CVE-2024-37085) in VMware ESXi hypervisors, which is being actively exploited in the wild by multiple ransomware threat actors. The vulnerability allows unauthorized access and control of affected...
SecurityOnline - North Korea’s APT45: From Espionage to Ransomware Extortion
The North Korean hacker group Andariel is accused of stealing confidential information and weapons blueprints from various countries worldwide. The cybersecurity company Mandiant has published the results of a two-year investigation into the group’s...
SecurityOnline - Three Security Flaws Discovered in Adtran 834-5 Wi-Fi 5 Service Delivery Gateway
A series of vulnerabilities have been uncovered in the widely deployed Adtran 834-5 Wi-Fi 5 Service Delivery Gateway (SDG), potentially leaving countless users and networks exposed to malicious exploitation. The flaws, discovered by security...
SecurityOnline - India Post Customers Targeted in Massive Phishing Scam
A sophisticated phishing campaign targeting iPhone users in India has been uncovered by the FortiGuard Labs Threat Research team. The attackers believed to be the China-based Smishing Triad, are impersonating India Post to trick...
SecurityOnline