News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 16 so far | 0 |
Developing
Wed 31 Jul 202479 articles
- Australian Companies Will Soon Need to Report Ransom Payments
Significant upcoming legislation promises to tighten the screws on cyber incident response in Australia, mirroring CIRCIA in the US.
Dark Reading - North Koreans Target Devs Worldwide With Spyware, Job Offers
DEV#POPPER is back, looking to deliver a comprehensive, updated infostealer to coding job seekers by way of a savvy social engineering gambit.
Dark Reading - Credit card users get mysterious shopify-charge.com charges
People worldwide report seeing mysterious $1 or $0 charges from Shopify-charge.com appearing on their credit card bills, even when they did not attempt to purchase anything. [...]
BleepingComputer - A ransomware attack disrupted operations at OneBlood blood bank
OneBlood, a non-profit blood bank serving over 300 U.S. hospitals, suffered a ransomware attack that disrupted its medical operations. OneBlood is a non-profit organization that provides blood and blood products to over 300 hospitals and medical facilities…
Security Affairs - DigiCert to delay cert revocations for critical infrastructure
DigiCert urges critical infrastructure operators to request a delay if they cannot reissue their certificates, as required by an ongoing certificate mass-revocation process announced on Tuesday. [...]
BleepingComputer - AI-Driven Executive Impersonations Emerge As Significant Threat to Business Payment Processes
No content available.
Dark Reading - Siri Bug Enables Data Theft on Locked Apple Devices
Malicious actors could potentially exploit this vulnerability if they gain physical access to a user's device.
Dark Reading - Microsoft: Azure DDoS Attack Amplified by Cyber Defense Error
The sustained cyberattack, likely made worse by a mitigation snafu, disrupted several Azure cloud services for nearly eight hours on July 30.
Dark Reading - Smart Cars Share Driver Data, Prompting Calls for Federal Scrutiny
Two US senators accuse carmakers of deceptive language and shifty practices in sharing and resale of driver data.
Dark Reading - OneBlood's virtual machines encrypted in ransomware attack
OneBlood, a large not-for-profit blood center that serves hospitals and patients in the United States, is dealing with an IT systems outage caused by a ransomware attack. [...]
BleepingComputer - CISA and FBI: DDoS attacks won’t impact US election integrity
CISA and the FBI said today that Distributed Denial of Service (DDoS) attacks targeting election infrastructure will, at most, hinder public access to information but will have no impact on the integrity or security of the 2024 U.S. general election…
BleepingComputer - Google ads push fake Google Authenticator site installing malware
Google has fallen victim to its own ad platform, allowing threat actors to create fake Google Authenticator ads that push the DeerStealer information-stealing malware. [...]
BleepingComputer - Ransomware Attack Hits OneBlood Blood Bank, Disrupts Medical Operations
OneBlood, a non-profit blood bank serving more than 300 U.S. hospitals, has been hit by a disruptive ransomware attack.
SecurityWeek - Cost of Data Breach in 2024: $4.88 Million, Says Latest IBM Study
The average cost of a data breach jumped to $4.88 million from $4.45 million in 2023, a 10% spike.
SecurityWeek - World leading silver producer Fresnillo discloses cyberattack
Fresnillo PLC, the world's largest silver producer and a top global producer of gold, copper, and zinc, said attackers gained access to data stored on its systems during a recent cyberattack. [...]
BleepingComputer - New Android malware wipes your device after draining bank accounts
A new Android malware that researchers call 'BingoMod' can wipe devices after successfully stealing money from the victims' bank accounts using the on-device fraud technique. [...]
BleepingComputer - Meta to pay $1.4 billion over unauthorized facial recognition image capture
Texas Attorney General Ken Paxton has announced a $1.4 billion settlement with Meta to “stop the company’s practice of capturing and using the personal biometric data of millions of Texans without the authorization required by law.” The prime reason for the…
Malwarebytes - Massive OTP-Stealing Android Malware Campaign Discovered
Android malware can intercept and steal OTPs and login credentials, leading to complete account takeovers.
SecurityWeek - Dangerous XSS Bugs in RedCAP Threaten Academic & Scientific Research
The security vulnerabilities, CVE-2024-37394, CVE-2024-37395, and CVE-2024-37396, could lay open proprietary and sensitive research to data thieves.
Dark Reading - Fraud ring pushes 600+ fake web shops via Facebook ads
A malicious fraud campaign dubbed "ERIAKOS" promotes more than 600 fake web shops through Facebook advertisements to steal visitors' personal and financial information. [...]
BleepingComputer - DigiCert to Revoke 83,000+ SSL Certificates Due to Domain Validation Oversight
Certificate authority (CA) DigiCert has warned that it will be revoking a subset of SSL/TLS certificates within 24 hours due to an oversight with how it verified if a digital certificate is issued to the rightful owner of a domain. The company said it will…
The Hacker News - VMware ESXi Vulnerability Exposes Thousands of Servers to Ransomware
A vulnerability in VMware’s ESXi virtualization platform continues to leave thousands of servers exposed to ransomware attacks, despite active exploitation by cybercriminals and warnings from major security organizations. Researchers from the Shadowserver…
SecurityOnline - Why Brand Protection Matters: 5 Cases Every Business Should Know
Why Brand Protection Matters: 5 Cases Every Business Should Know Businesses need to remain cautious in order to protect their assets from the increasing sophistication of hostile actors and the development of cyber threats. These threats are not only coming…
SOCRadar - Would Making Ransom Payments Illegal Result in Fewer Attacks?
If paying a ransom is prohibited, organizations won't do it — eliminating the incentive for cybercriminals. Problem solved, it seems. Or is it?
Dark Reading - Mysterious Family Of Malware Hid In Google Play For Years
No content available.
packetstormsecurity.com - City Of Columbus Says Data Compromised In Ransomware Attack
No content available.
packetstormsecurity.com - Microsoft Says Azure Outage Caused By DDoS Attack Response
No content available.
packetstormsecurity.com - DigiCert Gives Unlucky Folks 24 Hours To Replace Doomed Certificates After Code Blunder
No content available.
packetstormsecurity.com - Vulnerabilities Enable Attackers to Spoof Emails From 20 Million Domains
Vulnerabilities in hosted email services allow attackers to spoof the identity of senders, bypassing security measures.
SecurityWeek - CrowdStrike Faces Lawsuits From Customers, Investors
CrowdStrike is facing lawsuits from investors and customers following the incident that caused massive global outages.
SecurityWeek - World Wide Web Consortium Opposed Google’s Decision on Third-party cookies
The World Wide Web Consortium (W3C) has strongly opposed Google’s decision to halt the deprecation of third-party cookies. The W3C has updated its Technical Architecture Group (TAG) finding to emphasize the necessity of removing third-party cookies due to…
gbhackers.com - North Korea-Linked Malware Targets Developers on Windows, Linux, and macOS
The threat actors behind an ongoing malware campaign targeting software developers have demonstrated new malware and tactics, expanding their focus to include Windows, Linux, and macOS systems. The activity cluster, dubbed DEV#POPPER and linked to North…
The Hacker News - Apple fixes Siri vulnerabilities that could have allowed sensitive data theft from locked device. Update now!
Apple has released security updates for many of its products in order to patch several vulnerabilities that could allow an attacker to steal sensitive information from a locked device. Included in the patches for Apple Watch, iOS, and iPadOS are four…
Malwarebytes - PR vs cybersecurity teams: Handling disagreements in a crisis
Check out our first two articles in this series, Cybersecurity crisis communication: What to do and Crisis communication: What NOT to do. When a cyber incident happens inside an organization, everyone in the company has a stake in how to approach…
securityintelligence.com - Microsoft says massive Azure outage was caused by DDoS attack
Microsoft confirmed today that a nine-hour outage on Tuesday, which took down and disrupted multiple Microsoft 365 and Azure services worldwide, was triggered by a distributed denial-of-service (DDoS) attack. [...]
BleepingComputer - Apple fixed dozens of vulnerabilities in iOS and macOS
Apple has issued security updates to address multiple vulnerabilities across iOS, macOS, tvOS, visionOS, watchOS, and Safari. Apple released security updates to address multiple vulnerabilities in iOS, macOS, tvOS, visionOS, watchOS, and Safari. The IT giant…
Security Affairs