News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 16 so far | 0 |
Developing
Wed 31 Jul 202479 articles
- New Specula Tool Turning Outlook as a C2 Server by Leveraging Registry
Cybersecurity firm TrustedSec has unveiled a powerful new tool called Specula. It exploits a longstanding vulnerability in Microsoft Outlook to transform it into a Command and Control (C2) server. This revelation has sent shockwaves through the cybersecurity…
gbhackers.com - City of Columbus Says Data Compromised in Ransomware Attack
The City of Columbus is investigating the scope of a data breach resulting from a thwarted ransomware attack.
SecurityWeek - Don’t Let Your Domain Name Become a “Sitting Duck”
More than a million domain names — including many registered by Fortune 100 firms and brand protection companies — are vulnerable to takeover by cybercriminals thanks to authentication weaknesses at a number of large web hosting providers and domain…
Krebs on Security - Top 10 Attack Surface Management Tools
Top 10 Attack Surface Management Tools Attack Surface Management (ASM) tools have become critical for organizations in identifying, managing, and mitigating vulnerabilities in digital environments. These tools enable continuous monitoring, discovery, and…
SOCRadar - Dynamically Evolving SMS Stealer Threatens Global Android Users
A network of more than 2,600 Telegram bots has helped exfiltrate one-time passwords and data from devices for more than two years.
Dark Reading - Chrome 127 Improves Cookie Protection on Windows
Google has improved the security of cookies in Chrome on Windows and rolled out a Chrome 127 update to address critical- and high-severity vulnerabilities.
SecurityWeek - Chinese Hackers Target Japanese Firms with LODEINFO and NOOPDOOR Malware
Japanese organizations are the target of a Chinese nation-state threat actor that leverages malware families like LODEINFO and NOOPDOOR to harvest sensitive information from compromised hosts while stealthily remaining under the radar in some cases for a…
The Hacker News - Meta paid a $1.4 Billion Settlement for the Unauthorized Capture of Personal Biometric Data
Texas Attorney General Ken Paxton has secured a $1.4 billion settlement with Meta Platforms Inc. (formerly known as Facebook) over the unauthorized capture and use of millions of Texans’ personal biometric data. This settlement marks the largest privacy…
gbhackers.com - How To Get the Most From Your Security Team’s Email Alert Budget
We’ll TL;DR the FUDdy introduction: we all know that phishing attacks are on the rise in scale and complexity, that AI is enabling more sophisticated attacks that evade traditional defenses, and the never-ending cybersecurity talent gap means we’re all…
The Hacker News - DigiCert Revoking Many Certificates Due to Verification Issue
DigiCert is immediately revoking many certificates due to a domain validation issue, which could cause disruption to sites, apps and services.
SecurityWeek - Cybercriminals Deploy 100K+ Malware Android Apps to Steal OTP Codes
A new malicious campaign has been observed making use of malicious Android apps to steal users' SMS messages since at least February 2022 as part of a large-scale campaign. The malicious apps, spanning over 107,000 unique samples, are designed to intercept…
The Hacker News - Dark Web Profile: APT40
Dark Web Profile: APT40 APT40, also known as TEMP.Periscope, Leviathan, and many other aliases, is a Chinese cyber-espionage group attributed to the Chinese Ministry of State Security (MSS). Active since at least 2009, APT40 has been implicated in numerous…
SOCRadar - Cyber Espionage Group XDSpy Targets Companies in Russia and Moldova
Companies in Russia and Moldova have been the target of a phishing campaign orchestrated by a little-known cyber espionage group known as XDSpy. The findings come from cybersecurity firm F.A.C.C.T., which said the infection chains lead to the deployment of a…
The Hacker News - Senate Passes Bill to Protect Kids Online and Make Tech Companies Accountable for Harmful Content
The US Senate has passed a bill to protect kids online and make tech companies accountable for harmful content.
SecurityWeek - Massive Payout: Meta Coughs Up $1.4 Billion in Facial Recognition Settlement
Meta has agreed to pay the state of Texas $1.4 billion to settle a lawsuit accusing the company of unlawfully using facial recognition technology to collect biometric data from millions of Texans without their...
SecurityOnline - Dark Angels Ransomware Gang Reaps Record $75 Million Payout
Zscaler, a company specializing in cloud security, has discovered that this year, hackers from the Dark Angels group secured a record ransom payment of $75 million. The name of the affected organization remains undisclosed,...
SecurityOnline - Phishing campaigns target SMBs in Poland, Romania, and Italy with multiple malware families
Phishing campaigns target small and medium-sized businesses (SMBs) in Poland to deliver malware families such as Agent Tesla, Formbook, and Remcos RAT. ESET researchers observed multiple phishing campaigns targeting SMBs in Poland in May 2024, distributing...
Security Affairs - Company Paid Record-Breaking $75 Million to Ransomware Group: Report
Zscaler is aware of a company that paid a record-breaking $75 million ransom to the Dark Angels ransomware group.
SecurityWeek - CVE-2024-7205 in eWeLink Cloud Service Exposes Devices to Takeover
eWeLink, the popular smart home platform, has issued a critical security advisory warning users of a vulnerability in their cloud service. The flaw, designated as CVE-2024-7205 (CVSS 9.4), could potentially allow unauthorized users to...
SecurityOnline - Google Chrome Strengthens Cookie Security on Windows with App-Bound Encryption
In a move to bolster user protection against cookie theft and infostealer malware, Google Chrome has introduced a new security feature called App-Bound Encryption for Windows users. This enhancement aims to safeguard sensitive data...
SecurityOnline - Double Trouble: DDoS and Internal Errors Cause Major Microsoft Azure Outage
Yesterday, Microsoft’s cloud computing service, Microsoft Azure, experienced another outage. Since many of Microsoft’s services, especially Microsoft 365, also run on Microsoft Azure, the outage affected all Microsoft 365 services, such as OneDrive and...
SecurityOnline - A Fortune 50 company paid a record-breaking $75 million ransom
Zscaler researchers revealed that a company paid a record-breaking $75 million ransom to the Dark Angels ransomware group. Zscaler discovered a record-breaking ransom payment of US$75 million made by a company to the Dark Angels ransomware group. Zscaler did…
Security Affairs - Chrome Security Update: Patch for Critical Flaw that Leads to Exploitation
Google has rolled out a new security update for its Chrome browser, addressing several critical vulnerabilities. The update on the Stable channel brings Chrome to version 127.0.6533.88/89 for Windows and Mac, and 127.0.6533.88 for Linux. The update will be…
gbhackers.com - Specula Tool Weaponizes Microsoft Outlook Vulnerability: New Threat for Email Users
A new tool called Specula is transforming Microsoft Outlook from a productivity tool into a potent weapon for cybercriminals. Developed by TrustedSec, Specula allows attackers to remotely execute code on your system, turning your...
SecurityOnline - W3C Slams Google’s Cookie Reversal: Privacy at Risk?
Earlier, Google Chrome announced that it would no longer phase out third-party cookies. This decision implies that advertising networks can continue to use traditional methods to track users across websites, allowing them to collect...
SecurityOnline - Meta Agrees to $1.4B Settlement With Texas in Privacy Lawsuit Over Facial Recognition
Meta has agreed to a $1.4 billion settlement with Texas in a privacy lawsuit over a facial recognition feature.
SecurityWeek - India-Linked SideWinder Group Pivots to Hacking Maritime Targets
The nation-state espionage group known for attacking Pakistan has expanded its reach to targets in Egypt and Sri Lanka.
Dark Reading - Meta Settles for $1.4 Billion with Texas Over Illegal Biometric Data Collection
Meta, the parent company of Facebook, Instagram, and WhatsApp, agreed to a record $1.4 billion settlement with the U.S. state of Texas over allegations that it illegally collected biometric data of millions of users without their permission, marking one of…
The Hacker News - Critical GeoServer RCE Flaw CVE-2024-36401 Actively Exploited, 6,284 Instances Vulnerable
Security threat monitoring platform Shadowserver has revealed that 6,284 GeoServer instances exposed to the Internet are vulnerable to critical remote code execution (RCE) attacks. This vulnerability, tracked as CVE-2024-36401, was disclosed on June 30th...
SecurityOnline - Urgent Chrome Update: Google Patches Critical Security Flaw (CVE-2024-6990)
Google has issued an urgent security update for its widely-used Chrome browser, patching three vulnerabilities, one of which is rated “critical.” The vulnerabilities, tracked as CVE-2024-6990, CVE-2024-7255, and CVE-2024-7256, could potentially allow…
SecurityOnline - Critical Vulnerability in VoWiFi Implementations Exposes Millions to Eavesdropping and Fraud
A team of security researchers has discovered critical vulnerabilities in the Voice over Wi-Fi (VoWiFi) implementations of major smartphone manufacturers and mobile network operators (MNOs). This study has highlighted significant security issues in…
SecurityOnline - Critical Vulnerability in Hosted Email Services Exposes Users to Spoofing Attacks
A newly discovered vulnerability in multiple hosted email services has raised significant concerns regarding email security. This vulnerability allows authenticated attackers to bypass sender identity verification mechanisms, enabling them to spoof emails…
SecurityOnline - Massive XSS Threat: Millions of Websites Vulnerable via OAuth Flaw
A critical vulnerability in the OAuth authentication standard has been discovered, potentially exposing millions of websites and their users to account hijacking and data theft. Cybersecurity experts at Salt Security have identified and exploited...
SecurityOnline - Fake Google Authenticator Ads Spread Malware Through Google Search
Cybersecurity researchers at Malwarebytes Labs have uncovered a malicious campaign where threat actors impersonate Google to spread malware through fake ads for Google Authenticator. The ads, which appeared in Google Search results, led unsuspecting...
SecurityOnline - CVE-2024-5670 (CVSS 9.8): Critical Vulnerability Exposes Softnext Email Systems to Attack
Taiwan’s CERT (Computer Emergency Response Team) has issued a critical warning regarding a severe vulnerability in Softnext’s Mail SQR Expert and Mail Archiving Expert email management systems. This vulnerability, designated as CVE-2024-5670 with a...
SecurityOnline - Malware Exploiting IoT Devices on the Rise, SonicWall Warns
SonicWall has published its mid-year Cyber Threat Report for 2024. In the first half of the year, there was a significant increase in supply chain attacks, a rise in malware targeting Internet of Things...
SecurityOnline - Meta’s AI Safety Shield Prompt-Guard-86M Compromised: Simple Jailbreak Discovered
A newly unveiled safety measure for Meta’s artificial intelligence, Prompt-Guard-86M, designed to protect against malicious manipulation, has been found to have a significant vulnerability. Cybersecurity experts at Robust Intelligence discovered a…
SecurityOnline - Unveiling RansomHub Ransomware: New Infection Chains and Rising Threats
Cybersecurity researchers at Lab52 have issued a warning about the RansomHub ransomware gang. This adaptable and sneaky group is using a combination of old and new tactics to breach systems, including Advanced Port Scanner...
SecurityOnline - Philips VUE PACS Vulnerabilities Expose Healthcare Sector to Cyberattacks
Philips, a leading health technology company, recently disclosed multiple vulnerabilities in its Vue Picture Archiving and Communication System (PACS), a widely used medical imaging solution. These vulnerabilities, ranging from high to critical severity,…
SecurityOnline