News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 16 so far | 0 |
Developing
Thu 1 Aug 202467 articles
- Malaysia introduces data breach notification system to combat scams
The Malaysian Reserve reports: Malaysia has introduced a Data Breach Notification system for immediate reporting and mitigation of data leaks to prevent citizens from becoming victims of scammers, Deputy Communications Minister Teo Nie Ching said. She said…
DataBreaches - Attacks on Bytecode Interpreters Conceal Malicious Injection Activity
By injecting malicious bytecode into interpreters for VBScript, Python, and Lua, researchers found they can circumvent malicious code detection.
Dark Reading - More Legal Records Stolen in 2023 Than Previous 5 Years Combined
Law firms make the perfect target for extortion, so it's no wonder that ransomware attackers target them and demand multimillion dollar ransoms.
Dark Reading - 'Sitting Ducks' Attacks Create Hijacking Threat for Domain Name Owners
Researchers say the attacks are easy to perform, difficult to contact, nearly unrecognizable, and "entirely preventable."
Dark Reading - Twilio kills off Authy for desktop, forcibly logs out all users
Twilio has finally killed off its Authy for Desktop application, forcibly logging users out of the desktop application. [...]
BleepingComputer - Tech support scam ring leader gets 7 years in prison, $6M fine
The leader of a tech support fraud scheme was sentenced to seven years in prison after tricking at least 6,500 victims and generating more than $6 million. [...]
BleepingComputer - Over 20,000 internet-exposed VMware ESXi instances vulnerable to CVE-2024-37085
Shadowserver researchers reported that over 20,000 internet-exposed VMware ESXi instances are affected by the actively exploited flaw CVE-2024-37085. Researchers at the Shadowserver Foundation reported that approximately 20,000 VMware ESXi servers exposed…
Security Affairs - StackExchange abused to spread malicious PyPi packages as answers
Threat actors uploaded malicious Python packages to the PyPI repository and promoted them through the StackExchange online question and answer platform. [...]
BleepingComputer - Black Basta Develops Custom Malware in Wake of Qakbot Takedown
The prolific ransomware group has shifted away from phishing as the method of entry into corporate networks, and is now using initial access brokers as well as its own tools to optimize its most recent attacks.
Dark Reading - Attackers Hijack Facebook Pages, Promote Malicious AI Photo Editor
A malvertising campaign uses phishing to steal legitimate account pages, with the endgame of delivering the Lumma stealer.
Dark Reading - Hackers abuse free TryCloudflare to deliver remote access malware
Researchers are warning of threat actors increasingly abusing the Cloudflare Tunnel service in malware campaigns that usually deliver remote access trojans (RATs). [...]
BleepingComputer - Convicted Cybercriminals Included in Russian Prisoner Swap
Two Russians serving time for insider trading, computer hacking and credit card theft were released in a prisoner swap deal with Moscow.
SecurityWeek - UK takes down major 'Russian Coms' caller ID spoofing platform
The United Kingdom's National Crime Agency (NCA) has shut down Russian Coms, a major caller ID spoofing platform used by hundreds of criminals to make over 1.8 million scam calls. [...]
BleepingComputer - Sitting Ducks DNS attacks let hackers hijack over 35,000 domains
Threat actors have hijacked more than 35,000 registered domains in so-called Sitting Ducks attacks that allow claiming a domain without having access to the owner's account at the DNS provider or registrar. [...]
BleepingComputer - Cencora confirms patient health info stolen in February attack
Pharmaceutical giant Cencora has confirmed that patients' protected health information and personally identifiable information (PII) was exposed in a February cyberattack. [...]
BleepingComputer - Company Paid Record-Breaking $75 Million To Ransomware Group
No content available.
packetstormsecurity.com - Mozilla Follows Google In Losing Trust In Entrust's TLS Certificates
No content available.
packetstormsecurity.com - US Voters Reminded That DDoS Attacks Can't Touch Election Systems
No content available.
packetstormsecurity.com - Black Hat USA 2024, BSidesLV, And DEFCON 32: Your Hacker Summer Camp Guide
No content available.
packetstormsecurity.com - FBI warns of scammers posing as crypto exchange employees
The Federal Bureau of Investigation (FBI) warns of scammers posing as employees of cryptocurrency exchanges to steal funds from unsuspecting victims. [...]
BleepingComputer - Alex Stamos Named CISO at SentinelOne
Longtime security executive Alex Stamos tapped by SentinelOne to manage its security engineering and operations teams.
SecurityWeek - Security Risk Advisors Announces Launch of VECTR Enterprise Edition
Security Risk Advisors (SRA) announces the launch of VECTR Enterprise Edition, a premium version of its widely-used VECTR platform for purple teams and adversary management program reporting and benchmarking. VECTR Enterprise is designed to support…
gbhackers.com - OneBlood Target of Ransomware Event; Blood Community Rallies to Help as Urgent Call for Donors is Issued
From OneBlood: OneBlood, the not-for-profit blood center serving much of the southeastern United States is experiencing a ransomware event that is impacting its software system. OneBlood is working closely with cyber security specialists, and also federal,…
DataBreaches - Pharma Giant Cencora confirmed the theft of personal and health information
Pharma company Cencora confirmed the theft of personal and health information following the February 2024 data breach. Pharmaceutical giant Cencora confirmed that the threat actors had access to personally identifiable information (PII) and protected health…
Security Affairs - Invasion of the Data Snatchers: B.C. Court of Appeal Clarifies Possible Scope of Privacy Claims Against Data Custodians in Data Breaches
Lyann Danielak, Joshua Hutchinson, and Robin Reinertson of Blake, Cassels & Graydon LLP write: On July 4, 2024, the B.C. Court of Appeal issued a duo of class action appeal decisions considering the potential scope of statutory and common law privacy claims…
DataBreaches - Over 1 Million Domains at Risk of 'Sitting Ducks' Domain Hijacking Technique
Over a million domains are susceptible to takeover by malicious actors by means of what has been called a Sitting Ducks attack. The powerful attack vector, which exploits weaknesses in the domain name system (DNS), is being exploited by over a dozen…
The Hacker News - TgRAT Malware Attacking Linux Servers with New Variant
A new variant of the TgRAT malware, initially discovered in 2022 targeting Windows systems, has been observed attacking Linux servers. This evolution marks a significant shift in the malware’s capabilities, broadening its potential impact on a wider range of…
gbhackers.com - Hackers Distributing Malicious Python Packages via Popular Developer Q&A Platform
In yet another sign that threat actors are always looking out for new ways to trick users into downloading malware, it has come to light that the question-and-answer (Q&A) platform known as Stack Exchange has been abused to direct unsuspecting developers to…
The Hacker News - NIS2 and DORA: What You Need to Know to Stay Compliant and Secure
NIS2 and DORA: What You Need to Know to Stay Compliant and Secure Navigating regulatory compliance can be challenging, particularly for critical sectors in the EU. The NIS2 (Network and Information Security Directive) and DORA (Digital Operational Resilience…
SOCRadar - New Android Banking Trojan BingoMod Steals Money, Wipes Devices
Cybersecurity researchers have uncovered a new Android remote access trojan (RAT) called BingoMod that not only performs fraudulent money transfers from the compromised devices but also wipes them in an attempt to erase traces of the malware. Italian…
The Hacker News - Exploited Vulnerability Could Impact 20k Internet-Exposed VMware ESXi Instances
Shadowserver has observed over 20,000 internet-accessible VMware ESXi instances impacted by an exploited vulnerability.
SecurityWeek - Endari Emerges From Stealth With Cybersecurity Solutions for Startups
Endari has emerged from stealth mode with cybersecurity solutions for SMBs and startups and with $4 million in seed funding.
SecurityWeek - Dark Web Profile: Dark Angels
Dark Web Profile: Dark Angels Dark Angels or Dunghill Leak is a sophisticated and highly disruptive ransomware group that has recently gained notoriety. Known for their aggressive tactics and significant financial demands, Dark Angels has made headlines for…
SOCRadar - Bitdefender Flaw Let Attackers Trigger Server-Side Request Forgery Attacks
A recently discovered vulnerability in Bitdefender’s GravityZone Update Server has raised significant security concerns. Identified as CVE-2024-6980, this flaw allows attackers to execute server-side request forgery (SSRF) attacks, potentially compromising…
gbhackers.com - BingoMod Android RAT Wipes Devices After Stealing Money
The BingoMod Android trojan steals user information and communication and allows attackers to steal money via account takeover.
SecurityWeek - Homebrew Security Audit Finds 25 Vulnerabilities
Vulnerabilities in Homebrew could have allowed attackers to load executable code and modify binary builds, security audit finds.
SecurityWeek - Obfuscation: There Are Two Sides To Everything
How to detect and prevent attackers from using these various techniques Obfuscation is an important technique for protecting software that also carries risks, especially when used by malware authors. In this article, we examine obfuscation, its effects, and…
The Hacker News - The Leidos Leak: What to Know, What Are Its Implications?
The Leidos Leak: What to Know, What Are Its Implications? In July, a post on BreachForums brought to light a significant leak involving Leidos Holdings Inc., claiming the exposure of internal files. Leidos Holdings Inc., based in Virginia, stands as one of…
SOCRadar - How “professional” ransomware variants boost cybercrime groups
Introduction Cybercriminals who specialize in ransomware do not always create it themselves. They have many other ways to get their hands on ransomware samples: buying a sample on the dark web, affiliating with other groups or finding a (leaked) ransomware…
securelist.com