News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–14 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Today, Sun 1 Nov | 16 so far | 0 |
Developing
Thu 1 Aug 202467 articles
- Google Chrome Adds App-Bound Encryption to Protect Cookies from Malware
Google has announced that it's adding a new layer of protection to its Chrome browser through what's called app-bound encryption to prevent information-stealing malware from grabbing cookies on Windows systems. "On Windows, Chrome uses the Data Protection…
The Hacker News - DigiCert Revoking 83,000 Certificates of 6,800 Customers
DigiCert has started revoking 83,000 certificates impacted by a validation issue, but critical infrastructure customers are asking for more time.
SecurityWeek - Beware Of Malicious Crypto Management App That Drains Your Wallet
A forwarded Telegram video advertises heavily discounted, high-profile cryptocurrency projects, enticing viewers with links to a seemingly legitimate second-tier exchange and a concealed malicious link. Through the use of this social engineering strategy,…
gbhackers.com - Personal, Health Information Stolen From Pharma Giant Cencora
Pharma giant Cencora has confirmed that personal and health information was stolen in a February 2024 cyberattack.
SecurityWeek - Voice Over Wi-Fi Vulnerability Let Attackers Eavesdrop Calls And SMS
Users use Voice Over Wi-Fi (VoWiFi) quite frequently nowadays, as it’s a technology that enables them to make voice calls over a Wi-Fi network. This technology does so without relying on traditional cellular networks. Besides this, doing so allows the users…
gbhackers.com - CrowdStrike & Microsoft to Face Lawsuit from Delta Air Lines Following System Crash
Delta Air Lines has enlisted the legal expertise of David Boies, chairman of Boies Schiller Flexner, to seek damages from cybersecurity firm CrowdStrike and tech giant Microsoft. This follows a catastrophic system crash on July 19 that resulted in the…
gbhackers.com - Bitdefender Patches Critical Vulnerability in GravityZone Update Server
Bitdefender, a leading cybersecurity solutions provider, has issued an urgent patch for a critical vulnerability (CVE-2024-6980) in its GravityZone Update Server. The vulnerability, discovered by Nicolas VERDIER of n1nj4sec, could potentially allow attackers…
SecurityOnline - Microsoft 365 Boosts Security with Free Defender VPN
Recently, Microsoft announced an expansion of the benefits for Microsoft 365 Personal and Family subscriptions, introducing the Microsoft Defender VPN service. This service, available for free, encrypts users’ internet traffic to prevent data theft....
SecurityOnline - WazirX Faces Backlash Over Socialized Losses from $230M Cyberattack
The Indian cryptocurrency exchange WazirX has announced a plan to “socialize” $230 million in losses from a recent cyberattack. This decision has sparked outrage within the local cryptocurrency community. Following the theft of nearly...
SecurityOnline - ModiLoader Takes Over: Phishing Frenzy Targets Poland
In May, ESET detected extensive phishing campaigns targeting small and medium-sized businesses in Poland, Italy, and Romania. These attacks resulted in the installation of several malicious programs on the victims’ devices, including Agent Tesla,...
SecurityOnline - Germany has accused China of Attack on Critical Infrastructure Since 2021
Following extensive analyses and investigations by German security authorities, the Federal Government has officially attributed responsibility for a significant cyberattack on the Federal Office of Cartography and Geodesy (BKG) at the end of 2021 to Chinese…
gbhackers.com - Facebook Ads Lead to Fake Websites Stealing Credit Card Information
Facebook users are the target of a scam e-commerce network that uses hundreds of fake websites to steal personal and financial data using brand impersonation and malvertising tricks. Recorded Future's Payment Fraud Intelligence team, which detected the…
The Hacker News - BingoMod Android RAT steals money from victims’ bank accounts and wipes data
BingoMod is a new Android malware that can wipe devices after stealing money from the victims’ bank accounts. Researchers at Cleafy discovered a new Android malware, called ‘BingoMod,’ that can wipe devices after successfully stealing money from the victims’…
Security Affairs - Why Reddit Blocked Bing and Other Search Engines
Recently, the well-known online community Reddit has banned all search engines except Google, allowing only Google to continue indexing Reddit’s content. The reason is straightforward: Google pays Reddit $60 million annually for content licensing,...
SecurityOnline - CrowdStrike, Microsoft Face Lawsuit from Delta Air Lines After System Crash
On July 19, a software configuration update released by the cybersecurity company CrowdStrike, which had not been thoroughly tested, caused approximately 8.5 million enterprise-level devices worldwide to experience blue screen crashes. The potential…
SecurityOnline - DigiCert Revokes Certificates: What You Need to Know
Earlier, the renowned digital certificate authority DigiCert issued a notification stating that due to errors in the verification process, approximately 0.4% of certificates need to be revoked. We have now learned that 83,267 certificates...
SecurityOnline - RAISECOM Gateways Exposed: Remote Command Execution Flaw Impacts 25,000+ Devices
Security researchers have identified a vulnerability, tracked as CVE-2024-7120, in RAISECOM Gateway devices, exposing over 25,000 devices worldwide to potential remote attacks. The flaw, a command injection vulnerability, resides in the list_base_config.php…
SecurityOnline - OAuth Vulnerability Exposes 1 Million Websites To XSS Attacks
Despite robust defenses, Cross-Site Scripting (XSS) remains a persistent web vulnerability, as its exploitation has become increasingly challenging. A recent discovery highlights how integrating OAuth, a modern authentication standard, with vulnerable…
gbhackers.com - Critical CVE-2024-6220 Vulnerability in Keydatas WordPress Plugin Actively Exploited
A critical vulnerability (CVE-2024-6220, CVSS 9.8) in the popular Keydatas (简数采集器) WordPress plugin is being actively exploited, putting thousands of websites at risk of complete takeover. This flaw allows unauthenticated attackers to upload arbitrary...
SecurityOnline - Actively Exploited Apache OFBiz Flaw Triggers Urgent Security Alert
In recent weeks, security researchers have observed an alarming uptick in scanning attempts for the CVE-2024-32113 vulnerability in Apache OFBiz, a widely used suite of enterprise software tools. The flaw, described as a path...
SecurityOnline - AI-Driven TEMPEST Attacks: Uruguay Team Reveals Method to Intercept Screen Data
Researchers in Uruguay have recently discovered a method to use artificial intelligence (AI) to eavesdrop on victims’ screens through electromagnetic radiation leaks from computer cables and monitors. This attack can be executed through various...
SecurityOnline - From QAKBOT to Custom Malware: The Adaptability of UNC4393
A new report from Mandiant, a leading cybersecurity firm, paints a comprehensive picture of UNC4393, a prolific ransomware gang that has attacked organizations across the globe. The report offers insight into the group’s evolution,...
SecurityOnline - CVE-2024-41667: OpenAM Vulnerability Exposes Authentication Systems to Critical Risk
A severe security vulnerability, identified as CVE-2024-41667 and rated with a CVSS score of 8.8, has been discovered in Open Identity Platform OpenAM, a comprehensive access management solution. This flaw allows remote attackers to...
SecurityOnline - Massive Android SMS Stealer Campaign Uncovered: Over 100,000 Malicious Apps Targeting Global Users
A new report from Zimperium zLabs reveals a sprawling and sophisticated Android malware campaign that has infected over 107,000 devices across 113 countries since February 2022. The malware, a silent SMS stealer, targets one-time...
SecurityOnline - Dahua Technology Addresses Vulnerabilities in Network Video Recorders and IP Cameras
Dahua Technology, a leading provider of video surveillance solutions, has released a security advisory addressing multiple vulnerabilities in their network video recorders (NVRs) and IP cameras. These vulnerabilities, with CVSS scores ranging from 4.9...
SecurityOnline - OneDrive Users Targeted in Sophisticated Phishing and Downloader Campaign
Microsoft OneDrive users are being targeted in a new and sophisticated phishing campaign that leverages social engineering to trick victims into executing malicious PowerShell scripts. Trellix Advanced Research Center has identified this campaign, which...
SecurityOnline - SideWinder APT Group Sets Sights on Ports and Maritime Facilities in Espionage Campaign
The notorious nation-state threat actor SideWinder has launched a sophisticated new campaign targeting ports and maritime facilities in the Indian Ocean and Mediterranean Sea, according to a recent report from BlackBerry Threat Research and...
SecurityOnline