News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Today, Mon 2 Nov | 1 so far | 0 |
Developing
Fri 2 Aug 202463 articles
- Hackers Actively Exploiting WordPress Plugin Arbitrary File Upload Vulnerability
Hackers have been actively exploiting a critical vulnerability in the WordPress plugin 简数采集器 (Keydatas). The vulnerability, CVE-2024-6220, allows unauthenticated threat actors to upload arbitrary files to a vulnerable site, potentially leading to remote code…
gbhackers.com - Cybersecurity M&A Roundup: 25 Deals Announced in July 2024
Roundup of the more than two dozen cybersecurity-related merger and acquisition (M&A) deals announced in July 2024.
SecurityWeek - World’s Top Silver Producer Fresnillo PLC Suffers Cyberattack
Fresnillo PLC, the world’s largest silver producer, has fallen victim to a cyberattack that resulted in unauthorized access to certain IT systems and data. Upon discovering the incident, the company swiftly implemented response measures...
SecurityOnline - U.S. Releases High-Profile Russian Hackers in Diplomatic Prisoner Exchange
In a historic prisoner exchange between Belarus, Germany, Norway, Russia, Slovenia, and the U.S., two Russian nationals serving time for cybercrime activities have been freed and repatriated to their country. This includes Roman Valerevich Seleznev and…
The Hacker News - BingoMod Malware: Android Banking Trojan Empties Accounts, Wipes Devices
The cybersecurity company Cleafy has discovered a malicious software named BingoMod targeting Android platforms. This malware attempts to access device-based bank accounts and transfer the deposits. After completing the theft, it wipes the affected...
SecurityOnline - Cybercriminals Target OneBlood: Blood Supply Chain Threatened
The nonprofit organization OneBlood, which supplies donor blood to over 250 hospitals in the United States, finds itself in a challenging situation. Hackers attacked its computer system with ransomware, significantly hindering OneBlood’s ability to...
SecurityOnline - Cybercriminals Abusing Cloudflare Tunnels to Evade Detection and Spread Malware
Cybersecurity companies are warning about an uptick in the abuse of Clouflare's TryCloudflare free service for malware delivery. The activity, documented by both eSentire and Proofpoint, entails the use of TryCloudflare to create a one-time tunnel that acts…
The Hacker News - NCA Shuts Down Major Fraud Platform that Triggers 1.8 Million Scam Calls
Today, the National Crime Agency (NCA) revealed the successful shutdown of Russian Coms, a sophisticated fraud platform responsible for defrauding thousands of victims worldwide. Established in 2021, this platform facilitated over 1.3 million scam calls to…
gbhackers.com - Sitting Ducks attack technique exposes over a million domains to hijacking
Researchers warn of an attack vector in the DNS, called the Sitting Ducks, that exposes over a million domains to hackers’ takeover. Researchers from Eclypsium and Infoblox have identified an attack vector in the domain name system (DNS), dubbed the Sitting…
Security Affairs - Release of Russian hackers believed to be first U.S. prisoner swap of international cybercriminals
There was some great news today that some American political prisoners held by Russia were being released as part of a multi-country prisoner swap. Kevin Collier reports: It’s rare for Russian criminal hackers to land in U.S. prisons and even rarer for them…
DataBreaches - Patient frustrated by Woodstock Hospital privacy breach
Lee Griffi reports on a hospital breach in Ontario: Woodstock Hospital officials have now released a few details about a reported privacy breach that occurred between January and May of this year. The hospital released a statement on social media late last…
DataBreaches - Ever More Toxic Ransomware Brands Breed Lone Wolf Operators
Mathew J. Schwartz reports: The downfall of previously high-flying ransomware operations Alphv and LockBit has shaken up the criminal underground, turning some former affiliates into lone operators and causing some under-the-radar groups to rack up record…
DataBreaches - Why Did Change Health Lowball Its 1st Breach Report to Feds?
Marianne Kolbasuk McGee of HealthInfoSec poses a question about why Change Healthcare’s report to HHS indicated that 500 patients were affected when they already admitted that there were millions. Why use such a low placeholder instead of a higher number…
DataBreaches - Cencora confirms patient health info stolen in February attack
Over on Bleeping Computer, Lawrence Abrams reports that Cencora confirmed that protected health information was involved in the February cyberattack in its recent SEC filing, As DataBreaches previously reported, a number of Cencora—-Lash Group’s clients…
DataBreaches - SLUBStick: Linux Kernel Exploitation with Cross-Cache Attacks
Security researchers Lukas Maar, Stefan Gast, Martin Unterguggenberger, Mathias Oberhuber, and Stefan Mangard from the Graz University of Technology have discovered a new way to exploit vulnerabilities in the Linux kernel, the core of...
SecurityOnline - 600+ Domains, One Goal: Inside the ERIAKOS Mobile E-commerce Scam
In a significant development in the fight against cyber fraud, Recorded Future’s Payment Fraud Intelligence team has identified a sophisticated scam campaign, dubbed “ERIAKOS.” This campaign leverages over 600 domains to disseminate fraudulent e-commerce...
SecurityOnline - 20,000+ Ubiquiti Devices Exposed: Amplification Attacks & Data Leaks
A new report from Check Point Research (CPR) reveals that over 20,000 Ubiquiti devices, including the popular G4 Instant Camera and other models, remain susceptible to cyberattacks. The vulnerabilities, stemming from exposed UDP ports...
SecurityOnline - Malicious PyPI Packages Expose User Credentials
The FortiGuard Labs team has uncovered a series of malicious packages lurking within the Python Package Index (PyPI), the official repository for Python software packages. These malicious packages, including the recently discovered “zlibxjson” version...
SecurityOnline - CVE-2024-7339: DVR Vulnerability Exposes Over 400,000 Devices to Hackers
A security flaw tracked as CVE-2024-7339, has been discovered in a wide range of popular DVR (Digital Video Recorder) devices, including models from TVT, Provision-ISR, AVISION, and others. This vulnerability leaves a staggering 408,035...
SecurityOnline - Chinese APT41 Group Breaches Taiwanese Research Institute
A recent report from Cisco Talos has revealed a sophisticated cyberattack targeting a Taiwanese government-affiliated research institute. The attack, believed to have been carried out by the Chinese state-sponsored group APT41, utilized a combination...
SecurityOnline - Beware of “The Unarchiver” Imposter: New macOS Malware Steals Sensitive User Data
Security researchers at Hunt.io have uncovered a sophisticated macOS malware campaign that masquerades as the popular file archiving tool “The Unarchiver.” This malicious imposter, named “CryptoTrade,” tricks users into downloading and installing what…
SecurityOnline - CrowdStrike Bug Exploited: Handala Hacking Team Targets Israel
Recently, the hacker group Handala Hacking Team launched an attack on Israeli targets, disseminating malware through phishing emails that exploited the theme of a Falcon Sensor bug fix from CrowdStrike, which had caused widespread...
SecurityOnline - U.S. Trades 5 Cybercriminals to Russia in Prisoner Swap
Twenty-four prisoners were freed today in an international prisoner swap between Russia and Western countries. Among the eight Russians repatriated were five convicted cybercriminals. In return, Russia has reportedly released 16 prisoners, including Wall…
Krebs on Security