News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Today, Mon 2 Nov | 1 so far | 0 |
Developing
Sat 3 Aug 202413 articles
- US sued TikTok and ByteDance for violating children’s privacy laws
The U.S. Department of Justice has sued TikTok and its parent company, ByteDance, for extensive violations of children’s privacy laws. The Justice Department and the Federal Trade Commission (FTC) filed a civil lawsuit in the U.S. District Court for the…
Security Affairs - CISA Names Lisa Einstein as First Chief AI Officer
Einstein has led CISA’s AI efforts since 2023 as CISA’s Senior Advisor for AI.
SecurityWeek - Linux kernel impacted by new SLUBStick cross-cache attack
A novel Linux Kernel cross-cache attack named SLUBStick has a 99% success in converting a limited heap vulnerability into an arbitrary memory read-and-write capability, letting the researchers elevate privileges or escape containers. [...]
BleepingComputer - Russia-linked APT used a car for sale as a phishing lure to target diplomats with HeadLace malware
A Russia-linked APT used a car for sale as a phishing lure to deliver a modular Windows backdoor called HeadLace. Palo Alto researchers reported that a Russia-linked threat actor known as Fighting Ursa (also identified as APT28, Fancy Bear, or Sofacy) used a…
Security Affairs - Hackers breach ISP to poison software updates with malware
A Chinese hacking group tracked as StormBamboo has compromised an undisclosed internet service provider (ISP) to poison automatic software updates with malware. [...]
BleepingComputer - DOJ and FTC Sue TikTok for Violating Children's Privacy Laws
The U.S. Department of Justice (DoJ), along with the Federal Trade Commission (FTC), filed a lawsuit against popular video-sharing platform TikTok for "flagrantly violating" children's privacy laws in the country. The agencies claimed the company knowingly…
The Hacker News - Hackers Exploit Misconfigured Jupyter Notebooks with Repurposed Minecraft DDoS Tool
Cybersecurity researchers have disclosed details of a new distributed denial-of-service (DDoS) attack campaign targeting misconfigured Jupyter Notebooks. The activity, codenamed Panamorfi by cloud security firm Aqua, utilizes a Java-based tool called…
The Hacker News - OpenCTI: Empowering Cyber Threat Intelligence Management
In the ever-evolving landscape of cybersecurity, staying ahead of threats requires more than just antivirus software and firewalls. It demands a comprehensive understanding of the tactics, techniques, and procedures (TTPs) employed by malicious actors....
SecurityOnline - Chinese Hackers Accused of Spying on German Cartography Agency
Germany has officially accused Chinese hackers of a cyberattack on the Federal Agency for Cartography and Geodesy (BKG) in 2021. This announcement was made on July 31, when German authorities summoned the Chinese ambassador...
SecurityOnline - Apple Open-Sources Homomorphic Encryption for Enhanced Data Security
Apple has recently made its homomorphic encryption technology, used to protect user privacy and security in its services, available through an open-source Swift package, facilitating easier implementation by developers to ensure data security in...
SecurityOnline - Twilio Axes Authy Desktop: Users Logged Out Forcibly
Twilio, the multifactor authenticator developer, previously announced the termination of its Authy desktop service. The desktop version, which enabled users to receive verification codes and log in on their PCs, now requires users to...
SecurityOnline - Beware of Fake Sora AI: Cybercriminals Exploit Hype with Malware Attacks
The buzz surrounding OpenAI’s yet-to-be-released AI model, Sora, has attracted unwanted attention from cybercriminals. Reports from Cyble Research and Intelligence Labs (CRIL) reveal that threat actors are capitalizing on the excitement around Sora by...
SecurityOnline - 4.6 Million Voter and Election Documents Exposed Online by Technology Contractor
VpnMentor reports that researcher Jeremiah Fowler discovered 13 non-password-protected databases that contained 4.6 million documents, including voter records, ballots, multiple lists, and election-related records. Through his research, Fowler found that the…
DataBreaches