News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Today, Mon 2 Nov | 13 so far | 3 |
Developing
Mon 5 Aug 202478 articles
- Russia's 'Fighting Ursa' APT Uses Car Ads to Install HeadLace Malware
The scheme, from the group also known as APT28, involves targeting Eastern European diplomats in need of personal transportation, tempting them with a purported good deal on a Audi Q7 Quattro SUV.
Dark Reading - The Loper Bright Decision: How it Impacts Cybersecurity Law
The Loper Bright decision has yielded impactful results: the Supreme Court has overturned forty years of administrative law, leading to potential litigation over the interpretation of ambiguous laws previously decided by federal agencies. This article…
The Hacker News - Hackers Infect Windows With Backdoor Malware Via “Car For Sale” Ad
Fighting Ursa, a Russian APT, has employed a car sales phishing lure to distribute the HeadLace backdoor malware targeting diplomats since March 2024. This strategy mirrors previous campaigns by the group and other Russian threat actors. The attack leveraged…
gbhackers.com - Mirai Botnet Attacking Apache OFBiz Directory Traversal Vulnerability
The notorious Mirai botnet has been observed exploiting a recently disclosed directory traversal vulnerability in Apache OFBiz. This Java-based framework, supported by the Apache Foundation, is used for creating ERP (Enterprise Resource Planning)…
gbhackers.com - Hackers Abused StackExchange Platform To Deliuver Malicious Python Package
Attackers uploaded malicious Python packages targeting Raydium and Solana users to PyPI, leveraging a StackExchange post to distribute the malware. The multi-stage malware stole sensitive data, drained cryptocurrency wallets, and established persistent…
gbhackers.com - Apache OFBiz Users Warned of New and Exploited Vulnerabilities
Organizations are being warned of a newly discovered Apache OFBiz vulnerability as exploitation of another recent flaw is observed.
SecurityWeek - Mint-stealer Targeting web browsers, VPN clients & messaging apps to Steal Logins
Mint-Stealer is a Malware-as-a-Service tool designed to exfiltrate sensitive data from compromised systems stealthily and targets a broad spectrum of data, including web credentials, cryptocurrency wallet details, gaming credentials, VPN configurations,…
gbhackers.com - Exodus Underground Market Place Emerging As A Heaven For Cybercriminals
The Exodus Market, a haven for exiled criminals, has grown to become a significant player in the black market economy. The user “ExodusMarket” originally announced Exodus Market for Logs on the Cracked forum on February 10, 2024, after it was formally…
gbhackers.com - Chinese Hackers StormBamboo Target ISP to Deliver Malware via Updates
According to a new report from Volexity, in mid-2023, the Chinese group StormBamboo (aka Evasive Panda) infiltrated an ISP’s systems to disseminate malicious software updates among the company’s clients. In the identified campaign, Evasive...
SecurityOnline - Cryptonator Seized: US and German Authorities Bust Crypto Wallet for Illicit Activity
The United States Department of Justice has charged Roman Pikulev with creating and operating the unlicensed cryptocurrency exchange Cryptonator, through which over $235 million in illegal funds were processed. According to the indictment, Pikulev...
SecurityOnline - Enhancing Incident Response Readiness with Wazuh
Incident response is a structured approach to managing and addressing security breaches or cyber-attacks. Security teams must overcome challenges such as timely detection, comprehensive data collection, and coordinated actions to enhance readiness. Improving…
The Hacker News - ADT, Citi Bike, Sun West Mortgage, and Bausch Health Face Alleged Data Breaches
ADT, Citi Bike, Sun West Mortgage, and Bausch Health Face Alleged Data Breaches Several significant data breaches and cyber threats impacting major companies have been detected by the SOCRadar Dark Web Team. Notable incidents include the alleged database…
SOCRadar - A flaw in Rockwell Automation ControlLogix 1756 could expose critical control systems to unauthorized access
A security bypass bug in Rockwell Automation ControlLogix 1756 devices could allow unauthorized access to vulnerable devices. A high-severity security bypass vulnerability, tracked as CVE-2024-6242 (CVSS Base Score v4.0 of 7.3), impacts Rockwell Automation…
Security Affairs - Hackers Hijacked ISP Service Provider To Poison Software Updates
Hackers often attack ISP service providers for several illicit purposes. The most significant ones are disrupting internet services, stealing sensitive data, and many more. Besides this, such compromise also provides hackers with control over a vast number…
gbhackers.com - LianSpy: new Android spyware targeting Russian users
In March 2024, we discovered a campaign targeting individuals in Russia with previously unseen Android spyware we dubbed LianSpy. Our analysis indicates that the malware has been active since July 2021. This threat is equipped to capture screencasts,…
securelist.com - Beware Of New BingoMod Android Malware Steals Money And Formats Your Device
The wide use and the huge user base of Android often lucrative the threat actors. As threat actors often use Android malware to exploit vulnerabilities in the Android operating system. This enables them to perform several illicit activities like stealing...
gbhackers.com - Researchers Details How Hackers Can Steal Passwords via HDMI Cables
Security researchers have found a new way for hackers to steal sensitive information like passwords by eavesdropping on HDMI cables. This is a worrying development for computer users. Researchers at Universidad de la República in Uruguay discovered that…
gbhackers.com - Justice Department Sues TikTok, Accusing the Company of Illegally Collecting Children’s Data
The US Justice Department has sued TikTok, accusing the company of illegally collecting children’s data and violating an online privacy law.
SecurityWeek - Linux Kernel 6.9 Reaches End of Life, Users Urged to Upgrade for Continued Security
The Linux Kernel 6.9 series, a non-long-term support (LTS) version released in May 2024, has officially reached its end of life. This means that users who have not yet upgraded will no longer receive...
SecurityOnline - Leaked Wallpaper Vulnerability Exposes Windows Users to Privilege Escalation Attacks
A newly discovered vulnerability in Windows File Explorer has raised alarms within the cybersecurity community. Identified as CVE-2024-38100, this security flaw allows attackers to escalate privileges by exploiting a seemingly innocuous wallpaper feature.…
gbhackers.com - A week in security (July 29 – August 4)
Last week on Malwarebytes Labs: Threat actor impersonates Google via fake ad for Authenticator Scammers are impersonating cryptocurrency exchanges, FBI warns Meta to pay $1.4 billion over unauthorized facial recognition image capture Apple fixes Siri...
Malwarebytes - Roundcube Webmail Releases Security Updates to Patch Multiple Vulnerabilities
The development team behind Roundcube, the popular open-source webmail client, has announced the release of significant security updates. Yesterday, versions 1.6.8 and 1.5.8 were made available, addressing three serious vulnerabilities that had been…
SecurityOnline - Ransomware Attack Cost Keytronic Over $17 Million
Keytronic says the recent ransomware attack resulted in expenses and lost revenue totaling more than $17 million.
SecurityWeek - Authorities Seized Cryptonator Site & Charged the Admin
The IRS-Criminal Investigation, the US Department of Justice (DOJ), and the Federal Bureau of Investigation (FBI), in partnership with the German Federal Criminal Police Office (BKA) and the Attorney General’s Office in Frankfurt, successfully seized the…
gbhackers.com - China-linked APT41 breached Taiwanese research institute
China-linked group APT41 breached a Taiwanese government-affiliated research institute using ShadowPad and Cobalt Strike. Cisco Talos researchers reported that the China-linked group compromised a Taiwanese government-affiliated research institute. The…
Security Affairs - Critical Flaw in Rockwell Automation Devices Allows Unauthorized Access
A high-severity security bypass vulnerability has been disclosed in Rockwell Automation ControlLogix 1756 devices that could be exploited to execute common industrial protocol (CIP) programming and configuration commands. The flaw, which is assigned the CVE…
The Hacker News - New Android Trojan "BlankBot" Targets Turkish Users' Financial Data
Cybersecurity researchers have discovered a new Android banking trojan called BlankBot targeting Turkish users with an aim to steal financial information. "BlankBot features a range of malicious capabilities, which include customer injections, keylogging,…
The Hacker News - China-Linked Hackers Compromise ISP to Deploy Malicious Software Updates
The China-linked threat actor known as Evasive Panda compromised an unnamed internet service provider (ISP) to push malicious software updates to target companies in mid-2023, highlighting a new level of sophistication associated with the group. Evasive…
The Hacker News - CVE-2024-36268: Apache InLong Vulnerability Leaves Systems Open to Remote Attacks
The Apache InLong project, a popular data integration framework widely used for handling large-scale data streams, has issued a security advisory regarding a critical vulnerability discovered in its TubeMQ component. Tracked as CVE-2024-36268, this...
SecurityOnline - CVE-2024-38100: Leaked Wallpaper Exploit Exposes Windows Users to Privilege Escalation Attacks
In a recent security bulletin, Microsoft disclosed a critical vulnerability in Windows File Explorer, identified as CVE-2024-38100, with a CVSS score of 7.8. This flaw, discovered by Andrea Pierini from Semperis, allows attackers to...
SecurityOnline - CVE-2024-38856: Critical Apache OFBiz Flaw Opens Door to Unauthorized Code Execution
A newly identified vulnerability in Apache OFBiz, the widely adopted open-source enterprise resource planning (ERP) platform, has prompted urgent security advisories due to the potential for unauthorized code execution. Tracked as CVE-2024-38856, this flaw...
SecurityOnline - Malcolm: A Comprehensive Network Traffic Analysis Tool
In today’s complex cybersecurity landscape, effective network traffic analysis is crucial for detecting and mitigating potential threats. Malcolm, a powerful network traffic analysis tool suite, stands out as an innovative solution designed to streamline...
SecurityOnline - Mint Stealer: New MaaS Malware Threatens Confidential Data
Experts from Cyfirma have released a report on the malware Mint Stealer, which operates under the “Malware-as-a-Service” (MaaS) model. This malware specializes in stealing confidential data and employs advanced techniques to bypass security measures....
SecurityOnline - Beware DEV#POPPER: Evolving Malware Targets Developers Everywhere
In recent months, the world has encountered a new campaign by North Korean hackers. The DEV#POPPER campaign targets software developers and affects victims in South Korea, North America, Europe, and the Middle East, as...
SecurityOnline - Calibre eBook Software Exposed: Critical Security Vulnerabilities Discovered
Calibre, the popular cross-platform e-book management software, has three significant security vulnerabilities. These vulnerabilities, identified by researchers from STAR Labs SG Pte. Ltd., could potentially expose millions of users to various cyber threats.…
SecurityOnline - Oyster Backdoor Gets Upgrade: Rhysida Ransomware Gang Uses SEO Poisoning in New Attack
On July 10, 2024, an unnamed private school was attacked by the Rhysida ransomware group, utilizing a new version of the Oyster Backdoor, also known as Broomstick. This updated variant of Oyster was first...
SecurityOnline - The Rise of RADAR and DISPOSSESSOR: A New Ransomware-as-a-Service
In April, a security researcher named Jim Walter from SentinelOne published an article detailing how some ransomware affiliates have begun collaborating to secure payment if deceived by previous partners. The most notable recent incident...
SecurityOnline - Critical Admidio Vulnerabilities CVE-2024-37906 and CVE-2024-38529 Revealed
Cybersecurity researchers have uncovered two critical security vulnerabilities (CVE-2024-37906 and CVE-2024-38529) in Admidio, a popular open-source user management system used by organizations and groups worldwide. These vulnerabilities could potentially…
SecurityOnline