News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Today, Mon 2 Nov | 13 so far | 3 |
Developing
Tue 6 Aug 202467 articles
- CVE-2024-22169: Western Digital’s WD Discovery App Exposed to Code Execution Vulnerability
Western Digital, a leading provider of storage solutions, has issued a security advisory regarding a vulnerability (CVE-2024-22169, CVSS 7.1) discovered in their WD Discovery Desktop App. This flaw could allow attackers to execute malicious...
SecurityOnline - Microsoft Bug Bounty Payouts Increased to $16.6 Million in Past Year
Microsoft paid out $16.6 million to over 340 security researchers through its bug bounty programs over the past year.
SecurityWeek - CrowdStrike and Delta Fight Over Who’s to Blame for the Airline Canceling Thousands of Flights
CrowdStrike and Delta are fighting over who is to blame for the airline canceling thousands of flights following the massive outage.
SecurityWeek - New Android Spyware LianSpy Evades Detection Using Yandex Cloud
Users in Russia have been the target of a previously undocumented Android post-compromise spyware called LianSpy since at least 2021. Cybersecurity vendor Kaspersky, which discovered the malware in March 2024, noted its use of Yandex Cloud, a Russian cloud…
The Hacker News - Google’s Billion-Dollar Apple Search Deal Deemed Illegal
The U.S. regulatory body’s antitrust case against Google has recently seen significant developments. A U.S. federal judge has ruled that Google’s monopolistic dominance in the search and advertising markets constitutes a violation of U.S....
SecurityOnline - Mobile Device Management Vendor Mobile Guardian Hacked
Mobile Guardian, a leading Mobile Device Management (MDM) vendor, experienced unauthorized access to its platform on August 4th. The incident has impacted iOS and ChromeOS devices enrolled globally in the Mobile Guardian system. What Happened On August...
gbhackers.com - Protecting Malaysians’ Data: New Breach Notification System in Place
Malaysia is introducing a new data breach notification system aimed at prompt response and mitigation of cybersecurity incidents. This was announced by Malaysia’s Deputy Minister of Communications, Teo Nie Ching. Under the new regulations,...
SecurityOnline - Google Patches Android Zero-Day Exploited in Targeted Attacks
Google has patched CVE-2024-36971, a high-severity kernel zero-day vulnerability in Android that has been exploited in targeted attacks.
SecurityWeek - Should Organizations Pay Ransom Demands?
Ransomware attacks are the most significant risk for modern organizations, why organizations should avoid paying ransoms. Ransomware attacks are the most significant risk for modern organizations, with the Verizon Data Breach Report 2024 reporting that…
Security Affairs - North Korea-linked hackers target construction and machinery sectors with watering hole and supply chain attacks
South Korea’s National Cyber Security Center (NCSC) reported that North Korea-linked hackers hijacked VPN software updates to deploy malware. South Korea’s national security and intelligence agencies, including the National Intelligence Service, the…
Security Affairs - Real-Time Deepfakes Unveiled at DEF CON: Be Prepared to Be Shocked
At the upcoming DEF CON hacker conference in Las Vegas, attendees will be treated to a unique opportunity. Brandon Kovacs, a senior specialist at Bishop Fox, will demonstrate how easily deepfake videos can be...
SecurityOnline - Authorities have Uncovered USD 40 Million from Hackers
Singapore authorities have successfully intercepted and reclaimed over USD 40 million defrauded in a sophisticated business email compromise (BEC) scam. The operation, facilitated by INTERPOL’s Global Rapid Intervention of Payments (I-GRIP) mechanism, marks…
gbhackers.com - TikTok Faces Civil Lawsuit for COPPA Violations, Millions of Children Affected
The U.S. Department of Justice, in conjunction with the Federal Trade Commission (FTC), has initiated a civil lawsuit against the popular app TikTok and its Chinese parent company ByteDance. Authorities accuse the developers of...
SecurityOnline - Google Patches New Android Kernel Vulnerability Exploited in the Wild
Google has addressed a high-severity security flaw impacting the Android kernel that it has been actively exploited in the wild. The vulnerability, tracked as CVE-2024-36971, has been described as a case of remote code execution impacting the kernel. "There…
The Hacker News - New Zero-Day Flaw in Apache OFBiz ERP Allows Remote Code Execution
A new zero-day pre-authentication remote code execution vulnerability has been disclosed in the Apache OFBiz open-source enterprise resource planning (ERP) system that could allow threat actors to achieve remote code execution on affected instances. Tracked…
The Hacker News - CISA Warns of Actively Exploited Microsoft COM for Windows Flaw
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning about a Microsoft COM for Windows vulnerability, CVE-2018-0824, which is currently being exploited by malicious actors. This vulnerability allows remote code...
SecurityOnline - C2 Tracker: A Community-Driven IOC Feed for Cybersecurity
In the ever-evolving landscape of cybersecurity threats, having access to reliable and up-to-date threat intelligence is paramount. One tool that has gained recognition in the cybersecurity community is C2 Tracker, a free and open-source...
SecurityOnline - CVE-2024-6915 (CVSS 9.3): JFrog Artifactory Flaw Exposes Software Supply Chains to Cache Poisoning
JFrog, a leading provider of software artifact management solutions, has issued a critical security advisory for its Artifactory platform. The vulnerability, identified as CVE-2024-6915 (CVSS 9.3), affects multiple versions of JFrog Artifactory and could...
SecurityOnline - Pimax VR Security Breach: Hackers Could Exploit CVE-2024-41889 to Take Control
In a recent security advisory, JPCERT/CC has highlighted a significant vulnerability affecting Pimax Play and PiTool, two critical components of the Pimax virtual reality (VR) ecosystem. This vulnerability tracked as CVE-2024-41889, has been assigned...
SecurityOnline - CVE-2024-36971: Zero-Day Kernel Flaw Exploited in Targeted Attacks Against Android Devices
Google’s latest Android security updates have revealed a critical zero-day vulnerability actively exploited in targeted attacks. The flaw, designated CVE-2024-36971, resides within the Linux kernel’s network route management and could grant attackers…
SecurityOnline - Government Hit by Multi-Malware Cyberattack via Cloudflare Service
A sophisticated cyberattack targeting the government sector has been uncovered, utilizing a quartet of malicious software – XWorm, AsyncRAT, VenomRAT, and PureLogs Stealer – and exploiting Cloudflare’s TryCloudflare service. eSentire’s Threat Response Unit…
SecurityOnline - North Korean Hackers Target Windows Users with Malicious NPM Packages
On July 7th of this year, a user of the npm developer repository with the nickname “nagasiren978” published two malicious packages: “harthat-hash” and “harthat-api,” which contained code that installed additional malware from the attackers’...
SecurityOnline - Secureserver.net Domain Abused in Widespread Banking Trojan Attacks
A new wave of banking trojans is exploiting the secureserver.net domain to target Spanish and Portuguese-speaking regions worldwide, including Latin America and Europe. These malicious campaigns, identified by Forcepoint’s X-Labs, employ sophisticated…
SecurityOnline - Cloudflare Urged to Rethink Abuse Handling Amid Spamhaus Criticism
Cloudflare, renowned for its content delivery network (CDN) services, is facing criticism regarding its internet abuse management policies. Spamhaus has voiced concerns over Cloudflare’s approach to handling abuse and strongly urges a reevaluation of...
SecurityOnline - Critical Security Vulnerabilities Discovered in Apache Linkis: Users Urged to Upgrade Immediately
Apache Linkis, the popular computation middleware widely used to connect applications with various data processing engines, has addressed two significant security vulnerabilities that could have exposed users to potential attacks. Apache Linkis simplifies…
SecurityOnline - BlankBot: New Android Trojan Steals Banking Data, Records Screens
A new Android banking trojan dubbed “BlankBot” has emerged, posing a significant threat to mobile users. Discovered by Intel 471 Malware Intelligence researchers on July 24, 2024, this sophisticated malware includes screen recording, keylogging,...
SecurityOnline - Beware of Fake AI Photo Editors on Social Media: Malvertising Campaign Targets Credentials
A new malvertising campaign has been uncovered by TrendMicro, targeting social media pages to promote a fraudulent AI photo editor website. This sophisticated scam involves credential theft and remote device management, compromising victims’ sensitive...
SecurityOnline