News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Today, Mon 2 Nov | 14 so far | 3 |
Developing
Wed 7 Aug 202476 articles
- AWS Launches Mithra To Detect Malicious Domains Across Systems
Amazon’s e-commerce platforms and cloud services form a digital ecosystem requiring a strong cybersecurity framework. Amazon, which has a vast online presence covering multiple domains and services, is at great risk of being attacked by advanced cyber…
gbhackers.com - Secure by Default: What It Means for the Modern Enterprise
What does “secure by default” mean for the average company as you implement security systems and protocols?
SecurityWeek - Microsoft 365 Vulnerability Let Hackers Bypass Anti-phishing Feature
A vulnerability in Microsoft 365 (formerly Office 365) has been found that allows malicious actors to bypass anti-phishing measures. One of the anti-phishing features available in Exchange Online Protection (EOP) and Microsoft Defender to Office 365…
gbhackers.com - Ransomware in 2024: More Attacks, More Leaks, and Increased Sophistication
The ransomware scourge is still growing and still successful for attackers, Rapid7’s Ransomware Radar Report 2024 shows.
SecurityWeek - Apple Tightens macOS Gatekeeper Controls in macOS Sequoia
Apple has announced changes to its macOS Gatekeeper security feature with the release of macOS Sequoia. These changes aim to bolster user security by making it more challenging to run potentially harmful software. Stricter Gatekeeper Policies In macOS…
gbhackers.com - 5 Supply Chain Intelligence Use Cases with SOCRadar Module
5 Supply Chain Intelligence Use Cases with SOCRadar Module Numerous high-profile incidents have evidenced that cyber threats to the supply chain can have catastrophic consequences. To mitigate these risks, organizations require advanced tools and strategies…
SOCRadar - New Go-based Backdoor GoGra Targets South Asian Media Organization
An unnamed media organization in South Asia was targeted in November 20233 using a previously undocumented Go-based backdoor called GoGra. "GoGra is written in Go and uses the Microsoft Graph API to interact with a command-and-control (C&C) server hosted on…
The Hacker News - Dark Reading News Desk Live From Black Hat USA 2024
The Dark Reading team once again welcomes the world's top cybersecurity experts to the Dark Reading News Desk live from Black Hat USA 2024. Tune into the livestream.
Dark Reading - CrowdStrike Reveals Root Cause of Global System Outages
Cybersecurity company CrowdStrike has published its root cause analysis detailing the Falcon Sensor software update crash that crippled millions of Windows devices globally. The "Channel File 291" incident, as originally highlighted in its Preliminary Post…
The Hacker News - New Android spyware LianSpy relies on Yandex Cloud to avoid detection
A previously unknown Android Spyware, dubbed LianSpy, has been targeting Russian users since at least 2021. In March 2024, cybersecurity researchers from Kaspersky discovered previously unknown Android spyware dubbed LianSpy. The malware has been active…
Security Affairs - New Zola Ransomware Using Multiple Tools to Disable Windows Defender
Seemingly new ransomware, Zola, is the newest version of the Proton family that appeared in March 2023. This rebranding highlights the unbroken trend of ransomware’s evolution. Cybersecurity researchers at Acronis identified and warned of the new Zola ra...
gbhackers.com - Data Centers Alert: AMD Addresses SEV-SNP Vulnerabilities in EPYC Processors
AMD has released a security bulletin addressing three potential vulnerabilities in its Secure Encrypted Virtualization – Secure Nested Paging (SEV-SNP) technology. Discovered by a researcher, these vulnerabilities could allow a malicious hypervisor…
SecurityOnline - Ransomware Attack Cost LoanDepot $27 Million
LoanDepot reported expenses totaling nearly $27 million related to the ransomware attack that came to light in January 2024.
SecurityWeek - Security Boost: Apple Strengthens Gatekeeper Protections in macOS Sequoia
macOS Sequoia implements an automatic reset of permissions for screenshot and screen recording software upon each system reboot and weekly. Users must reauthorize these tools each time they need to use them. In addition...
SecurityOnline - Xiaomi Prioritizes Privacy: HyperOS 2.0 to Detect Hidden Cameras
Xiaomi is poised to launch Xiaomi HyperOS version 2.0, which is rumored to include a new feature to help users protect their privacy by detecting unknown, hidden cameras within a local network. In recent...
SecurityOnline - macOS Sequoia’s New Security Measures: A Boost for User Privacy or Annoyance?
Apple has indeed placed a significant emphasis on privacy and security. The forthcoming macOS Sequoia version reveals a new security strategy: permissions for third-party screenshot and screen recording tools will be reset weekly and...
SecurityOnline - Chrome, Firefox Updates Patch Serious Vulnerabilities
A Chrome 127 update patches five vulnerabilities, and Firefox 129 addresses over a dozen security holes.
SecurityWeek - XDSpy Hackers Attacking Users to Steal Sensitive Data
The notorious threat actor group XDSpy has been reported to target organizations in Russia and Moldova. The sophisticated phishing malware campaign aims to steal sensitive data through well-coordinated attack chains. Spear-phishing emails as the Initial…
gbhackers.com - Chrome Security Update: Patch for Multiple Vulnerabilities
Google has announced a critical security update for its Chrome browser, addressing several vulnerabilities that malicious actors could exploit. The Stable channel has been updated to version 127.0.6533.99/.100 for Windows and Mac and 127.0.6533.99 for Linux.…
gbhackers.com - Chameleon Android Banking Trojan Targets Users Through Fake CRM App
Cybersecurity researchers have lifted the lid on a new technique adopted by threat actors behind the Chameleon Android banking trojan targeting users in Canada by masquerading as a Customer Relationship Management (CRM) app. "Chameleon was seen masquerading…
The Hacker News - Apple’s New macOS Sequoia Tightens Gatekeeper Controls to Block Unauthorized Software
Apple on Tuesday announced an update to its next-generation macOS version that makes it a little more difficult for users to override Gatekeeper protections. Gatekeeper is a crucial line of defense built into macOS designed to ensure that only trusted apps…
The Hacker News - BlankBot Trojan Targets Turkish Android Users
While still under development, the malware contains Turkish-language filenames, can record the screen and keystrokes, and inject custom overlays to steal passwords and sensitive data.
Dark Reading - Hackers breached MDM firm Mobile Guardian and wiped thousands of devices
Threat actors breached the UK-based mobile device management (MDM) firm Mobile Guardian and remotely wiped thousands of devices. Hackers breached the mobile device management (MDM) firm Mobile Guardian, the company detected unauthorized access to iOS and…
Security Affairs - Linux Kernel Vulnerability CVE-2023-6817: Researcher Unveils Exploit Code
In a recent disclosure, a security researcher has published detailed technical insights and proof-of-concept exploit code for a critical vulnerability in the Linux kernel, identified as CVE-2023-6817. This high-severity flaw, scoring 7.8 on the...
SecurityOnline - CVE-2024-37287 (CVSS 9.9): Urgent Kibana Patch for Severe Security Vulnerability
The Elastic Team has announced a critical security update for Kibana, their popular open-source data visualization and exploration tool. This update addresses a severe vulnerability, CVE-2024-37287, which carries a CVSS score of 9.9. The...
SecurityOnline - Deepfence ThreatMapper: Comprehensive Threat Management for Cloud-Native Environments
As organizations increasingly embrace cloud-native architectures, the attack surface expands, and the need for robust security measures becomes paramount. Traditional security tools often fall short in addressing the dynamic and ephemeral nature of…
SecurityOnline - Python Popularity Soars: Nearing Java’s Record in TIOBE Index
In August 2024, the Python programming language reached a new milestone in the TIOBE index, surpassing 18% popularity for the first time. The last time a similar achievement was made was by Java in...
SecurityOnline - Leaked Documents Reveal NVIDIA’s Secret AI Training Practices
NVIDIA has used videos from YouTube and other sources to train its AI products, as revealed by internal communications and documents obtained by 404 Media. When discussing the legal and ethical aspects of using...
SecurityOnline - Chameleon Banking Trojan Targets Hospitality Sector with Novel CRM Masquerade
In July 2024, analysts at ThreatFabric Mobile Threat Intelligence observed new campaigns from Chameleon, a notorious Banking Trojan first discovered in December 2022. These recent campaigns have unveiled an unusual and sophisticated technique: masquerading...
SecurityOnline - Warning: Fake WinRar Websites Distributing Malware
SonicWall has recently issued a cybersecurity alert about a deceptive website that mimics the official WinRar site. This fake site, win-rar.co, not only closely resembles the legitimate WinRar site but also hosts a plethora...
SecurityOnline - Google Chrome Update Fixes Critical Code Execution Vulnerability (CVE-2024-7532)
Google has released a critical security update for its Chrome web browser on the Stable channel, addressing five vulnerabilities, one of which is rated as critical. The update, versions 127.0.6533.99/.100 for Windows and Mac,...
SecurityOnline - Fake Car Ads Conceal APT28’s HeadLace Malware Attack
The hacker group APT28 recently launched a new campaign to distribute the HeadLace malware through a fake car sale advertisement. The campaign began in March 2024 and is likely targeting diplomats. This tactic is...
SecurityOnline - Tech Support Scam Mastermind Sentenced to 7 Years for $6 Million Fraud
In the Southern District of New York, the trial of Vinoth Ponmaran, the orchestrator of a large-scale technical support fraud scheme, has concluded. He was sentenced to seven years in prison for defrauding more...
SecurityOnline - Microsoft Hits Back at Delta After the Airline Said Last Month’s Tech Outage Cost It $500 Million
Microsoft is trying to determine “why other airlines were able to fully restore business operations so much faster than Delta.”
SecurityWeek - New Cyber Threat: RHADAMANTHYS Infostealer Targets Israel
In the realm of cyber threats, a new malicious campaign has emerged targeting users in Israel, employing the advanced RHADAMANTHYS infostealer malware. This malware poses a significant threat to organizations and individuals, showcasing sophisticated...
SecurityOnline - New Android Spyware LianSpy Evade Detection for Years
Kaspersky Lab specialists have discovered a cyber-espionage Trojan targeting Android device owners in Russia. This spyware, named LianSpy, may have been active since mid-2021. Its detection difficulty is attributed to the attackers’ efforts to...
SecurityOnline