News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Today, Mon 2 Nov | 14 so far | 3 |
Developing
Thu 8 Aug 202466 articles
- CrowdStrike Identifies Root Cause of Massive Windows Outage
The cybersecurity company CrowdStrike has disclosed the root cause analysis behind the Falcon Sensor software malfunction, which disrupted the operation of millions of Windows-based devices worldwide. The incident, termed “Channel File 291,” was triggered...
SecurityOnline - Record Breaking DDoS Attack 419 TB of Malicious Traffic Within 24-Hours
A record-breaking Distributed Denial of Service (DDoS) attack unleashed 419 terabytes of malicious traffic over 24 hours. This unprecedented event, which began at 8:05 UTC on July 15, 2024, targeted a financial services company in Israel, showcasing the…
gbhackers.com - Windows Downgrade Attack Risks Exposing Patched Systems to Old Vulnerabilities
Microsoft said it is developing security updates to address two loopholes that it said could be abused to stage downgrade attacks against the Windows update architecture and replace current versions of the Windows files with older versions. The…
The Hacker News - AWS Patches Vulnerabilities Potentially Allowing Account Takeovers
AWS has patched vulnerabilities in several products, including flaws that could have been exploited to take over accounts.
SecurityWeek - New Phishing Scam Uses Google Drawings and WhatsApp Shortened Links
Cybersecurity researchers have discovered a novel phishing campaign that leverages Google Drawings and shortened links generated via WhatsApp to evade detection and trick users into clicking on bogus links designed to steal sensitive information. "The…
The Hacker News - FBI and CISA update a joint advisory on the BlackSuit Ransomware group
FBI and CISA published a joint advisory on the BlackSuit Ransomware group, the document provides TTPs and IOCs as recently as July 2024. CISA, in collaboration with the FBI, has published a joint advisory on the BlackSuit Ransomware group. The advisory…
Security Affairs - NHS Supplier Fined £6M for Data Breach After Ransomware Attack
British regulators have imposed a preliminary fine exceeding £6 million on Advanced, a service provider for the National Health Service (NHS). The company failed to adequately protect the information of thousands of individuals, leading...
SecurityOnline - Critical Cisco Small Business IP Phone Flaws Exposes Users to Remote Attacks
Cisco has issued a security advisory warning users of its Small Business SPA300 and SPA500 Series IP Phones about multiple critical vulnerabilities that could allow remote attackers to execute arbitrary commands or cause denial of service (DoS) conditions.…
gbhackers.com - Unlock the Future of Cybersecurity: Exclusive, Next Era AI Insights and Cutting-Edge Training at SANS Network Security 2024
The Immersive Experience Happening This September in Las Vegas!In an era of relentless cybersecurity threats and rapid technological advancement, staying ahead of the curve is not just a necessity, but critical. SANS Institute, the premier global authority…
The Hacker News - Senate Bill to Classify Ransomware Extortion as Terrorism
The U.S. Senate has proposed designating extortion in ransomware attacks as equivalent to terrorism, potentially marking a turning point in the fight against cybercrime. The bill, endorsed by Senate Intelligence Committee Chairman Mark Warner,...
SecurityOnline - Google Reveals Effingo: The Tech Behind Moving 1.2 Exabytes Daily
Google has unveiled the technical details of its internal data transfer tool called Effingo, which moves an average of 1.2 exabytes of information daily. At the SIGCOMM 2024 conference in Sydney, a report was...
SecurityOnline - Tor Browser 13.5.2 Released: What’s New!
The Tor Project has announced the release of Tor Browser 13.5.2, now available for download from the Tor Browser download page and the distribution directory. This latest version brings crucial security updates and several enhancements to improve user…
gbhackers.com - Proposed US Ban on Chinese Tech Impacts Autonomous Vehicles
The United States Department of Commerce plans to propose a ban on the use of Chinese software in autonomous vehicles in the coming weeks, according to Reuters. The proposed legislation will affect cars with...
SecurityOnline - FBI and CISA Warn of BlackSuit Ransomware That Demands Up to $500 Million
The ransomware strain known as BlackSuit has demanded as much as $500 million in ransoms to date, with one individual ransom demand hitting $60 million. That's according to an updated advisory from the U.S. Cybersecurity and Infrastructure Security Agency…
The Hacker News - Rhysida Ransomware group claims to have breached Bayhealth Hospital in Delaware
The Rhysida Ransomware group claims to have breached Bayhealth Hospital in Delaware and offers alleged stolen data for 25 BTC. Bayhealth Hospital is a technologically advanced not-for-profit healthcare system with nearly 4,000 employees and a medical staff…
Security Affairs - Critical Security Flaw in WhatsUp Gold Under Active Attack - Patch Now
A critical security flaw impacting Progress Software WhatsUp Gold is seeing active exploitation attempts, making it essential that users move quickly to apply the latest. The vulnerability in question is CVE-2024-4885 (CVSS score: 9.8), an unauthenticated…
The Hacker News - PoC Exploit Released for Apache OFBiz Remote Code Execution Flaw (CVE-2024-38856)
Today, cybersecurity researcher Zeyad-Azima from SecureLayer7 has published a proof-of-concept (PoC) exploit code for a critical vulnerability (CVE-2024-38856) in the Apache OFBiz open-source enterprise resource planning (ERP) system. This vulnerability is a…
SecurityOnline - Beware Fake Angry IP Scanner Ads: SharpRhino RAT Used by Hunters Group Lurks Within
The ransomware group Hunters International has begun utilizing a new C#-based remote access trojan (RAT) named SharpRhino to infiltrate corporate networks. This malicious software aids hackers in achieving initial infection, elevating privileges on…
SecurityOnline - Zero-Day Vulnerability: 18 Years of Exploiting the ‘0.0.0.0’ Flaw
A study revealed a hidden vulnerability that has plagued the world’s largest browsers for 18 years, leaving private and corporate networks susceptible to cyberattacks. Researchers from Oligo Security discovered that hackers could exploit how...
SecurityOnline - CVE-2024-21302, CVE-2024-38202: Zero-Day Vulnerabilities Expose Windows Systems to “Unpatching” Attacks
At Black Hat 2024, security researcher Alon Leviev from SafeBreach security researcher unveiled two zero-day vulnerabilities (CVE-2024-21302, CVE-2024-38202) that could be exploited to reverse patches on fully updated Windows systems, reintroducing…
SecurityOnline - Cisco Small Business IP Phones Affected by Critical Vulnerabilities, No Patch!
In a recent security advisory, Cisco disclosed multiple critical vulnerabilities affecting their Small Business SPA300 and SPA500 Series IP Phones. These vulnerabilities, identified as CVE-2024-20450, CVE-2024-20452, CVE-2024-20454, CVE-2024-20451, and…
SecurityOnline - Apache CloudStack Releases Critical Patches (CVE-2024-42062 and CVE-2024-42222)
The Apache CloudStack project has issued an urgent security advisory, urging users to update their software immediately to address two critical vulnerabilities, CVE-2024-42062 and CVE-2024-42222. These vulnerabilities, found in versions 4.10.0 through…
SecurityOnline - Mobile Guardian Security Incident Affects Thousands of Student Devices
The British company Mobile Guardian has acknowledged a security incident on its systems, which resulted in unauthorized access to iOS and ChromeOS devices, rendering them temporarily unavailable. In Singapore, the incident led to data...
SecurityOnline - Cisco Talos Warns of Stealthy NetSupport RAT Campaigns
Cisco Talos experts are actively monitoring several malicious campaigns utilizing NetSupport RAT for persistent infections. These campaigns evade detection through obfuscation and regular updates. In November 2023, security vendors identified a new campaign…
SecurityOnline - Panamorfi: New DDoS Campaign Weaponizes Minecraft Tool
Experts at AquaSec have identified a new DDoS attack campaign named “Panamorfi.” These attacks utilize a package called “mineping.jar,” written in Java and designed to launch TCP flood DDoS attacks. Notably, Mineping was initially...
SecurityOnline - Interpol Recovers $41 Million Stolen in Singapore BEC Scam
Interpol has reported the confiscation of over $41 million stolen from a Singaporean commodity firm through a business email compromise (BEC) scam. On July 23, 2024, a Singaporean trading company alerted the police that...
SecurityOnline