News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Today, Mon 2 Nov | 15 so far | 3 |
Developing
Sat 10 Aug 202419 articles
- Researchers Uncover 10 Flaws in Google's File Transfer Tool Quick Share
As many as 10 security flaws have been uncovered in Google's Quick Share data transfer utility for Android and Windows that could be assembled to trigger remote code execution (RCE) chain on systems that have the software installed. "The Quick Share…
The Hacker News - Is the INC ransomware gang behind the attack on McLaren hospitals?
A INC Ransom ransomware attack this week disrupted IT and phone systems at McLaren Health Care hospitals. On Tuesday, an INC Ransom ransomware attack hit the McLaren Health Care hospitals and disrupted their IT and phone systems. The organizations did not…
Security Affairs - Surgery Center of Mid Florida notifies patients of February ransomware attack
On or about February 21, Surgery Center of Mid Florida (“SCOMF”) experienced a ransomware attack. No group has publicly claimed responsibility for the attack, but it originated with an attack on their now-former IT vendor. The attack on the unnamed vendor…
DataBreaches - Gramercy Surgery Center hacked; data leaked on dark web
Gramercy Surgery Center (“Gramercy”) is an ambulatory surgery center with locations in Manhattan and Queens, New York. On or about July 15, the threat actor(s) known as Everest Team added Gramercy to its leak site. Everest claimed to have acquired more than…
DataBreaches - Betances Health Center hit by ransomware attack; sensitive patient data leaked
On July 12, threat actors known as Hunters International added Betances Health Center in New York to their leak site. On July 25, they leaked what they claim is almost 125 GB of information consisting of 361,564 files. Betances Health Center describes itself…
DataBreaches - Microsoft: Windows 11 22H2 reaches end of support in 60 days
Microsoft has reminded customers that multiple editions of Windows 11 21H2 and 22H2 will reach the end of servicing in 60 days, on October 8, 2024. [...]
BleepingComputer - New Malware Hits 300,000 Users with Rogue Chrome and Edge Extensions
An ongoing, widespread malware campaign has been observed installing rogue Google Chrome and Microsoft Edge extensions via a trojan distributed via fake websites masquerading as popular software. "The trojan malware contains different deliverables ranging…
The Hacker News - WWH-Club credit card market admins arrested after cash spending spree
U.S. law enforcement has arrested two suspected admins of the WWH-Club stolen credit card marketplace after they went on a cash spending spree in Florida. [...]
BleepingComputer - ADT hacked; firm says “limited customer data” involved
It is always a bit awkward when threat actors reveal a breach before the victim releases their version of events. In this case, home safety giant ADT notified the SEC about a breach after data from it was already being leaked on a hacking forum. On July 31,…
DataBreaches - Number of appointments at NHS trusts impacted by cyber attack passes 10,000
The Jersey Evening Post reported: More than 10,000 appointments have been cancelled at the two London NHS trusts that were worst affected by a cyber attack earlier this summer, new figures have revealed. Pathology services provider Synnovis was the victim of…
DataBreaches - Crooks took control of a cow milking robot causing the death of a cow
Crooks took control of a cow milking robot and demanded a ransom from a farmer who refused to pay it, resulting in the death of a cow. An extortion attempt had a tragic outcome, cybercriminals took control of a cow milking robot and demanded a ransom from a…
Security Affairs - Microsoft Warns of Unpatched Office Vulnerability Leading to Data Breaches
Microsoft has disclosed an unpatched zero-day in Office that, if successfully exploited, could result in unauthorized disclosure of sensitive information to malicious actors. The vulnerability, tracked as CVE-2024-38200 (CVSS score: 7.5), has been described…
The Hacker News - Nexera Hacked: $1.8 Million Stolen from Tokenization Giant
The blockchain infrastructure protocol Nexera, renowned for its tokenization solutions, fell victim to an attack in which hackers stole $1.8 million. This incident was reported by experts from Cyvers. Nexera,...
SecurityOnline - Wazuh: A Comprehensive Open-Source Platform for Threat Detection and Response
In today’s complex and ever-evolving threat landscape, safeguarding diverse IT infrastructures demands a robust, adaptable security solution. Wazuh, a free and open-source platform, emerges as a powerful tool, delivering end-to-end...
SecurityOnline - Django Releases Security Updates to Address Critical Flaw (CVE-2024-42005, CVSS 9.8)
The Django team has issued security updates for Django 5.0.8 and 4.2.15 to address multiple vulnerabilities, including potential denial-of-service (DoS) attacks and a critical SQL injection vulnerability. All Django users...
SecurityOnline - GoGra: New Go-Based Backdoor Targets South Asian Media
In a concerning development, cybersecurity researchers from Symantec’s Threat Hunter Team have uncovered a new Go-based backdoor named GoGra. This sophisticated malware has been used in a targeted attack against...
SecurityOnline - Team82 Unveils Research on Unitronics PLC/HMI Attacks Targeting Critical Infrastructure
Recently, the cybersecurity research team known as Team82 has published an in-depth investigation into a series of cyberattacks targeting integrated Programmable Logic Controllers (PLCs) and Human-Machine Interfaces (HMIs) produced by...
SecurityOnline - Windows Smart App Control, SmartScreen Vulnerable to Exploits
Cybersecurity specialists have discovered significant flaws in the protective mechanisms of Microsoft Windows—Smart App Control (SAC) and SmartScreen. The identified vulnerabilities allow malicious actors to infiltrate target systems without triggering...
SecurityOnline - Sonos smart speakers flaw allowed to eavesdrop on users
NCC Group discovered vulnerabilities in Sonos smart speakers, including a flaw that could have allowed to eavesdrop on users. Researchers from NCC Group have discovered multiple vulnerabilities in Sonos smart speakers, including a flaw, tracked as…
Security Affairs