News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Today, Mon 2 Nov | 31 so far | 5 |
Developing
Tue 13 Aug 202480 articles
- Ransom Cartel, Reveton ransomware owner arrested, charged in US
Belarusian-Ukrainian national Maksim Silnikau was arrested in Spain and is now extradited to the USA to face charges for creating the Ransom Cartel ransomware operation in 2021 and running a malvertising operation from 2013 to 2022. [...]
BleepingComputer - Researchers Uncover Vulnerabilities in AI-Powered Azure Health Bot Service
Cybersecurity researchers have discovered two security flaws in Microsoft's Azure Health Bot Service that, if exploited, could permit a malicious actor to achieve lateral movement within customer environments and access sensitive patient data. The critical…
The Hacker News - Cost of a data breach 2024: Financial industry
According to the IBM Cost of a Data Breach 2024 report, the average global breach cost has reached $4.88 million — a significant increase over last year’s $4.45 million and the biggest jump since the pandemic. For financial industry enterprises, costs are…
securityintelligence.com - Reframing the ZTNA vs. SASE Debate
While ZTNA can be deployed independently, it is an integral component of the SASE architecture as well.
SecurityWeek - CryptoScam Strikes Misusing Trump & Musk Interview
Scammers have exploited the popularity of former President Donald Trump and tech mogul Elon Musk to deceive unsuspecting victims. According to a recent tweet by Avast Threat Labs, the fraudulent scheme involved hijacking YouTube accounts to broadcast fake…
gbhackers.com - Top 50 Cloud Statistics in 2024 (Essential Insights on Investments, Breaches, Misconfigurations, and More)
Top 50 Cloud Statistics in 2024 (Essential Insights on Investments, Breaches, Misconfigurations, and More) In the fast-changing world of cloud computing, it’s essential for both organizations and professionals to keep up with the latest trends and…
SOCRadar - DARPA Aims to Ditch C Code, Move to Rust
The Defense Advanced Research Projects Agency launches TRACTOR program to work with university and industry researchers on creating a translation system that can turn C code into secure, idiomatic Rust code.
Dark Reading - APT trends report Q2 2024
For over six years now, Kaspersky’s Global Research and Analysis Team (GReAT) has been sharing quarterly updates on advanced persistent threats (APTs). These summaries draw on our threat intelligence research, offering a representative overview of what we’ve…
securelist.com - Post-Quantum Cryptography Standards Officially Announced by NIST – a History and Explanation
SecurityWeek speaks to Michael Osborne, CTO of IBM Quantum Safe, for a better understanding of the need for and principles of quantum safe cryptography.
SecurityWeek - Leader of International Malvertising and Ransomware Schemes Extradited from Poland to Face Cybercrime Charges
Justice Department Unseals Charges Against Two Additional International Cybercriminals WASHINGTON – A Belarussian and Ukrainian dual-national charged in both the District of New Jersey and Eastern District of Virginia with leading international computer…
DataBreaches - Data theft forum admins busted after flashing their cash in a life of luxury
Two men without a clear source of income landed cyberfraud charges after being so flash with their ill-gotten cash that it gained the attention of the authorities. In 2022, Russian national Pavel Kublitskii and Kazakhstan national Alexandr Khodyrev arrived…
Malwarebytes - Why Hardsec Matters: From Protecting Critical Services to Enhancing Resilience
Traditionally, the focus has been on defending against digital threats such as malware, ransomware, and phishing attacks by detecting them and responding. However, as cyber threats become more sophisticated. There is a growing recognition of the importance…
The Hacker News - Ransomware Hits Australian Gold Mining Firm Evolution Mining
Australian gold mining company Evolution Mining believes it was able to contain a ransomware attack targeting its IT systems last week.
SecurityWeek - Elon Musk Says Cyberattack Crashed Site Ahead of Trump Livestream Interview
Elon Musk says a cyberattack impacted a livestream interview with US Presidential candidate Donald Trump on the X social media platform.
SecurityWeek - AMD Says New Sinkclose CPU Vulnerability Only Affects ‘Seriously Breached Systems’
Many AMD CPUs are affected by the new Sinkclose vulnerability, but the chipmaker noted that the flaw is not easy to exploit.
SecurityWeek - Authorities Seized Dispossessor Ransomware Servers
FBI Cleveland announced a significant victory against cybercrime by disrupting “Radar/Dispossessor,” a notorious ransomware group led by the online moniker “Brain.” This operation dismantled three servers in the United States, three in the United Kingdom,…
gbhackers.com - SAP Security Patch Day – August 2024: CVE-2024-41730 (CVSS 9.8) Vulnerability Exposes Systems to Full Control Exploit
SAP has released its monthly security patches for August 2024, addressing a range of vulnerabilities across its extensive product portfolio. The update includes fixes for 17 new security notes and...
SecurityOnline - FBI Shuts Down Dispossessor Ransomware Group's Servers Across U.S., U.K., and Germany
The U.S. Federal Bureau of Investigation (FBI) on Monday announced the disruption of online infrastructure associated with a nascent ransomware group called Dispossessor (aka Radar). The effort saw the dismantling of three U.S. servers, three United Kingdom…
The Hacker News - Radar/Dispossessor Ransomware Operation Disrupted by Authorities
Law enforcement agencies in the US, Germany, and the UK have disrupted the Radar/Dispossessor ransomware infrastructure.
SecurityWeek - FBI Dismantles ‘Radar/Dispossessor’ Ransomware Gang, Seizing Servers Across the Globe
The FBI has successfully disrupted the notorious “Radar/Dispossessor” ransomware operation, led by the elusive cybercriminal known as “Brain.” The operation, which targeted businesses and organizations across multiple continents, was brought...
SecurityOnline - DeathGrip Ransomware Expanding Services Using RaaS Service
A new Ransomware-as-a-Service (RaaS) platform known as DeathGrip has surfaced, offering sophisticated ransomware tools to aspiring cyber criminals. This service is being promoted through Telegram and various underground forums, providing a gateway for…
gbhackers.com - CERT-UA warns of a phishing campaign targeting government entities
CERT-UA warned that Russia-linked actor is impersonating the Security Service of Ukraine (SSU) in a new phishing campaign to distribute malware. The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new phishing campaign targeting organ...
Security Affairs - Google Cloud Services Disrupted in UK Due to Power Outage
A power outage at a Google data center in London led to a significant disruption of Google Cloud Platform (GCP) and Workspace services for users in the UK on August...
SecurityOnline - Zabbix Addresses Multi Vulnerabilities, Including RCE CVE-2024-36461 (CVSS 9.1) Flaw
Zabbix, the widely-used open-source monitoring solution, has released a series of security updates addressing critical vulnerabilities, most notably CVE-2024-36461, which carries a CVSS score of 9.1. This vulnerability allows users...
SecurityOnline - US DoJ dismantled remote IT worker fraud schemes run by North Korea
The U.S. DoJ arrested a Tennessee man for running a “laptop farm” that enabled North Korea-linked IT workers to obtain remote jobs with American companies. The U.S. Justice Department arrested Matthew Isaac Knoot (38) from Nashville (Tennessee) for operating…
Security Affairs - AndroCon: New Study Shows How Your Phone Can Track Your Every Move, Even Indoors
A recent study titled “AndroCon: Conning Location Services in Android” has revealed a disturbing trend: smartphones can be covertly used to monitor users, creating highly accurate maps of their living...
SecurityOnline - X Faces GDPR Heat Over AI Training on 60 Million European Users’ Data
European privacy advocacy organization NOYB has recently lodged a complaint with EU regulators against Elon Musk’s social media platform, X/Twitter, accusing it of violating users’ privacy rights. The complaint centers...
SecurityOnline - PostgreSQL Vulnerability Hackers Execute Arbitrary SQL Functions
A critical vulnerability identified as CVE-2024-7348 has been discovered in PostgreSQL, enabling attackers to execute arbitrary SQL functions. This vulnerability in the pg_dump utility poses a significant security risk, especially when executed by…
gbhackers.com - Ukraine Warns of New Phishing Campaign Targeting Government Computers
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new phishing campaign that masquerades as the Security Service of Ukraine to distribute malware capable of remote desktop access. The agency is tracking the activity under the name…
The Hacker News - BYOVDLL: New Exploit Bypasses Microsoft’s LSASS Defenses
In July 2022, Microsoft made modifications to its Protected Process Light (PPL) system aimed at mitigating a vulnerability that allowed bypassing the protection of LSASS, a critical process responsible for...
SecurityOnline - CVE-2024-22116 (CVSS 9.9): Critical RCE Vulnerability Found in Zabbix Monitoring Solution
Zabbix, a widely-adopted open-source solution for enterprise-level IT infrastructure monitoring, has disclosed a critical security vulnerability that could lead to full system compromise. The vulnerability, identified as CVE-2024-22116 and assigned...
SecurityOnline - Akamai Unveils New VPN Post-Exploitation Techniques: Major Vulnerabilities Discovered in Ivanti and FortiGate VPNs
Akamai researchers have exposed a series of vulnerabilities and techniques that could allow threat actors to further escalate their attacks after compromising a Virtual Private Network (VPN) server. The analysis...
SecurityOnline - Security Flaw in PostgreSQL: CVE-2024-7348 Allows Arbitrary SQL Execution
The PostgreSQL project has issued a security advisory, warning users of a serious vulnerability (CVE-2024-7348). The flaw, which carries a CVSS score of 8.8, exposes users to the risk of...
SecurityOnline - From 7,000 to 13,000: The Alarming Growth of the 7777 Botnet
Security researchers from Team Cymru have identified a significant expansion in the activities of the “7777” botnet, first detected in October 2023 and named for its use of TCP port...
SecurityOnline - GhostWrite: New RISC-V Vulnerability Enables Full Device Takeover
A team of researchers from the CISPA Helmholtz Center for Information Security has disclosed a critical vulnerability, named GhostWrite, affecting T-Head XuanTie C910 and C920 RISC-V CPUs. This hardware-level flaw...
SecurityOnline - New APT Group ‘Actor240524’ Targets Azerbaijan and Israel with Advanced Tactics
A sophisticated cyber espionage campaign targeting Azerbaijan and Israel has been linked to a previously unidentified advanced persistent threat (APT) group, designated as ‘Actor240524’ by NSFOCUS Security Labs. Actor240524 distinguishes...
SecurityOnline - Windows Users Beware: CVE-2024-6768 – New ‘Blue Screen of Death’ Vulnerability Affects All
A newly discovered vulnerability in the Windows operating system has raised concerns among cybersecurity experts due to its potential to trigger the infamous “Blue Screen of Death” (BSOD). Identified as...
SecurityOnline - New Phishing Campaign Deploys PureHVNC and Other Malware, Targets Sensitive Data
Cybersecurity researchers from FortiGuard Labs have discovered a sophisticated phishing campaign that utilizes a multi-stage execution flow and various evasion techniques to deliver multiple strains of malware, including the remote...
SecurityOnline - Ransomware Gangs’ New Tactic: Weaponizing Legitimate Entities
According to Sophos, cybercriminals are continually refining their methods of exerting pressure on victims. Over the past three years, the tactics employed by ransomware operators have undergone significant changes, becoming...
SecurityOnline - FBI Says It Is Investigating After Trump Campaign Said Sensitive Documents Were Hacked by Iran
The FBI is investigating allegations that sensitive documents from Donald Trump’s presidential campaign were stolen in a cyber intrusion.
SecurityWeek