News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Today, Mon 2 Nov | 50 so far | 7 |
Developing
Mon 19 Aug 202454 articles
- Toyota confirms breach after stolen data leaks on hacking forum
Toyota confirmed that its network was breached after a threat actor leaked an archive of 240GB of data stolen from the company's systems on a hacking forum. [...]
BleepingComputer - Ransomware rakes in record-breaking $450 million in first half of 2024
Ransomware victims have paid $459,800,000 to cybercriminals in the first half of 2024, setting the stage for a new record this year if ransom payments continue at this level. [...]
BleepingComputer - CISA adds Jenkins Command Line Interface (CLI) bug to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Jenkins Command Line Interface (CLI) bug to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Jenkins Command Line…
Security Affairs - CISA warns of Jenkins RCE bug exploited in ransomware attacks
CISA has added a critical Jenkins vulnerability that can be exploited to gain remote code execution to its catalog of security bugs, warning that it's actively exploited in attacks. [...]
BleepingComputer - Researchers uncovered new infrastructure linked to the cybercrime group FIN7
Team Cymru, Silent Push and Stark Industries Solutions researchers uncovered a new infrastructure linked to the cybercrime group FIN7. Researchers from Team Cymru identified two clusters potentially linked to the cybercrime group FIN7. The team collaborated…
Security Affairs - Hackers linked to $14M Holograph crypto heist arrested in Italy
Suspected hackers behind the heist of $14,000,000 worth of cryptocurrency from blockchain tech firm Holograph was arrested in Italy after living a lavish lifestyle for weeks in the country. [...]
BleepingComputer - National Public Data Published Its Own Passwords
New details are emerging about a breach at National Public Data (NPD), a consumer data broker that recently spilled hundreds of millions of Americans’ Social Security Numbers, addresses, and phone numbers online. KrebsOnSecurity has learned that another NPD…
Krebs on Security - Windows Zero-Day Attack Linked to North Korea’s Lazarus APT
The vulnerability, tracked as CVE-2024-38193 and marked as ‘actively exploited’ by Microsoft, allows SYSTEM privileges on the latest Windows operating systems.
SecurityWeek - Hacked GPS tracker reveals location data of customers
Stalkerware researcher maia arson crimew strikes again. Big time. We know maia as a researcher that loves to go after stalkerware peddlers, which Malwarebytes—as one of the founding members of the Coalition Against Stalkerware—loves to see. This time the…
Malwarebytes - Carespring Data Breach Exposes Personal and Medical Information of Nearly 77,000 Patients
Data includes names, dates of birth, physical addresses, Social Security Numbers, medical and diagnosis information, and health insurance details.
SecurityWeek - FlightAware configuration error leaked user data for years
Flight tracking platform FlightAware is asking some users to reset their account login passwords due to a data security incident that may have exposed personal information. [...]
BleepingComputer - Human Nature Is Causing Our Cybersecurity Problem
By moving beyond guidelines and enforcing accountability, encouraging innovation, and prioritizing the safety and well-being of our communities in the digital age, we can build a more secure software future.
Dark Reading - A Critical Look at the State Department's Risk Management Profile
The US needs to seize this moment to set a global standard for responsible and ethical AI, ensuring that technological progress upholds and advances human rights.
Dark Reading - National Public Data Says Breach Impacts 1.3 Million People
No content available.
packetstormsecurity.com - Unicoin Hints At Potential Data Meddling After G-Suite Compromise
No content available.
packetstormsecurity.com - AI SPERA and Hackers Central Partner to Expand Mexico’s Security Market with ‘Criminal IP ASM’
AI SPERA, a leading Cyber Threat Intelligence (CTI) company, has announced a strategic partnership with Hackers Central, a major cybersecurity management service provider in Mexico. The announcement marks a significant step in AI SPERA’s strategy to broaden…
gbhackers.com - National Public Data Says Breach Impacts 1.3 Million People
National Public Data (NPD) has confirmed suffering a data breach, but the company says the incident only affects 1.3 million people in the US.
SecurityWeek - Lazarus Hacker Group Exploited Microsoft Windows Zero-day
The notorious Lazarus hacker group has been identified as exploiting a zero-day vulnerability in Microsoft Windows, specifically targeting the Windows Ancillary Function Driver for WinSock (AFD.sys). This vulnerability, cataloged as CVE-2024-38193, was…
gbhackers.com - New UULoader Malware Distributes Gh0st RAT and Mimikatz in East Asia
A new type of malware called UULoader is being used by threat actors to deliver next-stage payloads like Gh0st RAT and Mimikatz. The Cyberint Research Team, which discovered the malware, said it's distributed in the form of malicious installers for…
The Hacker News - City of Flint Scrambling to Restore Services Following Ransomware Attack
The City of Flint, Michigan, has been struggling with network and online service disruptions after being hit by ransomware last week.
SecurityWeek - Cybercriminals Exploit Popular Software Searches to Spread FakeBat Malware
Cybersecurity researchers have uncovered a surge in malware infections stemming from malvertising campaigns distributing a loader called FakeBat. "These attacks are opportunistic in nature, targeting users seeking popular business software," the Mandiant…
The Hacker News - US Lawmakers Want Investigation Into TP-Link Over Chinese Hacking Fears
Lawmakers want TP-Link to be investigated by the Department of Commerce over concerns that its routers can be easily hacked to infiltrate US systems.
SecurityWeek - Microsoft Announces Mandatory MFA for Azure
Microsoft is implementing automatic enforcement of multi-factor authentication (MFA) for all Azure users starting October.
SecurityWeek - National Public Data reports highly publicized breach affected a total 1.3 million people
There has been a lot of publicity about a breach and then leak of data from National Public Data. Some early reports erroneously claimed that 2.9 billion people were affected. Other sources noted more accurately noted that 2.9 billion was the number of…
DataBreaches - Oregon Zoo Ticketing Service Hack Impacts 118,000
A web skimmer was likely used to steal names and payment card data from the Oregon Zoo’s online ticketing service.
SecurityWeek - How to Automate the Hardest Parts of Employee Offboarding
According to recent research on employee offboarding, 70% of IT professionals say they’ve experienced the negative effects of incomplete IT offboarding, whether in the form of a security incident tied to an account that wasn't deprovisioned, a surprise bill…
The Hacker News - Linux Kernal Vulnerability Let Attackers Bypass CPU & Gain Read/Write Access
Researchers have uncovered a critical vulnerability within the Linux kernel’s dmam_free_coherent() function. This flaw, identified as CVE-2024-43856, stems from a race condition caused by the improper order of operations when freeing Direct Memory Access…
gbhackers.com - Millennials’ sense of privacy uniquely tested in romantic relationships
Millennials are in a bind. According to a new analysis of research released earlier this year by Malwarebytes, Millennials are significantly more likely than every other generation to feel that there is no need to share their online account logins with…
Malwarebytes - Cyberattack Cripples Unicoin: Employees Locked Out
The cryptocurrency company Unicoin recently suffered a major cyberattack, resulting in the company’s employees losing corporate access for a full four days. The incident occurred on August 9, when an...
SecurityOnline - Xeon Sender Tool Exploits Cloud APIs for Large-Scale SMS Phishing Attacks
Malicious actors are using a cloud attack tool named Xeon Sender to conduct SMS phishing and spam campaigns on a large scale by abusing legitimate services. "Attackers can use Xeon to send messages through multiple software-as-a-service (SaaS) providers…
The Hacker News - BlindEagle flying high in Latin America
BlindEagle, also known as “APT-C-36”, is an APT actor recognized for employing straightforward yet impactful attack techniques and methodologies. The group is known for their persistent campaigns targeting entities and individuals in Colombia, Ecuador,…
securelist.com - Hackers Claim a Zoom Breach, Alleged FedEx Accounts and Government Logs on Sale
Hackers Claim a Zoom Breach, Alleged FedEx Accounts and Government Logs on Sale Over the past week, the SOCRadar Dark Web Team has uncovered several alarming cyber threats targeting various sectors. Notable incidents include the sale of logs and accounts…
SOCRadar - Chrome for Android to Blur Sensitive Data in Screen Captures
Google is set to enhance the security of its Chrome browser on Android by introducing a new feature designed to obscure sensitive information during screen recording, screen sharing, and similar...
SecurityOnline - Experts warn of exploit attempt for Ivanti vTM bug
Researchers at the Shadowserver Foundation observed an exploit attempt based on the public PoC for Ivanti vTM bug CVE-2024-7593. Researchers at the Shadowserver Foundation observed an exploit attempt based on the public proof of concept (PoC) for the Ivanti…
Security Affairs - 100,000 Impacted by Jewish Home Lifecare Data Breach
A Jewish Home Lifecare data breach resulting from a BlackCat ransomware attack impacts over 100,000 individuals.
SecurityWeek - Microsoft Zero-Day CVE-2024-38193 was exploited by North Korea-linked Lazarus APT
Microsoft addressed a zero-day vulnerability actively exploited by the North-Korea-linked Lazarus APT group. Microsoft has addressed a zero-day vulnerability, tracked as CVE-2024-38193 (CVSS score: 7.8), which has been exploited by the North Korea-linked…
Security Affairs - HookChain: The Technique That Bypass Exposes EDR in 94% of Security Solutions
In an ever-evolving cybersecurity landscape, where threats are becoming more sophisticated by the day, the focus on Endpoint Detection and Response (EDR) systems has never been more critical. However, in...
SecurityOnline - A week in security (August 12 – August 18)
Last week on Malwarebytes Labs: Dozens of Google products targeted by scammers via malicious search ads Microsoft patches bug that could have allowed an attacker to revert your computer back to an older, vulnerable version We’re making it easier for you to...
Malwarebytes - Microsoft Patches Zero-Day Flaw Exploited by North Korea’s Lazarus Group
A newly patched security flaw in Microsoft Windows was exploited as a zero-day by Lazarus Group, a prolific state-sponsored actor affiliated with North Korea. The security vulnerability, tracked as CVE-2024-38193 (CVSS score: 7.8), has been described as a…
The Hacker News