News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Today, Mon 2 Nov | 67 so far | 7 |
Developing
Fri 23 Aug 202456 articles
- New macOS Malware "Cthulhu Stealer" Targets Apple Users' Data
Cybersecurity researchers have uncovered a new information stealer that's designed to target Apple macOS hosts and harvest a wide range of information, underscoring how threat actors are increasingly setting their sights on the operating system. Dubbed…
The Hacker News - Latvian Hacker Extradited to U.S. for Role in Karakurt Cybercrime Group
A 33-year-old Latvian national living in Moscow, Russia, has been charged in the U.S. for allegedly stealing data, extorting victims, and laundering ransom payments since August 2021. Deniss Zolotarjovs (aka Sforza_cesarini) has been charged with conspiring…
The Hacker News - Exploit for CVE-2024-38054 Released: Elevation of Privilege Flaw in Windows Kernel Streaming WOW Thunk
Security researcher ‘Frost’ has released proof-of-concept exploit code for the CVE-2024-38054 vulnerability, escalating concerns over a recently patched Windows security flaw. This high-severity vulnerability in the Kernel Streaming WOW Thunk...
SecurityOnline - Critical Vulnerabilities Uncovered in Progress WhatsUp Gold (CVE-2024-6670 & CVE-2024-6671)
The Progress WhatsUp Gold team has recently disclosed multiple critical vulnerabilities affecting all versions of the software released before 2024.0.0. These vulnerabilities, identified as CVE-2024-6670, CVE-2024-6671, and CVE-2024-6672, pose significant...
SecurityOnline - SonicWall Issues Urgent Patch for Critical Firewall Vulnerability (CVE-2024-40766)
SonicWall, a prominent network security provider, has released a security advisory warning users of a critical vulnerability (CVE-2024-40766) affecting their SonicOS operating system. The vulnerability, which carries a CVSS score...
SecurityOnline - Cybercriminals Mimic Slack in Sophisticated Malvertising Campaign
A recently discovered malvertising campaign targeting Slack users has highlighted the increasingly sophisticated tactics employed by cybercriminals. Security researchers at Malwarebytes Labs have uncovered a complex scheme that leverages Google...
SecurityOnline - NGate Android Malware Steals NFC Payment Data at ATMs
Researchers from ESET have uncovered a new malicious campaign targeting customers of three Czech banks. The attackers employed a unique malware known as NGate, which transmitted payment card data from...
SecurityOnline - CVE-2024-38206: SSRF Vulnerability in Microsoft Copilot Studio Exposes Internal Infrastructure
Tenable Research has discovered a critical server-side request forgery (SSRF) vulnerability in Microsoft’s Copilot Studio, potentially allowing attackers to gain access to sensitive internal resources. The vulnerability, tracked as CVE-2024-38206...
SecurityOnline - McDonald’s Falls Victim to Cyberattack: Instagram Hijacked to Promote Grimace Cryptocurrency
In a surprising turn of events, McDonald’s, the global fast-food giant, fell victim to a cyberattack that leveraged the brand’s Instagram account to promote a meme coin called “Grimace.” On...
SecurityOnline - Escalating Cyber Threats: Q2 2024 Vulnerability Report
The cybersecurity landscape in Q2 2024 was marked by a notable increase in new vulnerabilities and exploitation techniques targeting both applications and operating systems. According to Kaspersky Labs’ latest report,...
SecurityOnline - Alleged member of Karakurt extradited and charged in Ohio
Let’s start with the press release from the U.S. Attorney’s Office in the Southern District of Ohio: CINCINNATI – A member of a Russian cybercrime group has been charged federally and appeared in U.S. District Court in Cincinnati today. A federal grand jury…
DataBreaches - Pulaski County Man Sentenced for Cyber Intrusion and Aggravated Identity Theft
LONDON, Ky. – A Somerset, Ky., man, Jesse Kipf, 39, was sentenced to 81 months on Monday by U.S. District Judge Robert Wier, for computer fraud and aggravated identity theft. According to his plea agreement, Kipf intentionally accessed a computer without…
DataBreaches - Privacy group fights European Parliament over ‘massive’ HR data breach
Antoaneta Roussi reports: The European Parliament’s headache over a major human resources data breach earlier this year just won’t fade. Austria-based digital rights group noyb on Thursday said it had filed two complaints against the European Union…
DataBreaches - Top US oilfield firm Halliburton hit by cyberattack, source says
Liz Hampton reports: U.S. oilfield services firm Halliburton (HAL.N) on Wednesday was hit by a cyberattack, according to a person familiar with the matter. Halliburton said it was aware of an issue affecting certain systems at the company and was working to…
DataBreaches - Business Associate Agreements Matter: Demystifying the Perceived Simplicity of HIPAA Agreements
Shalyn Watkins of Holland & Knight writes: For most healthcare providers and businesses, signing a Business Associate Agreement (BAA) is a standard practice. When contracting to provide services with an entity governed by the Health Insurance Portability and…
DataBreaches - TodoSwift: North Korean Cybercriminals Use Bitcoin Lure to Spread macOS Malware
A signed application known as “TodoTasks” has been discovered to be a sophisticated malware dropper targeting macOS users. Uploaded to VirusTotal on July 24, 2024, this malicious application is believed...
SecurityOnline