News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Today, Mon 2 Nov | 67 so far | 7 |
Developing
Tue 27 Aug 202474 articles
- Critical flaw in WPML WordPress plugin impacts 1M websites
A critical flaw in the WPML WordPress plugin, which is installed on 1 million websites, could allow potential compromise of affected sites. The WPML Multilingual CMS Plugin for WordPress is installed on over 1 million sites. An authenticated (Contributor+)…
Security Affairs - 77% of Educational Institutions Spotted a Cyberattack Within the Last 12 Months
No content available.
Dark Reading - BlackSuit ransomware stole data of 950,000 from software vendor
Young Consulting is sending data breach notifications to 954,177 people who had their information exposed in a BlackSuit ransomware attack on April 10, 2024. [...]
BleepingComputer - PoC Exploit for Zero-Click Vulnerability Made Available to the Masses
The exploit can be accessed on GitHub and makes it easier for the flaw to be exploited by threat actors.
Dark Reading - US Marshals Service disputes ransomware gang's breach claims
The U.S. Marshals Service (USMS) denies its systems were breached by the Hunters International ransomware gang after being listed as a new victim on the cybercrime group's leak site on Monday. [...]
BleepingComputer - US Marshals say data posted by ransomware gang not from ‘new or undisclosed incident’
Jonathan Greig reports: The U.S. Marshals Service said it has looked into recent data theft claims made by a prominent ransomware gang and determined none of the data is from a new incident. Brady McCarron, a spokesperson for the Marshals Service, told…
DataBreaches - China-linked APT Volt Typhoon exploited a zero-day in Versa Director
China-linked APT group Volt Typhoon exploited a zero-day flaw in Versa Director to upload a custom webshell in target networks. China-linked APT Volt Typhoon exploited a zero-day vulnerability, tracked as CVE-2024-39717, in Versa Director, to deploy a custom…
Security Affairs - Microsoft's Sway Serves as Launchpad for 'Quishing' Campaign
The attack is a mashup of QR codes and phishing that gets users to click on links to malicious Web pages.
Dark Reading - Windows 11 KB5041587 update adds sharing to Android devices
Microsoft has released the optional KB5041587 preview cumulative update for Windows 11 23H2 and 22H2, which adds sharing to Android devices and fixes multiple File Explorer issues. [...]
BleepingComputer - National Public Data’s response to an opt-out request
Last night, DataBreaches received an alert from Experian Identity Works that my Social Security number had shown up in its dark web surveillance. There were three entries where it had shown up last week. All three related to the massive National Public Data…
DataBreaches - American Radio Relay League paid $1 million ransom payment
ARRL is the national association for Amateur Radio in the US. Founded in 1914 by Hiram Percy Maxim as The American Radio Relay League, ARRL is a noncommercial organization of radio amateurs. ARRL numbers within its ranks the vast majority of active r...
DataBreaches - Microsoft security tools questioned for treating employees as threats
Thomas Claburn reports: Software designed to address legitimate business concerns about cyber security and compliance treats employees as threats, normalizing intrusive surveillance in the workplace, according to a report by Cracked Labs. The report, titled…
DataBreaches - Microsoft to host Windows Endpoint Security Ecosystem Summit in September
From Microsoft Windows Blogs: On Sept. 10, 2024, Microsoft will host a Windows Endpoint Security Ecosystem Summit at our Redmond, Washington, headquarters. Microsoft, CrowdStrike and key partners who deliver endpoint security technologies will come together…
DataBreaches - Malta’s Nationalist Party tells government to stop investigating young ethical hackers
Matthew Farrugia reports: The Nationalist Party has called on government to put an end to the prolonged investigation into four young ethical hackers, noting their talent is currently being wasted instead of used properly. In 2023, Giorgio Grigolo, Michael…
DataBreaches - Patelco notifies 726,000 customers of ransomware data breach
Bill Toulas reports: Patelco Credit Union warns customers it suffered a data breach after personal data was stolen in a RansomHub ransomware attack earlier this year. Though the organization did not name the attackers, the RansomHub gang claimed…
DataBreaches - Reward for Information: Belarusian National Volodymyr Kadariya
REWARD FOR INFORMATION: BELARUSIAN NATIONAL VOLODYMYR KADARIYA REWARD OF UP TO $2.5 MILLION [Wanted poster in English-508 compliant] [200 KB] [Wanted poster in Belarusian] [240 KB] [Wanted poster in Russian] [240 KB] [Wanted poster in Spanish] [244 KB]...
DataBreaches - Ca: Personal information of 1 million Park’N Fly customers accessed during data breach
Amanda Anderson reports: The personal information of about one million Park’N Fly customers was accessed during a data breach last month. The company confirms a third party accessed its network through unauthorized remote VPN access between July 11 and July…
DataBreaches - Toyota’s cyber woes continue as latest breach marks fifth major IT incident in two years
Solomon Klappholz reports: Toyota is once again in the headlines after a hacker collective claimed to have exfiltrated 240GB of sensitive data from the car manufacturer’s internal systems. Toyota has confirmed its network was breached after a threat actor…
DataBreaches - Notion exits Russia and will terminate accounts in September
Notion has announced it will exit the Russian market and is terminating all workspaces and accounts identified linked to users in the country. [...]
BleepingComputer - Malware infiltrates Pidgin messenger’s official plugin repository
The Pidgin messaging app removed the ScreenShareOTR plugin from its official third-party plugin list after it was discovered that it was used to install keyloggers, information stealers, and malware commonly used to gain initial access to corporate networks.…
BleepingComputer - Windows Downdate tool lets you 'unpatch' Windows systems
SafeBreach security researcher Alon Leviev has released his Windows Downdate tool, which can be used for downgrade attacks that reintroduce old vulnerabilities in up-to-date Windows 10, Windows 11, and Windows Server systems. [...]
BleepingComputer - macOS Version of HZ RAT Backdoor Targets Chinese Messaging App Users
Users of Chinese instant messaging apps like DingTalk and WeChat are the target of an Apple macOS version of a backdoor named HZ RAT. The artifacts "almost exactly replicate the functionality of the Windows version of the backdoor and differ only in the…
The Hacker News - CISA Warns of Actively Exploited Apache OFBiz CVE-2024-38856 Vulnerability, PoC Available
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about an actively exploited security flaw in Apache OFBiz, a popular open-source enterprise resource planning (ERP) system....
SecurityOnline - Chinese Hackers Deploy VersaMem Web Shell via Versa Director Zero-Day (CVE-2024-39717)
Black Lotus Labs, a threat intelligence team within Lumen Technologies, has uncovered the active exploitation of a zero-day vulnerability in Versa Director servers, identified as CVE-2024-39717. This critical vulnerability, which...
SecurityOnline - Park’N Fly notifies 1 million customers of data breach
Park'N Fly is warning that a data breach exposed the personal and account information of 1 million customers in Canada after hackers breached its network. [...]
BleepingComputer - Cribl Raises $319 Million at $3.5 Billion Valuation
The IT and data security firm raises $319 million in a Series E round led by Google Ventures and is now valued at $3.5 billion.
SecurityWeek - Watchdog Warns FBI Is Sloppy On Secure Data Storage And Destruction
No content available.
packetstormsecurity.com - Microsoft Security Tools Questioned For Treating Employees As Threats
No content available.
packetstormsecurity.com - WPML Multilingual CMS Authenticated Contributor+ Remote Code Execution Via SSTI
No content available.
packetstormsecurity.com - Hackers Infect ISPs With Malware That Steals Customer Credentials
No content available.
packetstormsecurity.com - New 0-Day Attacks Linked to China’s ‘Volt Typhoon’
Malicious hackers are exploiting a zero-day vulnerability in Versa Director, a software product used by many Internet and IT service providers. Researchers believe the activity is linked to Volt Typhoon, a Chinese cyber espionage group focused on…
Krebs on Security - How to identify unknown assets while pen testing
External Attack Surface Management (EASM) coupled with Penetration Testing as a Service (PTaaS) can help find those blind spots and hidden assets exposed on your network. Learn more from Outpost24 about how combining EASM and PTaaS can help reveal these…
BleepingComputer - Chinese Volt Typhoon Exploits Versa Director Flaw, Targets U.S. and Global IT Sectors
The China-nexus cyber espionage group tracked as Volt Typhoon has been attributed with moderate confidence to the zero-day exploitation of a recently disclosed high-severity security flaw impacting Versa Director. The attacks targeted four U.S. victims and…
The Hacker News - Why Every Business Should Prioritize Confidential Computing
Confidential computing safeguards data in use, making it a crucial component of cloud security.
Dark Reading - Microsoft Sway abused in massive QR code phishing campaign
A massive QR code phishing campaign abused Microsoft Sway, a cloud-based tool for creating online presentations, to host landing pages to trick Microsoft 365 users into handing over their credentials. [...]
BleepingComputer - Chinese Volt Typhoon hackers exploited Versa zero-day to breach ISPs, MSPs
The Chinese state-backed hacking group Volt Typhoon is behind attacks that exploited a zero-day flaw in Versa Director to upload a custom webshell to steal credentials and breach corporate networks. [...]
BleepingComputer - Code Execution Vulnerability Found in WPML Plugin Installed on 1M WordPress Sites
A critical vulnerability in the WPML WordPress plugin could allow a remote attacker to execute arbitrary code on the server.
SecurityWeek