News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Mon 2 Nov | 70 | 7 |
| Today, Tue 3 Nov | 0 so far | 0 |
Developing
Thu 29 Aug 202467 articles
- Cyber Insurance: A Few Security Technologies, A Big Difference in Premiums
Ransomware attacks and email-based fraud account for 80-90% of all claims processed by cyber insurers, but a handful of cybersecurity technologies can help prevent big damages.
Dark Reading - Halliburton cyberattack linked to RansomHub ransomware gang
The RansomHub ransomware gang is behind the recent cyberattack on oil and gas services giant Halliburton, which disrupted the company's IT systems and business operations. [...]
BleepingComputer - Iran's 'Fox Kitten' Group Aids Ransomware Attacks on US Targets
In a joint advisory, CISA and the FBI described the activity as a likely attempt by the group to monetize access to networks it already has compromised.
Dark Reading - AuthenticID Unveils Enhanced Smart ReAuth™ for Instant Biometric Reauthentication
No content available.
Dark Reading - Cisco addressed a high-severity flaw in NX-OS software
Cisco addressed multiple vulnerabilities impacting NX-OS software, including a high-severity flaw in the DHCPv6 relay agent. Cisco released security updates for NX-OS software that address multiple vulnerabilities. The most severe of the vulnerabilities…
Security Affairs - Brazilian Ad Fraud Network 'Camu' Hits 2 Billion+ Daily Bid Requests
The global Internet helps just about everything to scale more easily, including piracy and ad fraud.
Dark Reading - SANS Institute Unveils Critical Infrastructure Strategy Guide for 2024
No content available.
Dark Reading - Top Travel Sites Have Some First-Class Security Issues to Clean Up
Public-facing vulnerabilities, cloud sprawl, access to back-end servers are just a few of the challenges travel and hospitality companies must address.
Dark Reading - CISA Highlights Apache OFBiz Flaw After PoC Open Access
The vulnerability carries nearly the highest score possible on the CVSS scale, at 9.8, impacting a system used by major companies around the world.
Dark Reading - FBI: RansomHub ransomware breached 210 victims since February
Since surfacing in February 2024, RansomHub ransomware affiliates have breached over 200 victims from a wide range of critical U.S. infrastructure sectors. [...]
BleepingComputer - Fake Canva home page leads to browser lock
In a previous blog post, we showed how fraudsters were leveraging features from the very company (Microsoft) they were impersonating. We continue this series with another clever trick abusing Canva, a popular online tool for graphic design. This time, the…
Malwarebytes - Fake Palo Alto GlobalProtect used as lure to backdoor enterprises
Threat actors target Middle Eastern organizations with malware disguised as the legitimate Palo Alto GlobalProtect Tool that can steal data and execute remote PowerShell commands to infiltrate internal networks further. [...]
BleepingComputer - Windows 10 KB5041582 update released with 5 changes and fixes
Microsoft has released the August 2024 preview update for Windows 10, version 22H2, with fixes for issues causing system freezes and memory leaks. [...]
BleepingComputer - Vietnamese Human Rights Group Targeted in Multi-Year Cyberattack by APT32
A non-profit supporting Vietnamese human rights has been the target of a multi-year campaign designed to deliver a variety of malware on compromised hosts. Cybersecurity company Huntress attributed the activity to a threat cluster known as APT32, a…
The Hacker News - Russian Hackers Exploit Safari and Chrome Flaws in High-Profile Cyberattack
Cybersecurity researchers have flagged multiple in-the-wild exploit campaigns that leveraged now-patched flaws in Apple Safari and Google Chrome browsers to infect mobile users with information-stealing malware. "These campaigns delivered n-day exploits for…
The Hacker News - Malware exploits 5-year-old zero-day to infect end-of-life IP cameras
The Corona Mirai-based malware botnet is spreading through a 5-year-old remote code execution (RCE) zero-day in AVTECH IP cameras, which have been discontinued for years and will not receive a patch. [...]
BleepingComputer - What Type of Social Engineering Targets Senior Officials
What Type of Social Engineering Targets Senior Officials Cybercriminals often utilize various social engineering tactics to manipulate and take advantage of human psychology to trick others into disclosing private information or taking activities that…
SOCRadar - What is DDoSia Project?
What is DDoSia Project? The DDoSia project is a cyber threat, a tool, leveraging the disruptive power of distributed denial-of-service (DDoS) attacks to target critical infrastructure and governmental bodies worldwide. DDoSia project was launched on Telegram…
SOCRadar - How Telecom Vulnerabilities Can Be a Threat to Cybersecurity Posture
Telecom-based attacks such as SMS toll fraud and 2FA hijacking have evolved into a mainstream concern for CISOs.
Dark Reading - Iranian Hackers Use New Tickler Malware For Intelligence Gathering
No content available.
packetstormsecurity.com - Brain Cipher Claims Attack On Olympic Venue, Promises 300 GB Data Leak
No content available.
packetstormsecurity.com - Unpatchable Zero Day In Surveillance Cam Is Being Exploited To Install Mirai
No content available.
packetstormsecurity.com - Dick’s Sporting Goods Discloses Cyberattack
The sporting goods retail chain said hte incident exposed portions of the its IT systems containing confidential information.
SecurityWeek - Russian APT29 hackers use iOS, Chrome exploits created by spyware vendors
The Russian state-sponsored APT29 hacking group has been observed using the same iOS and Android exploits created by commercial spyware vendors in a series of cyberattacks between November 2023 and July 2024. [...]
BleepingComputer - Google Catches Russian APT Reusing Exploits From Spyware Merchants NSO Group, Intellexa
Google TAG publishes evidence showing identical or striking similarities between exploits used by Russia's APT29 and commercial spyware vendors.
SecurityWeek - How to embrace Secure by Design principles while adopting AI
The rapid rise of generative artificial intelligence (gen AI) technologies has ushered in a transformative era for industries worldwide. Over the past 18 months, enterprises have increasingly integrated gen AI into their operations, leveraging its potential…
securityintelligence.com - State-backed attackers and commercial surveillance vendors repeatedly use the same exploits
We’re sharing an update on suspected state-backed attacker APT29 and the use of exploits identical to those used by Intellexa and NSO.
blog.google - Corona Mirai botnet spreads via AVTECH CCTV zero-day
An instance of the Corona Mirai botnet spreads via AVTECH CCTV zero-day and multiple previously known vulnerabilities. Akamai’s Security Intelligence and Response Team (SIRT) has detected a botnet campaign exploiting multiple previously known vulnerabilities…
Security Affairs - Dragos Expands Asset Visibility in Latest Platform Update
The latest release of the Dragos Platform provide industrial and critical infrastructure organizations with complete and enriched view of their OT environment.
Dark Reading - Cybersecurity Maturity: A Must-Have on the CISO’s Agenda
Undertaking a cybersecurity maturity review helps leaders establish a benchmark from which to build a proactive improvement strategy.
SecurityWeek - Telegram CEO Pavel Durov charged with allowing criminal activity
France has indicted the CEO of the popular messaging app Telegram on charges of complicity in the distribution of child sex abuse images, aiding organized crime, drug trafficking, fraud, and refusing lawful orders to give information to law enforcement. The…
Malwarebytes - U.S. Agencies Warn of Iranian Hacking Group's Ongoing Ransomware Attacks
U.S. cybersecurity and intelligence agencies have called out an Iranian hacking group for breaching multiple organizations across the country and coordinating with affiliates to deliver ransomware. The activity has been linked to a threat actor dubbed…
The Hacker News - Cisco Patches Multiple NX-OS Software Vulnerabilities
Cisco on Wednesday announced NX-OS software updates that resolve multiple vulnerabilities, including a high-severity DoS bug.
SecurityWeek - How AitM Phishing Attacks Bypass MFA and EDR—and How to Fight Back
Attackers are increasingly using new phishing toolkits (open-source, commercial, and criminal) to execute adversary-in-the-middle (AitM) attacks. AitM enables attackers to not just harvest credentials but steal live sessions, allowing them to bypass…
The Hacker News - Unpatched AVTECH IP Camera Flaw Exploited by Hackers for Botnet Attacks
A years-old high-severity flaw impacting AVTECH IP cameras has been weaponized by malicious actors as a zero-day to rope them into a botnet. CVE-2024-7029 (CVSS score: 8.7), the vulnerability in question, is a "command injection vulnerability found in the…
The Hacker News - Telegram CEO Pavel Durov charged in France for facilitating criminal activities
French prosecutors charged CEO Telegram Pavel Durov with facilitating various criminal activities on the messaging platform. French prosecutors have formally charged Telegram CEO Pavel Durov with facilitating various criminal activities on the platform,…
Security Affairs