News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Mon 2 Nov | 80 | 7 |
| Today, Tue 3 Nov | 1 so far | 0 |
Developing
Thu 29 Aug 202467 articles
- Beckhoff TwinCAT/BSD Vulnerabilities Expose PLCs to Tampering, DoS Attacks
Beckhoff Automation has patched several vulnerabilities in its TwinCAT/BSD operating system for industrial PCs.
SecurityWeek - Biggest Healthcare Industry Attacks (2023 – 2024)
Biggest Healthcare Industry Attacks (2023 – 2024) The healthcare industry has become an increasingly favored target for cybercriminals, with the financial impact of breaches being particularly severe. The industry’s vulnerability is further exacerbated by…
SOCRadar - Uniqkey Raises €5.35 Million for Business Password Management Solutions
European password management startup Uniqkey has raised €5.35 million (~$5.9 million) from BackingMinds.
SecurityWeek - Iranian Hackers Use New Tickler Malware to Collect Intel From US, UAE
The Iran-linked state-sponsored hacker group tracked as Peach Sandstorm has started using a new backdoor in attacks aimed at the US and UAE.
SecurityWeek - Ransomware Gang Leaks Data Allegedly Stolen From Microchip Technology
The Play ransomware group has published gigabytes of data allegedly stolen from US semiconductor supplier Microchip Technology.
SecurityWeek - Fake Palo Alto Tool Delivers Sophisticated Malware in Middle East Cyberattack
Trend Micro researchers have identified a sophisticated malware campaign specifically targeting organizations in the Middle East. This campaign leverages a meticulously crafted tool masquerading as the legitimate Palo Alto GlobalProtect...
SecurityOnline - Check Point to Acquire Cyberint Technologies to Enhance Operations
Check Point® Software Technologies Ltd. (NASDAQ: CHKP), a leading cybersecurity solutions provider, has announced a definitive agreement to acquire Cyberint Technologies Ltd. This acquisition aims to bolster Check Point’s Security Operations Center (SOC)…
gbhackers.com - Quishing Campaign Abuses Microsoft Sway to Host Phishing Pages
Threat actors are abusing the Microsoft Sway service to host phishing pages leveraged in QR phishing attacks targeting Office 365 users.
SecurityWeek - Cybercriminals Target US Citizens with Zoom and SSA Phishing Scams
Cybercriminals are exploiting a clever Zoom phishing scam to distribute ScreenConnect remote access software, potentially enabling them to defraud unsuspecting victims, including Social Security Administration (SSA) beneficiaries. This new scheme,...
SecurityOnline - US Sees Iranian Hackers Working Closely With Ransomware Groups
Iranian state-sponsored APT Lemon Sandstorm is working closely with ransomware groups on monetizing network intrusions.
SecurityWeek - ICS/OT Security Firms Announce Product Updates
Dragos has announced the latest release of its OT security platform, and Nozomi Networks has teamed up with Mandiant for threat intelligence.
SecurityWeek - Wireshark 4.4.0 Released – What’s New!
The Wireshark Foundation has announced the release of Wireshark 4.4.0, marking a significant update to the popular open-source network protocol analyzer. This latest version introduces a range of new features, improvements, and bug fixes, enhancing the…
gbhackers.com - Critical Vulnerability in Perl Module Installer Let Attackers Intercept Traffic
A critical vulnerability has been identified in App::cpanminus (cpanm), a widely used tool for downloading and installing Perl modules. This vulnerability, CVE-2024-45321, exposes users to potential cyber threats. It allows attackers to intercept and…
gbhackers.com - CVE-2024-39584: Dell BIOS Flaw Exposes Systems to Secure Boot Bypass and Arbitrary Code Execution
In a recent security advisory, Dell disclosed a high-severity vulnerability, identified as CVE-2024-39584, affecting the BIOS of several popular Dell client platforms. This vulnerability, carrying a CVSS score of 8.2,...
SecurityOnline - Docker-OSX Shut Down: Apple’s Copyright Claim Impacts macOS Containers
An open-source project on GitHub called Docker-OSX allows users to effortlessly run Apple’s OSX and macOS systems through containers, a method akin to virtual machines but significantly more convenient than...
SecurityOnline - Iran-linked group APT33 adds new Tickler malware to its arsenal
Iran-linked group APT33 used new Tickler malware in attacks against organizations in the government, defense, satellite, oil and gas sectors. Microsoft researchers reported that the Iran-linked cyberespionage group APT33 (aka Peach Sandstorm, Holmium,&nbs...
Security Affairs - French Authorities Charge Telegram CEO with Facilitating Criminal Activities on Platform
French prosecutors on Wednesday formally charged CEO Pavel Durov with facilitating a litany of criminal activity on the popular messaging platform and placed him under formal investigation following his arrest Saturday. Russian-born Durov, who is also a…
The Hacker News - Critical CVE-2024-45321 Flaw in Popular Perl Module Installer cpanminus, No Patch Available
In a significant security advisory, the Perl community has been alerted to a critical vulnerability, CVE-2024-45321, affecting the widely-used App::cpanminus (cpanm) tool. Rated with a CVSS score of 9.8, this...
SecurityOnline - Mirai Botnet Exploits Zero-Day Vulnerability CVE-2024-7029 in AVTECH IP Cameras
Akamai’s Security Intelligence Response Team (SIRT) has discovered a widespread Mirai botnet campaign exploiting a recently disclosed zero-day vulnerability (CVE-2024-7029) in AVTECH IP cameras. The vulnerability, which allows for remote...
SecurityOnline - CVE-2024-43425: Moodle Remote Code Execution Vulnerability, PoC Published
A critical vulnerability (CVE-2024-43425) has been identified in Moodle, a widely-used Learning Management System. This flaw could enable attackers to execute malicious code on affected servers, potentially compromising sensitive student...
SecurityOnline - CrowdStrike Estimates the Tech Meltdown Caused by Its Bungling Left a $60 Million Dent in Its Sales
Massive outage spooked customers that had been expected to close deals totaling $60 million during the final few weeks of CrowdStrike’s fiscal Q2.
SecurityWeek - Critical Vulnerabilities Expose Hitachi Energy MicroSCADA X SYS600 to Cyberattacks
Hitachi Energy has issued a cybersecurity advisory addressing multiple critical vulnerabilities discovered in their MicroSCADA X SYS600 product, widely used for monitoring and controlling power systems. The vulnerabilities, identified as...
SecurityOnline - New Attack on Microsoft 365 Copilot Steals Personal Data
A cybersecurity researcher has uncovered a critical vulnerability in the AI-powered assistant Copilot, integrated into Microsoft 365, which enables malicious actors to exfiltrate sensitive data. The exploit, previously submitted to...
SecurityOnline - BlackByte Ransomware Group Exploits VMware CVE-2024-37085 Flaw, Shifts Tactics
The BlackByte ransomware group has re-emerged with an unsettling surge in activity and a refined set of tactics, techniques, and procedures (TTPs) that pose a heightened risk to organizations. Cisco...
SecurityOnline - “Unicode QR Code Phishing”: The New Threat You Need to Know
Experts at SlashNext have uncovered a perilous phishing technique known as “Unicode QR Code Phishing,” which warrants close scrutiny. This sophisticated method circumvents traditional security measures and jeopardizes users, granting...
SecurityOnline - AI-Powered Cyberattacks: Greasy Opal Bypasses CAPTCHA, Threatens User Accounts
According to a recent report by experts at Arkose Labs, there has been a noticeable surge in the use of the tool Greasy Opal within cyberspace, which facilitates sophisticated attacks,...
SecurityOnline - Mallox Unleashed: Inside a Cloud Ransomware Attack
The recent Trustwave investigation into a Mallox ransomware attack sheds light on the methods and tools used by modern cybercriminals to infiltrate and compromise cloud-based environments. The attack, which targeted...
SecurityOnline