News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Mon 2 Nov | 80 | 7 |
| Today, Tue 3 Nov | 22 so far | 2 |
Developing
Thu 5 Sep 202474 articles
- Critical Security Updates for Cisco Smart Licensing Utility & Key Veeam Products
Critical Security Updates for Cisco Smart Licensing Utility & Veeam Products Cisco and Veeam have recently issued critical security updates for major products, including Cisco Smart Licensing Utility and Veeam Backup & Replication. These vulnerabilities,…
SOCRadar - Cisco Patches Critical Vulnerabilities in Smart Licensing Utility
Cisco has released patches for multiple vulnerabilities, including two critical-severity flaws in Smart Licensing Utility.
SecurityWeek - Two Nigerians Sentenced to Prison in US for BEC Fraud
Franklin Ifeanyichukwu Okwonna and Ebuka Raphael Umeti were sentenced to prison in the US for business email compromise (BEC) fraud.
SecurityWeek - Microchip Technology Confirms Personal Information Stolen in Ransomware Attack
Microchip Technology says employee contact information and other types of data was stolen in an August ransomware attack.
SecurityWeek - Microchip Technology Confirms Data Breach in August Cyberattack
Microchip Technology, a leading American semiconductor supplier, has confirmed a significant data breach following a cyberattack in August 2024. The attack, which disrupted the company’s operations and exposed employee information,...
SecurityOnline - How Do You Know When AI is Powerful Enough to be Dangerous? Regulators Try to Do the Math
An AI model trained on 10 to the 26th floating-point operations per second must now be reported to the U.S. government and could soon trigger even stricter requirements in California.
SecurityWeek - Is Russian group APT28 behind the cyber attack on the German air traffic control agency (DFS)?
A cyber attack hit the German air traffic control agency (DFS) disrupting its operations, experts attribute it to Russia-linked group APT28. A cyber attack targeted the German Air Traffic Control Agency (DFS), as reported by Spiegel and European Truth. DFS,…
Security Affairs - Telegram’s Uncertain Future: Hacktivist Reactions and the Potential Shift to New Platforms
Telegram’s Uncertain Future: Hacktivist Reactions and the Potential Shift to New Platforms Telegram is more than just a messaging app; it’s often considered an easy access to the dark web. This reputation has kept cybersecurity firms, including SOCRadar, and…
SOCRadar - DrayTek Vulnerabilities Added to CISA KEV Catalog Exploited in Global Campaign
Two DrayTek vulnerabilities added by CISA to its KEV catalog have been exploited by multiple threat groups to steal data from organizations worldwide.
SecurityWeek - NIST Cybersecurity Framework (CSF) and CTEM – Better Together
It’s been a decade since the National Institute of Standards and Technology (NIST) introduced its Cybersecurity Framework (CSF) 1.0. Created following a 2013 Executive Order, NIST was tasked with designing a voluntary cybersecurity framework that would help…
The Hacker News - CVE-2024-44000 (CVSS 9.8): Litespeed Cache flaw exposes millions of WordPress sites to takeover attacks
A significant security vulnerability has been uncovered in the popular LiteSpeed Cache plugin for WordPress, which boasts over 5 million active installations. The vulnerability, discovered by Rafie Muhammad, a security...
SecurityOnline - Fake OnlyFans cybercrime tool infects hackers with malware
Hackers are targeting other hackers with a fake OnlyFans tool that claims to help steal accounts but instead infects threat actors with the Lumma stealer information-stealing malware. [...]
BleepingComputer - US Targets Russian Election Influence Operation With Charges, Sanctions, Domain Seizures
The US has cracked down on an influence operation sponsored by the Russian government, announcing charges, sanctions and domain seizures.
SecurityWeek - Quishing, an insidious threat to electric car owners
Quishing is a type of phishing attack where crooks use QR codes to trick users into providing sensitive information or downloading malware. In recent years, the spread of electric cars has led to an increase in public charging stations. However, new cyber…
Security Affairs - Tropic Trooper spies on government entities in the Middle East
Executive summary Tropic Trooper (also known as KeyBoy and Pirate Panda) is an APT group active since 2011. This group has traditionally targeted sectors such as government, healthcare, transportation and high-tech industries in Taiwan, the Philippines and…
securelist.com - Malware Attackers Using MacroPack to Deliver Havoc, Brute Ratel, and PhantomCore
Threat actors are likely employing a tool designated for red teaming exercises to serve malware, according to new findings from Cisco Talos. The program in question is a payload generation framework called MacroPack, which is used to generate Office…
The Hacker News - CVE-2024-38650 & CVE-2024-39714 (CVSS 9.9): Critical Flaws in Veeam Console Put Data at Risk
A series of critical vulnerabilities have been discovered in Veeam Service Provider Console, a widely-used platform for managing data protection services in cloud and virtual environments. These vulnerabilities, some scoring...
SecurityOnline - CyberVolk Ransomware: A New and Evolving Threat to Global Cybersecurity
A relatively new player in the cybercrime world, the Indian hacker group CyberVolk, has been making waves with its sophisticated ransomware. CyberVolk Ransomware, first detected in July 2024, has quickly...
SecurityOnline - Web3’s Billion-Dollar Bleeding: Cybercrime in DeFi
The rapid growth of Web3 and decentralized finance (DeFi) has transformed the financial landscape, offering unparalleled opportunities for innovation. However, it has also opened the floodgates for cybercriminals, with the...
SecurityOnline - Planned Parenthood confirms cyberattack as RansomHub claims breach
Planned Parenthood has confirmed it suffered a cyberattack affecting its IT systems, forcing it to take parts of its infrastructure offline to contain the damage. [...]
BleepingComputer - New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm
The Chinese-speaking threat actor known as Earth Lusca has been observed using a new backdoor dubbed KTLVdoor as part of a cyber attack targeting an unnamed trading company based in China. The previously unreported malware is written in Golang, and thus is a…
The Hacker News - Cisco Fixes Two Critical Flaws in Smart Licensing Utility to Prevent Remote Attacks
Cisco has released security updates for two critical security flaws impacting its Smart Licensing Utility that could allow unauthenticated, remote attackers to elevate their privileges or access sensitive information. A brief description of the two…
The Hacker News - Indian Army Propaganda Spread by 1.4K AI-Powered Social Media Accounts
For three years now, more than a thousand social media accounts have been reposting the same pro-India, anti-Pakistan content on Facebook and X.
Dark Reading - CVE-2024-20017 (CVSS 9.8): Zero-Click Exploit Discovered in Popular Wi-Fi Chipsets, PoC Published
Security researcher Hyprdude has published detailed information and a proof-of-concept (PoC) exploit for a critical vulnerability identified as CVE-2024-20017. With a CVSS score of 9.8, this vulnerability poses a severe...
SecurityOnline - Veeam Backup & Replication Faces RCE Flaw– CVE-2024-40711 (CVSS 9.8) Allows Full System Takeover
A series of critical vulnerabilities have been uncovered in Veeam Backup & Replication, potentially exposing organizations to unauthorized access, remote code execution, and data breaches. The most severe vulnerability (CVE-2024-40711,...
SecurityOnline - Critical Cisco SLU Vulnerabilities CVE-2024-20439 and CVE-2024-20440 Threaten Remote Admin Control
Cisco has issued a security advisory warning organizations of multiple vulnerabilities in its Smart Licensing Utility (SLU) that could allow remote attackers to access sensitive information or gain administrative control....
SecurityOnline - New KTLVdoor Backdoor Discovered in Multiplatform Intrusion Campaign Linked to Earth Lusca
Cybersecurity researchers from Trend Micro have uncovered a new and highly sophisticated multiplatform backdoor dubbed KTLVdoor, linked to the notorious Chinese-speaking threat actor Earth Lusca. The backdoor, written in the...
SecurityOnline - Goffloader: In-Memory Execution, No Disk Required
The security company Praetorian has released GoffLoader, a tool designed to simplify the execution of BOF files and unmanaged Cobalt Strike PE files directly in memory, without writing any files...
SecurityOnline - Warning: CVE-2024-20469 in Cisco ISE with PoC Code Puts Networks at Risk
A vulnerability, tracked as CVE-2024-20469, has been discovered in Cisco Identity Services Engine (ISE). With a CVSS score of 6.0, this vulnerability allows authenticated, local attackers to elevate privileges to...
SecurityOnline - Webmin/Virtualmin Vulnerability Opens Door to Loop DoS Attacks (CVE-2024-2169)
System administrators and web hosting providers relying on the popular Webmin and Virtualmin control panels are urged to take immediate action following the disclosure of a critical vulnerability that could...
SecurityOnline - Nigerian National Receives 5-Year Sentence for Multi-Million Dollar BEC Fraud
The U.S. Department of Justice announced that Franklin Ifeanyichukwu Okwonna, a 34-year-old Nigerian national, has been sentenced to five years and three months in prison for his role in a...
SecurityOnline - ECDSA Vulnerability in YubiKey: What You Need to Know
In a recent security advisory, Yubico disclosed a moderate vulnerability (CVE-2024-45678) affecting several of its hardware security devices, including the widely-used YubiKey 5 Series, Security Key Series, and YubiHSM 2....
SecurityOnline - Revival Hijack: A New PyPI Hijacking Technique Threatens Thousands of Packages
The JFrog security research team has uncovered a novel PyPI package hijacking method known as “Revival Hijack,” which has put over 22,000 packages at risk of exploitation. Unlike traditional typosquatting...
SecurityOnline - North Korea Targets DeFi and Crypto Companies with Advanced Social Engineering Attacks
The FBI has warned sternly about North Korean state-sponsored hackers employing highly sophisticated social engineering tactics to infiltrate decentralized finance (DeFi) and cryptocurrency companies. These malicious actors conduct extensive research...
SecurityOnline