News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Mon 2 Nov | 80 | 7 |
| Today, Tue 3 Nov | 39 so far | 2 |
Developing
Wed 11 Sep 202462 articles
- Fake password manager coding test used to hack Python developers
Members of the North Korean hacker group Lazarus posing as recruiters are baiting Python developers with coding test project for password management products that include malware. [...]
BleepingComputer - Adobe fixes Acrobat Reader zero-day with public PoC exploit
A cybersecurity researcher is urging users to upgrade Adobe Acrobat Reader after a fix was released yesterday for a remote code execution zero-day with a public in-the-wild proof-of-concept exploit. [...]
BleepingComputer - WordPress.org to require 2FA for plugin developers by October
Starting October 1st, WordPress.org accounts that can push updates and changes to plugins and themes will be required to activate two-factor authentication (2FA) on their accounts. [...]
BleepingComputer - Google Introduces ‘Air-Gapped’ Backup Vault to Thwart Ransomware
“It’s critical to not only back up your critical workloads, but also to secure those backups against subsequent modification and deletion."
SecurityWeek - Quad7 Botnet Expands to Target SOHO Routers and VPN Appliances
The operators of the mysterious Quad7 botnet are actively evolving by compromising several brands of SOHO routers and VPN appliances by leveraging a combination of both known and unknown security flaws. Targets include devices from TP-LINK, Zyxel, Asus,…
The Hacker News - Xiphera Develops Quantum-Resilient Hardware Security Solutions for Space
No content available.
Dark Reading - Poppy Gustafsson to Step Down As CEO of Darktrace; Jill Popelka Appointed Successor
No content available.
Dark Reading - DragonRank Black Hat SEO Campaign Targeting IIS Servers Across Asia and Europe
A "simplified Chinese-speaking actor" has been linked to a new campaign that has targeted multiple countries in Asia and Europe with the end goal of performing search engine optimization (SEO) rank manipulation. The black hat SEO cluster has been codenamed…
The Hacker News - IRS Information Technology Supervisor Pleads Guilty to Accepting Bribes from Government Subcontractor Whom He Attempted to Extort
Today’s insider-wrongdoing example comes to us from the government sector. The Office of Public Affairs for the U.S. Department of Justice issued the following press release: A Maryland man pleaded guilty yesterday to accepting cash bribes in exchange for…
DataBreaches - Threat Actors Exploiting Legitimate Software For Stealthy Cyber Attacks
CAMO, or Commercial Applications, Malicious Operations, highlights attackers’ increasing reliance on legitimate IT tools to bypass security defenses, which can be used for various malicious activities like ransomware distribution, network scanning, lateral…
gbhackers.com - Proposed Underwater Datacenter Surprises Regulators Who Hadn't Heard About It
No content available.
packetstormsecurity.com - Chinese Hackers Linked To Syndicate Arrested In Singapore
No content available.
packetstormsecurity.com - NPD Breach Underscores The Need For Stronger Digital Identities
No content available.
packetstormsecurity.com - Microsoft Says Windows Update Zero-Day Being Exploited To Undo Security Fixes
No content available.
packetstormsecurity.com - Researchers Hacked Car EV Chargers To Execute Arbitrary Code
Researchers discovered flaws in the Autel MaxiCharger EV charger that make it potential to execute arbitrary code on the device by just placing it within Bluetooth range. The vulnerabilities tracked as CVE-2024-23958, CVE-2024-23959, and CVE-2024-23967 were…
gbhackers.com - SplxAI Raises $2 Million to Protect AI Chatbot Apps
SplxAI has raised $2 million in pre-seed funding to help organizations identify vulnerabilities in AI chat applications.
SecurityWeek - Compliance and Risk Management Startup Datricks Raises $15 Million
The Tel Aviv company attracts $15 million in a Series A investment to build an AI-powered compliance and risk management platform.
SecurityWeek - Criminal IP and IPLocation.io Join Forces for Enhanced IP Analysis
AI SPERA announced today that its IP address intelligence engine, Criminal IP, has integrated with IPLocation.io. Learn more from Criminal IP about how this brings additional insights to Criminal IP's threat intelligence database. [...]
BleepingComputer - Highline Public Schools school district suspended its activities following a cyberattack
Highline Public Schools, a school district in Washington state, remains closed following a cyberattack that occurred two days ago. Two days ago Highline Public Schools (HPS), a school district in Washington state, suffered a cyber attack that caused a…
Security Affairs - Intel Informs Customers About Over a Dozen Processor Vulnerabilities
Intel on Tuesday published advisories covering more than 20 vulnerabilities affecting processors and other products.
SecurityWeek - Beyond Immature Rhetoric: The Case Against Mockery and Ambulance Chasing in the Security Industry
Five reasons why “Ambulance Chasing” and mocking harm the security profession and are never a good idea.
SecurityWeek - Chinese hackers linked to cybercrime syndicate arrested in Singapore
Six Chinese nationals and a Singaporean have been arrested on Monday in Singapore for their alleged role in malicious cyber activities committed in connection with a "global syndicate." [...]
BleepingComputer - Attleboro crisis pregnancy center stole data, tricked patients, lawsuit alleges
Beth Treffeisen reports: A women’s gynecological clinic in Attleboro is suing a neighboring crisis pregnancy center, accusing it of hacking its confidential online portal and misleading patients to prevent abortion. Four Women Health Services alleges that…
DataBreaches - SOAR Is Dead, Long Live SOAR
Business intelligence firm Gartner labels security orchestration, automation, and response as "obsolete," but the fight to automate and simplify security operations is here to stay.
Dark Reading - RansomHub ransomware gang relies on Kaspersky TDSKiller tool to disable EDR
Researchers observed the RansomHub ransomware group using the TDSSKiller tool to disable endpoint detection and response (EDR) systems. The RansomHub ransomware gang is using the TDSSKiller tool to disable endpoint detection and response (EDR) systems,…
Security Affairs - Google Updates Cloud Backup, Disaster Recovery Service
The combination of immutability, indelibility, centralized governance, and user empowerment provides a comprehensive backup strategy, Google said.
Dark Reading - PIXHELL Attack Allows Air-Gap Jumping via Noise From Screens
Noise generated by the pixels on a screen can be leveraged to exfiltrate data from air-gapped computers in what is called a PIXHELL attack.
SecurityWeek - Microsoft’s September 2024 Patch Tuesday Addresses 79 CVEs, 4 Zero-Days; Critical Ivanti EPM Updates
Microsoft’s September 2024 Patch Tuesday Addresses 79 CVEs, 4 Zero-Days; Critical Ivanti EPM Updates Microsoft has released the September 2024 Patch Tuesday updates, addressing a total of 79 CVEs, including seven that are categorized as critical. These…
SOCRadar - Singapore Police Arrest Six Hackers Linked to Global Cybercrime Syndicate
The Singapore Police Force (SPF) has announced the arrest of five Chinese nationals and one Singaporean man for their alleged involvement in illicit cyber activities in the country. The development comes after a group of about 160 law enforcement officials…
The Hacker News - Siemens Industrial Edge Management Vulnerable to Authorization Bypass Attacks
Siemens ProductCERT has disclosed a critical vulnerability in its Industrial Edge Management systems. The vulnerability, identified as CVE-2024-45032, poses a significant risk by allowing unauthenticated remote attackers to impersonate other devices within…
gbhackers.com - Why Is It So Challenging to Go Passwordless?
Imagine a world where you never have to remember another password. Seems like a dream come true for both end users and IT teams, right? But as the old saying goes, "If it sounds too good to be true, it probably is." If your organization is like many, you may…
The Hacker News - Microsoft Adds Support for Post-Quantum Algorithms in SymCrypt Library
Microsoft has started introducing support for post-quantum algorithms in SymCrypt, its main cryptographic library.
SecurityWeek - CVE-2024-43491 (CVSS 9.8): Critical Windows 0-Day Flaw Uncovered, Urgent Patching Required
Microsoft has disclosed a critical zero-day vulnerability in its Windows operating system, identified as CVE-2024-43491. The vulnerability, with a severity score of 9.8 (out of 10), resides within the Windows...
SecurityOnline - Ivanti Patches Critical Vulnerabilities in Endpoint Manager
Ivanti has released patches for multiple vulnerabilities in Endpoint Manager, Cloud Service Appliance, and Workspace Control.
SecurityWeek - Top 10 Trends in Phishing Attacks (2024)
Top 10 Trends in Phishing Attacks (2024) Phishing continues to evolve in 2024, posing a significant threat to both individuals and organizations. This form of social engineering is designed to deceive victims into revealing sensitive information or…
SOCRadar - Developers Beware: Lazarus Group Uses Fake Coding Tests to Spread Malware
Cybersecurity researchers have uncovered a new set of malicious Python packages that target software developers under the guise of coding assessments. "The new samples were tracked to GitHub projects that have been linked to previous, targeted attacks in…
The Hacker News - Ivanti fixed a maximum severity flaw in its Endpoint Management software (EPM)
Ivanti fixed a maximum severity flaw in its Endpoint Management software (EPM) that can let attackers achieve remote code execution on the core server Ivanti Endpoint Management (EPM) software is a comprehensive solution designed to help organizations manage…
Security Affairs