News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Mon 2 Nov | 80 | 7 |
| Today, Tue 3 Nov | 44 so far | 2 |
Developing
Thu 12 Sep 202485 articles
- CVE-2024-35783 (CVSS 9.4): Critical-Severity Flaw Exposes Siemens Industrial Systems
Siemens has issued a critical security advisory regarding a remote code execution (RCE) vulnerability in several of its SIMATIC products, including SIMATIC Process Historian, SIMATIC PCS 7, and SIMATIC WinCC....
SecurityOnline - TAG Bulletin: Q3 2024
This bulletin includes coordinated influence operation campaigns terminated on our platforms in Q3 2024. It was last updated on September 12, 2024.JulyWe terminated 89 Y…
blog.google - New Vo1d malware infects 1.3 million Android streaming boxes
Threat actors have infected over 1.3 million TV streaming boxes running Android with a new Vo1d backdoor malware, allowing the attackers to take full control of the devices. [...]
BleepingComputer - For Just $20, Researchers Seize Part of Internet Infrastructure
Their findings highlight the frailty of some of the mechanisms for establishing trust on the Internet.
Dark Reading - 'Hadooken' Malware Targets Oracle's WebLogic Servers
An attacker is using the tool to deploy a cryptominer and the Tsunami DDoS bot on compromised systems.
Dark Reading - Cybersecurity giant Fortinet discloses a data breach
Fortinet disclosed a data breach after a threat actor claimed the theft of 440GB of files from the company’s Microsoft Sharepoint server. Today, Fortinet told Cyber Daily that a threat actor gained unauthorized access to a third-party service it used. “An…
Security Affairs - Microsoft VS Code Undermined in Asian Spy Attack
A technique to abuse Microsoft's built-in source code editor has finally made it into the wild, thanks to China's Mustang Panda APT.
Dark Reading - Socially Savvy Scattered Spider Traps Cloud Admins in Web
The dangerous ransomware group is targeting financial and insurance sectors using smishing and vishing against IT service desk administrators, cybersecurity teams, and other employees with top-level privileges.
Dark Reading - UK NCA arrested a teenager linked to the attack on Transport for London
U.K. police arrested a 17-year-old teenager allegedly linked to the cyberattack on London’s public transportation agency, Transport for London. U.K.’s National Crime Agency announced the arrest of a 17-year-old teenager from Walsall who is allegedly linked…
Security Affairs - Singapore Arrests 6 Suspected Members of African Cybercrime Group
Law enforcement seized electronics containing special hacking tools and software as well as a substantial amount of cash in the raids.
Dark Reading - Singapore Arrests 6 Suspected Members of African Cybercrime Group
Law enforcement seized electronics containing special hacking tools and software as well as a substantial amount of cash in the raids.
Dark Reading - US Army Selects QuSecure Solution for 'Enhanced Post-Quantum Cryptography Suite for Tactical Networks' Project
No content available.
Dark Reading - FBI: Reported cryptocurrency losses reached $5.6 billion in 2023
The FBI says that 2023 was a record year for cryptocurrency fraud, with total losses exceeding $5.6 billion, based on nearly 70,000 reports received through the Internet Crime Complaint Center (IC3). [...]
BleepingComputer - Fortinet confirms data breach after hacker claims to steal 440GB of files
Cybersecurity giant Fortinet has confirmed it suffered a data breach after a threat actor claimed to steal 440GB of files from the company's Microsoft Sharepoint server. [...]
BleepingComputer - UK arrests teen linked to Transport for London cyber attack
U.K.'s National Crime Agency says it arrested a 17-year-old teenager who is suspected of being connected to the cyberattack on Transport for London, the city's public transportation agency. [...]
BleepingComputer - Locked In, Locked Out: How Data Breaches Shatter Refugees’ Safety
Noura Aljizawi of the Citizen Lab at the University of Toronto’s Munk School of Global Affairs and Public Policy writes: Rawia* is a Syrian activist in Turkey and a mother of three beautiful children. She kept her children at home, locked the doors, closed…
DataBreaches - Hackers targeting WhatsUp Gold with public exploit since August
Hackers have been leveraging publicly available exploit code for two critical vulnerabilities in the WhatsUp Gold network availability and performance monitoring solution from Progress Software. [...]
BleepingComputer - New Android Malware 'Ajina.Banker' Steals Financial Data and Bypasses 2FA via Telegram
Bank customers in the Central Asia region have been targeted by a new strain of Android malware codenamed Ajina.Banker since at least November 2024 with the goal of harvesting financial information and intercepting two-factor authentication (2FA) messages.…
The Hacker News - New Chrome Features Protect Users Against Threats, Provide More Control Over Personal Data
Google is rolling out new features in Chrome to better protect users online and to improve their control over personal data.
SecurityWeek - Urgent: GitLab Patches Critical Flaw Allowing Unauthorized Pipeline Job Execution
GitLab on Wednesday released security updates to address 17 security vulnerabilities, including a critical flaw that allows an attacker to run pipeline jobs as an arbitrary user. The issue, tracked as CVE-2024-6678, carries a CVSS score of 9.9 out of a…
The Hacker News - Operant AI Lands $10M Investment to Boost Runtime Protection for Cloud and AI
Operant AI, a startup specializing in runtime protection for cloud applications, APIs, and AI systems, secures new $10 million investment.
SecurityWeek - Scammers advertise fake AppleCare+ service via GitHub repos
We’ve uncovered a malicious campaign going after Mac users looking for support or extended warranty from Apple via the AppleCare+ support plans. The perpetrators are buying Google ads to lure in their victims and redirect them to bogus pages hosted on…
Malwarebytes - Mastercard to Acquire Threat Intel Firm Recorded Future for $2.65 Billion
In a strategic move to bolster its cybersecurity capabilities, Mastercard has announced an agreement to acquire Recorded Future, a leading global threat intelligence company, for $2.65 billion. This acquisition, from Insight Partners, aims to enhance…
gbhackers.com - Teenager Arrested in Connection to Transport for London Cyber Attack
In a significant development in the ongoing investigation into the Transport for London (TfL) cyber attack, a 17-year-old male has been arrested in Walsall. The United Kingdom’s National Crime Agency...
SecurityOnline - Transport for London confirms customer data stolen in cyberattack
Transport for London (TfL) has determined that the cyberattack on September 1 impacts customer data, including names, contact details, email addresses, and home addresses. [...]
BleepingComputer - Critical Vulnerabilities in JPEG 2000 Library Let Attackers Execute Remote Code
Exploiting memory corruption vulnerabilities in server-side software often requires knowledge of the binary and environment, which limits the attack surface, especially for unknown binaries and load-balanced environments. Successful exploitation is…
gbhackers.com - Facebook scrapes photos of kids from Australian user profiles to train its AI
Facebook has admitted that it scrapes the public photos, posts and other data from the accounts of Australian adult users to train its AI models. Unlike citizens of the European Union (EU), Australians are not offered an opt-out option to refuse consent. At…
Malwarebytes - PartnerLeak scam site promises victims full access to “cheating” partner’s stolen data
Earlier this week, we reported on a new type of scam that tells you your partner is cheating on you. However, we hit a dead end because we were unable to get hold of an original copy of the email. That was until the scammers were “kind enough” to send one to…
Malwarebytes - GitLab warns of critical pipeline execution vulnerability
GitLab has released critical updates to address multiple vulnerabilities, the most severe of them (CVE-2024-6678) allowing an attacker to trigger pipelines as arbitrary users under certain conditions. [...]
BleepingComputer - Hackers Exploiting Progress WhatsUp RCE Vulnerability In The Wild
RCE attacks on WhatsUp Gold exploited the Active Monitor PowerShell Script to execute malicious code, as the vulnerabilities CVE-2024-6670 and CVE-2024-6671, patched on August 16, were leveraged to execute remote access tools and gain persistence. Despite…
gbhackers.com - Massive Android TV Box Infection: Over 1.3 Million Devices Compromised by Android.Vo1d
In a startling new report from Doctor Web, experts have uncovered a large-scale malware infection impacting Android-based TV boxes worldwide. The malware, dubbed Android.Vo1d, has infiltrated nearly 1.3 million devices...
SecurityOnline - Arrest made in NCA investigation into Transport for London cyber attack
A teenager has been arrested in Walsall by the National Crime Agency, as part of the investigation into a cyber security incident affecting Transport for London (TfL). The 17-year-old male was detained on suspicion of Computer Misuse Act offences in relation…
DataBreaches - Fortinet Faces Potential Data Breach, Customer Data at Risk
In a concerning development for cybersecurity giant Fortinet, a potential data breach has come to light, raising alarms about the security of sensitive customer information. The incident reportedly affected customers...
SecurityOnline - Evasion Tactics Used By Cybercriminals To Fly Under The Radar
No content available.
packetstormsecurity.com - Hackers Use Cloud Services To Target Financial And Insurance Firms
No content available.
packetstormsecurity.com - BT Spots 2,000 Potential Attacks On Its Network A Second
No content available.
packetstormsecurity.com