News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Mon 2 Nov | 80 | 7 |
| Today, Tue 3 Nov | 48 so far | 2 |
Developing
Thu 12 Sep 202485 articles
- Gallup Cross Site Scripting Error Could Have Led To Data Theft
No content available.
packetstormsecurity.com - Realm.Security Emerges From Stealth With $5 Million in Seed Funding
Realm.Security has emerged from stealth with $5 million in funding and a solution that helps organizations manage security data.
SecurityWeek - Rising Tide of Software Supply Chain Attacks: An Urgent Problem
Understanding a threat is just as important as the steps taken toward prevention.
Dark Reading - Beware: New Vo1d Malware Infects 1.3 Million Android TV Boxes Worldwide
Nearly 1.3 million Android-based TV boxes running outdated versions of the operating system and belonging to users spanning 197 countries have been infected by a new malware dubbed Vo1d (aka Void). "It is a backdoor that puts its components in the system…
The Hacker News - Aembit Raises $25 Million in Series A Funding for Non-Human Identity and Access Management
The investment will drive the company’s advancement of scalable workload access management for enterprises Aembit, the leading non-human identity and access management (IAM) company, has secured $25 million in Series A funding, bringing its total capital…
gbhackers.com - Evasion Tactics Used By Cybercriminals To Fly Under The Radar
Relentless in their methods, attackers will continue employing evasion tactics to circumvent traditional security measures.
SecurityWeek - Palo Alto Networks Patches Dozens of Vulnerabilities
Palo Alto Networks has fixed medium- and high-severity vulnerabilities in PAN-OS, Cortex XDR, ActiveMQ Content Pack, and Prisma Access Browser.
SecurityWeek - Non-Human IAM Provider Aembit Raises $25 Million
Aembit has raised $25 million in Series A funding to protect non-human identities and minimize attack surface.
SecurityWeek - How I got started: AI security executive
Artificial intelligence and machine learning are becoming increasingly crucial to cybersecurity systems. Organizations need professionals with a strong background that mixes AI/ML knowledge with cybersecurity skills, bringing on board people like Nicole…
securityintelligence.com - Exposed Selenium Grid Servers Targeted for Crypto Mining and Proxyjacking
Internet-exposed Selenium Grid instances are being targeted by bad actors for illicit cryptocurrency mining and proxyjacking campaigns. "Selenium Grid is a server that facilitates running test cases in parallel across different browsers and versions," Cado…
The Hacker News - New Loki Backdoor Attacking macOS Systems
Cody Thomas developed Apfell, an open-source macOS post-exploitation framework, in 2018 and evolved into Mythic, a cross-platform framework that addresses the limitations of existing tools. Mythic provides a unified interface for managing agents written in…
gbhackers.com - CosmicBeetle Exploiting Old Vulnerabilities To Attacks SMBs All Over The World
CosmicBeetle, a threat actor specializing in ransomware, has recently replaced its old ransomware, Scarab, with ScRansom, a custom-built ransomware that continues to evolve. The threat actor has been actively targeting SMBs worldwide, exploiting…
gbhackers.com - Threat Actors Using New Malware Toolkit That Involves IIS Backdoor, DNS Tunneling
The Iranian threat actor APT34, also known as GreenBug, has recently launched a new campaign targeting Iraqi government entities by employing a custom toolset, including a novel IIS backdoor and DNS tunneling protocol. The malware used in this campaign…
gbhackers.com - Singapore Police arrest six men allegedly involved in a cybercrime syndicate
The Singapore Police Force (SPF) has arrested six individuals for their role in the operations of a cybercrime ring in the country. The Singapore Police Force (SPF) arrested five Chinese nationals, aged 32 to 42, and a 34-year-old Singaporean man for the…
Security Affairs - Cisco Patches High-Severity Vulnerabilities in Network Operating System
Cisco has announced security updates that patch eight vulnerabilities in IOS XR software, including six high-severity bugs.
SecurityWeek - Proposed $65 million Lehigh Valley Health Network data breach settlement may compensate some victims $80,000
In 2023, a ransomware attack against Lehigh Valley Health Network by AlphV (BlackCat) involved the threat actors leaking nude photos of some cancer patients. In reporting on one of the first class action lawsuits launched against LVHN, DataBreaches pointed…
DataBreaches - Top 3 Threat Report Insights for Q2 2024
Cato CTRL (Cyber Threats Research Lab) has released its Q2 2024 Cato CTRL SASE Threat Report. The report highlights critical findings based on the analysis of a staggering 1.38 trillion network flows from more than 2,500 of Cato’s global customers, between…
The Hacker News - Iranian Cyber Group OilRig Targets Iraqi Government in Sophisticated Malware Attack
Iraqi government networks have emerged as the target of an "elaborate" cyber attack campaign orchestrated by an Iran state-sponsored threat actor called OilRig. The attacks singled out Iraqi organizations such as the Prime Minister's Office and the Ministry…
The Hacker News - Ireland's Watchdog Launches Inquiry into Google's AI Data Practices in Europe
The Irish Data Protection Commission (DPC) has announced that it has commenced a "Cross-Border statutory inquiry" into Google's foundational artificial intelligence (AI) model to determine whether the tech giant has adhered to data protection regulations in…
The Hacker News - Beware the New TrickMo Banking Trojan: Enhanced Features, Increased Danger
In a recent report, the Cleafy Threat Intelligence Team uncovered a new variant of the infamous TrickMo banking trojan, which now carries even more dangerous capabilities than its predecessors. TrickMo,...
SecurityOnline - What is SOCRadar’s Advanced Dark Web Monitoring?
What is SOCRadar’s Advanced Dark Web Monitoring? SOCRadar’s Advanced Dark Web Monitoring is a cutting-edge cybersecurity product designed to protect organizations from the various threats emerging from the dark web. The dark web is a part of the internet…
SOCRadar - Hackers Proxyjack & Cryptomine Selenium Grid Servers
A vendor honeypot caught two attacks intended to leverage the tens of thousands of exposed Selenium Grid Web app testing servers.
Dark Reading - Iranian Hackers Targeting Iraqi Government: Security Firm
Hackers believed to be operating on behalf of the Iranian government have deployed malware to Iraqi government networks.
SecurityWeek - WhatsUp Gold Under Attack: New RCE Vulnerabilities Exploited
Trend Micro researchers have uncovered a series of remote code execution (RCE) attacks targeting WhatsUp Gold, a popular network monitoring software provided by Progress Software Corporation. The attacks, observed since...
SecurityOnline - Healthcare Provider to Pay $65M Settlement Following Ransomware Attack
Lehigh Valley Health Network has agreed to pay a $65 million settlement in a class-action suit filed over a 2023 data breach.
SecurityWeek - New Developer-As-A-Service In Hacking Forums Empowering Phishing And Cyberattacks
SCATTERED SPIDER, a ransomware group, leverages cloud infrastructure and social engineering to target insurance and financial institutions by using stolen credentials, SIM swaps, and cloud-native tools to gain and maintain access, impersonating employees to…
gbhackers.com - Critical Vulnerabilities in Kakadu JPEG 2000 Library Expose Systems to Remote Attacks
Researchers from the Google Chrome Vulnerability Rewards (CVR) team have identified a series of critical vulnerabilities within the Kakadu image library, a widely deployed software component used for processing JPEG...
SecurityOnline - Hackers Mimic Google, Microsoft & Amazon Domains for Phishing Attacks
Phishing remains a significant concern for both individuals and organizations. Recent findings from ThreatLabz have highlighted the alarming prevalence of phishing attacks targeting major brands, with Google, Microsoft, and Amazon emerging as the top three…
gbhackers.com - Adobe Patch Tuesday security updates fixed multiple critical issues in the company’s products
Adobe addressed tens of vulnerabilities, including critical issues that could allow attackers to execute arbitrary code on Windows and macOS. Adobe Patch Tuesday security updates addressed multiple vulnerabilities in its products, including critical flaws…
Security Affairs - Amateurish 'CosmicBeetle' Ransomware Stings SMBs in Turkey
With an immature codebase and a "rather chaotic encryption scheme" prone to failure, the group targets small businesses with custom malware.
Dark Reading - WordPress Mandates Two-Factor Authentication for Plugin and Theme Developers
WordPress.org has announced a new account security measure that will require accounts with capabilities to update plugins and themes to activate two-factor authentication (2FA) mandatorily. The enforcement is expected to come into effect starting October 1,…
The Hacker News - Cisco Issues Security Advisories: Critical Vulnerabilities Impact Multiple Products
Cisco Systems has released a series of urgent security advisories, revealing a total of nine vulnerabilities affecting various products, including Cisco IOS XR Software, Crosswork Network Services Orchestrator (NSO), Optical...
SecurityOnline - CVE-2024-8522 (CVSS 10): LearnPress SQLi Flaw Leaves 90K+ WordPress Sites at Risk
A critical SQL injection vulnerability has been discovered in LearnPress, a popular WordPress plugin used to create and manage online courses. The flaw, tracked as CVE-2024-8522, carries a maximum CVSS...
SecurityOnline - GitLab Issues Critical Security Patch for CVE-2024-6678 (CVSS 9.9), Urges Immediate Update
In a recent security advisory, GitLab announced the release of critical security patches for its Community Edition (CE) and Enterprise Edition (EE). The patches address several vulnerabilities, including one classified...
SecurityOnline - Criminal IP Teams Up with IPLocation.io to Deliver Unmatched IP Solutions to Global Audiences
Criminal IP, a distinguished leader in Cyber Threat Intelligence (CTI) search engine developed by AI SPERA, announced that it has successfully integrated its IP address-related risk detection data with IPLocation.io, one of the most visited IP analysis and…
gbhackers.com - CVE-2024-45409 (CVSS 10): Critical Ruby-SAML Flaw Leaves User Accounts Exposed
A critical security vulnerability, CVE-2024-45409, has been identified in the Ruby-SAML library, a widely used tool for implementing SAML (Security Assertion Markup Language) authorization on the client side. The flaw,...
SecurityOnline - CosmicBeetle’s ScRansom Ransomware: A Growing Threat to European and Asian Businesses
In a significant development tracked by ESET researchers, the threat actor known as CosmicBeetle has intensified its ransomware operations, replacing its previous Scarab ransomware with a custom tool called ScRansom....
SecurityOnline - Cybercriminals Increasingly Target Google, Microsoft, and Amazon in Sophisticated Phishing Schemes
A recent report by Zscaler ThreatLabz sheds light on the rising wave of phishing campaigns, with threat actors increasingly turning to typosquatting and brand impersonation tactics. From February 2024 to...
SecurityOnline - PAN-OS Vulnerabilities: Command Injection (CVE-2024-8686) and GlobalProtect Exposure (CVE-2024-8687)
Palo Alto Networks, a leading cybersecurity solutions provider, has recently released a critical security advisory, urging its customers to take immediate action to address several vulnerabilities discovered in their products....
SecurityOnline - FBI’s 2023 Cryptocurrency Fraud Report: $5.6 Billion Lost in Exploding Investment Scams
The FBI’s Internet Crime Complaint Center (IC3) has released its 2023 Cryptocurrency Fraud Report, revealing alarming trends in the rapidly growing world of cryptocurrency crime. In 2023 alone, over 69,000...
SecurityOnline