News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Mon 2 Nov | 80 | 7 |
| Today, Tue 3 Nov | 48 so far | 2 |
Developing
Fri 13 Sep 202473 articles
- Port of Seattle hit by Rhysida ransomware in August attack
Port of Seattle, the United States government agency overseeing Seattle's seaport and airport, confirmed on Friday that the Rhysida ransomware operation was behind a cyberattack impacting its systems over the last three weeks. [...]
BleepingComputer - TfL requires in-person password resets for 30,000 employees after hack
Transport for London (TfL) says that all staff (roughly 30,000 employees) must attend in-person appointments to verify their identities and reset passwords following a cybersecurity incident disclosed almost two weeks ago. [...]
BleepingComputer - Fortinet Confirms Customer Data Breach via Third Party
The incident is a reminder why organizations need to pay attention to how they store and secure data in SaaS and cloud environments.
Dark Reading - Apple Suddenly Drops NSO Group Spyware Lawsuit
Apple said there's “too significant a risk” of exposing the anti-exploit work needed to fend off the very adversaries involved in the case.
SecurityWeek - 23andMe to pay $30 million in genetics data breach settlement
DNA testing giant 23andMe has agreed to pay $30 million to settle a lawsuit over a data breach that exposed the personal information of 6.4 million customers in 2023. [...]
BleepingComputer - Compliance Automation Pays Off for a Growing Company
In this case study, a CISO helps a B2B marketing automation company straighten out its manual compliance process by automating it.
Dark Reading - New Linux malware called Hadooken targets Oracle WebLogic servers
A new Linux malware called Hadooken targets Oracle WebLogic servers, it has been linked to several ransomware families. Aqua Security Nautilus researchers discovered a new Linux malware, called Hadooken, targeting Weblogic servers. The name comes from the…
Security Affairs - 23andMe settles data breach lawsuit for $30 million
Jonathan Stempel reports: 23andMe will pay $30 million and provide three years of security monitoring to settle a lawsuit accusing the genetics testing company of failing to protect the privacy of 6.9 million customers whose personal information was exposed…
DataBreaches - Malicious Actors Sow Discord With False Election Compromise Claims
The FBI and CISA are warning citizens of attempts to convince voters that US election infrastructure has been compromised. (It hasn't been.)
Dark Reading - 99% of Business Leaders Have Concerns About the Trustworthiness of Internal Data
No content available.
Dark Reading - Post-CrowdStrike Fallout: Microsoft Redesigning EDR Vendor Access to Windows Kernel
Microsoft is revamping how anti-malware tools interact with the Windows kernel to avoid another CrowdStrike faulty update catastrophe.
SecurityWeek - NFL Teams Block & Tackle Cyberattacks in a Digital World
As the 104th season of the National Football League kicks off, expect cyberattacks aimed at its customers, players, and arenas.
Dark Reading - Ivanti warns high severity CSA flaw is now exploited in attacks
Ivanti confirmed on Friday that a high severity vulnerability in its Cloud Services Appliance (CSA) solution is now actively exploited in attacks. [...]
BleepingComputer - New Linux malware Hadooken targets Oracle WebLogic servers
Hackers are targeting Oracle WebLogic servers to infect them with a new Linux malware named "Hadooken, which launches a cryptominer and a tool for distributed denial-of-service (DDoS) attacks. [...]
BleepingComputer - Ford seeks patent for conversation-based advertising
Car manufacturer Ford Motor Company has filed a patent application for an in-vehicle advertisement presentation system based on information derived from several trip and driver characteristics. Among those characteristics—human conversations. In the abstract…
Malwarebytes - Old WHOIS Domain Could Have Issued Fraudulent TLS/SSL Certs
No content available.
packetstormsecurity.com - Fortinet Admits Miscreant Got Hold Of Customer Data In The Cloud
No content available.
packetstormsecurity.com - Cambodian Senator Sanctioned By US Over Cyber Scam Camps
No content available.
packetstormsecurity.com - Apple Patches Vision Pro Vuln To Prevent GAZEploit Attacks
No content available.
packetstormsecurity.com - RansomHub claims Kawasaki cyberattack, threatens to leak stolen data
Kawasaki Motors Europe has announced that it's recovering from a cyberattack that caused service disruptions as the RansomHub ransomware gang threatens to leak stolen data. [...]
BleepingComputer - The Dark Nexus Between Harm Groups and ‘The Com’
Brian Krebs reports: A cyberattack that shut down two of the top casinos in Las Vegas last year quickly became one of the most riveting security stories of 2023: It was the first known case of native English-speaking hackers in the United States and Britain…
DataBreaches - Lehigh Valley Health Network hospital network has agreed to a $65 million settlement after data breach
Lehigh Valley Health Network ’s (LVHN) hospital network has agreed to a $65 million settlement in a class action lawsuit related to a data breach. Lehigh Valley Health Network (LVHN) is a large hospital and healthcare system based in Pennsylvania, USA. It…
Security Affairs - The Buyer’s Guide to Extended Threat Intelligence – SOCRadar
The Buyer’s Guide to Extended Threat Intelligence – SOCRadar Imagine walking into the office on a regular Tuesday morning. As the CISO, you grab your coffee, sit at your desk, and are immediately flooded with alerts. Phishing attempts, malware detections,…
SOCRadar - Hardware Supply Chain Threats Can Undermine Endpoint Infrastructure
To prevent this, organizations should focus on developing secure hardware and firmware foundations, enabling them to manage, monitor, and remediate hardware and firmware security.
Dark Reading - Kali Linux 2024.3 Released With New Hacking Tools
Kali Linux 2024.3, the most recent iteration of Offensive Security’s highly regarded Debian-based distribution designed for ethical hacking and penetration testing, has been released. This new release is a major update that includes 11 new hacking tools and…
gbhackers.com - Apple Vision Pro Vulnerability Exposed Virtual Keyboard Inputs to Attackers
Details have emerged about a now-patched security flaw impacting Apple's Vision Pro mixed reality headset that, if successfully exploited, could allow malicious attackers to infer data entered on the device's virtual keyboard. The attack, dubbed GAZEploit,…
The Hacker News - 17-Year-Old Arrested in Connection with Cyber Attack Affecting Transport for London
British authorities on Thursday announced the arrest of a 17-year-old male in connection with a cyber attack affecting Transport for London (TfL). "The 17-year-old male was detained on suspicion of Computer Misuse Act offenses in relation to the attack,…
The Hacker News - In Other News: Possible Adobe Reader Zero-Day, Hijacking Mobi TLD, WhatsApp View Once Exploit
Noteworthy stories that might have slipped under the radar: a possible Adobe Reader zero-day, researchers mistakenly hijack .mobi TLD, and an exploited WhatsApp View Once bypass.
SecurityWeek - UPDATED: Prov. Schools Staff Told Not to Log On to Internet Due to “Technical Difficulties”
GoLocal reports: Providence Public Schools’ internet network has reportedly been hit with “technical difficulties.” As GoLocal first reported, the school community was alerted to the issue Wednesday night. Now, the Providence Public Schools Department has…
DataBreaches - What can businesses learn from the rise of cyber espionage?
It’s not just government organizations that need to worry about cyber espionage campaigns — the entire business world is also a target. Multipolarity has been a defining trend in geopolitics in recent years. Rivalries between the world’s great powers…
securityintelligence.com - FBI and CISA Release Joint PSA, Just So You Know: False Claims of Hacked Voter Information Likely Intended to Sow Distrust of U.S. Elections
Cybersecurity and Infrastructure Security Agency – CISA FOR IMMEDIATE RELEASE Thursday, September 12, 2024 Contact: CISAMedia@cisa.dhs.gov WASHINGTON – Today, as part of their public service announcement (PSA) series to put potential election day cyber…
DataBreaches - Using Artificial Intelligence in Cybersecurity (Ultimate Guide)
Using Artificial Intelligence in Cybersecurity (Ultimate Guide) Welcome to the first of our ultimate guides on cybersecurity topics, starting with artificial intelligence in cybersecurity. In these compilations, we aim to address common questions about…
SOCRadar - Deal made with whistleblower after Columbus’ data leak drew global attention, deal still muzzles whistleblower
There’s an update to a disturbing story that involved a Franklin County judge granting the City of Columbus a temporary restraining order against Connor Goodwolf. Goodwolf has been providing information to the media and the public about a ransomware attack…
DataBreaches - The Dark Nexus Between Harm Groups and ‘The Com’
A cyberattack that shut down two of the top casinos in Las Vegas last year quickly became one of the most riveting security stories of 2023: It was the first known case of native English-speaking hackers in the United States and Britain teaming up with…
Krebs on Security - Apple Patches Vision Pro Vulnerability to Prevent GAZEploit Attacks
Apple has released a patch for Vision Pro after researchers showed how an attacker can obtain passwords typed by looking at keys.
SecurityWeek - Hacker Tricks ChatGPT to Get Details for Making Homemade Bombs
A hacker known as Amadon has reportedly managed to bypass the safety protocols of ChatGPT, a popular AI chatbot developed by OpenAI, to generate instructions for creating homemade explosives. This incident raises significant questions about generative AI…
gbhackers.com