News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Mon 2 Nov | 80 | 7 |
| Today, Tue 3 Nov | 52 so far | 2 |
Developing
Fri 13 Sep 202473 articles
- TrickMo Android Trojan Exploits Accessibility Services for On-Device Banking Fraud
Cybersecurity researchers have uncovered a new variant of an Android banking trojan called TrickMo that comes packed with new capabilities to evade analysis and display fake login screens to capture victims' banking credentials. "The mechanisms include using…
The Hacker News - Say Goodbye to Phishing: Must-Haves to Eliminate Credential Theft
Even as cyber threats become increasingly sophisticated, the number one attack vector for unauthorized access remains phished credentials (Verizon DBIR, 2024). Solving this problem resolves over 80% of your corporate risk, and a solution is possible.…
The Hacker News - New ‘Hadooken’ Linux Malware Targets WebLogic Servers
The recently observed Hadooken malware targeting Oracle WebLogic applications is linked to multiple ransomware families.
SecurityWeek - House Report Shows Chinese Cranes a Security Risk to US Ports
A joint report from the Committees on China and Homeland Security warns of the security risks posed by Chinese cranes in US ports.
SecurityWeek - Progress WhatsUp Gold Exploited Just Hours After PoC Release for Critical Flaw
Malicious actors are likely leveraging publicly available proof-of-concept (PoC) exploits for recently disclosed security flaws in Progress Software WhatsUp Gold to conduct opportunistic attacks. The activity is said to have commenced on August 30, 2024, a…
The Hacker News - UK Data Centers Gain Critical Infrastructure Status, Raising Green Belt Controversy
The designation of UK data centers as Critical National Infrastructure strengthens cyber defenses, but a proposed £3.75B data center on protected Green Belt land sparks debate.
SecurityWeek - Citrix Workspace App Vulnerable to Privilege Escalation Attacks
Citrix released a security bulletin (CTX691485) detailing two critical vulnerabilities in the Citrix Workspace app for Windows. These vulnerabilities, identified as CVE-2024-7889 and CVE-2024-7890, pose significant security risks. They allow local privilege…
gbhackers.com - Highline Public Schools addresses computer hack with a FAQ
Highline Public Schools issued an FAQ about the cybersecurity incident they first detected September 7. The incident resulted in school closures for Monday through Wednesday, but classes resumed yesterday. Their FAQ was last updated on Wednesday. You can…
DataBreaches - Fortinet Data Breach: What We Know So Far
Fortinet Data Breach: What We Know So Far On September 12, Fortinet, a prominent cybersecurity company, acknowledged a security incident involving unauthorized access to a third-party cloud-based file drive. According to the company, a small number of files…
SOCRadar - UK Teen Arrested Over Transport for London Hack
A 17-year-old from England has been arrested by the NCA over the recent cyberattack on Transport for London.
SecurityWeek - Fortinet confirms data breach after hacker claims to steal 440GB of files
Lawrence Abrams reports: Cybersecurity giant Fortinet has confirmed it suffered a data breach after a threat actor claimed to steal 440GB of files from the company’s Microsoft Sharepoint server. Fortinet is one of the largest cybersecurity companies in the…
DataBreaches - Vo1d malware infected 1.3 Million Android-based TV Boxes in 197 countries
Researchers uncovered an Android malware, dubbed Vo1d, that has already infected nearly 1.3 million Android devices in 197 countries. Doctor Web researchers uncovered a malware, tracked as Vo1d, that infected nearly 1.3 million Android-based TV boxes…
Security Affairs - 1.3 Million Android TV Boxes Infected by Vo1d Malware
Doctor Web warns of the new Vo1d Android malware infecting roughly 1.3 million TV boxes running older OS versions.
SecurityWeek - Beware Of Weaponized Excel Document That Delivers Fileless Remcos RAT
A recent advanced malware campaign leverages a phishing attack to deliver a seemingly benign Excel file that exploits CVE-2017-0199. By exploiting this vulnerability in Microsoft Office, attackers are able to embed malicious code within the file using OLE…
gbhackers.com - GitLab Updates Resolve Critical Pipeline Execution Vulnerability
GitLab has released security updates to resolve multiple vulnerabilities in GitLab CE/EE, including a critical-severity pipeline execution flaw.
SecurityWeek - Hackers Exploiting Apache OFBiz RCE Vulnerability in the Wild
A critical vulnerability in the Apache OFBiz framework has been actively exploited by hackers. The flaw designated CVE-2024-45195, allows for unauthenticated remote code execution (RCE), posing a threat to organizations relying on OFBiz for their operations.…
gbhackers.com - Fortinet Data Breach Impacts Customer Information
Fortinet has confirmed suffering a data breach impacting customers after a hacker leaked files allegedly stolen from the company.
SecurityWeek - Citrix Workspace App Users Urged to Update Following Two Privilege Escalation Flaws
In a security advisory released recently, Cloud Software Group has disclosed two vulnerabilities affecting the widely used Citrix Workspace app for Windows. These vulnerabilities, identified as CVE-2024-7889 and CVE-2024-7890, could...
SecurityOnline - Wayback Machine Integration: Google Search Makes Digital History Accessible
The Internet Archive preserves billions of web pages from around the globe, allowing users to inspect historical versions of these pages or access them as a backup when a site...
SecurityOnline - Say Goodbye to Stolen iPhone Parts: Activation Lock Gets an Upgrade
Once Lost Mode is activated on an Apple device, it is incredibly difficult to disable unless done by the original owner or with the correct password. Without deactivating Lost Mode,...
SecurityOnline - Docker Desktop Vulnerabilities Let Attackers Execute Remote Code
Docker has addressed critical vulnerabilities in Docker Desktop that could allow attackers to execute remote code. These vulnerabilities, identified as CVE-2024-8695 and CVE-2024-8696, highlight the ongoing risks associated with software extensions and the…
gbhackers.com - New Linux Malware Campaign Exploits Oracle Weblogic to Mine Cryptocurrency
Cybersecurity researchers have uncovered a new malware campaign targeting Linux environments to conduct illicit cryptocurrency mining. The activity, which specifically singles out the Oracle Weblogic server, is designed to deliver malware dubbed Hadooken,…
The Hacker News - Fortinet Confirms Data Breach Following Hacker’s Claim of 440GB Data Theft
Fortinet, a leading cybersecurity firm, has confirmed a data breach involving a third-party cloud service after a hacker, known by the alias “Fortibitch,” claimed to have stolen 440GB of data. The breach primarily affects a small number of Fortinet’s…
gbhackers.com - SquareX, Awarded Rising Star Category in CybersecAsia Readers’ Choice Awards 2024
SquareX has been named a winner of the prestigious Rising Star category in CybersecAsia Readers’ Choice Awards 2024 Awards, due to its outstanding achievements in its innovative browser security solutions. For the past 5 years, this award has been honouring…
gbhackers.com - CVE-2024-8695 & CVE-2024-8696: Two Critical RCE Flaws Discovered in Docker Desktop
Docker Desktop, the go-to application for containerized application development, has recently been found to harbor two critical security vulnerabilities that could enable remote code execution (RCE) attacks. Docker Desktop offers...
SecurityOnline - Hackers target Apache OFBiz RCE flaw CVE-2024-45195 after PoC exploit released
According to a report from Imperva, over 25,000 malicious requests targeting 4,000 unique sites have been detected since the CVE-2024-45195 vulnerability in Apache OFBiz was disclosed. These attacks, primarily targeting...
SecurityOnline - Cybersecurity Alert: Python Libraries Exploited for Malicious Intent
A recent report from Xavier Mertens, a Senior ISC Handler and Freelance Cyber Security Consultant, sheds light on a concerning trend in the cyber threat landscape. Cybercriminals are increasingly utilizing...
SecurityOnline - CVE-2024-28991 (CVSS 9.0): SolarWinds Access Rights Manager RCE Flaw
In a recent security advisory, SolarWinds has disclosed two vulnerabilities affecting their Access Rights Manager (ARM) software. ARM is widely used by IT and security administrators to manage and audit...
SecurityOnline - Crimson Palace Returns: Chinese State-Sponsored Cyber Espionage Operation Escalates with New Tools and Targets
After a brief hiatus, the Crimson Palace operation, a Chinese state-directed cyber espionage campaign, has resurfaced, armed with new tactics and an expanded target list. According to the latest report...
SecurityOnline - Beyond HTML: The Hidden Danger of Phishing in HTTP Response Headers
Unit 42 researchers from Palo Alto Networks have uncovered a wave of large-scale phishing campaigns exploiting a lesser-known technique: phishing pages delivered through the HTTP Refresh Response Header. Unlike typical...
SecurityOnline - Fileless Remcos RAT Campaign Leverages CVE-2017-0199 Flaw
In a newly uncovered advanced malware campaign, threat actors are using a complex, fileless approach to deliver the Remcos Remote Access Trojan (RAT), leveraging a benign-looking Excel document as the...
SecurityOnline - Cyber Threats Intensify in Mexico: Insights from Mandiant on Espionage and Extortion
A new report from Mandiant revealed the increasing cyber threats faced by Mexico, with a complex mix of global espionage and local cybercrime targeting both users and enterprises. As the...
SecurityOnline - The US is Preparing Criminal Charges in Iran Hack Targeting Trump, AP Sources Say
The prospect of criminal charges comes as the Justice Department has raised alarms about aggressive efforts by countries including Russia and Iran to meddle in the presidential election.
SecurityWeek