News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 13–17 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 21 |
| Tue 27 Oct | 95 | 18 |
| Wed 28 Oct | 87 | 16 |
| Thu 29 Oct | 78 | 17 |
| Fri 30 Oct | 69 | 10 |
| Sat 31 Oct | 14 | 3 |
| Sun 1 Nov | 17 | 0 |
| Mon 2 Nov | 80 | 7 |
| Tue 3 Nov | 94 | 4 |
| Today, Wed 4 Nov | 66 so far | 7 |
Developing
Wed 18 Sep 202474 articles
- Cyberattack on Delta Prime: Losses Soar to $6M
The Delta Prime platform fell victim to a cyberattack resulting in the theft of cryptocurrency worth approximately $6 million. Initially, losses were reported at around $4.5 million, but the damage...
SecurityOnline - Discord rolls out end-to-end encryption for audio, video calls
Discord has introduced the DAVE protocol, a custom end-to-end encryption (E2EE) protocol designed to protect audio and video calls on the platform from unauthorized interceptions. [...]
BleepingComputer - Europol takes down "Ghost" encrypted messaging platform used for crime
Europol and law enforcement from nine countries successfully dismantled an encrypted communications platform called "Ghost," which was used by organized crime such as drug trafficking and money laundering. [...]
BleepingComputer - Contractor Software Targeted via Microsoft SQL Server Loophole
By accessing the MSSQL, threat actors gain admin-level access to the application, allowing them to automate their attacks.
Dark Reading - Packed With Features, 'SambaSpy' RAT Delivers Hefty Punch
Thought to be Brazilian in origin, the remote access Trojan is the "perfect tool for a 21st-century James Bond."
Dark Reading - Experts warn of China-linked APT’s Raptor Train IoT Botnet
Researchers warn of a new IoT botnet called Raptor Train that already compromised over 200,000 devices worldwide. Cybersecurity researchers from Lumen’s Black Lotus Labs discovered a new botnet, named Raptor Train, composed of small office/home office (SOHO)…
Security Affairs - FCC: AT&T Didn't Adequately Protect Customers' Cloud Data
Regulators fine AT&T $13 million for failing to protect customer information held by a third-party vendor, and extend consumer data protections to the cloud.
Dark Reading - X hacking spree fuels "$HACKED" crypto token pump-and-dump
An X account hacking spree has fueled a successful pump-and-dump scheme for the $HACKED Solana token, with people rushing to buy the coin. [...]
BleepingComputer - Microsoft: Vanilla Tempest hackers hit healthcare with INC ransomware
Microsoft says a ransomware affiliate it tracks as Vanilla Tempest now targets U.S. healthcare organizations in INC ransomware attacks. [...]
BleepingComputer - GitLab releases fix for critical SAML authentication bypass flaw
GitLab has released security updates to address a critical SAML authentication bypass vulnerability impacting self-managed installations of the GitLab Community Edition (CE) and Enterprise Edition (EE). [...]
BleepingComputer - Pip Dreams And Security Schemes: Chaos In Your Configuration Files
No content available.
packetstormsecurity.com - QR Phishing Scams Gain Motorized Momentum in UK
Criminal actors are finding their niche in utilizing QR phishing codes, otherwise known as "quishing," to victimize unsuspecting tourists in Europe and beyond.
Dark Reading - Thousands of ServiceNow KB Instances Expose Sensitive Corporate Data
Despite security updates to protect data, 45% of total enterprise instances of the cloud-based IT management platform leaked PII, internal system details, and active credentials over the past year.
Dark Reading - Microsoft may have revealed Windows 11 24H2 is coming this month
Microsoft may have accidentally confirmed that Windows 11 24H2 (Windows 11 2024 Update) is arriving on September 24 as part of the optional preview update, with it rolling out to more people as part of the mandatory October Patch Tuesday updates. [...]
BleepingComputer - Apple pulls iPadOS 18 update bricking M4 iPad Pro devices
Apple has paused the rollout of iPadOS 18 on iPad Pro tablets with the M4 chip after numerous owners reported the update is "bricking" their devices, with no way to turn them on after performing the update. [...]
BleepingComputer - Walmart customers scammed via fake shopping lists, threatened with arrest
Shopping online or attempting to get in touch with a store is a little bit like walking on a minefield: you might get lucky or take a wrong step and get scammed. Case in point, a malicious ad campaign is abusing Walmart Lists, a kind of virtual shopping list…
Malwarebytes - Chinese botnet infects 260,000 SOHO routers, IP cameras with malware
The FBI and cybersecurity researchers have disrupted a massive Chinese botnet called "Raptor Train" that infected over 260,000 networking devices to target critical infrastructure in the US and in other countries. [...]
BleepingComputer - Chinese Spies Built Massive Botnet of IoT Devices to Target US, Taiwan Military
Black Lotus Labs estimates that more than 200,000 routers, network-attached storage servers, and IP cameras have been ensnared in the botnet.
SecurityWeek - New "Raptor Train" IoT Botnet Compromises Over 200,000 Devices Worldwide
Cybersecurity researchers have uncovered a never-before-seen botnet comprising an army of small office/home office (SOHO) and IoT devices that are likely operated by a Chinese nation-state threat actor called Flax Typhoon (aka Ethereal Panda or RedJuliett).…
The Hacker News - Russian security firm Dr.Web disconnects all servers after breach
On Tuesday, Russian anti-malware company Doctor Web (Dr.Web) disclosed a security breach after its systems were targeted in a cyberattack over the weekend. [...]
BleepingComputer - 4 Top Security Automation Use Cases: A Detailed Guide
Learn about the top 4 security automation use cases that can streamline your cybersecurity efforts. This guide covers reducing enriching indicators of compromise (IoCs), monitoring external attack surface(s), scanning for web application vulnerabilities and…
BleepingComputer - Chinese Engineer Charged in U.S. for Years-Long Cyber Espionage Targeting NASA and Military
A Chinese national has been indicted in the U.S. on charges of conducting a "multi-year" spear-phishing campaign to obtain unauthorized access to computer software and source code created by the National Aeronautics and Space Administration (NASA), research…
The Hacker News - How Shifts in Cyber Insurance Are Affecting the Security Landscape
Ultimately, the goal of businesses and cyber insurers alike is to build more resilient IT environments to avoid cyberattacks and the ransom, downtime, and reputation hit that come along with them.
Dark Reading - Scam ‘Funeral Streaming’ Groups Thrive on Facebook
Scammers are flooding Facebook with groups that purport to offer video streaming of funeral services for the recently deceased. Friends and family who follow the links for the streaming services are then asked to cough up their credit card information.…
Krebs on Security - Threat Actors Target Accounting Software Used by Construction Contractors
Malicious hackers are caught brute-forcing Foundation Accounting Software at scale, compromising organizations in the construction industry.
SecurityWeek - UK Threat Landscape Report: The Cyber Impact of the Russia-Ukraine War an Overview
UK Threat Landscape Report: The Cyber Impact of the Russia-Ukraine War an Overview As the Russia-Ukraine war unfolds, its impact extends far beyond the battlefield, rippling through cyberspace and affecting organizations and individuals worldwide. The United…
SOCRadar - 11 Dead, Thousands Injured In Explosive Supply Chain Attack On Hezbollah Pagers
No content available.
packetstormsecurity.com - WhatsApp View Once Fix Gets Defeated In Less Than A Week
No content available.
packetstormsecurity.com - Cops Across The World Arrest 51 In Orchestrated Takedown Of Ghost Crime Platform
No content available.
packetstormsecurity.com - Credential Flusher, understanding the threat and how to protect your login data
Credential Flusher is a method that allows hackers to steal login credentials directly from the victim’s web browser. The cyber attacks have become increasingly sophisticated, putting our personal information at risk. One of the latest and most insidious…
Security Affairs - North Korean Hackers Lure Critical Infrastructure Employees With Fake Jobs
A North Korean group tracked as UNC2970 has been spotted trying to deliver new malware to people in the aerospace and energy industries.
SecurityWeek - Cybersecurity risks in healthcare are an ongoing crisis
While healthcare providers have been implementing technical, administrative and physical safeguards related to patient information, they have not been as diligent in securing their medical devices. These devices are critical to patient care and can leave…
securityintelligence.com - Snapchat wants to put your AI-generated face in its ads
Snapchat is reserving the right to use your selfie images to power Cameos, Generative AI, and other experiences on Snapchat, including ads, according to our friends at 404 Media, The Snapchat Support page about its My Selfie feature says: “You’ll take…
Malwarebytes - Critical Patches Released for VMware vCenter Server and GitLab (CVE-2024-38812, CVE-2024-45409)
Critical Patches Released for VMware vCenter Server and GitLab (CVE-2024-38812, CVE-2024-45409) Broadcom recently issued important patches for VMware, addressing two critical vulnerabilities in its vCenter Server platform, the more severe of them being…
SOCRadar - He sold databases of thousands of users: the police of Dnipropetrovsk region detained the hacker
The following is an automated machine (Google) translation of a press release from the Ukrainian cyberpolice: The cyber police of Dnipropetrovsk region together with the investigators of the Investigative Department of the GUNP in the region, under the…
DataBreaches - Australian Police Infiltrate Encrypted Messaging App Ghost and Arrest Dozens
Australian police have infiltrated encrypted messaging app Ghost, which has been used for illegal activities, and arrested dozens of people.
SecurityWeek - Infostealers: An Early Warning for Ransomware Attacks
Can cyber defenders use the presence of infostealers as a canary in the coal mine to preempt ransomware attacks?
Dark Reading