News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Articles per day, last 14 days
Most articles on Wed 21 Oct (96); 10–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
- Closed-day average
Show as tableHide table
| Day | Articles | On CISA KEV CVEs |
|---|---|---|
| Wed 14 Oct | 86 | 25 |
| Thu 15 Oct | 78 | 15 |
| Fri 16 Oct | 61 | 12 |
| Sat 17 Oct | 10 | 1 |
| Sun 18 Oct | 10 | 0 |
| Mon 19 Oct | 60 | 12 |
| Tue 20 Oct | 86 | 16 |
| Wed 21 Oct | 96 | 18 |
| Thu 22 Oct | 84 | 11 |
| Fri 23 Oct | 68 | 16 |
| Sat 24 Oct | 13 | 4 |
| Sun 25 Oct | 13 | 2 |
| Mon 26 Oct | 76 | 20 |
| Tue 27 Oct | 95 | 18 |
| Today, Wed 28 Oct | 46 so far | 8 |
Developing
Wed 15 Jan 202566 articles
- Fortinet Confirms New Zero-Day Exploitation
Fortinet patches critical vulnerabilities, including a zero-day that has been exploited in the wild since at least November 2024.
SecurityWeek - The High-Stakes Disconnect For ICS/OT Security
Why does ICS/OT need specific controls and its own cybersecurity budget today? Because treating ICS/OT security with an IT security playbook isn’t just ineffective—it’s high risk. In the rapidly evolving domain of cybersecurity, the specific challenges and…
The Hacker News - January 2025 Patch Tuesday Highlights: 8 Zero-Days, 159 CVEs Fixed; SAP & Fortinet Updates
January 2025 Patch Tuesday Highlights: 8 Zero-Days, 159 CVEs Fixed; SAP & Fortinet Updates Microsoft has released its January 2025 Patch Tuesday updates, delivering critical fixes. This month’s release tackles 159 CVEs, including eight zero-days, three of…
SOCRadar - CVE-2024-44243 macOS flaw allows persistent malware installation
Microsoft disclosed details of a vulnerability in Apple macOS that could have allowed an attacker to bypass the OS’s System Integrity Protection (SIP). Microsoft disclosed details of a now-patched macOS flaw, tracked as CVE-2024-44243 (CVSS score: 5.5), that…
Security Affairs - Chrome Security Update – Patch For 16 Vulnerabilities
Google has released a significant security update for its Chrome browser, addressing 16 vulnerabilities in version 132.0.6834.83/84 for Windows, Mac, and Linux platforms. This update, which will be rolled out over the coming days and weeks. While this…
gbhackers.com - ICS Patch Tuesday: Security Advisories Published by Schneider, Siemens, Phoenix Contact, CISA
Schneider Electric, Siemens, CISA, and Phoenix Contact have released January 2025 Patch Tuesday ICS security advisories.
SecurityWeek - Zoom Security Update – Patches Multiple Vulnerabilities That Let Attackers Escalate Privileges
Zoom Video Communications has released a critical security update addressing multiple vulnerabilities in its suite of applications, including a high-severity flaw that could allow attackers to escalate privileges. The company urges users to update their…
gbhackers.com - What Is Public Cloud vs. Private Cloud? Pros and Cons Explained
Are you trying to decide between public and private cloud solutions for your business? It’s not always easy to figure out which option is the best. Both have unique benefits, and your choice can significantly impact your business. This article discusses the…
gbhackers.com - CVE-2023-37936 (CVSS 9.6): Urgent Patch Needed for FortiSwitch Vulnerability
Fortinet has issued patches to address a critical security vulnerability (CVE-2023-37936, CVSS 9.6) affecting its FortiSwitch product line.
SecurityOnline - FBI Deletes PlugX Malware from 4,250 Hacked Computers in Multi-Month Operation
The U.S. Department of Justice (DoJ) on Tuesday disclosed that a court-authorized operation allowed the Federal Bureau of Investigation (FBI) to delete PlugX malware from over 4,250 infected computers as part of a "multi-month law enforcement operation."…
The Hacker News - 3 Actively Exploited Zero-Day Flaws Patched in Microsoft's Latest Security Update
Microsoft kicked off 2025 with a new set of patches for a total of 161 security vulnerabilities across its software portfolio, including three zero-days that have been actively exploited in attacks. Of the 161 flaws, 11 are rated Critical, and 149 are rated…
The Hacker News - Critical SimpleHelp Flaws Allow File Theft, Privilege Escalation, and RCE Attacks
Cybersecurity researchers have disclosed multiple security flaws in SimpleHelp remote access software that could lead to information disclosure, privilege escalation, and remote code execution. Horizon3.ai researcher Naveen Sunkavally, in a technical report…
The Hacker News - Millions Stolen: North Korea Hackers Target Blockchain Industry
The United States, Japan, and the Republic of Korea have joined forces to issue a stark warning to
SecurityOnline - HHS Office for Civil Rights Settles HIPAA Phishing Cybersecurity Investigation with Solara Medical Supplies, LLC for $3,000,000
In 2019, DataBreaches reported that Solara Medical Supplies in California was notifying more than 110,000 patients after an attacker gained access to some employees’ email accounts via phishing. Solara was subsequently sued and settled claims for $9.76…
DataBreaches - CVE-2024-12084 (CVSS 9.8) – Code Execution Risk: Rsync Vulnerability Demands Immediate Patching
Rsync, a widely-used file synchronization tool, has been found to harbor six vulnerabilities affecting versions 3.3.0 and below.
SecurityOnline - “PlugX” Malware Deleted from Thousands of Computers in Global Operation
In a decisive move against Chinese state-sponsored cyber espionage, the U.S. Department of Justice (DOJ) and FBI, in
SecurityOnline - Ivanti Endpoint Manager Patches Critical Security Vulnerabilities
Ivanti has issued a security advisory addressing multiple critical and high-severity vulnerabilities in its Endpoint Manager (EPM) software.
SecurityOnline - CVE-2025-0147: Zoom Fixes High-Severity Security Flaw
Zoom has released six security bulletin addressing several vulnerabilities across its product ecosystem, ranging in severity from low
SecurityOnline - Malicious npm Packages Exploit Developer Tools with Hidden Kill Switch
A recent report by researchers at Socket reveals a concerning supply chain attack targeting popular Node.js libraries, chokidar
SecurityOnline - Fortinet FortiGate Firewalls Targeted in Sophisticated Campaign Exploiting Management Interfaces
A new report from Arctic Wolf Labs reveals a concerning campaign targeting publicly exposed management interfaces on Fortinet
SecurityOnline - Over 5,000 WordPress Sites Infected in WP3.XYZ Malware Attack
A widespread malware campaign has been uncovered, targeting over 5,000 WordPress websites globally. The campaign, traced back to
SecurityOnline - As Tensions Mount With China, Taiwan Sees Surge in Cyberattacks
In 2024, the Taiwanese government saw the daily average of attempted attacks by China double to 2.4 million, with a focus on government targets and telecommunications firms.
Dark Reading - Chrome 132 Arrives: 16 Security Fixes in Latest Stable Release
The Chrome team has rolled out Chrome 132 to the stable channel, offering critical updates for Windows, Mac,
SecurityOnline - Microsoft’s January 2025 Patch Tuesday Fixes 159 Vulnerabilities, Including 10 Critical and 8 Zero-Days
Microsoft delivers its first Patch Tuesday of 2025 with a robust security update addressing a wide range of
SecurityOnline - SimpleHelp Urgents to Patch Critical Security Vulnerabilities
Security researcher Naveen Sunkavally of Horizon3.ai has identified critical vulnerabilities in SimpleHelp, a popular remote support software tool.
SecurityOnline - Multi-Layered Attack: Formbook Stealer Bypasses Detection with Memory-Based Execution
Seqrite Lab recently uncovered a sophisticated phishing campaign leveraging old payloads to deploy the infamous Formbook stealer. Known
SecurityOnline