MUST READ

Apple rolled out emergency updates to address 3 new actively exploited zero-day flaws

 | 

Ukrainian hackers are behind the Free Download Manager supply chain attack

 | 

Space and defense tech maker Exail Technologies exposes database access

 | 

Pro-Russia hacker group NoName launched a DDoS attack on Canadian airports causing severe disruptions

 | 

Experts found critical flaws in Nagios XI network monitoring software

 | 

The dark web drug marketplace PIILOPUOTI was dismantled by Finnish Customs

 | 

International Criminal Court hit with a cyber attack

 | 

GitLab addressed critical vulnerability CVE-2023-5009

 | 

Trend Micro addresses actively exploited zero-day in Apex One and other security Products

 | 

ShroudedSnooper threat actors target telecom companies in the Middle East

 | 

Recent cyber attack is causing Clorox products shortage

 | 

Earth Lusca expands its arsenal with SprySOCKS Linux malware

 | 

Microsoft AI research division accidentally exposed 38TB of sensitive data

 | 

German intelligence warns cyberattacks could target liquefied natural gas (LNG) terminals

 | 

Deepfake and smishing. How hackers compromised the accounts of 27 Retool customers in the crypto industry

 | 

FBI hacker USDoD leaks highly sensitive TransUnion data

 | 

North Korea's Lazarus APT stole almost $240 million in crypto assets since June

 | 

Clop gang stolen data from major North Carolina hospitals

 | 

CardX released a data leak notification impacting their customers in Thailand

 | 

Security Affairs newsletter Round 437 by Pierluigi Paganini – International edition

 | 

TikTok fined €345M by Irish DPC for violating children’s privacy

 | 

Dariy Pankov, the NLBrute malware author, pleads guilty

 | 

Dangerous permissions detected in top Android health apps

 | 

Caesars Entertainment paid a ransom to avoid stolen data leaks

 | 

Free Download Manager backdoored to serve Linux malware for more than 3 years

 | 

Lockbit ransomware gang hit the Carthage Area Hospital and the Clayton-Hepburn Medical Center in New York

 | 

The iPhone of a Russian journalist was infected with the Pegasus spyware

 | 

Kubernetes flaws could lead to remote code execution on Windows endpoints

 | 

Threat actor leaks sensitive data belonging to Airbus

 | 

A new ransomware family called 3AM appears in the threat landscape

 | 

Redfly group infiltrated an Asian national grid as long as six months

 | 

Mozilla fixed a critical zero-day in Firefox and Thunderbird

 | 

Microsoft September 2023 Patch Tuesday fixed 2 actively exploited zero-day flaws

 | 

Save the Children confirms it was hit by cyber attack

 | 

Adobe fixed actively exploited zero-day in Acrobat and Reader

 | 

A new Repojacking attack exposed over 4,000 GitHub repositories to hack

 | 

MGM Resorts hit by a cyber attack

 | 

Anonymous Sudan launched a DDoS attack against Telegram

 | 

Iranian Charming Kitten APT targets various entities in Brazil, Israel, and the U.A.E. using a new backdoor

 | 

GOOGLE FIXED THE FOURTH CHROME ZERO-DAY OF 2023

 | 

CISA adds recently discovered Apple zero-days to Known Exploited Vulnerabilities Catalog

 | 

UK and US sanctioned 11 members of the Russia-based TrickBot gang

 | 

New HijackLoader malware is rapidly growing in popularity in the cybercrime community

 | 

Some of TOP universities wouldn’t pass cybersecurity exam: left websites vulnerable

 | 

Evil Telegram campaign: Trojanized Telegram apps found on Google Play

 | 

Rhysida Ransomware gang claims to have hacked three more US hospitals

 | 

Akamai prevented the largest DDoS attack on a US financial company

 | 

Security Affairs newsletter Round 436 by Pierluigi Paganini – International edition

 | 

US CISA added critical Apache RocketMQ flaw to its Known Exploited Vulnerabilities catalog

 | 

Ragnar Locker gang leaks data stolen from the Israel's Mayanei Hayeshua hospital

 | 

North Korea-linked threat actors target cybersecurity experts with a zero-day

 | 

Zero-day in Cisco ASA and FTD is actively exploited in ransomware attacks

 | 

Zero-days fixed by Apple were used to deliver NSO Group’s Pegasus spyware

 | 

Apple discloses 2 new actively exploited zero-day flaws in iPhones, Macs

 | 

A malvertising campaign is delivering a new version of the macOS Atomic Stealer

 | 

Two flaws in Apache SuperSet allow to remotely hack servers

 | 

Chinese cyberspies obtained Microsoft signing key from Windows crash dump due to a mistake

 | 

Google addressed an actively exploited zero-day in Android

 | 

A zero-day in Atlas VPN Linux Client leaks users' IP address

 | 

MITRE and CISA release Caldera for OT attack emulation

 | 

ASUS routers are affected by three critical remote code execution flaws

 | 

Hackers stole $41M worth of crypto assets from crypto gambling firm Stake

 | 

Freecycle data breach impacted 7 Million users

 | 

Meta disrupted two influence campaigns from China and Russia

 | 

A massive DDoS attack took down the site of the German financial agency BaFin

 | 

"Smishing Triad" Targeted USPS and US Citizens for Data Theft

 | 

University of Sydney suffered a security breach caused by a third-party service provider

 | 

Cybercrime will cost Germany $224 billion in 2023

 | 

PoC exploit code released for CVE-2023-34039 bug in VMware Aria Operations for Networks

 | 

Security Affairs newsletter Round 435 by Pierluigi Paganini – International edition

 | 

LockBit ransomware gang hit the Commission des services electriques de Montréal (CSEM)

 | 

UNRAVELING EternalBlue: inside the WannaCry’s enabler

 | 

Researchers released a free decryptor for the Key Group ransomware

 | 

Fashion retailer Forever 21 data breach impacted +500,000 individuals

 | 

Russia-linked hackers target Ukrainian military with Infamous Chisel Android malware

 | 

Akira Ransomware gang targets Cisco ASA without Multi-Factor Authentication

 | 

Paramount Global disclosed a data breach

 | 

National Safety Council data leak: Credentials of NASA, Tesla, DoJ, Verizon, and 2K others leaked by workplace safety organization

 | 

Abusing Windows Container Isolation Framework to avoid detection by security products

 | 

Critical RCE flaw impacts VMware Aria Operations Networks

 | 

UNC4841 threat actors hacked US government email servers exploiting Barracuda ESG flaw

 | 

Hackers infiltrated Japan’s National Center of Incident Readiness and Strategy for Cybersecurity (NISC) for months

 | 

FIN8-linked actor targets Citrix NetScaler systems

 | 

Japan's JPCERT warns of new 'MalDoc in PDF' attack technique

 | 

Attackers can discover IP address by sending a link over the Skype mobile app

 | 

Cisco fixes 3 high-severity DoS flaws in NX-OS and FXOS software

 | 

Cloud and hosting provider Leaseweb took down critical systems after a cyber attack

 | 

Crypto investor data exposed by a SIM swapping attack against a Kroll employee

 | 

China-linked Flax Typhoon APT targets Taiwan

 | 

Researchers released PoC exploit for Ivanti Sentry flaw CVE-2023-38035

 | 

Security Affairs newsletter Round 140 – News of the week

Pierluigi Paganini December 10, 2017

A new round of the weekly SecurityAffairs newsletter arrived!

The best news of the week with Security Affairs.

Once again thank you!

·      Halloware Ransomware, a new malware offered for sale on the Dark Web for Only $40
·      PayPal-owned company TIO Networks data breach affects 1.6 million customers
·      Security Affairs newsletter Round 139 – News of the week
·      UK National Cyber Security Centre (NCSC)s letter warns against software made in hostile states, specifically Russia
·      Exclusive, CSE CybSec ZLAB Malware Analysis Report: The Italian Job – Android malware masqueraded as Fake Tre Updater
·      Experts discovered a new variant of Shadow BTCware Ransomware Variant
·      Global operation allowed law enforcement agencies to take down the Andromeda Botnet
·      Google Unwanted Software Policy – Its a fight against snooping apps
·      RSA Authentication SDK affected by two critical vulnerabilities, patch it now!
·      17 models of WAGO PFC200 PLC Vulnerable to Unauthenticated Remote Access Exploit
·      DJI drones may be sending data about U.S. critical infrastructure and law enforcement to China
·      German Government prepares Law for backdoors and hacking back
·      Hacked password service Leakbase shuts down, someone suspects it was associated to the Hansa seizure
·      31 Million of client records belonging to the virtual keyboard app AI.type leaked online
·      MailSploit vulnerabilities allow email spoofing with more than 30 email clients
·      TeamViewer fixes a flaw that allows users sharing a desktop session to gain control of the others PC
·      The StorageCrypt ransomware is the last malware in order of time exploiting SambaCry to target NAS Devices
·      HBO hacker linked to the Iranian Charming Kitten APT group
·      Introducing ProtonMail Bridge, email encryption for Outlook, Thunderbird, and Apple Mail
·      Major Banking Applications were found vulnerable to MiTM attacks over SSL
·      NiceHash Hacked – Crooks have allegedly stolen $60m worth of Bitcoin
·      NiceHash: security breach leads to 60 million lost – Iceman is behind?
·      Process Doppelgänging Attack allows evading most security software on all Windows Versions
·      Thousands of WordPress sites infected with a Keylogger and cryptocurrency miner scripts
·      #OpUSA – OpIsrael – Anonymous hit Israel and threatens cyberattack on US Govt
·      CVE-2017-11937 | Microsoft releases an emergency update to fix a flaw in Malware Protection Engine
·      Expert discovered a Keylogger component in HP notebook keyboard driver
·      OpenSSL patches for the fourth time in 2017 its library, and it will likely be the last one 
·      The Indian Intelligence warns China is spying through 42 mobile apps
·      Android Janus vulnerability allows attackers to inject Malware into legitimate apps avoiding detection
·      Linux.ProxyM IoT Botnet now used to launch hacking attacks against websites
·      The authors of the Orcus RAT target Bitcoin investors
[adrotate banner=”9″] [adrotate banner=”12″]

Pierluigi Paganini

(Security Affairs – Newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

cyber security Newsletter Pierluigi Paganini Security Affairs

you might also like

Pierluigi Paganini September 21, 2023
Apple rolled out emergency updates to address 3 new actively exploited zero-day flaws
Read more
Pierluigi Paganini September 21, 2023
Ukrainian hackers are behind the Free Download Manager supply chain attack
Read more

leave a comment

newsletter

Subscribe to my email list and stay
up-to-date!

recent articles

Apple rolled out emergency updates to address 3 new actively exploited zero-day flaws

Hacking / September 21, 2023

Ukrainian hackers are behind the Free Download Manager supply chain attack

Hacking / September 21, 2023

Space and defense tech maker Exail Technologies exposes database access

Data Breach / September 21, 2023

Pro-Russia hacker group NoName launched a DDoS attack on Canadian airports causing severe disruptions

Hacking / September 21, 2023

Experts found critical flaws in Nagios XI network monitoring software

Security / September 20, 2023