Security Affairs newsletter Round 107 – News of the week

A new round of the weekly SecurityAffairs newsletter arrived! The best news of the week with Security Affairs. First of all, let me inform you that at the #infosec16 SecurityAffairs was awarded as The Best European Personal Security Blog http://securityaffairs.co/wordpress/48202/breaking-news/securityaffairs-best-european-personal-security-blog.html · Millions of mobile phones and laptops potentially exposed to attack leveraging baseband zero-days · ATMitch – […]

April 16, 2017

A new round of the weekly SecurityAffairs newsletter arrived!

The best news of the week with Security Affairs.

First of all, let me inform you that at the #infosec16 SecurityAffairs was awarded as The Best European Personal Security Blog
http://securityaffairs.co/wordpress/48202/breaking-news/securityaffairs-best-european-personal-security-blog.html

· Millions of mobile phones and laptops potentially exposed to attack leveraging baseband zero-days

· ATMitch – Crooks stole $800,000 from 8 ATMs in Russia using Fileless Malware

· Researchers warn of a Windows Zero-Day Attack observed in the wild

· How to get admin credentials from TP-Link M5350 3G/Wi-Fi modem with a text message

· Alleged Russian hacker arrested in Spain reportedly over US Presidential Election Hack

· Symantec confirms that Longhorn group is tied to CIA operators detailed in Vault 7

· Dridex banking Trojan campaign exploited Microsoft Word 0day recently revealed

· 2017 OWASP Top 10 is out, you can submit your comment until June

· G7 DECLARATION ON RESPONSIBLE STATES BEHAVIOR IN CYBERSPACE

· Microsoft Patch Tuesday fixes three flaws actively exploited in attacks in the wild

· The Mirai botnet is back and includes a Bitcoin Mining component

· Watch out! Shadow Brokers dump includes remote root exploits for Solaris boxes

· Tens of thousands of compromised routers abused in WordPress attacks

· Hackers can steal PINs and Passwords capturing data from smartphone sensors

· CVE-2017-0199 Zero Day exploit used to deliver FINSPY spyware

· Critical bug in SAP TREX affects SAP HANA and other applications

· Hundreds of thousands Magento e-shops are exploited to hack due to an unpatched flaw

· CVE-2016-10229 Linux remote code execution flaw potentially exposes systems at risk of hack

· Cisco warns of two critical issues in IOS and Apache Struts

· Shadows Brokers released another archive that suggests NSA compromised a SWIFT system

· Watch out, the Riddle vulnerability affects some Oracle MySQL versions. Update them now

· Microsoft says it has fixed exploits leaked by Shadow Brokers in March

Hurry up, subscribe to the newsletter, next Sunday you will receive all the news directly in your inbox.I desire to inform you that Security Affairs is now open to sponsored content.
I’ll offer the opportunity to:
•   Insert banners of various sizes in all the posts on Security Affairs.
•   Publish sponsored posts written by the customers that can include any kind of commercial reference.
•   Arrange a monthly/quarterly/annual campaign (for big customers) to advertise customers’ activities and discoveries.
For more info contact me at pierluigi.paganini@securityaffairs.co
Thanks for supporting Security Affairs.