Security Affairs newsletter Round 116 – News of the week

A new round of the weekly SecurityAffairs newsletter arrived! The best news of the week with Security Affairs. · BAE Systems accused of selling mass surveillance software Evident across the Middle East · Facebook inadvertently revealed moderators identities to suspected terrorists · Kasperagent malware used in a new campaign leveraging Palestine-Themed decoy files · Security […]

June 25, 2017

A new round of the weekly SecurityAffairs newsletter arrived!

The best news of the week with Security Affairs.

· BAE Systems accused of selling mass surveillance software Evident across the Middle East

· Facebook inadvertently revealed moderators identities to suspected terrorists

· Kasperagent malware used in a new campaign leveraging Palestine-Themed decoy files

· Security Affairs newsletter Round 115 – News of the week

· Canada CSE warns of cyber attacks against next 2019 Election

· DRA firm left 1.1 TB of data unsecured on an Amazon S3, 198 million US voter records exposed

· Pinkslipbot banking Trojan exploiting infected machines as control servers

· Rufus malware used to empty ATMs running outdated OS in India

· Mexican Government was spying on Journalists and Activists with Pegasus Surveillance software

· Stack Clash vulnerability allows an attacker to execute code as root

· TrickBot gang is back with new campaigns targeting Payment Processors and CRM Providers

· Two Ztorg Trojans Removed from Google Play Store Are Definitely Better

· Cisco Talos releases the BASS open source malware signature generator

· National Security Agency opens the NSA Github Account that already lists 32 Projects

· South Korean hosting provider NAYANA infected by Erebus ransomware, it paid $1 Million to crooks

· Three years ago ProtonMail was launched. Today, it is launching ProtonVPN

· Attackers can exploit electronic cigarettes to hack computers

· Brutal Kangaroo is the CIA tool suite for hacking Air-Gapped Networks

· Drupal fixes the CVE-2017-6922 flaw exploited in spam campaigns in the wild

· Honda halted production in a factory after finding WannaCry traces in its networks

· Experts devised the GhostHook Attack technique to bypass Windows 10 PatchGuard Protections

· OpenVPN fixed several remotely exploitable flaws that were not detected by recent audits

· Two men suspected of being part of international plot to hack Microsoft networks

· UK politicians login credentials up for sale in the dark web

· 32TB of Windows 10 internal builds and portions of core source code leaked online

· Stealing AES-256 keys in seconds using €200 of off-the-shelf components

· The CIA was aware of Putins order to support the Trump Presidential campaign candidacy

· US intelligence claims Russian hackers probed electoral networks in 21 US states

Hurry up, subscribe to the newsletter, next Sunday you will receive all the news directly in your inbox.I desire to inform you that Security Affairs is now open to sponsored content.
I’ll offer the opportunity to:
•   Insert banners of various sizes in all the posts on Security Affairs.
•   Publish sponsored posts written by the customers that can include any kind of commercial reference.
•   Arrange a monthly/quarterly/annual campaign (for big customers) to advertise customers’ activities and discoveries.
For more info contact me at pierluigi.paganini@securityaffairs.co
Thanks for supporting Security Affairs.