Europe Confirms Record €4.1B Penalty Against Google for Android Practices|U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog|430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link|Adobe fixed multiple maximum-severity flaws in ColdFusion and Campaign Classic|Alleged Scattered Spider Hacker Extradited to U.S. to Face Cybercrime Charges|Oracle E-Business Suite Flaw Under Active Attack, 950 Systems Exposed|Azure CLI Targeted in LSHIY Password Spray Campaign Across 64 Orgs|CISA Warns BlueHammer Flaw Is Now Exploited in Ransomware Attacks|RustDuck: The Botnet That’s Still Small but Engineering Like It Plans to Grow|GuardFall Flaw Hits 10 of 11 Popular Open-Source AI Agents|XSS.is, The Forum That Ran the Ransomware Supply Chain Is Down. The Market Isn’t|U.S. CISA adds SimpleHelp flaw to its Known Exploited Vulnerabilities catalog|Europe Confirms Record €4.1B Penalty Against Google for Android Practices|U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog|430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link|Adobe fixed multiple maximum-severity flaws in ColdFusion and Campaign Classic|Alleged Scattered Spider Hacker Extradited to U.S. to Face Cybercrime Charges|Oracle E-Business Suite Flaw Under Active Attack, 950 Systems Exposed|Azure CLI Targeted in LSHIY Password Spray Campaign Across 64 Orgs|CISA Warns BlueHammer Flaw Is Now Exploited in Ransomware Attacks|RustDuck: The Botnet That’s Still Small but Engineering Like It Plans to Grow|GuardFall Flaw Hits 10 of 11 Popular Open-Source AI Agents|XSS.is, The Forum That Ran the Ransomware Supply Chain Is Down. The Market Isn’t|U.S. CISA adds SimpleHelp flaw to its Known Exploited Vulnerabilities catalog|

Advertisement

Ad Placeholder

Full Width × 90

Security Affairs newsletter Round 134 – News of the week

A new round of the weekly SecurityAffairs newsletter arrived! The best news of the week with Security Affairs. Once again thank you! · A leaked document raises a doubt about NSA knew the #Krack attack since 2010 · APT28 group is rushing to exploit recent CVE-2017-11292 Flash 0-Day before users apply the patches · DHS […]

October 29, 2017

newsletter

A new round of the weekly SecurityAffairs newsletter arrived!

The best news of the week with Security Affairs.

Once again thank you!

· A leaked document raises a doubt about NSA knew the #Krack attack since 2010

· APT28 group is rushing to exploit recent CVE-2017-11292 Flash 0-Day before users apply the patches

· DHS and FBI warn of ongoing attacks on energy firms and critical infrastructure

· Security Affairs newsletter Round 133 – News of the week

· AhMyth Android RAT, another open source Android RAT Tool available on GitHub

· Exclusive – CSE ZLab experts spotted a new Wonder botnet in the wild

· NetBSD security improved with the implementation of kernel ASLR (KASLR)

· APNIC Whois-related problem led to accidental exposure of authentication data

· Bad Rabbit ransomware rapidly spreads, Ukraine and Russia most targeted countries

· Credentials (UN)Management in home banking.

· Latest Russia-linked APT28 campaign targeting security experts

· Researcher spotted flaws in the web-based version of popular Sarahah app

· Whole Foods Market confirms that nearly 100 locations were affected by card breach

· CSE Malware ZLab – Preliminary analysis of Bad Rabbit attack

· DUHK Attack allows attackers recover encryption keys used to secure VPN connections and web browsing sessions

· Offshore Legal Firm Appleby Hacked, financial details of rich clients is set to be released

· Hackers broke into the celeb London Bridge Plastic Surgery clinic

· Kaspersky: Hackers used backdoored MS Office key-gen to steal NSA exploits

· Krebs reported that Dell lost Control of dellbackupandrecoverycloudstorage Domain in June 2017

· Microsoft releases the open-source scanning tool Sonar

· A new Ursnif Banking Trojan campaign targets Japan

· Bad Rabbit Ransomware leverages the NSA Exploit for lateral movements

· Digging the Middle East and North African cybercrime underground market

· UK Government links the WannaCry attack that crippled NHS to North Korea

· Basetools underground hacking forum breached, hacker demands $50K ransom

· Documents encrypted by Bad Rabbit ransomware could be recovered without paying ransom

· Mysterious hack allows attackers stealing Windows login credentials without user interaction

[adrotate banner=”9″]	[adrotate banner=”12″]

Pierluigi Paganini

(Security Affairs – Newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

Tags

cyber security Newsletter Pierluigi Paganini Security Affairs

More Stories>

Europe Confirms Record €4.1B Penalty Against Google for Android Practices

Europe Confirms Record €4.1B Penalty Against Google for Android Practices

U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog

430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link

430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link

Security>

Hacking>

U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog

Malware>