Europe Confirms Record €4.1B Penalty Against Google for Android Practices|U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog|430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link|Adobe fixed multiple maximum-severity flaws in ColdFusion and Campaign Classic|Alleged Scattered Spider Hacker Extradited to U.S. to Face Cybercrime Charges|Oracle E-Business Suite Flaw Under Active Attack, 950 Systems Exposed|Azure CLI Targeted in LSHIY Password Spray Campaign Across 64 Orgs|CISA Warns BlueHammer Flaw Is Now Exploited in Ransomware Attacks|RustDuck: The Botnet That’s Still Small but Engineering Like It Plans to Grow|GuardFall Flaw Hits 10 of 11 Popular Open-Source AI Agents|XSS.is, The Forum That Ran the Ransomware Supply Chain Is Down. The Market Isn’t|U.S. CISA adds SimpleHelp flaw to its Known Exploited Vulnerabilities catalog|Europe Confirms Record €4.1B Penalty Against Google for Android Practices|U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog|430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link|Adobe fixed multiple maximum-severity flaws in ColdFusion and Campaign Classic|Alleged Scattered Spider Hacker Extradited to U.S. to Face Cybercrime Charges|Oracle E-Business Suite Flaw Under Active Attack, 950 Systems Exposed|Azure CLI Targeted in LSHIY Password Spray Campaign Across 64 Orgs|CISA Warns BlueHammer Flaw Is Now Exploited in Ransomware Attacks|RustDuck: The Botnet That’s Still Small but Engineering Like It Plans to Grow|GuardFall Flaw Hits 10 of 11 Popular Open-Source AI Agents|XSS.is, The Forum That Ran the Ransomware Supply Chain Is Down. The Market Isn’t|U.S. CISA adds SimpleHelp flaw to its Known Exploited Vulnerabilities catalog|

Advertisement

Ad Placeholder

Full Width × 90

Security Affairs newsletter Round 145 – News of the week

A new round of the weekly SecurityAffairs newsletter arrived! The best news of the week with Security Affairs. Once again thank you! · Following recent mass demonstration, Iran Infy group may attempt to target protesters and their foreign contacts · Security Affairs newsletter Round 144 – News of the week · Spear phishing attacks already […]

January 14, 2018

newsletter

A new round of the weekly SecurityAffairs newsletter arrived!

The best news of the week with Security Affairs.

Once again thank you!

· Following recent mass demonstration, Iran Infy group may attempt to target protesters and their foreign contacts

· Security Affairs newsletter Round 144 – News of the week

· Spear phishing attacks already targeting Pyeongchang Olympic Games

· BlackBerry Mobile Website hacked, crooks installed a Coinhives code to mine Monero

· Experts found a strain of the Zeus banking Trojan spread through a legitimate developers website

· Microsoft KB4056892 Meltdown/Spectre patch bricks AMD Athlon-powered machines

· Trend Micro spotted 36 malicious apps advertised as security tools in Google Play

· Trend Micro spotted 36 malicious apps advertised as security tools spotted in Google Play

· US National Security Agency Director Admiral Mike Rogers to Retire

· Apple released patches to fix Spectre flaws in Safari, macOS, and iOS

· Dell EMC fixes 3 zero-day vulnerabilities in Data Protection Appliance products

· Experts spotted Monero cryptominer sending currency to North Korean University

· Microsoft: Meltdown and Spectre patches could cause noticeable performance slowdowns

· Wi-Fi Alliance launches WPA2 enhancements and announced WPA3

· Electrum patches a critical flaw that exposed Bitcoin Wallets to hack since 2016

· January 2018 Patch Tuesday security updates fix a zero-day vulnerability in MS Office

· New Malware Dubbed LockPos Introduces New Injection Technique To Avoid Detection

· Turla APT groups espionage campaigns now employs Adobe Flash Installer and ingenious social engineering

· VirusTotal presents the visualization tool ‘VirusTotal Graph

· A security issue in WhatsApp potentially allows attackers to eavesdrop on encrypted Group chats

· CSE Malware ZLab – Double Process Hollowing -The stealth process injection of the new Ursnif malware

· Italian researcher discovered that Gmail shutdown after sending a Zalgo text

· A flaw in macOS High Sierra allows to unlock the App Store Preferences without password

· Is the INSCOM (U.S. Army Intelligence & Security Command) working on a PSYOPS software?

· Never too late, Skype supports end-to-end encryption for new Private Conversations feature

· Security issue in Intels Active Management Technology (AMT) allows to gain full remote access to corporate devices

· Game of Drones – Researchers devised a technique to detect drone surveillance

· Mobile App Flaws of SCADA ICS Systems Could Allow Hackers To Target Critical Infrastructe

· New MaMi Malware targets macOS systems and changes DNS settings

[adrotate banner=”9″]	[adrotate banner=”12″]

Pierluigi Paganini

(Security Affairs – Newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

Tags

cyber security Newsletter Pierluigi Paganini Security Affairs

More Stories>

Europe Confirms Record €4.1B Penalty Against Google for Android Practices

Europe Confirms Record €4.1B Penalty Against Google for Android Practices

U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog

430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link

430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link

Security>

Hacking>

U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog

Malware>