Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback|Australian Police Charge Two Over TeamPCP Credential Theft|Meta to Pay Up to $18B Over Teen Social Media Use|CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do|OpenAI banned Russian ChatGPT accounts backing covert influence operation|CISA Red Team Fully Compromised Two Critical Infrastructure Orgs|FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure|U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog|88 ID Verification Breaches Show the Cost of Collecting Identity Data|WhatsApp Adds Stronger Security as Passkeys Hit 1 Billion|Operation Jackal: 58 Arrests Expose the Money Laundering Machine Behind Global Scams|Norway ’s Digital Government Infrastructure Hit by a new DDoS Attack|Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback|Australian Police Charge Two Over TeamPCP Credential Theft|Meta to Pay Up to $18B Over Teen Social Media Use|CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do|OpenAI banned Russian ChatGPT accounts backing covert influence operation|CISA Red Team Fully Compromised Two Critical Infrastructure Orgs|FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure|U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog|88 ID Verification Breaches Show the Cost of Collecting Identity Data|WhatsApp Adds Stronger Security as Passkeys Hit 1 Billion|Operation Jackal: 58 Arrests Expose the Money Laundering Machine Behind Global Scams|Norway ’s Digital Government Infrastructure Hit by a new DDoS Attack|

Advertisement

Ad Placeholder

Full Width × 90

Security Affairs newsletter Round 162 – News of the week

A new round of the weekly SecurityAffairs newsletter arrived! The best news of the week with Security Affairs. Let me inform you that my new book, “Digging in the Deep Web” is online Kindle Edition Paper Copy Once again thank you! · European Central Bank announced a framework for cyber attack simulation on financial firms […]

May 13, 2018

newsletter

A new round of the weekly SecurityAffairs newsletter arrived!

The best news of the week with Security Affairs.

Let me inform you that my new book, “Digging in the Deep Web” is online

Kindle Edition

Once again thank you!

· European Central Bank announced a framework for cyber attack simulation on financial firms

· Google announces the open-source Asylo framework for confidential computing

· New ZooPark APT targets Android users in Middle East since 2015

· A new report sheds the lights on state-sponsored Chinese APTs under Winnti umbrella

· Chrome freezes PC running Windows OS after Windows 10 April update

· SynAck ransomware Employs Many Novel Techniques to Avoid Detection

· Experts released an unofficial patch for Zero-Days in Dasan GPON home routers

· Hackers continue to hack Drupal installs to install backdoors and inject cryptocurrency malware

· Reading the 2017 Internet Crime Complaint Center (IC3) report

· Secret Conversation – Twitter is testing End-to-End Encryption for direct messages

· UPDATED – Critical RCE vulnerability found in over a million GPON Home Routers

· Adobe fixed a Critical Code Execution issue in Flash Player

· Are you using Python module ‘SSH Decorator? Newer versions include a backdoor

· baseStriker attack technique allow to bypass Microsoft Office 365 anti-phishing filter

· May 2018 Android Security Bulletin includes additional Meltdown fix

· May 2018 Patch Tuesday: Microsoft fixes 2 zero-day flaws reportedly exploited by APT group

· Signal disappearing messages can be recovered by the macOS client

· Analysis of CVE-2018-8174 VBScript 0day and APT actor related to Office targeted attack

· Lenovo releases updates to fix Secure Boot flaw in servers and other issues

· Misinterpretation of Intel docs is the root cause for the CVE-2018-8897 flaw in Hypervisors and OSs

· The source code of the TreasureHunter PoS Malware leaked online

· Allanite threat actor focused on critical infrastructure is targeting electric utilities and ICS networks

· Mining passwords from dozens of public Trello boards

· Tech giant Telstra warns cloud customers theyre at risk of hack due to a SNAFU

· Throwhammer, the new Rowhammer attack to remotely hack systems over the LAN

· Google addresses critical security vulnerabilities in Chrome 66

· iVideon Russian-based video surveillance solution leaked data, hundreds of thousands of records exposed

· Wannacry outbreak anniversary: the EternalBlue exploit even more popular now

[adrotate banner=”9″]	[adrotate banner=”12″]

Pierluigi Paganini

(Security Affairs – Newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

Tags

Cybercrime Hacking malware Newsletter Pierluigi Paganini Security Affairs

More Stories>

Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback

Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback

Australian Police Charge Two Over TeamPCP Credential Theft

Australian Police Charge Two Over TeamPCP Credential Theft

Meta to Pay Up to $18B Over Teen Social Media Use

Security>

Hacking>

Malware>