Security Affairs
PaperCut Zero-Day Under Active Attack: Emergency Patch Released|U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog|Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports|Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback|Australian Police Charge Two Over TeamPCP Credential Theft|Meta to Pay Up to $18B Over Teen Social Media Use|CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do|OpenAI banned Russian ChatGPT accounts backing covert influence operation|CISA Red Team Fully Compromised Two Critical Infrastructure Orgs|FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure|U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog|88 ID Verification Breaches Show the Cost of Collecting Identity Data|PaperCut Zero-Day Under Active Attack: Emergency Patch Released|U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog|Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports|Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback|Australian Police Charge Two Over TeamPCP Credential Theft|Meta to Pay Up to $18B Over Teen Social Media Use|CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do|OpenAI banned Russian ChatGPT accounts backing covert influence operation|CISA Red Team Fully Compromised Two Critical Infrastructure Orgs|FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure|U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog|88 ID Verification Breaches Show the Cost of Collecting Identity Data|
Advertisement

Ad Placeholder

Full Width × 90

APT

Security Affairs newsletter Round 182 – News of the week

A new round of the weekly SecurityAffairs newsletter arrived! The best news of the week with Security Affairs. Let me inform you that my new book, “Digging in the Deep Web” is online with a special deal 20% discount Kindle Edition Paper Copy Once again thank you! ·      Hackers target Port of Barcelona, maritime operations […]

newsletter

A new round of the weekly SecurityAffairs newsletter arrived!

The best news of the week with Security Affairs.

Let me inform you that my new book, “Digging in the Deep Web” is online with a special deal

20% discount

Kindle Edition

Paper Copy

Digging The Deep Web

Once again thank you!

·      Hackers target Port of Barcelona, maritime operations had not affected
·      New Virobot malware combines ransomware and botnet capabilities
·      A bug in Twitter Account Activity API exposed users messages to wrong developers
·      Critical flaw affects Cisco Video Surveillance Manager
·      Experts uncovered a new Adwind campaign aimed at Linux, Windows, and macOS systems
·      Firefox DoS issue crashes the browser and sometimes the Windows OS
·      Akamai Report: Credential stuffing attacks are a growing threat
·      Bitcoin Core Team fixes a critical DDoS flaw in wallet software
·      SHEIN Data breach affected 6.42 million users
·      White hat hacker found a macOS Mojave privacy bypass 0-day flaw on release day
·      Crooks leverages Kodi Media Player add-ons for malware distribution
·      Former NSA TAO hacker sentenced to 66 months in prison over Kaspersky Leak
·      Hide and Seek (HNS) IoT Botnet targets Android devices with ADB option enabled
·      oPatch community released micro patches for Microsoft JET Database Zero-Day
·      Mutagen Astronomy Linux Kernel vulnerability affects Red Hat, CentOS, and Debian distros
·      Pangu hackers are back, they realized the iOS 12 Jailbreak
·      Russian Sednit APT used the first UEFI rootkit of ever in attacks in the wild
·      Talos experts published technical details for other seven VPNFilter modules
·      Uber agrees to pay $148 million in massive 2016 data breach settlement
·      CVE-2018-1718 -Google Project Zero reports a new Linux Kernel flaw
·      CVE-2018-17182 -Google Project Zero reports a new Linux Kernel flaw
·      Facebook hacked – 50 Million Users Data exposed in the security breach
·      Port of San Diego hit by a cyber attack a few days after the attack on the Port of Barcelona
·      QRecorder app in the Play Store was hiding a Banking Trojan that targets European banks
·      Facebook: User shadow data, including phone numbers may be used by advertisers
·      Torii botnet, probably the most sophisticated IoT botnet of ever
·      Trustwave expert found 2 credential leak issues in Windows PureVPN Client
[adrotate banner=”9″] [adrotate banner=”12″]

Pierluigi Paganini

(Security Affairs – Newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]