U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog|Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports|Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback|Australian Police Charge Two Over TeamPCP Credential Theft|Meta to Pay Up to $18B Over Teen Social Media Use|CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do|OpenAI banned Russian ChatGPT accounts backing covert influence operation|CISA Red Team Fully Compromised Two Critical Infrastructure Orgs|FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure|U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog|88 ID Verification Breaches Show the Cost of Collecting Identity Data|WhatsApp Adds Stronger Security as Passkeys Hit 1 Billion|U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog|Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports|Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback|Australian Police Charge Two Over TeamPCP Credential Theft|Meta to Pay Up to $18B Over Teen Social Media Use|CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do|OpenAI banned Russian ChatGPT accounts backing covert influence operation|CISA Red Team Fully Compromised Two Critical Infrastructure Orgs|FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure|U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog|88 ID Verification Breaches Show the Cost of Collecting Identity Data|WhatsApp Adds Stronger Security as Passkeys Hit 1 Billion|

Advertisement

Ad Placeholder

Full Width × 90

Security Affairs newsletter Round 190 – News of the week

A new round of the weekly SecurityAffairs newsletter arrived! The best news of the week with Security Affairs. Let me inform you that my new book, “Digging in the Deep Web” is online with a special deal 20% discount Kindle Edition Paper Copy Once again thank you! · 6,500+ sites deleted after Dark Web hosting […]

November 25, 2018

newsletter

A new round of the weekly SecurityAffairs newsletter arrived!

The best news of the week with Security Affairs.

Let me inform you that my new book, “Digging in the Deep Web” is online with a special deal

20% discount

Kindle Edition

Once again thank you!

· 6,500+ sites deleted after Dark Web hosting provider Daniels Hosting hack

· Hacking Gmails UX with from fields for phishing attacks

· Instagram glitch exposed some user passwords

· Suspected APT29 hackers behind attacks on US gov agencies, think tanks, and businesses

· CarsBlues Bluetooth attack Affects tens of millions of vehicles

· Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29

· Israel aims at hardening aviation industry assets from cyberattack

· Tianfu Cup PWN hacking contest – White hat hackers earn $1 Million for Zero-Day exploits

· Experts analyzed how Iranian OilRIG hackers tested their weaponized documents

· Hackers target Drupal servers chaining several flaws, including Drupalgeddon2 and DirtyCOW

· Mac users using Exodus cryptocurrency wallet targeted by a small spam campaign

· TP-Link fixes 2 Remote Code Execution flaws in TL-R600VPN SOHO Router and other issues

· Two hackers involved in the TalkTalk hack sentenced to prison

· A flaw in US Postal Service website exposed data on 60 Million Users

· Amazon UK is notifying a data breach to its customers days before Black Friday

· Experts found flaws in Dell EMC and VMware Products. Patch them now!

· Facebook increases rewards for its bug bounty program and facilitate bug submission

· Sofacy APT group used a new tool in latest attacks, the Cannon

· Chaining 3 zero-days allowed pen testers to hack Apple macOS computers

· Experts found first Mirai bot targeting Linux servers via Hadoop YARN flaw

· Flaw allowing identity spoofing affects authentication based on German eID cards

· 13 fraudulent apps into Google Play have been downloaded 560,000+ times

· Beware Black Friday & Cyber Monday shoppers: fake products, credit cards scams and other types of fraud

· Exclusive Cybaze ZLab – Yoroi – Hunting Cozy Bear, new campaign, old habits

· New Emotet Thanksgiving campaign differs from previous ones

· Software company OSIsoft has suffered a data breach

· VMware fixed Workstation flaw disclosed at the Tianfu Cup PWN competition

· Chat app Knuddels fined €20k under GDPR regulation

· North Korea-linked group Lazarus targets Latin American banks

· US Government is asking allies to ban Huawei equipment

· Facebook appeals UK fine in Cambridge Analytica privacy Scandal

[adrotate banner=”9″]	[adrotate banner=”12″]

Pierluigi Paganini

(Security Affairs – Newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

Tags

Newsletter Pierluigi Paganini Security Affairs

More Stories>

Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports

Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports

Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback

Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback

Australian Police Charge Two Over TeamPCP Credential Theft

Australian Police Charge Two Over TeamPCP Credential Theft

Security>

Hacking>

Malware>