PaperCut Zero-Day Under Active Attack: Emergency Patch Released|U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog|Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports|Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback|Australian Police Charge Two Over TeamPCP Credential Theft|Meta to Pay Up to $18B Over Teen Social Media Use|CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do|OpenAI banned Russian ChatGPT accounts backing covert influence operation|CISA Red Team Fully Compromised Two Critical Infrastructure Orgs|FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure|U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog|88 ID Verification Breaches Show the Cost of Collecting Identity Data|PaperCut Zero-Day Under Active Attack: Emergency Patch Released|U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog|Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports|Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback|Australian Police Charge Two Over TeamPCP Credential Theft|Meta to Pay Up to $18B Over Teen Social Media Use|CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do|OpenAI banned Russian ChatGPT accounts backing covert influence operation|CISA Red Team Fully Compromised Two Critical Infrastructure Orgs|FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure|U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog|88 ID Verification Breaches Show the Cost of Collecting Identity Data|

Advertisement

Ad Placeholder

Full Width × 90

Security Affairs newsletter Round 258

A new round of the weekly newsletter arrived! The best news of the week with Security Affairs Coronavirus-themed attacks March 22 – March 28, 2020 FIN7 hackers target enterprises with weaponized USB drives via USPS Source code of Dharma ransomware now surfacing on public hacking forums Crooks leverage Zooms popularity in Coronavirus outbreak to serve […]

April 5, 2020

newsletter

A new round of the weekly newsletter arrived! The best news of the week with Security Affairs

Coronavirus-themed attacks March 22 – March 28, 2020

FIN7 hackers target enterprises with weaponized USB drives via USPS

Source code of Dharma ransomware now surfacing on public hacking forums

Crooks leverage Zooms popularity in Coronavirus outbreak to serve malware

Voter information for 4,934,863 Georgians leaked online

Your colleague was infected with Coronavirus, this is the latest phishing lure

Zeus Sphinx spam campaign attempt to exploit Coronavirus outbreak

42 million records of Iranian users of unofficial Telegram fork leaked online

A critical flaw in Rank Math WordPress plugin allows hackers to give users Admins privileges

FBI warns of nation-state actors using the Kwampirs malware

Holy water targets religious figures and charities in Asia

Marriott discloses data breach impacting up to 5.2 Million guests

Microsoft Edge will warn users if their credentials have been compromised

Experts published PoC exploits for CVE-2020-0796 privilege escalation flaw on Windows

LimeRAT malware delivered using 8-year-old VelvetSweatshop trick

New Raccoon Stealer uses Google Cloud Services to evade detection

Vollgar botnet has managed to infect around 3k MSSQL DB servers daily

Zoom client for Windows could allow hackers to steal usersWindows password

Crooks use tainted Zoom apps to target users at home due to Coronavirus outbreak

Hackers exploited IE and Firefox flaws in attacks on entities in China, Japan

Microsoft issues targeted notification to hospitals vulnerable to Ransomware attacks

New COVID19 wiper overwrites MBR making computers unusable

100,000 WordPress sites using the Contact Form 7 Datepicker plugin are exposed to hack

Hacking iPhone or MacBook devices by tricking into visiting a site

Magecart group 7 use new e-skimmer to steal payment data

Open Cloud Database Exposes 200 Million Americans

Twitter discloses privacy issue that caused caching of files sent via DMs in Firefox

Firefox 74.0.1 addresses two zero-days exploited in the wild

Microsofts case study: Emotet took down an entire network in just 8 days New Coronavirus-themed campaign spread Lokibot worldwide

[adrotate banner=”9″]

[adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

Tags

hacking news information security news it security it security news malware Newsletter Pierluigi Paganini Security Affairs Security News

More Stories>

PaperCut Zero-Day Under Active Attack: Emergency Patch Released

PaperCut Zero-Day Under Active Attack: Emergency Patch Released

U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog

U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog

Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports

Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports

Security>

Hacking>

Malware>