A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box.

CISA warns organizations of cyberattacks from the Tor network

Cisco Talos discloses technicals details of Chrome, Firefox flaws

Huawei faces 5G ban from Britishs 5G network within months

Former Yahoo! employee who accessed 6K accounts avoids jail

North Korean Lazarus APT stole credit card data from US and EU stores

Snake Ransomware isolates infected Systems before encrypting files

Threat actors are attempting to exploit recently fixed F5 BIG-IP flaw

Authors of Purple Fox EK adds 2 Microsoft exploits

New release of Lampion trojan spreads in Portugal with some improvements on the VBS downloader

Project Freta, a free service that allows finding malware in OS memory snapshots

Ransomware infected systems at Xchanging, a DXC subsidiary

Unsecured Chinese companies leak users sensitive personal and business data

DOJ indicts Fxmsp hacker for selling access to hacked businesses

Malicious app in Google Play used to deliver Cerberus Banking Trojan

SentinelOne released free decryptor for ThiefQuest ransomware

Threat actors found a way to bypass mitigation F5 BIG-IP CVE-2020-5902 flaw

15 billion credentials available in the cybercrime marketplaces

Google Tsunami vulnerability scanner is now open-source

Joker malware apps bypassed Googles Play Store security checks

Palo Alto Networks addresses another high severity issue in PAN-OS devices

Zoom is working on a patch for a zero-day in Windows client

Juniper Networks addressed many issues in its products

KingComposer fixes a reflected XSS impacting 100,000 WordPress sites

Pre-Installed malware spotted on other Android phones sold in US

Researchers found allegedly intentional backdoors in FTTH devices from Chinese vendor C-Data

Evilnum Group targets European and British fintech companies

Hackers are scanning the web for vulnerable Citrix systems

CISA warns organizations of cyberattacks from the Tor network

Cisco Talos discloses technicals details of Chrome, Firefox flaws

Huawei faces 5G ban from Britishs 5G network within months

Security Affairs newsletter Round 271

Former Yahoo! employee who accessed 6K accounts avoids jail

North Korean Lazarus APT stole credit card data from US and EU stores

Snake Ransomware isolates infected Systems before encrypting files

Threat actors are attempting to exploit recently fixed F5 BIG-IP flaw

Authors of Purple Fox EK adds 2 Microsoft exploits

New release of Lampion trojan spreads in Portugal with some improvements on the VBS downloader

Project Freta, a free service that allows finding malware in OS memory snapshots

Ransomware infected systems at Xchanging, a DXC subsidiary

Unsecured Chinese companies leak users sensitive personal and business data

DOJ indicts Fxmsp hacker for selling access to hacked businesses

Malicious app in Google Play used to deliver Cerberus Banking Trojan

SentinelOne released free decryptor for ThiefQuest ransomware

Threat actors found a way to bypass mitigation F5 BIG-IP CVE-2020-5902 flaw

15 billion credentials available in the cybercrime marketplaces

Google Tsunami vulnerability scanner is now open-source

Joker malware apps bypassed Googles Play Store security checks

Palo Alto Networks addresses another high severity issue in PAN-OS devices

Zoom is working on a patch for a zero-day in Windows client

Juniper Networks addressed many issues in its products

KingComposer fixes a reflected XSS impacting 100,000 WordPress sites

Pre-Installed malware spotted on other Android phones sold in US

Researchers found allegedly intentional backdoors in FTTH devices from Chinese vendor C-Data

Evilnum Group targets European and British fintech companies

Hackers are scanning the web for vulnerable Citrix systems

[adrotate banner=”9″]

[adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box.

More Stories>

Pegasus Used Against MEP Investigating Pegasus, Citizen Lab Finds

JADEPUFFER: First End-to-End AI-Driven Ransomware Operation

The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident

Security>

Hacking>

Malware>