Pegasus Used Against MEP Investigating Pegasus, Citizen Lab Finds|JADEPUFFER: First End-to-End AI-Driven Ransomware Operation|The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident|Law enforcememt operation disrupted Malicious Residential Proxy Networks NetNut|Government and Healthcare Are the Weakest Links in Global Email Security|Europe Confirms Record €4.1B Penalty Against Google for Android Practices|U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog|430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link|Adobe fixed multiple maximum-severity flaws in ColdFusion and Campaign Classic|Alleged Scattered Spider Hacker Extradited to U.S. to Face Cybercrime Charges|Oracle E-Business Suite Flaw Under Active Attack, 950 Systems Exposed|Azure CLI Targeted in LSHIY Password Spray Campaign Across 64 Orgs|Pegasus Used Against MEP Investigating Pegasus, Citizen Lab Finds|JADEPUFFER: First End-to-End AI-Driven Ransomware Operation|The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident|Law enforcememt operation disrupted Malicious Residential Proxy Networks NetNut|Government and Healthcare Are the Weakest Links in Global Email Security|Europe Confirms Record €4.1B Penalty Against Google for Android Practices|U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog|430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link|Adobe fixed multiple maximum-severity flaws in ColdFusion and Campaign Classic|Alleged Scattered Spider Hacker Extradited to U.S. to Face Cybercrime Charges|Oracle E-Business Suite Flaw Under Active Attack, 950 Systems Exposed|Azure CLI Targeted in LSHIY Password Spray Campaign Across 64 Orgs|

Advertisement

Ad Placeholder

Full Width × 90

Security Affairs newsletter Round 291

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box. A cyberattack crippled the IT infrastructure of the City of Saint John Hundreds of female sports stars and celebrities have their naked photos and videos leaked online Romanians arrested for […]

November 29, 2020

newsletter

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box.

A cyberattack crippled the IT infrastructure of the City of Saint John

Hundreds of female sports stars and celebrities have their naked photos and videos leaked online

Romanians arrested for running underground malware services

Threat actor shared a list of 49,577 IPs vulnerable Fortinet VPNs

Computer Security and Data Privacy, the perfect alliance

FBI issued an alert on Ragnar Locker ransomware activity

Massive threat campaign strikes open-source repos, Sonatype spots new CursedGrabber malware

TikTok fixed security issues that could have led one-click account takeover

VMware discloses critical zero-day CVE-2020-4006 in Workspace One

VMware fixed SD-WAN flaws that could allow hackers to target enterprise networks

2FA bypass in cPanel potentially exposes tens of millions of websites to hack

A new Stantinko Bot masqueraded as httpd targeting Linux servers

Baidu Android apps removed from Play Store because caught collecting user details

Credential stuffing attack targeted 300K+ Spotify users

Crooks social-engineered GoDaddy staff to take over crypto-biz domains

Microsoft fixes Kerberos Authentication issues with an out-of-band Update

TrickBot operators continue to update their malware to increase resilience to takedown

Belden discloses data breach as a result of a cyber attack

Group-IB Hi-Tech Crime Trends 2020/2021 report

Operation Falcon: Group-IB helps INTERPOL identify Nigerian BEC ring members

Retail giant Home Depot agrees to a $17.5 million settlement over 2014 data breach

UK NCSCs alert urges orgs to fix MobileIron CVE-2020-15505 RCE

Watch out, WAPDropper malware could subscribe you to premium services

A zero-day in Windows 7 and Windows Server 2008 has yet to be fixed

Carding Action 2020: Group-IB supports Europol-backed operation saving €40 million

Danish news agency Ritzau hit by ransomware, but did not pay the ransom

Ransomware hits US Fertility the largest US fertility network

Sophos notifies data leak after a misconfiguration

SSH-backdoor Botnet With ‘Research Infection Technique

A week later, Manchester United has yet to recover after a cyberattack

Canon publicly confirms August ransomware attack and data breach

Details of 16 million Brazilian COVID-19 patients exposed online

Drupal emergency updates fix critical arbitrary PHP code execution

North Korean hackers allegedly behind cyberattacks on AstraZeneca

The global impact of the Fortinet 50.000 VPN leak posted online

Chip maker Advantech hit by Conti ransomware gang

Hundreds of C-level executives credentials available for $100 to $1500 per account

Office 365 phishing campaign leverages Oracle and Amazon cloud services

[adrotate banner=”9″]

[adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

Tags

Cybercrime data breach Hacking hacking news information security news IT Information Security malware Newsletter Pierluigi Paganini Security Affairs Security News

More Stories>

Pegasus Used Against MEP Investigating Pegasus, Citizen Lab Finds

Pegasus Used Against MEP Investigating Pegasus, Citizen Lab Finds

JADEPUFFER: First End-to-End AI-Driven Ransomware Operation

Artificial Intelligence

JADEPUFFER: First End-to-End AI-Driven Ransomware Operation

The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident

Artificial Intelligence

The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident

Security>

Hacking>

U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog

Malware>