Pegasus Used Against MEP Investigating Pegasus, Citizen Lab Finds|JADEPUFFER: First End-to-End AI-Driven Ransomware Operation|The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident|Law enforcememt operation disrupted Malicious Residential Proxy Networks NetNut|Government and Healthcare Are the Weakest Links in Global Email Security|Europe Confirms Record €4.1B Penalty Against Google for Android Practices|U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog|430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link|Adobe fixed multiple maximum-severity flaws in ColdFusion and Campaign Classic|Alleged Scattered Spider Hacker Extradited to U.S. to Face Cybercrime Charges|Oracle E-Business Suite Flaw Under Active Attack, 950 Systems Exposed|Azure CLI Targeted in LSHIY Password Spray Campaign Across 64 Orgs|Pegasus Used Against MEP Investigating Pegasus, Citizen Lab Finds|JADEPUFFER: First End-to-End AI-Driven Ransomware Operation|The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident|Law enforcememt operation disrupted Malicious Residential Proxy Networks NetNut|Government and Healthcare Are the Weakest Links in Global Email Security|Europe Confirms Record €4.1B Penalty Against Google for Android Practices|U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog|430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link|Adobe fixed multiple maximum-severity flaws in ColdFusion and Campaign Classic|Alleged Scattered Spider Hacker Extradited to U.S. to Face Cybercrime Charges|Oracle E-Business Suite Flaw Under Active Attack, 950 Systems Exposed|Azure CLI Targeted in LSHIY Password Spray Campaign Across 64 Orgs|

Advertisement

Ad Placeholder

Full Width × 90

Security Affairs newsletter Round 332

A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box. The Biden administration plans to target exchanges supporting ransomware operations with sanctions Threat actor has been targeting the aviation industry since at least 2018 Expert discloses details and PoC […]

September 19, 2021

newsletter

A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box.

The Biden administration plans to target exchanges supporting ransomware operations with sanctions

Threat actor has been targeting the aviation industry since at least 2018

Expert discloses details and PoC code for Netgear Seventh Inferno bug

CVE-2021-26333 AMD Chipset Driver flaw allows obtaining sensitive data

Experts warn that Mirai Botnet starts exploiting OMIGOD flaw

German Election body hit by a cyber attack

New Go malware Capoae uses multiple flaws to target WordPress installs, Linux systems
A new Win malware uses Windows Subsystem for Linux (WSL) to evade detection

FBI, CISA, and CGCYBER warn of nation-state actors exploiting CVE-2021-40539 Zoho bug

Microsoft warns of attacks exploiting recently patched Windows MSHTML CVE-2021-40444 bug

Bitdefender released free REvil ransomware decryptor that works for past victims

Anonymous hacked the controversial, far-right web host Epik

OMIGOD vulnerabilities expose thousands of Azure users to hack

Microsoft announces passwordless authentication for consumer accounts

Three formers NSA employees fined for providing hacker-for-hire services to UAE firm

US CISA appointed Kiersten Todt as new chief of staff

Microsoft Patch Tuesday fixes CVE-2021-40444 MSHTML zero-day

Mēris Bot infects MikroTik routers compromised in 2018

Millions of HP OMEN gaming PCs impacted by CVE-2021-3437 driver flaw

Google addresses a new Chrome zero-day flaw actively exploited in the wild

Vermilion Strike, a Linux implementation of Cobalt Strike Beacon used in attacks

Popular NPM package Pac-Resolver affected by a critical flaw

Apple fixes actively exploited FORCEDENTRY zero-day flaws

Facebook announces WhatsApp end-to-end encrypted (E2EE) backups

New Spook.Js attack allows to bypass Google Chrome Site Isolation protections

BlackMatter ransomware gang hit Technology giant Olympus

The new maxtrilha trojan is being disseminated and targeting several banks

Department of Justice and Constitutional Development of South Africa hit by a ransomware attack

Google implements new Private Compute Services for Android

Revil ransomware operators are targeting new victims

If you want to also receive for free the international press subscribe here.

Follow me on Twitter: @securityaffairs and Facebook

[adrotate banner=”9″]

[adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

[adrotate banner=”5″]

Follow me on Twitter: @securityaffairs and Facebook

[adrotate banner=”9″]

[adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

Tags

Cybercrime data breach hacking news information security news IT Information Security malware Newsletter Pierluigi Paganini Security Affairs Security News

More Stories>

Pegasus Used Against MEP Investigating Pegasus, Citizen Lab Finds

Pegasus Used Against MEP Investigating Pegasus, Citizen Lab Finds

JADEPUFFER: First End-to-End AI-Driven Ransomware Operation

Artificial Intelligence

JADEPUFFER: First End-to-End AI-Driven Ransomware Operation

The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident

Artificial Intelligence

The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident

Security>

Hacking>

U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog

Malware>