Pegasus Used Against MEP Investigating Pegasus, Citizen Lab Finds|JADEPUFFER: First End-to-End AI-Driven Ransomware Operation|The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident|Law enforcememt operation disrupted Malicious Residential Proxy Networks NetNut|Government and Healthcare Are the Weakest Links in Global Email Security|Europe Confirms Record €4.1B Penalty Against Google for Android Practices|U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog|430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link|Adobe fixed multiple maximum-severity flaws in ColdFusion and Campaign Classic|Alleged Scattered Spider Hacker Extradited to U.S. to Face Cybercrime Charges|Oracle E-Business Suite Flaw Under Active Attack, 950 Systems Exposed|Azure CLI Targeted in LSHIY Password Spray Campaign Across 64 Orgs|Pegasus Used Against MEP Investigating Pegasus, Citizen Lab Finds|JADEPUFFER: First End-to-End AI-Driven Ransomware Operation|The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident|Law enforcememt operation disrupted Malicious Residential Proxy Networks NetNut|Government and Healthcare Are the Weakest Links in Global Email Security|Europe Confirms Record €4.1B Penalty Against Google for Android Practices|U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog|430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link|Adobe fixed multiple maximum-severity flaws in ColdFusion and Campaign Classic|Alleged Scattered Spider Hacker Extradited to U.S. to Face Cybercrime Charges|Oracle E-Business Suite Flaw Under Active Attack, 950 Systems Exposed|Azure CLI Targeted in LSHIY Password Spray Campaign Across 64 Orgs|

Advertisement

Ad Placeholder

Full Width × 90

Security Affairs newsletter Round 357 by Pierluigi Paganini

A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box. If you want to also receive for free the newsletter with the international press subscribe here. LockBit ransomware group claims to have hacked Bridgestone Americas Attackers use website contact forms […]

March 13, 2022

newsletter

If you want to also receive for free the newsletter with the international press subscribe here.

LockBit ransomware group claims to have hacked Bridgestone Americas

Attackers use website contact forms to spread BazarLoader malware

Russian Internet watchdog Roskomnadzor is going to ban Instagram

Ubisoft suffered a cyber security incident that caused a temporary disruption

Anonymous hacked Roskomnadzor agency revealing Russian disinformation

Open database leaves major Chinese ports exposed to shipping chaos

Lapsus$ Ransomware Group is hiring, it announced recruitment of insiders

Vodafone investigates claims of a data breach made by Lapsus$ gang

Crooks target Ukraine’s IT Army with a tainted DDoS tool

CISA added 98 domains to the joint alert related to Conti ransomware gang

New Emotet botnet is rapidly growing, with +130K unique bots spread across 179 countries

TLStorm flaws allow to remotely manipulate the power of millions of enterprise UPS devices

Google blocked China-linked APT31’s attacks targeting U.S. Government

Multiple Russian government websites hacked in a supply chain attack

Anonymous hacked Russian cams, websites, announced a clamorous leak

HP addressed 16 UEFI firmware flaws impacting laptops, desktops, PoS systems

Samsung data breach: Lapsus$ gang stole Galaxy devices’ source code

Microsoft March 2022 Patch Tuesday updates fix 89 vulnerabilities

Google TAG: Russia, Belarus-linked APTs targeted Ukraine

Access:7 flaws impact +150 device models from over 100 manufacturers
CISA urges to fix actively exploited Firefox zero-days by March 21

Ragnar Locker ransomware group breached at least 52 organizations across 10 critical infrastructure sectors

Ukraine’s CERT-UA warns of phishing attacks against Ukrainian citizens

Dirty Pipe Linux flaw allows gaining root privileges on major distros

Coinbase blocked 25,000 crypto addresses linked to Russian individuals and entities

SharkBot, the new generation banking Trojan distributed via Play Store

Anonymous hacked Russian streaming services to broadcast war footage

Mozilla addresses two actively exploited zero-day flaws in Firefox

Anonymous offers $52,000 worth of Bitcoin to Russian troops for surrendered tank. Is it fake news?

CVE-2022-0492 flaw in Linux Kernel cgroups feature allows container escape

Charities and NGOs providing support in Ukraine hit by malware

Follow me on Twitter: @securityaffairs and Facebook

[adrotate banner=”9″]

[adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

Tags

Cybercrime data breach information security news IT Information Security Newsletter Pierluigi Paganini Security Affairs Security News

More Stories>

Pegasus Used Against MEP Investigating Pegasus, Citizen Lab Finds

Pegasus Used Against MEP Investigating Pegasus, Citizen Lab Finds

JADEPUFFER: First End-to-End AI-Driven Ransomware Operation

Artificial Intelligence

JADEPUFFER: First End-to-End AI-Driven Ransomware Operation

The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident

Artificial Intelligence

The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident

Security>

Hacking>

U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog

Malware>