PaperCut Zero-Day Under Active Attack: Emergency Patch Released|U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog|Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports|Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback|Australian Police Charge Two Over TeamPCP Credential Theft|Meta to Pay Up to $18B Over Teen Social Media Use|CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do|OpenAI banned Russian ChatGPT accounts backing covert influence operation|CISA Red Team Fully Compromised Two Critical Infrastructure Orgs|FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure|U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog|88 ID Verification Breaches Show the Cost of Collecting Identity Data|PaperCut Zero-Day Under Active Attack: Emergency Patch Released|U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog|Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports|Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback|Australian Police Charge Two Over TeamPCP Credential Theft|Meta to Pay Up to $18B Over Teen Social Media Use|CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do|OpenAI banned Russian ChatGPT accounts backing covert influence operation|CISA Red Team Fully Compromised Two Critical Infrastructure Orgs|FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure|U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog|88 ID Verification Breaches Show the Cost of Collecting Identity Data|

Advertisement

Ad Placeholder

Full Width × 90

Security Affairs newsletter Round 357 by Pierluigi Paganini

A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box. If you want to also receive for free the newsletter with the international press subscribe here. LockBit ransomware group claims to have hacked Bridgestone Americas Attackers use website contact forms […]

March 13, 2022

newsletter

If you want to also receive for free the newsletter with the international press subscribe here.

LockBit ransomware group claims to have hacked Bridgestone Americas

Attackers use website contact forms to spread BazarLoader malware

Russian Internet watchdog Roskomnadzor is going to ban Instagram

Ubisoft suffered a cyber security incident that caused a temporary disruption

Anonymous hacked Roskomnadzor agency revealing Russian disinformation

Open database leaves major Chinese ports exposed to shipping chaos

Lapsus$ Ransomware Group is hiring, it announced recruitment of insiders

Vodafone investigates claims of a data breach made by Lapsus$ gang

Crooks target Ukraine’s IT Army with a tainted DDoS tool

CISA added 98 domains to the joint alert related to Conti ransomware gang

New Emotet botnet is rapidly growing, with +130K unique bots spread across 179 countries

TLStorm flaws allow to remotely manipulate the power of millions of enterprise UPS devices

Google blocked China-linked APT31’s attacks targeting U.S. Government

Multiple Russian government websites hacked in a supply chain attack

Anonymous hacked Russian cams, websites, announced a clamorous leak

HP addressed 16 UEFI firmware flaws impacting laptops, desktops, PoS systems

Samsung data breach: Lapsus$ gang stole Galaxy devices’ source code

Microsoft March 2022 Patch Tuesday updates fix 89 vulnerabilities

Google TAG: Russia, Belarus-linked APTs targeted Ukraine

Access:7 flaws impact +150 device models from over 100 manufacturers
CISA urges to fix actively exploited Firefox zero-days by March 21

Ragnar Locker ransomware group breached at least 52 organizations across 10 critical infrastructure sectors

Ukraine’s CERT-UA warns of phishing attacks against Ukrainian citizens

Dirty Pipe Linux flaw allows gaining root privileges on major distros

Coinbase blocked 25,000 crypto addresses linked to Russian individuals and entities

SharkBot, the new generation banking Trojan distributed via Play Store

Anonymous hacked Russian streaming services to broadcast war footage

Mozilla addresses two actively exploited zero-day flaws in Firefox

Anonymous offers $52,000 worth of Bitcoin to Russian troops for surrendered tank. Is it fake news?

CVE-2022-0492 flaw in Linux Kernel cgroups feature allows container escape

Charities and NGOs providing support in Ukraine hit by malware

Follow me on Twitter: @securityaffairs and Facebook

[adrotate banner=”9″]

[adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

Tags

Cybercrime data breach information security news IT Information Security Newsletter Pierluigi Paganini Security Affairs Security News

More Stories>

PaperCut Zero-Day Under Active Attack: Emergency Patch Released

PaperCut Zero-Day Under Active Attack: Emergency Patch Released

U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog

U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog

Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports

Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports

Security>

Hacking>

Malware>