PaperCut Zero-Day Under Active Attack: Emergency Patch Released|U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog|Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports|Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback|Australian Police Charge Two Over TeamPCP Credential Theft|Meta to Pay Up to $18B Over Teen Social Media Use|CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do|OpenAI banned Russian ChatGPT accounts backing covert influence operation|CISA Red Team Fully Compromised Two Critical Infrastructure Orgs|FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure|U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog|88 ID Verification Breaches Show the Cost of Collecting Identity Data|PaperCut Zero-Day Under Active Attack: Emergency Patch Released|U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog|Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports|Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback|Australian Police Charge Two Over TeamPCP Credential Theft|Meta to Pay Up to $18B Over Teen Social Media Use|CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do|OpenAI banned Russian ChatGPT accounts backing covert influence operation|CISA Red Team Fully Compromised Two Critical Infrastructure Orgs|FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure|U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog|88 ID Verification Breaches Show the Cost of Collecting Identity Data|

Advertisement

Ad Placeholder

Full Width × 90

Security Affairs newsletter Round 371 by Pierluigi Paganini

A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs for free in your email box. If you want to also receive for free the newsletter with the international press subscribe here. Oracle spent 6 months to fix ‘Mega’ flaws in the Fusion Middleware Multiple malicious packages […]

June 26, 2022

newsletter

A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs for free in your email box.

If you want to also receive for free the newsletter with the international press subscribe here.

Oracle spent 6 months to fix ‘Mega’ flaws in the Fusion Middleware

Multiple malicious packages in PyPI repository found stealing AWS secrets

Attackers exploited a zero-day in Mitel VOIP devices to compromise a network

Threat actors continue to exploit Log4Shell in VMware Horizon Systems

Vulnerabilities in the Jacuzzi SmartTub app could allow to access users’ data

Google TAG argues that Italian surveillance firm RCS Labs was helped by ISPs to infect mobile users

Chinese Tropic Trooper APT spreads a hacking tool laced with a backdoor

NSO Group told lawmakers that Pegasus spyware was used by at least 5 European countries
QNAP warns of a critical PHP flaw that could lead to remote code execution

Researchers found flaws in MEGA that allowed to decrypt of user data

Exclusive: Lithuania under cyber-attack after the ban on Russian railway goods

Magecart attacks are still around but are more difficult to detect

Thank you!!! SecurityAffairs awarded as Best European Personal Cybersecurity Blog 2022

Crooks are using RIG Exploit Kit to push Dridex instead of Raccoon stealer

Flagstar Bank discloses a data breach that impacted 1.5 Million individuals

New ToddyCat APT targets high-profile entities in Europe and Asia

New DFSCoerce NTLM relay attack allows taking control over Windows domains

Cybercriminals Use Azure Front Door in Phishing Attacks
Russian APT28 hacker accused of the NATO think tank hack in Germany

Google expert detailed a 5-Year-Old flaw in Apple Safari exploited in the wild

Security Affairs newsletter Round 370 by Pierluigi Paganini

Cisco will not address critical RCE in end-of-life Small Business RV routers

BRATA Android Malware evolves and targets the UK, Spain, and Italy

Critical flaw in Ninja Forms WordPress Plugin actively exploited in the wild

Experts warn of a new eCh0raix ransomware campaign targeting QNAP NAS

Follow me on Twitter: @securityaffairs and Facebook

[adrotate banner=”9″]

[adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

Tags

data breach hacking news information security news IT Information Security Newsletter Pierluigi Paganini Security Affairs Security News

More Stories>

PaperCut Zero-Day Under Active Attack: Emergency Patch Released

PaperCut Zero-Day Under Active Attack: Emergency Patch Released

U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog

U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog

Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports

Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports

Security>

Hacking>

Malware>