Critical Gitea Docker Bug Under Active Exploitation Exposes Repositories and Secrets|Spanish Police Arrest Man Linked to CARR, Z-Pentest, and NoName057(16)|Hidden Tenda Router Backdoor Grants Admin Access, No Patch Available|AI-Generated Malware Powers New Armored Likho APT Campaign|Januscape: 16-Year-Old Linux KVM Bug Enables Cloud VM Escape Attacks|Adobe ColdFusion flaw CVE-2026-48282 now exploited in the wild|Hidden Web Prompts Trick AI Agents Into Sending Money|Seven Bugs in FatFs Put IoT and Embedded Devices at Risk|Bad Epoll Flaw Gives Attackers Root Access on Linux and Android|Medtronic Notifies 3.8 Million After ShinyHunters Data Breach|SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 104|Security Affairs newsletter Round 584 by Pierluigi Paganini – INTERNATIONAL EDITION|Critical Gitea Docker Bug Under Active Exploitation Exposes Repositories and Secrets|Spanish Police Arrest Man Linked to CARR, Z-Pentest, and NoName057(16)|Hidden Tenda Router Backdoor Grants Admin Access, No Patch Available|AI-Generated Malware Powers New Armored Likho APT Campaign|Januscape: 16-Year-Old Linux KVM Bug Enables Cloud VM Escape Attacks|Adobe ColdFusion flaw CVE-2026-48282 now exploited in the wild|Hidden Web Prompts Trick AI Agents Into Sending Money|Seven Bugs in FatFs Put IoT and Embedded Devices at Risk|Bad Epoll Flaw Gives Attackers Root Access on Linux and Android|Medtronic Notifies 3.8 Million After ShinyHunters Data Breach|SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 104|Security Affairs newsletter Round 584 by Pierluigi Paganini – INTERNATIONAL EDITION|

Advertisement

Ad Placeholder

Full Width × 90

Security Affairs newsletter Round 380

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box. If you want to also receive for free the newsletter with the international press subscribe here. CISA added 7 new flaws to its Known Exploited Vulnerabilities Catalog TA558 cybercrime group targets hospitality […]

August 20, 2022

newsletter

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box.

If you want to also receive for free the newsletter with the international press subscribe here.

CISA added 7 new flaws to its Known Exploited Vulnerabilities Catalog

TA558 cybercrime group targets hospitality and travel orgs

Russia-linked Cozy Bear uses evasive techniques to target Microsoft 365 users

CISA added SAP flaw to its Known Exploited Vulnerabilities Catalog

A flaw in Amazon Ring could expose user’s camera recordings

Cisco fixes High-Severity bug in Secure Web Appliance

Bumblebee attacks, from initial access to the compromise of Active Directory Services

Estonia blocked cyberattacks claimed by Pro-Russia Killnet group

Safari 15.6.1 addresses a zero-day flaw actively exploited in the wild

Google blocked the largest Layer 7 DDoS reported to date

BlackByte ransomware v2 is out with new extortion novelties

Apple fixed two new zero-day flaws exploited by threat actors

PoC exploit code for critical Realtek RCE flaw released online

China-linked RedAlpha behind multi-year credential theft campaign

Bugdrop dropper includes features to circumvent Google’s security Controls

Google fixed a new Chrome Zero-Day actively exploited in the wild

North Korea-linked APT targets Job Seekers with macOS malware

ÆPIC Leak is the first CPU flaw able to architecturally disclose sensitive data

Clop gang targeted UK drinking water supplier South Staffordshire Water

Russia-linked Gamaredon APT continues to target Ukraine

Phone numbers of 1,900 Signal users exposed as a result of Twilio security breach

Microsoft disrupts SEABORGIUM ’s ongoing phishing operations

VNC instances exposed to Internet pose critical infrastructures at risk

SOVA Android malware now also encrypts victims’ files

A new PyPI Package was found delivering fileless Linux Malware

Iron Tiger APT is behind a supply chain attack that employed messaging app MiMi

A flaw in Xiaomi phones using MediaTek Chips could allow to forge transactions

CISA, FBI shared a joint advisory to warn of Zeppelin ransomware attacks

Follow me on Twitter: @securityaffairs and Facebook

[adrotate banner=”9″]

[adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

Tags

data breach Hacking hacking news information security news IT Information Security Pierluigi Paganini Security Affairs

More Stories>

Critical Gitea Docker Bug Under Active Exploitation Exposes Repositories and Secrets

Critical Gitea Docker Bug Under Active Exploitation Exposes Repositories and Secrets

Spanish Police Arrest Man Linked to CARR, Z-Pentest, and NoName057(16)

Spanish Police Arrest Man Linked to CARR, Z-Pentest, and NoName057(16)

Hidden Tenda Router Backdoor Grants Admin Access, No Patch Available

Hidden Tenda Router Backdoor Grants Admin Access, No Patch Available

Security>

Hacking>

Malware>