Pegasus Used Against MEP Investigating Pegasus, Citizen Lab Finds|JADEPUFFER: First End-to-End AI-Driven Ransomware Operation|The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident|Law enforcememt operation disrupted Malicious Residential Proxy Networks NetNut|Government and Healthcare Are the Weakest Links in Global Email Security|Europe Confirms Record €4.1B Penalty Against Google for Android Practices|U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog|430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link|Adobe fixed multiple maximum-severity flaws in ColdFusion and Campaign Classic|Alleged Scattered Spider Hacker Extradited to U.S. to Face Cybercrime Charges|Oracle E-Business Suite Flaw Under Active Attack, 950 Systems Exposed|Azure CLI Targeted in LSHIY Password Spray Campaign Across 64 Orgs|Pegasus Used Against MEP Investigating Pegasus, Citizen Lab Finds|JADEPUFFER: First End-to-End AI-Driven Ransomware Operation|The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident|Law enforcememt operation disrupted Malicious Residential Proxy Networks NetNut|Government and Healthcare Are the Weakest Links in Global Email Security|Europe Confirms Record €4.1B Penalty Against Google for Android Practices|U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog|430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link|Adobe fixed multiple maximum-severity flaws in ColdFusion and Campaign Classic|Alleged Scattered Spider Hacker Extradited to U.S. to Face Cybercrime Charges|Oracle E-Business Suite Flaw Under Active Attack, 950 Systems Exposed|Azure CLI Targeted in LSHIY Password Spray Campaign Across 64 Orgs|

Advertisement

Ad Placeholder

Full Width × 90

Security Affairs newsletter Round 407 by Pierluigi Paganini

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box. If you want to also receive for free the newsletter with the international press subscribe here. Twitter will allow using the SMS-based two-factor authentication (2FA) only to its Blue subscribers GoDaddy […]

February 19, 2023

newsletter

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box.

If you want to also receive for free the newsletter with the international press subscribe here.

Twitter will allow using the SMS-based two-factor authentication (2FA) only to its Blue subscribers

GoDaddy discloses a new data breach

Fortinet fixes critical vulnerabilities in FortiNAC and FortiWeb

German airport websites hit by DDos attacks once again

Cisco fixed critical RCE bug in ClamAV Open-Source Antivirus engine

CISA adds Cacti, Office, Windows and iOS bugs to its Known Exploited Vulnerabilities Catalog

Mirai V3G4 botnet exploits 13 flaws to target IoT devices

Over 500 ESXiArgs Ransomware infections in one day, but they dropped the day after

New MortalKombat ransomware employed in financially motivated campaign

Hyundai and Kia to patch a flaw that allows the theft of the cars with a USB cable
City of Oakland issued a local state of emergency after recent ransomware attack

Citrix released security updates for multiple High-Severity flaws in its products

Adobe addressed critical bugs in Illustrator, After Effects Software

Beep, a new highly evasive malware appeared in the threat landscape

Community Health Systems data breach caused by GoAnywhere MFT hack

AdSense fraud campaign relies on 10,890 sites that were infected since September 2022

Microsoft Patch Tuesday for February 2023 fixed actively exploited zero-days

Experts discover over 451 clipper malware-laced packages in the PyPI repository

The Tor network hit by wave of DDoS attacks for at least 7 months

Cloudflare blocked record-breaking 71 million request-per-second DDoS attack
Apple fixes the first zero-day in iPhones and Macs this year

Enigma info-stealing malware targets the cryptocurrency industry

Pro-Russia hacker group Killnet targets NATO websites with DDoS attacks

Hacktivists hacked Iranian State TV during President’s speech on Revolution Day

The Israel Institute of Technology Technion suffered a ransomware attack

Australian Defense Department will replace surveillance cameras from Chinese firms Hikvision and Dahua

Russian Government evaluates the immunity to hackers acting in the interests of Russia

Clop ransomware claims the hack of 130 orgs using GoAnywhere MFT flaw

CISA adds Fortra MFT, TerraMaster NAS, Intel driver Flaws, to its Known Exploited Vulnerabilities Catalog

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

Tags

Cybercrime data breach Hacking hacking news information security news IT Information Security malware Newsletter Pierluigi Paganini Security Affairs Security News

More Stories>

JADEPUFFER: First End-to-End AI-Driven Ransomware Operation

Artificial Intelligence

JADEPUFFER: First End-to-End AI-Driven Ransomware Operation

The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident

Artificial Intelligence

The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident

Law enforcememt operation disrupted Malicious Residential Proxy Networks NetNut

Law enforcememt operation disrupted Malicious Residential Proxy Networks NetNut

Security>

Hacking>

U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog

Malware>