SECURITY AFFAIRS NEWSLETTER ROUND 462 BY PIERLUIGI PAGANINI – INTERNATIONAL EDITION

SECURITY AFFAIRS NEWSLETTER ROUND 462 BY PIERLUIGI PAGANINI – INTERNATIONAL EDITION

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box.

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Threat actors breached two crucial systems of the US CISA

CISA adds JetBrains TeamCity bug to its Known Exploited Vulnerabilities catalog

Critical Fortinet FortiOS bug CVE-2024-21762 potentially impacts 150,000 internet-facing devices

QNAP fixed three flaws in its NAS devices, including an authentication bypass

Threat actors breached two crucial systems of the US CISA

CISA adds JetBrains TeamCity bug to its Known Exploited Vulnerabilities catalog

Critical Fortinet FortiOS bug CVE-2024-21762 potentially impacts 150,000 internet-facing devices

QNAP fixed three flaws in its NAS devices, including an authentication bypass

Snake, a new Info Stealer spreads through Facebook messages

National intelligence agency of Moldova warns of Russia attacks ahead of the presidential election

CISA adds Apple iOS and iPadOS memory corruption bugs to its Known Exploited Vulnerabilities Catalog

Linux Malware targets misconfigured misconfigured Apache Hadoop, Confluence, Docker, and Redis servers

CISA ADDS ANDROID PIXEL AND SUNHILLO SURELINE BUGS TO ITS KNOWN EXPLOITED VULNERABILITIES CATALOG

Watch out, GhostSec and Stourmous groups jointly conducting ransomware attacks

LockBit 3.0’s Bungled Comeback Highlights the Undying Risk of Torrent-Based (P2P) Data Leakage

Apple emergency security updates fix two new iOS zero-days

VMware urgent updates addressed Critical ESXi Sandbox Escape bugs

US Gov sanctioned Intellexa Consortium individuals and entities behind Predator spyware attacks

CISA ADDS MICROSOFT WINDOWS KERNEL BUG USED BY LAZARUS APT TO ITS KNOWN EXPLOITED VULNERABILITIES CATALOG

Experts disclosed two severe flaws in JetBrains TeamCity On-Premises software

Ukraine's GUR hacked the Russian Ministry of Defense

Some American Express customers' data exposed in a third-party data breach

META hit with privacy complaints by EU consumer groups

New GTPDOOR backdoor is designed to target telecom carrier networks

Threat actors hacked Taiwan-based Chunghwa Telecom

New Linux variant of BIFROSE RAT uses deceptive domain strategies

Eken camera doorbells allow ill-intentioned individuals to spy on you

U.S. Judge ordered NSO Group to hand over the Pegasus spyware code to WhatsApp

Cybercrime

BlackCat Ransomware Affiliate TTPs?

American Express credit cards EXPOSED in third-party vendor data breach – account numbers and names among details accessed in hack??

LockBit 3.0’S Bungled Comeback Highlights The Undying Risk Of Torrent-Based Data Leakage??

Hackers Behind the Change Healthcare Ransomware Attack Just Received a $22 Million Payment

On-Device Fraud on the rise: exposing a recent Copybara fraud campaign?

2023 FBI Internet Crime Report

Hacker attack on Xplain: National Cyber Security Centre publishes data analysis report??

Stormous ransomware gang takes credit for attack on Belgian brewer Duvel

Malware

US: Spyware ruling a welcome step towards accountability for those targeted with NSO spyware??

The Art of Domain Deception: Bifrost’s New Tactic to Deceive Users??

GTPDOOR – A novel backdoor tailored for covert access over the roaming exchange??

GhostSec’s joint ransomware operation and evolution of their arsenal

Spinning YARN – A New Linux Malware Campaign Targets Docker, Apache Hadoop, Redis and Confluence

Unboxing Snake – Python Infostealer Lurking Through Messaging Services??

Hunting for Fortinet CVE-2024-21762: Vulnerability Research for Detection Engineering??

Hacking??

These Video Doorbells Have Terrible Security. Amazon Sells Them Anyway??

CryptoChameleon: New Phishing Tactics Exhibited in FCC-Targeted Attack

How recent cyberattacks revealed America’s infrastructure weaknesses

Taiwan Military Says Hackers Sold Telecom Giant’s Data on Web? ????

CVE-2024-27198 and CVE-2024-27199: JetBrains TeamCity Multiple Authentication Bypass Vulnerabilities (FIXED)??

CryptoChameleon: New Phishing Tactics Exhibited in FCC-Targeted Attack?

CISA forced to take two systems offline last month after Ivanti compromise??

Intelligence and Information Warfare?

How the Chinese civilian and military intelligence agencies confronting CIA and the Pentagon?

German defense chat overheard by Russian eavesdroppers on Cisco’s WebEx

Software, ciphers, secret documents — cyber specialists of the State Security Service hacked the Russian Ministry of Defense??

Moldova warns of Russian ‘hybrid attacks’ ahead of presidential election??

Update on Microsoft Actions Following Attack by Nation State Actor Midnight Blizzard??

Cybersecurity ?????????

Court orders maker of Pegasus spyware to hand over code to WhatsApp??

There is no clear cybersecurity policy??

Companies Are Already Not Complying With The New SEC Cybersecurity Incident Disclosure Rules??

Treasury Sanctions Members of the Intellexa Commercial Spyware Consortium

AI tools put companies at risk of data exfiltration

Millions Of Google, WhatsApp, Facebook 2FA Security Codes Leak Online

Spyware makers express concern after US sanctions spyware veteran?? ?????

Follow me on Twitter:?@securityaffairs?and?Facebook?and?Mastodon

Pierluigi?Paganini

(SecurityAffairs?–?hacking,?newsletter)

Jean-Francois Faye

Président de NYSTEK Editions SAS & Gérant de NYSTEK Consulting SARL En recherche d’une mission…

1 年

Thank you

回复
Brenda Cobar Wilson

Functional Reporting Lead & Business Analyst Lead - Finance Transformation

1 年
回复
SIKIRU BIOKU

Welfare Officer at Nigeria Correctional Service

1 年

I will like to contribute to the success of your team

回复

要查看或添加评论,请登录

Pierluigi Paganini的更多文章

社区洞察

其他会员也浏览了