Breaking News

Security Affairs newsletter Round 317

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box.

If you want to also receive for free the international press subscribe here.

Facefish Backdoor delivers rootkits to Linux x64 systems
Interpol has intercepted $83 million from financial cyber crimes
These 2 attacks allow to alter certified PDF Documents
COVID-19 – Phishing attacks target employees that come back to the office
Denmark intel helped US NSA to spy on European politicians
Experts devised a new attack to bypass Microsoft PatchGuard
Swedish Health Agency discloses hacking attempts
American food processing giant JBS Foods halts production after cyberattack
JBS attack has likely a Russian origin
New Epsilon Red Ransomware appears in the threat landscape
Prometheus and Grief – two new emerging ransomware gangs targeting enterprises. Mexican Government data is published for sale.
Russian hacker Pavel Sitnikov arrested for distributing malware via Telegram
Critical 0day in the Fancy Product Designer WordPress plugin actively exploited
Database, source code allegedly related to bulletproof hosting, once Parlers service provider, up for sale on hacker forum
US seizes 2 domains used by APT29 in a recent phishing campaign
Cisco fixes High-severity issues in Webex, SD-WAN, ASR 5000 software
China-linked attackers breached Metropolitan Transportation Authority (MTA) using Pulse Secure zero-day
Hackers scan for VMware vCenter servers vulnerable to CVE-2021-21985 RCE
Necro Python bot now enhanced with new VMWare, server exploits
BlackCocaine Ransomware, a new malware in the threat landscape
DoJ: Investigations into ransomware attacks must have similar priority as terrorism
US arrested Latvian woman who developed part of Trickbot malware
US CISA published a guide to better use the MITRE ATT&CK framework

If you want to also receive for free the international press subscribe here.

Follow me on Twitter: @securityaffairs and Facebook

[adrotate banner=”9″][adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

Pierluigi Paganini

Pierluigi Paganini is member of the ENISA (European Union Agency for Network and Information Security) Threat Landscape Stakeholder Group and Cyber G7 Group, he is also a Security Evangelist, Security Analyst and Freelance Writer. Editor-in-Chief at "Cyber Defense Magazine", Pierluigi is a cyber security expert with over 20 years experience in the field, he is Certified Ethical Hacker at EC Council in London. The passion for writing and a strong belief that security is founded on sharing and awareness led Pierluigi to find the security blog "Security Affairs" recently named a Top National Security Resource for US. Pierluigi is a member of the "The Hacker News" team and he is a writer for some major publications in the field such as Cyber War Zone, ICTTF, Infosec Island, Infosec Institute, The Hacker News Magazine and for many other Security magazines. Author of the Books "The Deep Dark Web" and “Digital Virtual Currency and Bitcoin”.

Recent Posts

Over 80,000 servers hit as Roundcube RCE bug gets rapidly exploited

A critical remote code execution (RCE) vulnerability in Roundcube was exploited days after patch, impacting…

9 hours ago

A flaw could allow recovery of the phone number associated with any Google account

A vulnerability could allow recovery of the phone number associated with a Google account by…

14 hours ago

Texas Department of Transportation (TxDOT) data breach exposes 300,000 crash reports

Hackers breached Texas DOT (TxDOT), stealing 300,000 crash reports with personal data from its Crash…

1 day ago

SAP June 2025 Security Patch Day fixed critical NetWeaver bug

SAP fixed a critical NetWeaver flaw that let attackers bypass authorization and escalate privileges. Patch…

1 day ago

U.S. CISA adds RoundCube Webmail and Erlang Erlang/OTP SSH server flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds RoundCube Webmail and Erlang Erlang/OTP SSH server flaws…

1 day ago

Mirai botnets exploit Wazuh RCE, Akamai warned

Mirai botnets are exploiting CVE-2025-24016, a critical remote code execution flaw in Wazuh servers, Akamai…

1 day ago