Breaking News

Security Affairs newsletter Round 339

A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box.

If you want to also receive for free the newsletter with the international press subscribe here.

Casinos of tribal communities are losing millions in Ransomware attacks
Threat actors stole $55 million worth of cryptocurrency from bZx DeFi platform
Philips Tasy EMR healthcare infomatics solution vulnerable to SQL injection
White hat hackers earn over $1 Million at Pwn2Own Austin 2021
A drone was modified to disrupt U.S. Power Grid, says intelligence bulletin
US defense contractor Electronic Warfare Associates discloses data breach
Ukraine intelligence doxed 5 FSB Officers that are members of Gamaredon APT Group
Threat actor exploits MS ProxyShell flaws to deploy Babuk ransomware
npm libraries coa and rc. have been hijacked to deliver password-stealing malware
US Gov offers a reward of up to $10M for info on DarkSide leading members
CISA recommends vendors to fix BrakTooth issues after the release of PoC tool
Cisco warns of hard-coded credentials and default SSH key issues in some products
Expert found a critical remote code execution bug in Linux Kernel
Hacker allegedly involved in 2020 Twitter hack charged with theft of $784K in crypto
CISA shares a catalog of 306 actively exploited vulnerabilities
CERT-FR warns of Lockean ransomware attacks against French companies
The U.K. Labour Party discloses a data breach
Cyber Defense Magazine – November 2021 has arrived. Enjoy it!
NSO Group, Positive Technologies and other firms sanctioned by the US government
Cybercrime underground flooded with offers for initial access to shipping and logistics orgs
BlackMatter ransomware gang is shutting down due to pressure from law enforcement
Google fixes actively exploited Zero-Day Kernel flaw in Android
Facebook is going to shut down Face Recognition system and data it collected
Ransomware gangs target companies involved in time-sensitive financial events, FBI warns
Google triples bounty for new Linux Kernel exploitation techniques
50% of internet-facing GitLab installations are still affected by a RCE flaw
Trojan Source attack method allows hiding flaws in source code
The Toronto Transit Commission (TTC) hit by a ransomware attack
HelloKitty ransomware gang also targets victims with DDoS attacks
Squid Game Cryptocurrency exit scam! Operators made $2.1 Million
How to hack Wincor Cineo ATMs to bypass black-box attack protections and withdraw cash
Pink Botnet infected over 1.6 Million Devices, it is one of the largest botnet ever seen
Balikbayan Foxes group spoofs Philippine gov to spread RATs
Microsoft warns of an increase in password spraying attacks
Iranian Black Shadow hacking group breached Israeli Internet hosting firm
Minecraft Japanese gamers hit by Chaos ransomware using alt lists as lure
Graff multinational jeweller hit by Conti gang. Data of its rich clients are at risk, including Trump and Beckham

Follow me on Twitter: @securityaffairs and Facebook

[adrotate banner=”9″][adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

Pierluigi Paganini

Pierluigi Paganini is member of the ENISA (European Union Agency for Network and Information Security) Threat Landscape Stakeholder Group and Cyber G7 Group, he is also a Security Evangelist, Security Analyst and Freelance Writer. Editor-in-Chief at "Cyber Defense Magazine", Pierluigi is a cyber security expert with over 20 years experience in the field, he is Certified Ethical Hacker at EC Council in London. The passion for writing and a strong belief that security is founded on sharing and awareness led Pierluigi to find the security blog "Security Affairs" recently named a Top National Security Resource for US. Pierluigi is a member of the "The Hacker News" team and he is a writer for some major publications in the field such as Cyber War Zone, ICTTF, Infosec Island, Infosec Institute, The Hacker News Magazine and for many other Security magazines. Author of the Books "The Deep Dark Web" and “Digital Virtual Currency and Bitcoin”.

Recent Posts

A bug in Chrome Password Manager caused user credentials to disappear

Google addressed a Chrome's Password Manager bug that caused user credentials to disappear temporarily for…

3 hours ago

BIND updates fix four high-severity DoS bugs in the DNS software suite

The Internet Systems Consortium (ISC) released BIND security updates that fixed several remotely exploitable DoS…

14 hours ago

Terrorist Activity is Accelerating in Cyberspace – Risk Precursor to Summer Olympics and Elections

Terrorist groups are increasingly using cyberspace and digital communication channels to plan and execute attacks.…

18 hours ago

Progress Software fixed critical RCE CVE-2024-6327 in the Telerik Report Server

Progress Software addressed a critical remote code execution vulnerability, tracked as CVE-2024-6327, in the Telerik Report…

1 day ago

Critical bug in Docker Engine allowed attackers to bypass authorization plugins

A critical flaw in some versions of Docker Engine can be exploited to bypass authorization…

1 day ago

Hackers exploit Microsoft Defender SmartScreen bug CVE-2024-21412 to deliver ACR, Lumma, and Meduza Stealers

The CVE-2024-21412 flaw in the Microsoft Defender SmartScreen has been exploited to deliver information stealers…

2 days ago

This website uses cookies.