Breaking News

Security Affairs newsletter Round 375 by Pierluigi Paganini

A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs for free in your email box.

If you want to also receive for free the newsletter with the international press subscribe here.

FBI seized $500,000 worth of bitcoin obtained from Maui ransomware attacks
SonicWall fixed critical SQLi in Analytics and GMS products
Account lockout policy in Windows 11 is enabled by default to block brute force attacks
Hackers breached Ukrainian radio station to spread fake news about Zelensky ‘s health
Candiru surveillance spyware DevilsTongue exploited Chrome Zero-Day to target journalists
TA4563 group leverages EvilNum malware to target European financial and investment entities
Threat actors target software firm in Ukraine using GoMet backdoor
Lightning Framework, a previously undetected malware that targets Linux systems
Atlassian patched a critical Confluence vulnerability
Apple fixes multiple flaws in iOS, iPadOS, macOS, tvOS, and watchOS devices
8220 Gang Cloud Botnet infected 30,000 host globally
New Luna ransomware targets Windows, Linux and ESXi systems
Million of vehicles can be attacked via MiCODUS MV720 GPS Trackers
EU warns of risks of spillover effects associated with the ongoing war in Ukraine
Belgium claims China-linked APT groups hit its ministries
CloudMensis spyware went undetected for many years
Russia-linked APT29 relies on Google Drive, Dropbox to evade detection
Crooks create rogue cryptocurrency-themed apps to steal crypto assets from users
Several apps on the Play Store used to spread Joker, Facestealer and Coper malware
MLNK Builder 4.2 released in Dark Web – malicious shortcut-based attacks are on the rise
Tor Browser 11.5 is optimized to automatically bypass censorship
A massive cyberattack hit Albania
Watch out for the CVE-2022-30136 Windows NFS Remote Code Execution flaw
Graff paid a $7.5M ransom and sued its insurance firm for refusing to cover this payment
Crooks stole $375k from Premint NFT, it is one of the biggest NFT hacks ever
Google is going to remove App Permissions List from the Play Store
Security Affairs newsletter Round 374 by Pierluigi Paganini
APT groups target journalists and media organizations since 2021

If you want to also receive for free the newsletter with the international press subscribe here.

Follow me on Twitter: @securityaffairs and Facebook

[adrotate banner=”9″][adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

Pierluigi Paganini

Pierluigi Paganini is member of the ENISA (European Union Agency for Network and Information Security) Threat Landscape Stakeholder Group and Cyber G7 Group, he is also a Security Evangelist, Security Analyst and Freelance Writer. Editor-in-Chief at "Cyber Defense Magazine", Pierluigi is a cyber security expert with over 20 years experience in the field, he is Certified Ethical Hacker at EC Council in London. The passion for writing and a strong belief that security is founded on sharing and awareness led Pierluigi to find the security blog "Security Affairs" recently named a Top National Security Resource for US. Pierluigi is a member of the "The Hacker News" team and he is a writer for some major publications in the field such as Cyber War Zone, ICTTF, Infosec Island, Infosec Institute, The Hacker News Magazine and for many other Security magazines. Author of the Books "The Deep Dark Web" and “Digital Virtual Currency and Bitcoin”.

Recent Posts

U.S. CISA adds RoundCube Webmail and Erlang Erlang/OTP SSH server flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds RoundCube Webmail and Erlang Erlang/OTP SSH server flaws…

12 minutes ago

Mirai botnets exploit Wazuh RCE, Akamai warned

Mirai botnets are exploiting CVE-2025-24016, a critical remote code execution flaw in Wazuh servers, Akamai…

3 hours ago

China-linked threat actor targeted +70 orgs worldwide, SentinelOne warns

China-linked threat actor targeted over 70 global organizations, including governments and media, in cyber-espionage attacks…

7 hours ago

DOJ moves to seize $7.74M in crypto linked to North Korean IT worker scam

US seeks to seize $7.74M in crypto linked to North Korean fake IT worker schemes,…

19 hours ago

OpenAI bans ChatGPT accounts linked to Russian, Chinese cyber ops

OpenAI banned ChatGPT accounts tied to Russian and Chinese hackers using the tool for malware,…

1 day ago

New Mirai botnet targets TBK DVRs by exploiting CVE-2024-3721

A new variant of the Mirai botnet exploits CVE-2024-3721 to target DVR systems, using a…

1 day ago