Pierluigi Paganini
September 10, 2023
Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.
Cybercrime
“Smishing Triad” Targeted USPS And US Citizens For Data Theft
Crypto gambling site Stake sees $41M withdrawn in confirmed hack
Cisco warns of VPN zero-day exploited by ransomware gangs
Massive DDoS attack on U.S. financial company thwarted by cyber firm
Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach
Russian infosec boss gets nine years for $100M insider-trading caper using stolen data
Malware
Mac users targeted in new malvertising campaign delivering Atomic Stealer
NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in the Wild
CISA: Malware Analysis Report – Attack on Aeronautical Sector organization
Hacking
VMWARE Aria Operations for Networks
New Attack Vector In The Cloud: Attackers caught exploiting Object Storage Services
German financial agency site disrupted by DDoS attack since Friday
7 Million Users Possibly Impacted by Freecycle Data Breach
From NTAuthCertificates to “Silver” Certificate
Zero-Day Alert: Latest Android Patch Update Includes Fix for Newly Actively Exploited Flaw
Apache Superset Part II: RCE, Credential Harvesting and More
Exposing RocketMQ CVE-2023-33246 Payloads
Intelligence and Information Warfare
Raising Online Defenses Through Transparency and Collaboration
Results of Major Technical Investigations for Storm-0558 Key Acquisition
CNMF and Partners Illuminate Multiple Nation-State Exploitation Efforts
Active North Korean campaign targeting security researchers
Probe reveals DHS relies on fake social media accounts to investigate targets
Potential New EvilNum Campaign
The International Criminal Court Will Now Prosecute Cyberwar Crimes
National Grid to set ‘honeypots’ to trap hackers – amid rising risk from digitisation
Who’s Your Next Cyber Chief? Good Question
ASUS routers vulnerable to critical remote code execution flaws
MITRE & CISA Release Open-Source MITRE Caldera™ Extension for Operational Technology
How Quantum Computing Will Impact Cybersecurity
Apple discloses 2 new zero-days exploited to attack iPhones, Macs
A Brief History of the Internet’s Biggest BGP Incidents
Norway court rules against Facebook owner Meta in privacy case
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, newsletter)
