Breaking News

Security Affairs newsletter Round 209 – News of the week

A new round of the weekly SecurityAffairs newsletter arrived!

The best news of the week with Security Affairs.

Kindle Edition

Paper Copy

Once again thank you!

DNS hijacking campaigns target Gmail, Netflix, and PayPal users
Rockwell Automation fixes multiple DoS flaws in Stratix Switch introduced by Cisco Software
AeroGrow suffered a payment card data breach
Recent Roaming Mantis campaign hit hundreds of users worldwide
Unofficial patches released for Java flaws disclosed by Google Project Zero
Victims of Planetary Ransomware can decrypt their files for free
Adobe Patch Tuesday updates for April 2019 address 43 flaws in its products
Experts spotted the iOS version of the Exodus surveillance app
Gulf countries came under hackers spotlight in 2018, with more than 130 000 payment cards compromised
LimeRAT spreads in the wild
Yahoo proposes $117.5 million for the settlement of data breach
Experts spotted a new Mirai variant that targets new processors
Genesis Store black marketplace offers more than 60k+ stolen bot profiles
Microsoft April 2019 Patch Tuesday fixes Windows 0days under attack
Minnesota Department of Human Services suffered a security breach
Sophisticated TajMahal APT Framework remained under the radar for 5 years
Yoroi Welcomes Yomi: The Malware Hunter
[SI-LAB] EMOTET spread in Chile impacted hundreds of users and targeted financial and banking services
FBI/DHS MAR report details HOPLIGHT Trojan used by Hidden Cobra APT
SAP April 2019 Security Patch Day addresses High severity flaws in Crystal Reports, NetWeaver
WikiLeaks Founder Julian Assange arrested and charged in US with computer hacking conspiracy
WPA3 attacks allow hackers to hack Wi-Fi password
APT28 and Upcoming Elections: evidence of possible interference
Emsisoft released a free decryptor for CryptoPokemon ransomware
Siemens addressed several DoS flaws in many products
VPN apps insecurely store session cookies in memory and log files
VSDC video editing software website hacked again
Zero-day in popular Yuzo Related Posts WordPress Plugin exploited in the wild
Malware campaign uses multiple propagation methods, including EternalBlue
The hacker behind Matrix.org hack offers advice to improve security
These hackers have breached FBI-affiliated websites and leaked data online
[adrotate banner=”9″] [adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

Pierluigi Paganini

Pierluigi Paganini is member of the ENISA (European Union Agency for Network and Information Security) Threat Landscape Stakeholder Group and Cyber G7 Group, he is also a Security Evangelist, Security Analyst and Freelance Writer. Editor-in-Chief at "Cyber Defense Magazine", Pierluigi is a cyber security expert with over 20 years experience in the field, he is Certified Ethical Hacker at EC Council in London. The passion for writing and a strong belief that security is founded on sharing and awareness led Pierluigi to find the security blog "Security Affairs" recently named a Top National Security Resource for US. Pierluigi is a member of the "The Hacker News" team and he is a writer for some major publications in the field such as Cyber War Zone, ICTTF, Infosec Island, Infosec Institute, The Hacker News Magazine and for many other Security magazines. Author of the Books "The Deep Dark Web" and “Digital Virtual Currency and Bitcoin”.

Recent Posts

Meta stopped covert operations from Iran, China, and Romania spreading propaganda

Meta stopped three covert operations from Iran, China, and Romania using fake accounts to spread…

9 hours ago

US Treasury sanctioned the firm Funnull Technology as major cyber scam facilitator

The U.S. sanctioned Funnull Technology and Liu Lizhi for aiding romance scams that caused major…

18 hours ago

ConnectWise suffered a cyberattack carried out by a sophisticated nation state actor<gwmw style="display:none;"></gwmw><gwmw style="display:none;"></gwmw>

ConnectWise detected suspicious activity linked to a nation-state actor, impacting a small number of its…

21 hours ago

Victoria’s Secret ‘s website offline following a cyberattack

Victoria’s Secret took its website offline after a cyberattack, with experts warning of rising threats…

2 days ago

China-linked APT41 used Google Calendar as C2 to control its TOUGHPROGRESS malware

Google says China-linked group APT41 controlled malware via Google Calendar to target governments through a…

2 days ago

New AyySSHush botnet compromised over 9,000 ASUS routers, adding a persistent SSH backdoor.

GreyNoise researchers warn of a new AyySSHush botnet compromised over 9,000 ASUS routers, adding a…

2 days ago