Breaking News

Security Affairs newsletter Round 245

A new round of the weekly newsletter arrived! The best news of the week with Security Affairs

From iPhone to NT AUTHORITYSYSTEM – exploit ‘Printconfig dll with a real-world example
Iran announced to have foiled a second cyber-attack in a week
Largest hospital system in New Jersey was hit by ransomware attack
A thief stole hard drives containing Facebook payroll data from a car
Experts found binary planting and arbitrary file overwrite flaws in NPM
Ryuk Ransomware is suspected to be involved in the New Orleans cyberattack
Schneider Electric fixes DoS flaws in Modicon, EcoStruxure products
A study reveals the list of worst passwords of 2019
A WhatsApp bug could have allowed crashing of all group members
Dacls RAT, the first Lazarus malware that targets Linux devices
Online Retailer LightInTheBox exposes unsecured DB containing 1.3TB of web server logs
TP-Link Archer routers allow remote takeover without passwords
Emotet distributed with emails posing as German authorities, BSI warns
Flaws in Acer and ASUS pre-installed software could lead to arbitrary code execution
Gangnam Industrial Style APT campaign targets industrial firms worldwide
Lab test provider LifeLabs disclose a data breach that exposed personal info of 15M customers
Trend Micro observed notable malware activity associated with the Momentum Botnet
Drupal addressed several issues, including a critical file processing bug
FBI warns travelers against using untrusted and free WiFi networks
Maze Ransomware operators threaten victims to publish their data online
Member of the Dark Overlord hacker Group extradited to the US
Microsoft issues an out-of-band update to address SharePoint information disclosure flaw
More than 267 millions of Facebook user phone numbers exposed online
Apple opens its bug bounty program to all white hat hackers
Negative opinion of Italy security committee Copasir on Huawei, ZTE 5G solutions
Payment card breach potentially impacts all locations of Wawa convenience store
Unveiling JsOutProx: A New Enterprise Grade Implant
Greece to extradite Alexander Vinnik to France to face a charge of money laundering
Watch out, hackers are targeting CVE-2018-0296 Cisco fixed in 2018
[adrotate banner=”9″] [adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

Pierluigi Paganini

Pierluigi Paganini is member of the ENISA (European Union Agency for Network and Information Security) Threat Landscape Stakeholder Group and Cyber G7 Group, he is also a Security Evangelist, Security Analyst and Freelance Writer. Editor-in-Chief at "Cyber Defense Magazine", Pierluigi is a cyber security expert with over 20 years experience in the field, he is Certified Ethical Hacker at EC Council in London. The passion for writing and a strong belief that security is founded on sharing and awareness led Pierluigi to find the security blog "Security Affairs" recently named a Top National Security Resource for US. Pierluigi is a member of the "The Hacker News" team and he is a writer for some major publications in the field such as Cyber War Zone, ICTTF, Infosec Island, Infosec Institute, The Hacker News Magazine and for many other Security magazines. Author of the Books "The Deep Dark Web" and “Digital Virtual Currency and Bitcoin”.

Recent Posts

U.S. CISA adds RoundCube Webmail and Erlang Erlang/OTP SSH server flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds RoundCube Webmail and Erlang Erlang/OTP SSH server flaws…

3 hours ago

Mirai botnets exploit Wazuh RCE, Akamai warned

Mirai botnets are exploiting CVE-2025-24016, a critical remote code execution flaw in Wazuh servers, Akamai…

6 hours ago

China-linked threat actor targeted +70 orgs worldwide, SentinelOne warns

China-linked threat actor targeted over 70 global organizations, including governments and media, in cyber-espionage attacks…

10 hours ago

DOJ moves to seize $7.74M in crypto linked to North Korean IT worker scam

US seeks to seize $7.74M in crypto linked to North Korean fake IT worker schemes,…

22 hours ago

OpenAI bans ChatGPT accounts linked to Russian, Chinese cyber ops

OpenAI banned ChatGPT accounts tied to Russian and Chinese hackers using the tool for malware,…

1 day ago

New Mirai botnet targets TBK DVRs by exploiting CVE-2024-3721

A new variant of the Mirai botnet exploits CVE-2024-3721 to target DVR systems, using a…

1 day ago