Pierluigi Paganini October 01, 2023

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box.

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Cybercrime

Smishing Triad Impersonates Emirates Post To Target UAE Citizens  

Decade of newborn child registry data stolen in MOVEit mass-hack  

Kuwait isolates some government systems following attack on its Finance Ministry  

Cl0p’s MOVEit attack tally surpasses 2,000 victim organizations  

Child abuse site taken down, organized child exploitation crime suspected – exclusive

Two or More Ransomware Variants Impacting the Same Victims and Data Destruction Trends      

Malware

Stealth Falcon preying over Middle Eastern skies with Deadglyph

GUARDING AGAINST THE UNSEEN: INVESTIGATING A STEALTHY REMCOS MALWARE ATTACK ON COLOMBIAN FIRMS  

Hong Kong crypto business Mixin says hackers stole $200 million in assets

Xenomorph Malware Strikes Again: Over 30+ US Banks Now Targeted    

Hacking

CVE-2023-34040 Spring Kafka Deserialization Remote Code Execution

Source Code at Risk: Critical Code Vulnerability in CI/CD Platform TeamCity    

Rezilion Researchers Uncover New Details on Severity of Google Chrome Zero-Day Vulnerability (CVE-2023-4863)  

Russian zero-day seller offers $20M for hacking Android and iPhones   

Using silent SMS to localize LTE users 

Millions of Exim mail servers exposed to zero-day RCE attacks  

Intelligence and Information Warfare

Some new snippets from the Snowden documents  

Rare Backdoors Suspected to be Tied to Gelsemium APT Found in Targeted Attack in Southeast Asian Government  

New STARK#VORTEX Attack Campaign: Threat Actors Use Drone Manual Lures to Deliver MerlinAgent Payloads 

WELCOME TO CYBER REALISM: PARSING THE 2023 DEPARTMENT OF DEFENSE CYBER STRATEGY

How Russian government-controlled hacking groups shift their tactics, objectives and capabilities — report  

People’s Republic of China-Linked Cyber Actors Hide in Router Firmware

Chinese hackers stole emails from US State Dept in Microsoft breach, Senate staffer says

National Security Agency is starting an artificial intelligence security center      

Cybersecurity

The Cybersecurity Crisis of Artificial Intelligence: Unrestrained Adoption and Natural Language-Based Attacks  

Reports about Cyber Actors Hiding in Router Firmware  

We believe PDD is a Dying Fraudulent Company and its Shopping App TEMU is Cleverly Hidden Spyware that Poses an Urgent Security Threat to U.S. National Interests

Update Chrome Now: Google Releases Patch for Actively Exploited Zero-Day Vulnerability

Cisco Warns of IOS Software Zero-Day Exploitation Attempts  

Introducing Advanced Vulnerability Insights for GKE  

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)