Source: securityaffairs.com – Author: Pierluigi Paganini A flaw in the Service Location Protocol (SLP), tracked as CVE-2023-29552, can allow to carry out powerful DDoS attacks. A...
Author:
VMware addressed two zero-day flaws demonstrated at Pwn2Own Vancouver 2023 – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini VMware addressed zero-day flaws that can be chained to achieve arbitrary code execution on Workstation and Fusion software hypervisors. VMware...
A new Mirai botnet variant targets TP-Link Archer A21 – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Mirai botnet started exploiting the CVE-2023-1389 vulnerability (aka ZDI-CAN-19557/ZDI-23-451) in TP-Link Archer A21 in recent attacks. Last week, the Zero...
Google researchers found multiple security issues in Intel TDX – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Google Cloud Security and Project Zero researchers, working with Intel experts, discovered multiple vulnerabilities in the Intel Trust Domain Extensions...
Google Authenticator App now supports Google Account synchronization – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. Google announced that its Authenticator app for Android and iOS now supports Google Account synchronization. Google announced that its Google...
Peugeot leaks access to user information in South America – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. Peugeot, a French brand of automobiles owned by Stellantis, exposed its users in Peru, a South American country with a...
North Korea-linked BlueNoroff APT is behind the new RustBucket Mac Malware – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. North Korea-linked APT group BlueNoroff (aka Lazarus) was spotted targeting Mac users with new RustBucket malware. Researchers from security firm...
AuKill tool uses BYOVD attack to disable EDR software – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. Ransomware operators use the AuKill tool to disable EDR software through Bring Your Own Vulnerable Driver (BYOVD) attack. Sophos researchers...
Experts released PoC Exploit code for actively exploited PaperCut flaw – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. Threat actors are exploiting PaperCut MF/NG print management software flaws in attacks in the wild, while researchers released PoC exploit...
EvilExtractor, a new All-in-One info stealer appeared on the Dark Web – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. EvilExtractor is a new “all-in-one” info stealer for Windows that is being advertised for sale on dark web cybercrime forums....
Russian cybercrime group likely behind ongoing exploitation of PaperCut flaws – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. Print management software provider PaperCut confirmed ongoing active exploitation of CVE-2023-27350 vulnerability. On April 19th, Print management software provider PaperCut confirmed...
Hackers can hack organizations using data found on their discarded enterprise network equipment – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. ESET researchers explained that enterprise network equipment that was discarded, but not destroyed, could reveal corporate secrets. ESET researchers purchased...
Health insurer Point32Health suffered a ransomware attack – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. Non-profit health insurer Point32Health suffered a ransomware attack and has taken systems offline in response to the incident. Non-profit health...
Experts spotted first-ever crypto mining campaign leveraging Kubernetes RBAC – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. Experts warn of a large-scale cryptocurrency mining campaign exploiting Kubernetes (K8s) Role-Based Access Control (RBAC). Cloud security firm Aqua discovered...
Security Affairs newsletter Round 416 by Pierluigi Paganini – International edition – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. Privacy Overview This website uses cookies to improve your experience while you navigate through the website. Out of these cookies,...
Abandoned Eval PHP WordPress plugin abused to backdoor websites – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. Threat actors were observed installing the abandoned Eval PHP plugin on compromised WordPress sites for backdoor deployment. Researchers from Sucuri...
CISA adds MinIO, PaperCut, and Chrome bugs to its Known Exploited Vulnerabilities catalog – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. US Cybersecurity and Infrastructure Security Agency (CISA) added MinIO, PaperCut, and Chrome vulnerabilities to its Known Exploited Vulnerabilities catalog. U.S....
At least 2 critical infrastructure orgs breached by North Korea-linked hackers behind 3CX attack – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. North Korea-linked APT group behind the 3CX supply chain attack also broke into two critical infrastructure organizations in the energy...
American Bar Association (ABA) suffered a data breach,1.4 million members impacted – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. The American Bar Association (ABA) disclosed a data breach, threat actors gained access to older credentials for 1,466,000 members. The...
Pro-Russia hackers launched a massive attack against the EUROCONTROL agency – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. Pro-Russia hackers KillNet launched a massive DDoS attack against Europe’s air-traffic agency EUROCONTROL. Europe’s air-traffic control agency EUROCONTROL announced that...
Cisco fixed critical flaws in the Industrial Network Director and Modeling Labs solutions – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. Cisco released security updates to address critical security flaws in its Industrial Network Director and Modeling Labs solutions. Cisco released...
Intro to phishing: simulating attacks to build resiliency – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. Phishing attacks are a major threat to organizations, they remain a perennial choice of cybercriminals when it comes to hacking...
Multinational ICICI Bank leaks passports and credit card numbers – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. ICICI Bank leaked millions of records with sensitive data, including financial information and personal documents of the bank’s clients. ICICI...
VMware fixed a critical flaw in vRealize that allows executing arbitrary code as root – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. VMware fixed two severe flaws, tracked as CVE-2023-20864 and CVE-2023-20865, impacting the VMware Aria Operations for Logs product. The virtualization...
Lazarus APT group employed Linux Malware in recent attacks and was linked to 3CX supply chain attack – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. North Korea-linked APT group Lazarus employed new Linux malware in attacks that are part of Operation Dream Job. North Korea-linked APT...
Experts disclosed two critical flaws in Alibaba cloud database services – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. Researchers disclosed two critical flaws in Alibaba Cloud’s ApsaraDB RDS for PostgreSQL and AnalyticDB for PostgreSQL. Researchers from cloud security...
Google TAG warns of Russia-linked APT groups targeting Ukraine – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. The researchers from Google TAG are warning of Russia-linked threat actors targeting Ukraine with phishing campaigns. Russia-linked threat actors launched...
Trigona Ransomware targets Microsoft SQL servers – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. Threat actors are hacking poorly secured and Interned-exposed Microsoft SQL servers to deploy the Trigona ransomware. Threat actors are hacking...
Russian national sentenced to time served for committing money laundering for the Ryuk ransomware operation – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. Russian national Denis Mihaqlovic Dubnikov has been sentenced to time served for committing money laundering for the Ryuk ransomware operation. Russian...
Google fixed the second actively exploited Chrome zero-day of 2023 – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini. Google rolled out emergency security patches to address another actively exploited high-severity zero-day flaw in the Chrome browser. Google rolled...