Source: securityaffairs.com – Author: Pierluigi Paganini InfectedSlurs botnet targets QNAP VioStor NVR vulnerability Pierluigi Paganini December 17, 2023 The Mirai-based botnet InfectedSlurs was spotted targeting QNAP...
Author:
Security Affairs newsletter Round 450 by Pierluigi Paganini – INTERNATIONAL EDITION – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini MongoDB investigates a cyberattack, customer data exposed | InfectedSlurs botnet targets QNAP VioStor NVR vulnerability | Security Affairs newsletter Round...
Winter Vivern APT exploited zero-day in Roundcube webmail software in recent attacks – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Winter Vivern APT exploited zero-day in Roundcube webmail software in recent attacks Russia-linked threat actor Winter Vivern has been observed exploiting...
A WhatsApp zero-day exploit can cost several million dollars – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini A WhatsApp zero-day exploit can cost several million dollars TechCrunch reported that a working zero-day exploit for the popular WhatsApp...
CISA adds JetBrains TeamCity and Windows flaws to its Known Exploited Vulnerabilities catalog – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini CISA adds JetBrains TeamCity and Windows flaws to its Known Exploited Vulnerabilities catalog The U.S. CISA added JetBrains TeamCity and...
NATO is investigating a new cyber attack claimed by the SiegedSec group – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini NATO is investigating a new cyber attack claimed by the SiegedSec group NATO is investigating claims that a group called...
Global CRM Provider Exposed Millions of Clients’ Files Online – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Global CRM Provider Exposed Millions of Clients’ Files Online Researcher discovered that global B2B CRM provider Really Simple Systems exposed...
Sony sent data breach notifications to about 6,800 individuals – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Sony sent data breach notifications to about 6,800 individuals Sony Interactive Entertainment has notified current and former employees and their family...
Apple fixed the 17th zero-day flaw exploited in attacks – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Apple fixed the 17th zero-day flaw exploited in attacks Apple released emergency security updates to address a new actively exploited...
Atlassian Confluence zero-day CVE-2023-22515 actively exploited in attacks – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Atlassian Confluence zero-day CVE-2023-22515 actively exploited in attacks Atlassian fixed a critical zero-day flaw in its Confluence Data Center and...
A cyberattack disrupted Lyca Mobile services – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini A cyberattack disrupted Lyca Mobile services International mobile virtual network operator Lyca Mobile announced it has been the victim of...
Chipmaker Qualcomm warns of three actively exploited zero-days – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Chipmaker Qualcomm warns of three actively exploited zero-days Chipmaker Qualcomm addressed 17 vulnerabilities in various components and warns of three...
DRM Report Q2 2023 – Ransomware threat landscape – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini DRM Report Q2 2023 – Ransomware threat landscape The DRM Report Q2 2023 report provides a detailed insight into the...
Phishing campaign targeted US executives exploiting a flaw in Indeed job search platform – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Phishing campaign targeted US executives exploiting a flaw in Indeed job search platform Threat actors exploited an open redirection vulnerability...
San Francisco’s transport agency Metropolitan Transportation Commission (MTC) exposes drivers’ plate numbers and addresses – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini San Francisco’s transport agency Metropolitan Transportation Commission (MTC) exposes drivers’ plate numbers and addresses A misconfiguration in the Metropolitan Transportation...
BunnyLoader, a new Malware-as-a-Service advertised in cybercrime forums – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini BunnyLoader, a new Malware-as-a-Service advertised in cybercrime forums Cybersecurity researchers spotted a new malware-as-a-service (MaaS) called BunnyLoader that’s appeared in the threat...
Exclusive: Lighting the Exfiltration Infrastructure of a LockBit Affiliate (and more) – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Exclusive: Lighting the Exfiltration Infrastructure of a LockBit Affiliate (and more) Researchers have identified the exfiltration infrastructure of a LockBit...
Two hacker groups are back in the news, LockBit 3.0 Black and BlackCat/AlphV – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Two hacker groups are back in the news, LockBit 3.0 Black and BlackCat/AlphV Researchers from cybersecurity firm TG Soft are warning Italian...
European Telecommunications Standards Institute (ETSI) suffered a data breach – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini European Telecommunications Standards Institute (ETSI) suffered a data breach The European Telecommunications Standards Institute (ETSI) disclosed a data breach, threat...
WS_FTP flaw CVE-2023-40044 actively exploited in the wild – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini WS_FTP flaw CVE-2023-40044 actively exploited in the wild Experts warn of threat actors actively exploiting CVE-2023-40044 flaw in recently disclosed...
National Logistics Portal (NLP) data leak: seaports in India were left vulnerable to takeover by hackers – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini National Logistics Portal (NLP) data leak: seaports in India were left vulnerable to takeover by hackers The National Logistics Portal...
North Korea-linked Lazarus targeted a Spanish aerospace company – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini North Korea-linked Lazarus targeted a Spanish aerospace company North Korea-linked APT group Lazarus impersonated Meta’s recruiters in an attack against...
Ransomware attack on Johnson Controls may have exposed sensitive DHS data – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Ransomware attack on Johnson Controls may have exposed sensitive DHS data Experts warn that the recent attack on building automation...
BlackCat gang claims they stole data of 2.5 million patients of McLaren Health Care – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini BlackCat gang claims they stole data of 2.5 million patients of McLaren Health Care The ALPHV/BlackCat ransomware gang added McLaren...
Security Affairs newsletter Round 439 by Pierluigi Paganini – International edition – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Privacy Overview This website uses cookies to improve your experience while you navigate through the website. Out of these cookies,...
ALPHV/BlackCat ransomware gang hacked the hotel chain Motel One – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini ALPHV/BlackCat ransomware gang hacked the hotel chain Motel One Pierluigi Paganini September 30, 2023 The ALPHV/BlackCat ransomware gang added the...
FBI warns of dual ransomware attacks – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini FBI warns of dual ransomware attacks Pierluigi Paganini September 30, 2023 The U.S. Federal Bureau of Investigation (FBI) warns of...
Progress Software fixed two critical severity flaws in WS_FTP Server – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Progress Software fixed two critical severity flaws in WS_FTP Server Pierluigi Paganini September 30, 2023 Progress Software has addressed a...
Child abuse site taken down, organized child exploitation crime suspected – exclusive – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini Child abuse site taken down, organized child exploitation crime suspected – exclusive Pierluigi Paganini September 30, 2023 A child abuse...
A still unpatched zero-day RCE impacts more than 3.5M Exim servers – Source: securityaffairs.com
Source: securityaffairs.com – Author: Pierluigi Paganini A still unpatched zero-day RCE impacts more than 3.5M Exim servers Pierluigi Paganini September 29, 2023 Experts warn of a...




























