CVE-2021-31618
Summary: Apache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured...
Month: September 2021
CVE-2019-10172
Summary: A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but...
CVE-2021-30683
Summary: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur...
CVE-2021-1876
Summary: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur...
Epik – 15,003,961 breached accounts
In September 2021, the domain registrar and web host Epik suffered a significant data breach, allegedly in retaliation for hosting...
Conti Ransomware Victim: Vendrig_Holding_BV
continews NOTE: The information on this page is automated and scraped directly from the Conti .onion Dark Web Tor Blog...
Conti Ransomware Victim: JAMAC_FROZEN_FOODS
continews NOTE: The information on this page is automated and scraped directly from the Conti .onion Dark Web Tor Blog...
Conti Ransomware Victim: AMAX
continews NOTE: The information on this page is automated and scraped directly from the Conti .onion Dark Web Tor Blog...
Conti Ransomware Victim: Sanger_Altgelt_Insurance_Agents
continews NOTE: The information on this page is automated and scraped directly from the Conti .onion Dark Web Tor Blog...
Conti Ransomware Victim: ASSU_2000
continews NOTE: The information on this page is automated and scraped directly from the Conti .onion Dark Web Tor Blog...
Conti Ransomware Victim: Riwega_SRL
continews NOTE: The information on this page is automated and scraped directly from the Conti .onion Dark Web Tor Blog...
Conti Ransomware Victim: RPE_CONTRACTING
continews NOTE: The information on this page is automated and scraped directly from the Conti .onion Dark Web Tor Blog...
Conti Ransomware Victim: MOSS_BROS_GROUP
continews NOTE: The information on this page is automated and scraped directly from the Conti .onion Dark Web Tor Blog...
Conti Ransomware Victim: TURLA_SRL
continews NOTE: The information on this page is automated and scraped directly from the Conti .onion Dark Web Tor Blog...
City of Yonkers Refuses to Pay Ransom After Attackers Demand $10 million
 The City of Yonkers has refused to pay the ransom after ransomware attackers demanded a ransom of $10 million to...
German Election Authority Confirms Probable Cyber Attack
 Suspected hackers momentarily impacted the website of the authority managing Germany's September 26 federal election, a spokesperson for the agency...
Hackers Impersonate Bank Customers and Make $500k in Fraudulent Credit Card Payments
 Hackers from other countries were able to impersonate 75 bank clients and made $500,000 in fraudulent credit card payments. This...
New Malware Variant Employs Windows Subsystem for Linux for Attacks
 Security experts have found a new malware variant that uses Windows Subsystem for Linux to infect systems covertly. The research...
InlineExecute-Assembly – A PoC Beacon Object File (BOF) That Allows Security Professionals To Perform In Process .NET Assembly Execution
InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly...
QLOG – Windows Security Logging
QLOG provides enriched Event Logging for security related events on Windows based systems. It is under heavy development and currently...
Why Edward Snowden is urging users to stop using ExpressVPN?
The popular whistleblower Edward Snowden recommends customers of ExpressVPN VPN service to stop using it. Last week the Israeli cybersecurity...
Security Affairs newsletter Round 332
A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs free...
The Biden administration plans to target exchanges supporting ransomware operations with sanctions
US Government is expected to issue sanctions against crypto exchanges, wallets, and traders used by ransomware operations to cash out...
Threat actor has been targeting the aviation industry since at least 2018
Security researchers from the Cisco Talos team uncovered a spear-phishing campaign targeting the aviation industry for two years avoiding detection....
