Security Affairs newsletter Round 381
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box.
If you want to also receive for free the newsletter with the international press subscribe here.
| Twilio hackers also breached the food delivery firm DoorDash |
| Unprecedented cyber attack hit State Infrastructure of Montenegro |
| Threat actor abuses Genshin Impact Anti-Cheat driver to disable antivirus |
| Critical flaw impacts Atlassian Bitbucket Server and Data Center |
| Iran-linked Mercury APT exploited Log4Shell in SysAid Apps for initial access |
| GoldDragon campaign: North-Korea linked Kimsuky APT adopts victim verification technique |
| 0ktapus phishing campaign: Twilio hackers targeted other 136 organizations |
| LastPass data breach: threat actors stole a portion of source code |
| Nobelium APT uses new Post-Compromise malware MagicWeb GAIROSCOPE attack allows to exfiltrate data from Air-Gapped systems via ultrasonic tones |
| Threat actors are using the Tox P2P messenger as C2 server |
| Plex discloses data breach and urges password reset |
| AiTM phishing campaign also targets G Suite users |
| VMware fixed a privilege escalation issue in VMware Tools |
| France hospital Center Hospitalier Sud Francilien suffered ransomware attack |
| Microsoft publicly discloses details on critical ChromeOS flaw |
| GitLab fixed a critical Remote Code Execution (RCE) bug in CE and EE releases |
| Over 80,000 Hikvision cameras can be easily hacked |
| CISA adds Palo Alto Networks PAN-OS to its Known Exploited Vulnerabilities Catalog Counterfeit versions of popular mobile devices target WhatsApp and WhatsApp Business |
| Lockbit leak sites hit by mysterious DDoS attack after Entrust hack |
| European Cybersecurity in Context: A Policy-Oriented Comparative Analysis |
| 8-year-old Linux Kernel flaw DirtyCred is nasty as Dirty Pipe |
| Group-IB CEO will remain in jail – complaint denied |
| Escanor Malware delivered in Weaponized Microsoft Office Documents |
| Donot Team cyberespionage group updates its Windows malware framework |
| Fake DDoS protection pages on compromised WordPress sites lead to malware infections |
| Threat actors are stealing funds from General Bytes Bitcoin ATM |
| Grandoreiro banking malware targets Mexico and Spain White hat hackers broadcasted talks and hacker movies through a decommissioned satellite |
Follow me on Twitter: @securityaffairs and Facebook
|
|
Pierluigi Paganini
(SecurityAffairs – hacking, newsletter)
The post Security Affairs newsletter Round 381 appeared first on Security Affairs.
If you like the site, please consider joining the telegram channel or supporting us on Patreon using the button below.
