Security Affairs newsletter Round 303
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box.
If you want to also receive for free the international press subscribe here.
Bug bounty hacker earned $5,000 reporting a Stored XSS flaw in iCloud.com |
Experts warn of threat actors abusing Google Alerts to deliver unwanted programs |
FBI warns of the consequences of telephony denial-of-service (TDoS) attacks |
An attacker was able to siphon audio feeds from multiple Clubhouse rooms |
Georgetown County has yet to recover from a sophisticated cyber attack |
NSA Equation Group tool was used by Chinese hackers years before it was leaked online |
Researchers uncovered a new Malware Builder dubbed APOMacroSploit |
Ukraine sites suffered massive attacks launched from Russian networks |
FIN11 cybercrime group is behind recent wave of attacks on FTA servers |
IBM addressed flaws in Java Runtime, Planning Analytics Workspace, Kenexa LMS |
NurseryCam daycare cam service shut down after security breach |
Twitter removes 100 accounts linked to Russia disseminating disinformation |
VMware addresses a critical RCE issue in vCenter Server |
A Cryptomining botnet abuses Bitcoin blockchain transactions as C2 backup mechanism |
Airplane manufacturer Bombardier has disclosed a security breach, data leaked online |
APT32 state hackers target human rights defenders with spyware |
Ukraine: nation-state hackers hit government document management system |
Cisco fixes three critical bugs in ACI Multi-Site Orchestrator, Application Services Engine, and NX-OS |
Google discloses technical details of Windows CVE-2021-24093 RCE flaw |
North Korea-linked Lazarus APT targets defense industry with ThreatNeedle backdoor |
Thousands of VMware Center servers exposed online and potentially vulnerable to CVE-2021-21972 flaw |
China-linked TA413 group target Tibetan organizations |
Data Breach: Turkish legal advising company exposed over 15,000 clients |
Hackers are selling access to Biochemical systems at Oxford University Lab |
Microsoft releases open-source CodeQL queries to assess Solorigate compromise |
New Ryuk ransomware implements self-spreading capabilities |
Experts found a critical authentication bypass flaw in Rockwell Automation software |
Hotarus Corp gang hacked Ecuadors Ministry of Finance and Banco Pichincha |
T-Mobile customers were hit with SIM swapping attacks |
If you want to receive the weekly Security Affairs Newsletter for free subscribe here.
|
Pierluigi Paganini
(SecurityAffairs – hacking, newsletter)
The post Security Affairs newsletter Round 303 appeared first on Security Affairs.
If you like the site, please consider joining the telegram channel or supporting us on Patreon using the button below.