Security Affairs newsletter Round 380
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box.
If you want to also receive for free the newsletter with the international press subscribe here.
| CISA added 7 new flaws to its Known Exploited Vulnerabilities Catalog |
| TA558 cybercrime group targets hospitality and travel orgs |
| Russia-linked Cozy Bear uses evasive techniques to target Microsoft 365 users |
| CISA added SAP flaw to its Known Exploited Vulnerabilities Catalog |
| A flaw in Amazon Ring could expose user’s camera recordings |
| Cisco fixes High-Severity bug in Secure Web Appliance |
| Bumblebee attacks, from initial access to the compromise of Active Directory Services |
| Estonia blocked cyberattacks claimed by Pro-Russia Killnet group |
| Safari 15.6.1 addresses a zero-day flaw actively exploited in the wild |
| Google blocked the largest Layer 7 DDoS reported to date |
| BlackByte ransomware v2 is out with new extortion novelties |
| Apple fixed two new zero-day flaws exploited by threat actors |
| PoC exploit code for critical Realtek RCE flaw released online |
| China-linked RedAlpha behind multi-year credential theft campaign |
| Bugdrop dropper includes features to circumvent Google’s security Controls |
| Google fixed a new Chrome Zero-Day actively exploited in the wild |
| North Korea-linked APT targets Job Seekers with macOS malware |
| ÆPIC Leak is the first CPU flaw able to architecturally disclose sensitive data |
| Clop gang targeted UK drinking water supplier South Staffordshire Water |
| Russia-linked Gamaredon APT continues to target Ukraine |
| Phone numbers of 1,900 Signal users exposed as a result of Twilio security breach |
| Microsoft disrupts SEABORGIUM ’s ongoing phishing operations |
| VNC instances exposed to Internet pose critical infrastructures at risk |
| SOVA Android malware now also encrypts victims’ files |
| A new PyPI Package was found delivering fileless Linux Malware |
| Iron Tiger APT is behind a supply chain attack that employed messaging app MiMi |
| A flaw in Xiaomi phones using MediaTek Chips could allow to forge transactions |
| CISA, FBI shared a joint advisory to warn of Zeppelin ransomware attacks |
Follow me on Twitter: @securityaffairs and Facebook
|
|
Pierluigi Paganini
(SecurityAffairs – hacking, newsletter)
The post Security Affairs newsletter Round 380 appeared first on Security Affairs.
If you like the site, please consider joining the telegram channel or supporting us on Patreon using the button below.
