Security Affairs newsletter Round 436 by Pierluigi Paganini – International edition

Pierluigi Paganini September 10, 2023

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box.

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

US CISA added critical Apache RocketMQ flaw to its Known Exploited Vulnerabilities catalog
Ragnar Locker gang leaks data stolen from the Israel’s Mayanei Hayeshua hospital
North Korea-linked threat actors target cybersecurity experts with a zero-day
Zero-day in Cisco ASA and FTD is actively exploited in ransomware attacks
Nation-state actors exploit Fortinet FortiOS SSL-VPN and Zoho ManageEngine ServiceDesk Plus, CISA warns
Zero-days fixed by Apple were used to deliver NSO Group’s Pegasus spyware
Apple discloses 2 new actively exploited zero-day flaws in iPhones, Macs
A malvertising campaign is delivering a new version of the macOS Atomic Stealer
Two flaws in Apache SuperSet allow to remotely hack servers
Chinese cyberspies obtained Microsoft signing key from Windows crash dump due to a mistake
Google addressed an actively exploited zero-day in Android
A zero-day in Atlas VPN Linux Client leaks users’ IP address
MITRE and CISA release Caldera for OT attack emulation
ASUS routers are affected by three critical remote code execution flaws
Hackers stole $41M worth of crypto assets from crypto gambling firm Stake
Freecycle data breach impacted 7 Million users
Meta disrupted two influence campaigns from China and Russia
A massive DDoS attack took down the site of the German financial agency BaFin
X will collect biometric data from its premium users
“Smishing Triad” Targeted USPS and US Citizens for Data Theft
Publicly available Evil_MinIO exploit used in attacks on MinIO Storage Systems
University of Sydney suffered a security breach caused by a third-party service provider
Cybercrime will cost Germany $224 billion in 2023
PoC exploit code released for CVE-2023-34039 bug in VMware Aria Operations for Networks
LockBit ransomware gang hit the Commission des services electriques de Montréal (CSEM)

Cybercrime

   

  

  

Russian infosec boss gets nine years for $100M insider-trading caper using stolen data

  

Malware

  

NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in the Wild   

Hacking

VMWARE Aria Operations for Networks  

   

        

From NTAuthCertificates to “Silver” Certificate   

Apache Superset Part II: RCE, Credential Harvesting and More  

  

Intelligence and Information Warfare

  

  

  

Active North Korean campaign targeting security researchers  

  

  

  

Cybersecurity

  

  

   

  

  

   

Follow me on Twitter: and and Mastodon

(SecurityAffairs – hacking, newsletter)



you might also like

leave a comment