Security Affairs newsletter Round 458 by Pierluigi Paganini – INTERNATIONAL EDITION

Pierluigi Paganini February 11, 2024

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box.

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

CISA adds Fortinet FortiOS bug to its Known Exploited Vulnerabilities catalog
macOS Backdoor RustDoor likely linked to Alphv/BlackCat ransomware operations
Exploiting a vulnerable Minifilter Driver to create a process killer
Black Basta ransomware gang hacked Hyundai Motor Europe
Fortinet warns of a new actively exploited RCE flaw in FortiOS SSL VPN
Ivanti warns of a new auth bypass flaw in its Connect Secure, Policy Secure, and ZTA gateway devices
26 Cyber Security Stats Every User Should Be Aware Of in 2024
US offers $10 million reward for info on Hive ransomware group leaders
Unraveling the truth behind the DDoS attack from electric toothbrushes
China-linked APT Volt Typhoon remained undetected for years in US infrastructure
Cisco fixes critical Expressway Series CSRF vulnerabilities
CISA adds Google Chromium V8 Type Confusion bug to its Known Exploited Vulnerabilities catalog
Fortinet addressed two critical FortiSIEM vulnerabilities
Experts warn of a critical bug in JetBrains TeamCity On-Premises
Critical shim bug impacts every Linux boot loader signed in the past decade
China-linked APT deployed malware in a network of the Dutch Ministry of Defence
Commercial spyware vendors are behind most zero-day exploits discovered by Google TAG
Google fixed an Android critical remote code execution flaw
A man faces up to 25 years in prison for his role in operating unlicensed crypto exchange BTC-e
U.S. Gov imposes visa restrictions on individuals misusing Commercial Spyware
HPE is investigating claims of a new security breach
Experts warn of a surge of attacks targeting Ivanti SSRF flaw 
How to hack the Airbus NAVBLUE Flysmart+ Manager
Crooks stole $25.5 million from a multinational firm using a ‘deepfake’ video call
Software firm AnyDesk disclosed a security breach
The ‘Mother of all Breaches’: Navigating the Aftermath and Fortifying Your Data with DSPM
US government imposed sanctions on six Iranian intel officials
A cyberattack impacted operations at Lurie Children’s Hospital
AnyDesk Incident: Customer Credentials Leaked and Published for Sale on the Dark Web

Cybercrime

  

  

HK firm scammed of RM120mil after employee duped by video call with deepfake of CFO  

  

  

Malware

Buying Spying: How the commercial surveillance industry works and what can be done about it 

  

 

Hacking

 

  

 

 

  

Intelligence and Information Warfare 

  

   

MIVD reveals Chinese espionage methods in the Netherlands  

  

  

Cybersecurity          

   

     

Follow me on Twitter:  and  and Mastodon

(SecurityAffairs – hacking, newsletter)



you might also like

leave a comment