US govt is hunting a Chinese malware that can interfere with its military operationsSecurity Affairs
The US government believes that China has deployed malware in key US power and communications networks that can be activated in case of a conflict.…
Category: Securityaffairs
WikiLoader malware-as-a-service targets Italian organizationsSecurity Affairs
Threat actors are targeting Italian organizations with a phishing campaign aimed at delivering a new malware called WikiLoader. WikiLoader is a new piece of malware…
Be aware of exposure of sensitive data on Wi-Fi settings for Canon inkjet printersSecurity Affairs
Canon warns that sensitive data on the Wi-Fi connection settings stored in the memories of inkjet printers may not be deleted during initialization. Canon warns…
Experts discovered a previously undocumented initial access vector used by P2PInfect wormSecurity Affairs
Cado Security observed a new variant of the P2PInfect worm targets Redis servers with a previously undocumented initial access vector. In July, Palo Alto Networks…
Experts link AVRecon bot to malware proxy service SocksEscortSecurity Affairs
The AVRecon botnet relies on compromised small office/home office (SOHO) routers since at least May 2021. In early July, researchers from Lumen Black Lotus Labs…
Three flaws in Ninja Forms plugin for WordPress impact 900K sitesSecurity Affairs
Experts warn of vulnerabilities impacting the Ninja Forms plugin for WordPress that could be exploited for escalating privileges and data theft. The Ninja Forms plugin…
Experts warn attackers started exploiting Citrix ShareFile RCE flawSecurity Affairs
Researchers warn that threat actors started exploiting Citrix ShareFile RCE vulnerability CVE-2023-24489 in the wild. Citrix ShareFile is a widely used cloud-based file-sharing application, which…
In 2022, more than 40% of zero-day exploits used in the wild were variations of previous issuesSecurity Affairs
Google’s Threat Analysis Group Google states that more than 40% of zero-day flaws discovered in 2022 were variants of previous issues. The popular Threat Analysis…
New flaw in Ivanti Endpoint Manager Mobile actively exploited in the wildSecurity Affairs
Software firm Ivanti disclosed another security vulnerability impacting Endpoint Manager Mobile (EPMM), that it said actively exploited. Ivanti disclosed a new security vulnerability impacting Endpoint…
Security Affairs newsletter Round 430 by Pierluigi Paganini – International edition
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email…
CISA warns about SUBMARINE Backdoor employed in Barracuda ESG attacksSecurity Affairs
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns of threat actors deploying the SUBMARINE Backdoor in Barracuda ESG attacks. The U.S. Cybersecurity and Infrastructure…
Now Abyss Locker also targets VMware ESXi serversSecurity Affairs
A Linux variant of the Abyss Locker designed to target VMware ESXi servers appeared in the threat landscape, experts warn. The operators behind the Abyss…