Security Affairs newsletter Round 431 by Pierluigi Paganini – International edition
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email…
Category: Securityaffairs
Reptile Rootkit employed in attacks against Linux systems in South KoreaSecurity Affairs
Researchers observed threat actors that are using an open-source rootkit called Reptile in attacks aimed at systems in South Korea. Reptile is an open-source kernel module rootkit…
PaperCut flaw in print management sw exposes servers to RCESecurity Affairs
Researchers discovered a vulnerability in PaperCut NG/MF print management software that can lead to remote code execution. Cybersecurity researchers at Horizon3 discovered a high-severity vulnerability,…
A cyberattack impacted operations of multiple hospitals in several US statesSecurity Affairs
A cyberattack has disrupted the computer systems of multiple hospitals in several states, with a severe impact on their operations. Some emergency rooms in multiple…
Married couple pleaded guilty to laundering billions in cryptocurrency stolen from Bitfinex in 2016Security Affairs
A married couple from New York pleaded guilty this week to laundering billions of dollars stolen from Bitfinex in 2016. The couple pleaded guilty to…
Malicious packages in the NPM designed for highly-targeted attacksSecurity Affairs
Researchers discovered a new set of malicious packages on the npm package manager that can exfiltrate sensitive developer data. On July 31, 2023, Phylum researchers…
Attackers use dynamic code loading to bypass Google Play store’s malware detectionsSecurity Affairs
Threat actors rely on the ‘versioning’ technique to evade malware detections of malicious code uploaded to the Google Play Store. Google Cybersecurity Action Team (GCAT)…
CISA, FBI, and NSA published the list of 12 most exploited vulnerabilities of 2022Security Affairs
CISA, the FBI, and NSA, along with Five Eyes cybersecurity agencies published a list of the 12 most exploited vulnerabilities of 2022. CISA, the NSA,…
Decommissioned medical infusion pumps sold on secondary market could reveal Wi-Fi configuration settingsSecurity Affairs
Experts warn that decommissioned medical infusion pumps sold via the secondary market could expose Wi-Fi configuration settings. The sale of decommissioned medical infusion pumps through…
OWASP Top 10 for LLM applications is out!Security Affairs
OWASP released the OWASP Top 10 for LLM (Large Language Model) Applications project, which provides a list of the top 10 most critical vulnerabilities impacting…
Rapid7 found a bypass for the recently patched actively exploited Ivanti EPMM bugSecurity Affairs
Researchers discovered a bypass for a recently fixed actively exploited vulnerability in Ivanti Endpoint Manager Mobile (EPMM). Rapid7 cybersecurity researchers have discovered a bypass for…
Russian APT29 conducts phishing attacks through Microsoft TeamsSecurity Affairs
Russia-linked APT29 group targeted dozens of organizations and government agencies worldwide with Microsoft Teams phishing attacks. Microsoft Threat Intelligence reported that Russia-linked cyberespionage group APT29…