A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box.
Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.
| ALPHV/BlackCat ransomware gang hacked the hotel chain Motel One |
| FBI warns of dual ransomware attacks |
| Progress Software fixed two critical severity flaws in WS_FTP Server |
| Child abuse site taken down, organized child exploitation crime suspected – exclusive |
| A still unpatched zero-day RCE impacts more than 3.5M Exim servers |
| Chinese threat actors stole around 60,000 emails from US State Department in Microsoft breach |
| Misconfigured WBSC server leaks thousands of passports |
| CISA adds JBoss RichFaces Framework flaw to its Known Exploited Vulnerabilities catalog |
| Cisco urges to patch actively exploited IOS zero-day CVE-2023-20109 |
| Dark Angels Team ransomware group hit Johnson Controls |
| GOOGLE FIXED THE FIFTH CHROME ZERO-DAY OF 2023 |
| Russian zero-day broker is willing to pay $20M for zero-day exploits for iPhones and Android devices |
| China-linked APT BlackTech was spotted hiding in Cisco router firmware |
| Watch out! CVE-2023-5129 in libwebp library affects millions applications |
| DarkBeam leaks billions of email and password combinations |
| ‘Ransomed.vc’ in the Spotlight – What is Known About the Ransomware Group Targeting Sony and NTT Docomo |
| Top 5 Problems Solved by Data Lineage |
| Threat actors claim the hack of Sony, and the company investigates |
| Canadian Flair Airlines left user data leaking for months |
| The Rhysida ransomware group hit the Kuwait Ministry of Finance |
| BORN Ontario data breach impacted 3.4 million newborns and pregnancy care patients |
| Xenomorph malware is back after months of hiatus and expands the list of targets |
| Smishing Triad Stretches Its Tentacles into the United Arab Emirates |
| Crooks stole $200 million worth of assets from Mixin Network |
| A phishing campaign targets Ukrainian military entities with drone manual lures |
| Alert! Patch your TeamCity instance to avoid server hack |
| Is Gelsemium APT behind a targeted attack in Southeast Asian Government? |
| Nigerian National pleads guilty to participating in a millionaire BEC scheme |
| New variant of BBTok Trojan targets users of +40 banks in LATAM |
| Deadglyph, a very sophisticated and unknown backdoor targets the Middle East |
| Alphv group claims the hack of Clarion, a global manufacturer of audio and video equipment for cars |
| National Student Clearinghouse data breach impacted approximately 900 US schools |
Cybercrime
Smishing Triad Impersonates Emirates Post To Target UAE Citizens
Decade of newborn child registry data stolen in MOVEit mass-hack
Kuwait isolates some government systems following attack on its Finance Ministry
Cl0p’s MOVEit attack tally surpasses 2,000 victim organizations
Child abuse site taken down, organized child exploitation crime suspected – exclusive
Two or More Ransomware Variants Impacting the Same Victims and Data Destruction Trends
Malware
Stealth Falcon preying over Middle Eastern skies with Deadglyph
GUARDING AGAINST THE UNSEEN: INVESTIGATING A STEALTHY REMCOS MALWARE ATTACK ON COLOMBIAN FIRMS
Hong Kong crypto business Mixin says hackers stole $200 million in assets
Xenomorph Malware Strikes Again: Over 30+ US Banks Now Targeted
Hacking
CVE-2023-34040 Spring Kafka Deserialization Remote Code Execution
Source Code at Risk: Critical Code Vulnerability in CI/CD Platform TeamCity
Rezilion Researchers Uncover New Details on Severity of Google Chrome Zero-Day Vulnerability (CVE-2023-4863)
Russian zero-day seller offers $20M for hacking Android and iPhones
Using silent SMS to localize LTE users
Millions of Exim mail servers exposed to zero-day RCE attacks
Intelligence and Information Warfare
Some new snippets from the Snowden documents
Rare Backdoors Suspected to be Tied to Gelsemium APT Found in Targeted Attack in Southeast Asian Government
New STARK#VORTEX Attack Campaign: Threat Actors Use Drone Manual Lures to Deliver MerlinAgent Payloads
WELCOME TO CYBER REALISM: PARSING THE 2023 DEPARTMENT OF DEFENSE CYBER STRATEGY
How Russian government-controlled hacking groups shift their tactics, objectives and capabilities — report
People’s Republic of China-Linked Cyber Actors Hide in Router Firmware
Chinese hackers stole emails from US State Dept in Microsoft breach, Senate staffer says
National Security Agency is starting an artificial intelligence security center
Cybersecurity
The Cybersecurity Crisis of Artificial Intelligence: Unrestrained Adoption and Natural Language-Based Attacks
Reports about Cyber Actors Hiding in Router Firmware
We believe PDD is a Dying Fraudulent Company and its Shopping App TEMU is Cleverly Hidden Spyware that Poses an Urgent Security Threat to U.S. National Interests
Update Chrome Now: Google Releases Patch for Actively Exploited Zero-Day Vulnerability
Cisco Warns of IOS Software Zero-Day Exploitation Attempts
Introducing Advanced Vulnerability Insights for GKE
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
Pierluigi Paganini
(SecurityAffairs – hacking, newsletter)
The post Security Affairs newsletter Round 439 by Pierluigi Paganini – International edition appeared first on Security Affairs.