Security Affairs newsletter Round 507 by Pierluigi Paganini – INTERNATIONAL EDITION

Huione: the company behind the largest ever illicit online marketplace has launched a stablecoin 

Unknown group releases Fortinet config files and VPN passwords to the darknet  

NHS Cyberattack in UK Inflicted Long-Term Harm on Patient Health

Clop ransomware gang names dozens of victims hit by Cleo mass-hack, but several firms dispute breaches  

Sneaky 2FA: exposing a new AiTM Phishing-as-a-Service 

How victims of PowerSchool’s data breach helped each other investigate ‘massive’ hack

Chinese Innovations Spawn Wave of Toll Phishing Via SMS    

Gravy Analytics breached (to be confirmed)

Hackers Claim Massive Breach of Location Data Giant, Threaten to Leak Data      

Malware

Stealthy Credit Card Skimmer Targets WordPress Checkout Pages via Database Injection  

Python-Based Malware Powers RansomHub Ransomware to Exploit Network Flaws

One Mikro Typo: How a simple DNS misconfiguration enables malware delivery by a Russian botnet  

Hacking

Backdooring Your Backdoors – Another $20 Domain, More Governments

Analyzing CVE-2024-44243, a macOS System Integrity Protection bypass through kernel extensions     

Wiz Research Identifies Exploitation in the Wild of Aviatrix Controller RCE (CVE-2024-50603)

Console Chaos: A Campaign Targeting Publicly Exposed Management Interfaces on Fortinet FortiGate Firewalls

From arbitrary pointer dereference to arbitrary read/write in latest Windows 11 

Under the cloak of UEFI Secure Boot: Introducing CVE-2024-7344  

Karmada Security Audit