News

Breaking News

Entertainment

Movies & Series

Music

Science & Technology

Sport

Business & Money

Education & Personal Development

Life

Culture & Art

Hobbies

News

Entertainment

Science & Technology

Sport

Business & Money

Education & Personal Development

Life

Culture & Art

Hobbies

home
›
Security Affairs
›
Software

Security Affairs - Software

8 | Follower

Security Affairs

21.01.2025

Malicious npm and PyPI target Solana Private keys to steal funds from victims' wallets

Researchers found malicious npm and PyPI packages capable of stealing and deleting sensitive data from infected systems.

Security Affairs

21.01.2025

HPE is investigating IntelBroker's claims of the company hack

HPE is probing claims by the threat actor IntelBroker who is offering to sell alleged stolen source code and data from the company.

Security Affairs

21.01.2025

Esperts found new DoNot Team APT group's Android malware

Researchers linked the threat actor DoNot Team to a new Android malware that was employed in highly targeted cyber attacks.

Security Affairs

20.01.2025

Planet WGS-804HPT Industrial Switch flaws could be chained to achieve remote code execution

Critical flaws in WGS-804HPT switches could be chained to gain remote code execution on Planet Technology's industrial devices.

Security Affairs

20.01.2025

Security Affairs newsletter Round 507 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free.

Security Affairs

20.01.2025

SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 29

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape.

Security Affairs

20.01.2025

A flaw in the W3 Total Cache plugin exposes hundreds of thousands of WordPress sites to attacks

A WordPress W3 Total Cache plugin flaw could allow attackers to access info from internal services, including metadata on cloud-based apps.

Security Affairs

19.01.2025

U.S. Treasury Sanctions Chinese cybersecurity firm and actor over federal agency breach tied to Salt Typhoon

The U.S. Treasury sanctioned a Chinese cybersecurity firm and a Shanghai cyber actor for ties to Salt Typhoon and a federal agency breach

Security Affairs

18.01.2025

U.S. CISA adds Aviatrix Controllers vulnerability to its Known Exploited Vulnerabilities catalog

U.S. CISA adds an Aviatrix Controllers Command Injection vulnerability to its Known Exploited Vulnerabilities catalog.

Security Affairs

18.01.2025

EU privacy non-profit group filed complaints against TikTok, SHEIN, AliExpress, and other Chinese companies

noyb files complaints against TikTok, AliExpress, and others for illegal EU user data transfers to China, violating data protection laws.

Security Affairs

18.01.2025

ESET detailed a flaw that could allow a bypass of the Secure Boot in UEFI systems

Researchers detailed a now-patched vulnerability that could allow a bypass of the Secure Boot mechanism in UEFI systems.

Security Affairs

17.01.2025

MikroTik botnet relies on DNS misconfiguration to spread malware

Researchers discovered a 13,000-device MikroTik botnet exploiting DNS flaws to spoof 20,000 domains and deliver malware.

Security Affairs

17.01.2025

Clop Ransomware exploits Cleo File Transfer flaw: dozens of claims, disputed breaches

The Clop ransomware gang claims dozens of victims from a Cleo file transfer vulnerability, though several companies dispute the breaches.

Security Affairs

17.01.2025

Prominent US law firm Wolf Haldenstein disclosed a data breach

The law firm Wolf Haldenstein disclosed a data breach that exposed the personal information of nearly 3.5 million individuals.

Security Affairs

17.01.2025

Russia-linked APT Star Blizzard targets WhatsApp accounts

The Russian group Star Blizzard targets WhatsApp accounts in a new spear-phishing campaign, shifting tactics to avoid detection.

Security Affairs

16.01.2025

Microsoft Patch Tuesday updates for January 2025 fixed three actively exploited flaws

Microsoft Patch Tuesday security updates for January 2025 addressed 161 vulnerabilities, including three actively exploited issues.

Security Affairs

16.01.2025

CVE-2024-44243 macOS flaw allows persistent malware installation

Microsoft disclosed details of a flaw in Apple macOS that could have allowed an attacker to bypass the OS System Integrity Protection (SIP)

Security Affairs

16.01.2025

Codefinger ransomware gang uses compromised AWS keys to encrypt S3 bucket

The ransomware group Codefinger is using compromised AWS keys to encrypt S3 bucket data using SSE-C, Halcyon researchers warn.

Security Affairs

16.01.2025

Threat actor leaked config files and VPN passwords for over Fortinet Fortigate devices

A previously unknown threat actor released config files and VPN passwords for Fortinet FortiGate devices on a popular cybercrime forum.

Security Affairs

16.01.2025

U.S. CISA adds Fortinet FortiOS to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet FortiOS flaw to its Known Exploited Vulnerabilities catalog.

Security Affairs

15.01.2025

FBI deleted China-linked PlugX malware from +4,200 US computers

The FBI has removed Chinese PlugX malware from over 4,200 computers in networks across the United States, the U.S. DoJ reported

Security Affairs

15.01.2025

A new campaign is likely targeting a zero-day in Fortinet FortiGate firewalls

Experts warn of a new campaign targeting an alleged zero-day in Fortinet FortiGate firewalls with management interfaces exposed online.

Security Affairs

15.01.2025

Threat actors exploit Aviatrix Controller flaw to deploy backdoors and cryptocurrency miners

A critical vulnerability in Aviatrix Controller is actively exploited to deploy backdoors and cryptocurrency miners in the wild.

Security Affairs

15.01.2025

Russia-linked APT UAC-0063 target Kazakhstan in with HATVIBE malware

Russia-linked threat actor UAC-0063 targets Kazakhstan to gather economic and political intelligence in Central Asia.

Security Affairs

14.01.2025

Inexperienced actors developed the FunkSec ransomware using AI tools

FunkSec, a new ransomware group that attacked more than 80 victims in December 2024, was developed using AI tools.

Security Affairs

14.01.2025

U.S. CISA adds BeyondTrust PRA and RS and Qlik Sense flaws to its Known Exploited Vulnerabilities catalog

U.S. CISA adds BeyondTrust PRA and RS and Qlik Sense flaws to its Known Exploited Vulnerabilities catalog.

Security Affairs

14.01.2025

Credit Card Skimmer campaign targets WordPress via database injection

Stealthy credit card skimmer targets WordPress e-commerce sites, injecting malicious JavaScript into CMS database tables to evade detection.

Security Affairs

13.01.2025

Microsoft took legal action against crooks who developed a tool to abuse its AI-based services

In December, Microsoft sued a group for creating tools to bypass safety measures in its cloud AI products.

Security Affairs

13.01.2025

Security Affairs newsletter Round 506 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free.

Security Affairs

13.01.2025

NoName057 targets Italy again after Zelensky's visit to the country

Over the weekend, Italy faced new waves of distributed denial of service (DDoS) attacks carried out by pro-Russia group NoName057(16).

Security Affairs

13.01.2025

SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 28

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape.

Security Affairs

13.01.2025

How a researcher earned $100,000 hacking a Facebook server

Facebook paid $100,000 to a researcher for discovering a bug that granted him command access to an internal server in October 2024.

Security Affairs

12.01.2025

DoJ charged three Russian citizens with operating crypto-mixing services

The U.S. DoJ charged three Russian citizens with operating crypto-mixing services that helped crooks launder cryptocurrency.

Security Affairs

12.01.2025

U.S. cannabis dispensary STIIIZY disclosed a data breach

US marijuana dispensary STIIIZY warns customers of leaked IDs and passports following a November data breach.

Security Affairs

12.01.2025

A novel PayPal phishing campaign hijacks accounts

Fortinet warns of a phishing campaign using legitimate links to hijack PayPal accounts, tricking users into granting unauthorized access.

Security Affairs

11.01.2025

Banshee macOS stealer supports new evasion mechanisms

Experts found a new version of the Banshee macOS information stealer which was enhanced with new evasion mechanisms.

Security Affairs

11.01.2025

Phishers abuse CrowdStrike brand targeting job seekers with cryptominer

CrowdStrike warns of a phishing campaign that uses its recruitment branding to trick recipients into downloading a fake application.

Security Affairs

11.01.2025

Researchers disclosed details of a now-patched Samsung zero-click flaw

Researchers at Google Project Zero disclosed a now-patched zero-click vulnerability that affects Samsung devices.

Security Affairs

10.01.2025

Ukrainian Cyber Alliance destroyed the connectivity of Russian ISP Nodex

A group of hacktivists, known as the Ukrainian Cyber Alliance, breached Russian ISP Nodex, stole sensitive documents, and wiped systems.

Security Affairs

10.01.2025

SOC Scalability: How AI Supports Growth Without Overloading Analysts

Scaling up a security operations center (SOC) is inevitable for many organizations. How AI supports growth without overloading analysts.

home›Security Affairs›Software

Security Affairs - Software

Malicious npm and PyPI target Solana Private keys to steal funds from victims' wallets

HPE is investigating IntelBroker's claims of the company hack

Esperts found new DoNot Team APT group's Android malware

Planet WGS-804HPT Industrial Switch flaws could be chained to achieve remote code execution

Security Affairs newsletter Round 507 by Pierluigi Paganini – INTERNATIONAL EDITION

SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 29

A flaw in the W3 Total Cache plugin exposes hundreds of thousands of WordPress sites to attacks

U.S. Treasury Sanctions Chinese cybersecurity firm and actor over federal agency breach tied to Salt Typhoon

U.S. CISA adds Aviatrix Controllers vulnerability to its Known Exploited Vulnerabilities catalog

EU privacy non-profit group filed complaints against TikTok, SHEIN, AliExpress, and other Chinese companies

ESET detailed a flaw that could allow a bypass of the Secure Boot in UEFI systems

MikroTik botnet relies on DNS misconfiguration to spread malware

Clop Ransomware exploits Cleo File Transfer flaw: dozens of claims, disputed breaches

Prominent US law firm Wolf Haldenstein disclosed a data breach

Russia-linked APT Star Blizzard targets WhatsApp accounts

Microsoft Patch Tuesday updates for January 2025 fixed three actively exploited flaws

CVE-2024-44243 macOS flaw allows persistent malware installation

Codefinger ransomware gang uses compromised AWS keys to encrypt S3 bucket

Threat actor leaked config files and VPN passwords for over Fortinet Fortigate devices

U.S. CISA adds Fortinet FortiOS to its Known Exploited Vulnerabilities catalog

FBI deleted China-linked PlugX malware from +4,200 US computers

A new campaign is likely targeting a zero-day in Fortinet FortiGate firewalls

Threat actors exploit Aviatrix Controller flaw to deploy backdoors and cryptocurrency miners

Russia-linked APT UAC-0063 target Kazakhstan in with HATVIBE malware

Inexperienced actors developed the FunkSec ransomware using AI tools

U.S. CISA adds BeyondTrust PRA and RS and Qlik Sense flaws to its Known Exploited Vulnerabilities catalog

Credit Card Skimmer campaign targets WordPress via database injection

Microsoft took legal action against crooks who developed a tool to abuse its AI-based services

Security Affairs newsletter Round 506 by Pierluigi Paganini – INTERNATIONAL EDITION

NoName057 targets Italy again after Zelensky's visit to the country

SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 28

How a researcher earned $100,000 hacking a Facebook server

DoJ charged three Russian citizens with operating crypto-mixing services

U.S. cannabis dispensary STIIIZY disclosed a data breach

A novel PayPal phishing campaign hijacks accounts

Banshee macOS stealer supports new evasion mechanisms

Phishers abuse CrowdStrike brand targeting job seekers with cryptominer

Researchers disclosed details of a now-patched Samsung zero-click flaw

Ukrainian Cyber Alliance destroyed the connectivity of Russian ISP Nodex

SOC Scalability: How AI Supports Growth Without Overloading Analysts

home
›
Security Affairs
›
Software