Security Affairs newsletter Round 473 by Pierluigi Paganini – INTERNATIONAL EDITION Security Affairs newsletter Round 473 by Pierluigi Paganini – INTERNATIONAL EDITION | Malware-la... 2024-5-26 20:8:39 | 阅读: 12 | 收藏 | Security Affairs - securityaffairs.com exploited ransomware security catalog

Malware-laced JAVS Viewer deploys RustDoor implant in supply chain attack Malware-laced JAVS Viewer deploys RustDoor implant in supply chain attackMalicious actors comp... 2024-5-26 12:11:45 | 阅读: 16 | 收藏 | Security Affairs - securityaffairs.com javs rapid7 malicious vanguard rustdoor

Fake AV websites used to distribute info-stealer malware Fake AV websites used to distribute info-stealer malwareThreat actors used fake AV websites ma... 2024-5-26 05:20:30 | 阅读: 17 | 收藏 | Security Affairs - securityaffairs.com stealer bitdefender malicious distributes apk

MITRE December 2023 attack: Threat actors created rogue VMs to evade detection MITRE December 2023 attack: Threat actors created rogue VMs to evade detectionThe MITRE Corpor... 2024-5-25 17:51:2 | 阅读: 12 | 收藏 | Security Affairs - securityaffairs.com vms rogue vcenter security evade

An XSS flaw in GitLab allows attackers to take over accounts An XSS flaw in GitLab allows attackers to take over accountsGitLab addressed a high-severity c... 2024-5-25 04:39:22 | 阅读: 25 | 收藏 | Security Affairs - securityaffairs.com gitlab addressed attackers attacker leveraging

Google fixes eighth actively exploited Chrome zero-day this year, the third in a month Google fixes eighth actively exploited Chrome zero-day this year, the third in a monthGoogle r... 2024-5-24 21:13:46 | 阅读: 9 | 收藏 | Security Affairs - securityaffairs.com chrome exploited security resides confusion

CISA adds Apache Flink flaw to its Known Exploited Vulnerabilities catalog CISA adds Apache Flink flaw to its Known Exploited Vulnerabilities catalogCISA adds Apache Fli... 2024-5-24 18:25:35 | 阅读: 12 | 收藏 | Security Affairs - securityaffairs.com catalog improper exploited

Usage of TLS in DDNS Services leads to Information Disclosure in Multiple Vendors Usage of TLS in DDNS Services leads to Information Disclosure in Multiple VendorsThe use of Dy... 2024-5-24 16:58:50 | 阅读: 9 | 收藏 | Security Affairs - securityaffairs.com ddns appliances security acme

Recall feature in Microsoft Copilot+ PCs raises privacy and security concerns Recall feature in Microsoft Copilot+ PCs raises privacy and security concernsUK data watchdog... 2024-5-24 16:9:58 | 阅读: 7 | 收藏 | Security Affairs - securityaffairs.com recall microsoft copilot snapshots pcs

APT41: The threat of KeyPlug against Italian industries APT41: The threat of KeyPlug against Italian industriesTinexta Cyber’s Zlab Malware Team uncov... 2024-5-23 21:9:49 | 阅读: 14 | 收藏 | Security Affairs - securityaffairs.com apt41 keyplug tinexta security employed

Critical SQL Injection flaws impact Ivanti Endpoint Manager (EPM) Critical SQL Injection flaws impact Ivanti Endpoint Manager (EPM)Ivanti addressed multiple fla... 2024-5-23 18:49:36 | 阅读: 20 | 收藏 | Security Affairs - securityaffairs.com ivanti epm attacker injection su5

Chinese actor ‘Unfading Sea Haze’ remained undetected for five years Chinese actor ‘Unfading Sea Haze’ remained undetected for five yearsA previously unknown China... 2024-5-23 16:55:1 | 阅读: 9 | 收藏 | Security Affairs - securityaffairs.com sea haze unfading attackers

A consumer-grade spyware app found in check-in systems of 3 US hotels A consumer-grade spyware app found in check-in systems of 3 US hotelsA researcher discovered a... 2024-5-23 14:27:16 | 阅读: 9 | 收藏 | Security Affairs - securityaffairs.com daigle spyware wyndham hotels

Critical Veeam Backup Enterprise Manager authentication bypass bug Critical Veeam Backup Enterprise Manager authentication bypass bugA critical security vulnerab... 2024-5-23 02:1:17 | 阅读: 13 | 收藏 | Security Affairs - securityaffairs.com backup veeam replication bypass

Cybercriminals are targeting elections in India with influence campaigns Cybercriminals are targeting elections in India with influence campaignsResecurity warns of a... 2024-5-23 00:51:49 | 阅读: 10 | 收藏 | Security Affairs - securityaffairs.com india resecurity elections indian hacktivist

An ongoing malware campaign exploits Microsoft Exchange Server flaws An ongoing malware campaign exploits Microsoft Exchange Server flawsA threat actor is targetin... 2024-5-22 21:19:4 | 阅读: 13 | 收藏 | Security Affairs - securityaffairs.com exchange microsoft stealer identify africa

Critical GitHub Enterprise Server Authentication Bypass bug. Fix it now! Critical GitHub Enterprise Server Authentication Bypass bug. Fix it now!GitHub addressed a vul... 2024-5-22 18:5:31 | 阅读: 8 | 收藏 | Security Affairs - securityaffairs.com github assertions sso ghes

OmniVision disclosed a data breach after the 2023 Cactus ransomware attack OmniVision disclosed a data breach after the 2023 Cactus ransomware attackThe digital imaging... 2024-5-22 15:40:27 | 阅读: 7 | 收藏 | Data Breach - securityaffairs.com ransomware cactus omnivision security imaging

CISA adds NextGen Healthcare Mirth Connect flaw to its Known Exploited Vulnerabilities catalog CISA adds NextGen Healthcare Mirth Connect flaw to its Known Exploited Vulnerabilities catalog... 2024-5-22 03:59:44 | 阅读: 10 | 收藏 | Security Affairs - securityaffairs.com catalog mirth nextgen exploited

Blackbasta group claims to have hacked Atlas, one of the largest US oil distributors Blackbasta group claims to have hacked Atlas, one of the largest US oil distributorsThe Blackb... 2024-5-21 21:50:57 | 阅读: 15 | 收藏 | Security Affairs - securityaffairs.com atlas basta ransomware oil claims