Pierluigi Paganini
October 01, 2023
Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.
Cybercrime
Smishing Triad Impersonates Emirates Post To Target UAE Citizens
Decade of newborn child registry data stolen in MOVEit mass-hack
Kuwait isolates some government systems following attack on its Finance Ministry
Cl0p’s MOVEit attack tally surpasses 2,000 victim organizations
Child abuse site taken down, organized child exploitation crime suspected – exclusive
Two or More Ransomware Variants Impacting the Same Victims and Data Destruction Trends
Malware
Stealth Falcon preying over Middle Eastern skies with Deadglyph
GUARDING AGAINST THE UNSEEN: INVESTIGATING A STEALTHY REMCOS MALWARE ATTACK ON COLOMBIAN FIRMS
Hong Kong crypto business Mixin says hackers stole $200 million in assets
Xenomorph Malware Strikes Again: Over 30+ US Banks Now Targeted
Hacking
CVE-2023-34040 Spring Kafka Deserialization Remote Code Execution
Source Code at Risk: Critical Code Vulnerability in CI/CD Platform TeamCity
Russian zero-day seller offers $20M for hacking Android and iPhones
Using silent SMS to localize LTE users
Millions of Exim mail servers exposed to zero-day RCE attacks
Intelligence and Information Warfare
Some new snippets from the Snowden documents
WELCOME TO CYBER REALISM: PARSING THE 2023 DEPARTMENT OF DEFENSE CYBER STRATEGY
People’s Republic of China-Linked Cyber Actors Hide in Router Firmware
Chinese hackers stole emails from US State Dept in Microsoft breach, Senate staffer says
National Security Agency is starting an artificial intelligence security center
Cybersecurity
Reports about Cyber Actors Hiding in Router Firmware
Update Chrome Now: Google Releases Patch for Actively Exploited Zero-Day Vulnerability
Cisco Warns of IOS Software Zero-Day Exploitation Attempts
Introducing Advanced Vulnerability Insights for GKE
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, newsletter)
