Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released|Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe|CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code|U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog|Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack|Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions|Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers|NIS2 Makes Board Members Personally Liable for Access Control Decisions|Apple’s spyware notifications reach the Bundestag: what the BSI says to do now|VOLTA, the infostealer that asks an AI which victims are worth the effort|New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia|Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens|Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released|Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe|CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code|U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog|Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack|Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions|Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers|NIS2 Makes Board Members Personally Liable for Access Control Decisions|Apple’s spyware notifications reach the Bundestag: what the BSI says to do now|VOLTA, the infostealer that asks an AI which victims are worth the effort|New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia|Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens|

Advertisement

Ad Placeholder

Full Width × 90

Security Affairs newsletter Round 185 – News of the week

A new round of the weekly SecurityAffairs newsletter arrived! The best news of the week with Security Affairs. Let me inform you that my new book, “Digging in the Deep Web” is online with a special deal 20% discount Kindle Edition Paper Copy Once again thank you! · Ex-NASA contractor pleaded guilty for cyberstalking crimes […]

October 21, 2018

newsletter

A new round of the weekly SecurityAffairs newsletter arrived!

The best news of the week with Security Affairs.

Let me inform you that my new book, “Digging in the Deep Web” is online with a special deal

20% discount

Kindle Edition

Once again thank you!

· Ex-NASA contractor pleaded guilty for cyberstalking crimes

· Expert released PoC Code Microsoft Edge Remote Code Execution flaw

· Microsoft fixed the Zero-Day for JET flaw, but the fix is incomplete

· A Russian cyber vigilante is patching outdated MikroTik routers exposed online

· Branch.io Flaws may have affected as many as 685 million individuals

· Online market for counterfeit goods in Russia has reached $1,5 billion

· Russia-linked BlackEnergy backed new cyber attacks on Ukraines state bodies

· 35 million US voter records available for sale in a hacking forum

· A simple message containing certain symbols could crash the Sony PlayStation 4

· Expert disclosed a new passcode bypass to access photos and contacts on a locked iPhone

· How Cybercriminals are Targeting free Wi-Fi Users?

· Russia-linked APT group DustSquad targets diplomatic entities in Central Asia

· A crippling ransomware attack hit a water utility in the aftermath of Hurricane Florence

· Brazil expert discovers Oracle flaw that allows massive DDoS attacks

· MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry

· Thousands of servers easy to hack due to a LibSSH Flaw

· VMware addressed Code Execution Flaw in its ESXi, Workstation, and Fusion products

· Chaining three critical vulnerabilities allows takeover of D-Link routers

· GreyEnergy cyberespionage group targets Poland and Ukraine

· Group-IB: 14 cyber attacks on crypto exchanges resulted in a loss of $882 million

· The author of the LuminosityLink RAT sentenced to 30 Months in Prison

· Attackers behind Operation Oceansalt reuse code from Chinese Comment Crew

· Drupal dev team fixed Remote Code Execution flaws in the popular CMS

· Splunk addressed several vulnerabilities in Enterprise and Light products

· Syrian victims of the GandCrab ransomware can decrypt their files for free

· Thousands of applications affected by a zero-day issue in jQuery File Upload plugin

[adrotate banner=”9″]	[adrotate banner=”12″]

Pierluigi Paganini

(Security Affairs – Newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

Tags

Cybercrime Hacking malware Newsletter Pierluigi Paganini SecurityAffairs

More Stories>

Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released

Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released

Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe

Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe

CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code

CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code

Security>

Hacking>

Malware>