U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog|U.S. Charges Canadian Man in Alleged Hack of University Supercomputers|Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released|Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe|CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code|U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog|Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack|Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions|Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers|NIS2 Makes Board Members Personally Liable for Access Control Decisions|Apple’s spyware notifications reach the Bundestag: what the BSI says to do now|VOLTA, the infostealer that asks an AI which victims are worth the effort|U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog|U.S. Charges Canadian Man in Alleged Hack of University Supercomputers|Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released|Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe|CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code|U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog|Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack|Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions|Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers|NIS2 Makes Board Members Personally Liable for Access Control Decisions|Apple’s spyware notifications reach the Bundestag: what the BSI says to do now|VOLTA, the infostealer that asks an AI which victims are worth the effort|

Advertisement

Ad Placeholder

Full Width × 90

Security Affairs newsletter Round 186 – News of the week

A new round of the weekly SecurityAffairs newsletter arrived! The best news of the week with Security Affairs. Let me inform you that my new book, “Digging in the Deep Web” is online with a special deal 20% discount Kindle Edition Paper Copy Once again thank you! · DarkPulsar and other NSA hacking tools used […]

October 28, 2018

newsletter

A new round of the weekly SecurityAffairs newsletter arrived!

The best news of the week with Security Affairs.

Let me inform you that my new book, “Digging in the Deep Web” is online with a special deal

20% discount

Kindle Edition

Once again thank you!

· DarkPulsar and other NSA hacking tools used in hacking operations in the wild

· Hackers breached into system that interacts with HealthCare.gov

· WizCase Report: Vulnerabilities found in WD My Book, NetGear Stora, SeaGate Home, Medion LifeCloud NAS

· FreeRTOS flaws expose millions of IoT devices to cyber attacks

· Israel Defense Forces were searching systems to spy on private social media messages

· MPlayer and VLC media player affected by critical flaw CVE-2018-4013

· NATO military command center should be fully operational in 2023

· Saudi Future Investment Initiative website defaced by the hackers

· For the first time Japanese commission ordered Facebook to improve security

· Message Decryption Key for Signal Desktop application stored in plain text

· The fix for the DOM-based XSS in Branch.io introduced a new XSS flaw

· The new Azorult 3.3 is available in the cybercrime underground market

· To Secure Medical Devices, the FDA Turns to Ethical Hackers

· Chalubo, a new IoT botnet emerges in the threat landscape

· Magecart hackers change tactic and target vulnerable Magento extensions

· Russian Government-owned research institute linked to Triton attacks

· SandboxEscaper expert is back and disclosed a new Windows Zero-Day

· Cathay Pacific data breach affecting 9.4 million passengers

· Experts discovered a severe command injection flaw in Cisco Webex Meetings Desktop

· Experts released a free Decryption Tool for GandCrab ransomware

· Google requires 2 years of Android security updates for popular devices

· UK ICO fines Facebook with maximum for Cambridge Analytica scandal

· British Airways: additional 185,000 passengers may have been affected

· CVE-2018-14665 privilege escalation flaw affects popular Linux distros

· A few dollars to bring down sites with new Bushido-based DDoS-for-hire service

· Experts presented BOTCHAIN, the first fully functional Botnet built upon the Bitcoin Protocol

· Apple and Samsung fined millions for “planned obsolescence” of old smartphones

· A few dollars to bring down sites with new Bushido-based DDoS-for-hire service

[adrotate banner=”9″]	[adrotate banner=”12″]

Pierluigi Paganini

(Security Affairs – Newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

Tags

Newsletter Pierluigi Paganini Security Affairs

More Stories>

U.S. Charges Canadian Man in Alleged Hack of University Supercomputers

U.S. Charges Canadian Man in Alleged Hack of University Supercomputers

Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released

Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released

Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe

Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe

Security>

Hacking>

Malware>