Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released|Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe|CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code|U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog|Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack|Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions|Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers|NIS2 Makes Board Members Personally Liable for Access Control Decisions|Apple’s spyware notifications reach the Bundestag: what the BSI says to do now|VOLTA, the infostealer that asks an AI which victims are worth the effort|New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia|Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens|Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released|Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe|CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code|U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog|Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack|Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions|Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers|NIS2 Makes Board Members Personally Liable for Access Control Decisions|Apple’s spyware notifications reach the Bundestag: what the BSI says to do now|VOLTA, the infostealer that asks an AI which victims are worth the effort|New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia|Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens|

Advertisement

Ad Placeholder

Full Width × 90

Security Affairs newsletter Round 189 – News of the week

A new round of the weekly SecurityAffairs newsletter arrived! The best news of the week with Security Affairs. Let me inform you that my new book, “Digging in the Deep Web” is online with a special deal 20% discount Kindle Edition Paper Copy Once again thank you! · CVE-2018-15961: Adobe ColdFusion Flaw exploited in attacks in […]

November 18, 2018

newsletter

A new round of the weekly SecurityAffairs newsletter arrived!

The best news of the week with Security Affairs.

Let me inform you that my new book, “Digging in the Deep Web” is online with a special deal

20% discount

Kindle Edition

Once again thank you!

· CVE-2018-15961: Adobe ColdFusion Flaw exploited in attacks in the wild

· Linux Cryptocurrency miner leverages rootkit to avoid detection

· A critical flaw in GDPR compliance plugin for WordPress exploited in the wild

· Elon Musk BITCOIN Twitter scam, a simple and profitable fraud for crooks

· France seeks Global Talks on Cyberspace security and a code of good conduct

· Hacking the hackers – IOT botnet author adds his own backdoor on top of a ZTE router backdoor

· Reading the Android Ecosystem Security Transparency Report

· Cathay Pacific waited six months before disclosing the security breach

· Expert found a way to bypass Windows UAC by mocking trusted Directory

· Google Services down due to BGP leak, traffic hijacked through Russia, China, and Nigeria

· Microsofts Patch Tuesday updates for November 2018 fix actively exploited Windows flaw

· Operation Shaheen – Pakistan Air Force members targeted by nation-state attackers

· Adobe Patch Tuesday updates for November 2018 fix known Acrobat flaw

· Boffins discovered seven new Meltdown and Spectre attacks

· Cyber espionage group used CVE-2018-8589 Windows Zero-Day in Middle East Attacks

· Facebook flaw could have exposed private info of users and their friends

· The ‘MartyMcFly investigation: Italian naval industry under attack

· Chinese TEMP.Periscope cyberespionage group was using TTPs associated with Russian APTs

· Congress passes bill that create new Cybersecurity and Infrastructure Security Agency at DHS

· Kaspersky Lab opens first Transparency Center in Zurich

· Pwn2Own Tokyo 2018 – iPhone X exploits paid over $100,000

· Senior German officials wants exclude Chinese firms from building 5G infrastructure

· Cybaze ZLab- Yoroi team spotted a new variant of the APT28 Lojax rootkit

· Group-IB presented latest cybercrime and nation-state hacking trends in Asia

· tRat is a new modular RAT used by the threat actor TA505

· Two hacker groups attacked Russian banks posing as the Central Bank of Russia

· Using Microsoft Powerpoint as Malware Dropper

· Japanese governments cybersecurity strategy chief has never used a computer

· New set of Pakistani banks card dumps goes on sale on the dark web

· Protonmail hacked …. a very strange scam attempt

[adrotate banner=”9″]	[adrotate banner=”12″]

Pierluigi Paganini

(Security Affairs – Newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

Tags

Cybercrime Hacking Information Warfare Newsletter Pierluigi Paganini Security Affairs

More Stories>

Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released

Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released

Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe

Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe

CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code

CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code

Security>

Hacking>

Malware>