Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released|Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe|CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code|U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog|Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack|Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions|Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers|NIS2 Makes Board Members Personally Liable for Access Control Decisions|Apple’s spyware notifications reach the Bundestag: what the BSI says to do now|VOLTA, the infostealer that asks an AI which victims are worth the effort|New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia|Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens|Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released|Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe|CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code|U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog|Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack|Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions|Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers|NIS2 Makes Board Members Personally Liable for Access Control Decisions|Apple’s spyware notifications reach the Bundestag: what the BSI says to do now|VOLTA, the infostealer that asks an AI which victims are worth the effort|New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia|Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens|

Advertisement

Ad Placeholder

Full Width × 90

Security Affairs newsletter Round 190 – News of the week

A new round of the weekly SecurityAffairs newsletter arrived! The best news of the week with Security Affairs. Let me inform you that my new book, “Digging in the Deep Web” is online with a special deal 20% discount Kindle Edition Paper Copy Once again thank you! · 6,500+ sites deleted after Dark Web hosting […]

November 25, 2018

newsletter

A new round of the weekly SecurityAffairs newsletter arrived!

The best news of the week with Security Affairs.

Let me inform you that my new book, “Digging in the Deep Web” is online with a special deal

20% discount

Kindle Edition

Once again thank you!

· 6,500+ sites deleted after Dark Web hosting provider Daniels Hosting hack

· Hacking Gmails UX with from fields for phishing attacks

· Instagram glitch exposed some user passwords

· Suspected APT29 hackers behind attacks on US gov agencies, think tanks, and businesses

· CarsBlues Bluetooth attack Affects tens of millions of vehicles

· Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29

· Israel aims at hardening aviation industry assets from cyberattack

· Tianfu Cup PWN hacking contest – White hat hackers earn $1 Million for Zero-Day exploits

· Experts analyzed how Iranian OilRIG hackers tested their weaponized documents

· Hackers target Drupal servers chaining several flaws, including Drupalgeddon2 and DirtyCOW

· Mac users using Exodus cryptocurrency wallet targeted by a small spam campaign

· TP-Link fixes 2 Remote Code Execution flaws in TL-R600VPN SOHO Router and other issues

· Two hackers involved in the TalkTalk hack sentenced to prison

· A flaw in US Postal Service website exposed data on 60 Million Users

· Amazon UK is notifying a data breach to its customers days before Black Friday

· Experts found flaws in Dell EMC and VMware Products. Patch them now!

· Facebook increases rewards for its bug bounty program and facilitate bug submission

· Sofacy APT group used a new tool in latest attacks, the Cannon

· Chaining 3 zero-days allowed pen testers to hack Apple macOS computers

· Experts found first Mirai bot targeting Linux servers via Hadoop YARN flaw

· Flaw allowing identity spoofing affects authentication based on German eID cards

· 13 fraudulent apps into Google Play have been downloaded 560,000+ times

· Beware Black Friday & Cyber Monday shoppers: fake products, credit cards scams and other types of fraud

· Exclusive Cybaze ZLab – Yoroi – Hunting Cozy Bear, new campaign, old habits

· New Emotet Thanksgiving campaign differs from previous ones

· Software company OSIsoft has suffered a data breach

· VMware fixed Workstation flaw disclosed at the Tianfu Cup PWN competition

· Chat app Knuddels fined €20k under GDPR regulation

· North Korea-linked group Lazarus targets Latin American banks

· US Government is asking allies to ban Huawei equipment

· Facebook appeals UK fine in Cambridge Analytica privacy Scandal

[adrotate banner=”9″]	[adrotate banner=”12″]

Pierluigi Paganini

(Security Affairs – Newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

Tags

Newsletter Pierluigi Paganini Security Affairs

More Stories>

Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released

Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released

Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe

Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe

CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code

CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code

Security>

Hacking>

Malware>