Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released|Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe|CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code|U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog|Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack|Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions|Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers|NIS2 Makes Board Members Personally Liable for Access Control Decisions|Apple’s spyware notifications reach the Bundestag: what the BSI says to do now|VOLTA, the infostealer that asks an AI which victims are worth the effort|New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia|Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens|Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released|Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe|CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code|U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog|Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack|Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions|Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers|NIS2 Makes Board Members Personally Liable for Access Control Decisions|Apple’s spyware notifications reach the Bundestag: what the BSI says to do now|VOLTA, the infostealer that asks an AI which victims are worth the effort|New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia|Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens|

Advertisement

Ad Placeholder

Full Width × 90

Security Affairs newsletter Round 235

A new round of the weekly newsletter arrived! The best news of the week with Security Affairs Hi folk, let me inform you that I suspended the newsletter service, anyway I’ll continue to provide you a list of published posts every week through the blog. Hacker is auctioning a database containing details of 92 million […]

October 13, 2019

newsletter

A new round of the weekly newsletter arrived! The best news of the week with Security Affairs

Hi folk, let me inform you that I suspended the newsletter service, anyway I’ll continue to provide you a list of published posts every week through the blog.

Hacker is auctioning a database containing details of 92 million Brazilians

Iran-linked Phosphorus group hit a 2020 presidential campaign

UK NCSC agency warns of APTs exploiting Enterprise VPN vulnerabilities

D-Link router models affected by remote code execution issue that will not be fixed

Data from Sephora and StreetEasy data breaches added to HIBP

PoS malware infections impacted four restaurant chains in the U.S.

US will help Baltic states to secure baltic energy grid

Developer hacked back Muhstik ransomware crew and released keys

Experts found a link between a Magecart group and Cobalt Group

Hackers continue to exploit the Drupalgeddon2 flaw in attacks in the wild

MS October 2019 Patch Tuesday updates address 59 flaws

Users reported problems with patches for CVE-2019-1367 IE zero-day

Hackers compromised Volusion infrastructure to siphon card details from thousands of sites

Multiple APT groups are exploiting VPN vulnerabilities, NSA warns

Researchers discovered a code execution flaw in NSA GHIDRA

Twitter inadvertently used Phone Numbers collected for security for Ads

vBulletin addresses three new high-severity vulnerabilities

Amnesty claims that 2 Morocco rights advocates were targeted by NSO Group spyware

Attor malware was developed by one of the most sophisticated espionage groups

iTunes Zero-Day flaw exploited by the gang behind BitPaymer ransomware

Ops, popular iTerm2 macOS Terminal App is affected by a critical RCE since 2012

SAP October 2019 Security Patch Day fixes 2 critical flaws

Tor Project is going to remove End-Of-Life relays from the network

Hacker breached escort forums in Italy and the Netherlands and is selling user data

Researchers released a free decryptor for the Nemty Ransomware

Sophos fixed a critical vulnerability in Cyberoam firewalls

Tens of million PCs potentially impacted by a flaw in HP Touchpoint Analytics

Top cybersecurity certifications to consider for your IT career

FIN7 Hackers group is back with a new loader and a new RAT

Leafly Cannabis information platform suffered a data leak

SIM cards used in 29 countries are vulnerable to Simjacker attack

[adrotate banner=”9″]

[adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

Tags

Hacking information security news malware Newsletter Pierluigi Paganini Security Affairs Security News

More Stories>

Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released

Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released

Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe

Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe

CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code

CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code

Security>

Hacking>

Malware>