EvilTokens made phishing-as-a-service look easy. Then it got taken down|Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools|CVE-2026-87902: how close is your WordPress to remote code execution?|Check Point Fixes a New Actively Exploited Critical Security Flaw|Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day|Public PoC Exposes Critical Veeam Agent Privilege Escalation|U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog|Contagious Interview: 30,000 devices infected by a fake job interview|Google Fined €403 Million Over Location Data Practices|Foreign Hackers Target Two Colorado Water Utilities|ChainScript: the RAT that hides its command server inside a blockchain contract|A BYD Shark 6 Hack Shows the Risks of Connected Cars|EvilTokens made phishing-as-a-service look easy. Then it got taken down|Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools|CVE-2026-87902: how close is your WordPress to remote code execution?|Check Point Fixes a New Actively Exploited Critical Security Flaw|Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day|Public PoC Exposes Critical Veeam Agent Privilege Escalation|U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog|Contagious Interview: 30,000 devices infected by a fake job interview|Google Fined €403 Million Over Location Data Practices|Foreign Hackers Target Two Colorado Water Utilities|ChainScript: the RAT that hides its command server inside a blockchain contract|A BYD Shark 6 Hack Shows the Risks of Connected Cars|

Advertisement

Ad Placeholder

Full Width × 90

Security Affairs newsletter Round 244

A new round of the weekly newsletter arrived! The best news of the week with Security Affairs SEC Xtractor – Experts released an open-source hardware analysis tool US authorities charged Dridex gang members for stealing over $100 Million A bug in the decryptor for the Ryuk ransomware could cause data loss China 3-5-2 directive orders […]

December 15, 2019

newsletter

A new round of the weekly newsletter arrived! The best news of the week with Security Affairs

SEC Xtractor – Experts released an open-source hardware analysis tool

US authorities charged Dridex gang members for stealing over $100 Million

A bug in the decryptor for the Ryuk ransomware could cause data loss

China 3-5-2 directive orders state offices to remove foreign hardware and software

Google fixes a critical DoS flaw tracked as CVE-2019-2232 in Android

Google released PathAuditor to detect unsafe path access patterns

New ‘PyXie Python RAT targets multiple industries

Adobe Patch Tuesday addresses critical flaws in four products

City of Pensacola hit by a cyberattack few days after military base shooting

More than 44 million Microsoft user accounts are exposed to hack

NordVPN announced the launch of a bug bounty program

Snatch Ransomware force systems to Windows Safe Mode to bypass security solutions

Iran announced it foiled ‘really massive foreign cyber attack

Microsoft fixes CVE-2019-1458 Windows Zero-Day exploited in NK-Linked attacks

More than 460,000 payment card details offered for sale on a black market

PlunderVolt attack hijacks Intel SGX Enclaves by tweaking CPU Voltage

Seniors Targeted in Penny Stock Scam

Unsecured AWS bucket exposes over 750,000 birth certificate applications

AirDoS attack could make iPhones, iPads unusable via AirDrop attack

GALLIUM Threat Group targets global telcos, Microsoft warns

Massive Magecart campaign targets sites offering counterfeit sneakers

Trickbot gang and Lazarus APT, the hidden link behind an epochal phenomena

Zeppelin Ransomware targets Tech and Health Companies

A flaw in outdated versions of Beaver Builder and Elementor plugins allows hacking WordPress sites

Flaws in Siemens SPPA-T3000 control system expose power plants to hack

SEC Charges Shopin Founder with fraud over unregistered $42M ICO

VISA warns of cyber attacks on PoS systems of fuel dispenser merchants

A malvertising campaign targets iPhone users with Krampus-3PC

New Orleans hit by ransomware, US cities continues to be under attack

Rooster Teeth Productions suffered a payment card breach

[adrotate banner=”9″]

[adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

Tags

Hacking information security news Newsletter Pierluigi Paganini Security News

More Stories>

EvilTokens made phishing-as-a-service look easy. Then it got taken down

Artificial Intelligence

EvilTokens made phishing-as-a-service look easy. Then it got taken down

Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools

Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools

CVE-2026-87902: how close is your WordPress to remote code execution?

CVE-2026-87902: how close is your WordPress to remote code execution?

Security>

Hacking>

Malware>