Inside ARTEX: AI Hacking Tools, Exposed Servers and South Korean Bank Breaches|One Product Isn’t the Problem: Monetizing an AI Portfolio Without Confusing Your Customers|U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog|White House Network Appears in Global Residential Proxy Traffic|OpenAI Rates GPT-6 Cyber Critical After Major Vulnerability Discoveries|ENISA Warns of Cyberattacks Targeting Refrigeration Systems Across Europe|OpenAI Reports Covert Underperformance in GPT-6 Astra|UNM Health Shuts Clinics and Diverts Patients During Security Incident|Russian APT29 Targets Mobile Users with Watering Hole Attacks|U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog|U.S. Charges Canadian Man in Alleged Hack of University Supercomputers|Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released|Inside ARTEX: AI Hacking Tools, Exposed Servers and South Korean Bank Breaches|One Product Isn’t the Problem: Monetizing an AI Portfolio Without Confusing Your Customers|U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog|White House Network Appears in Global Residential Proxy Traffic|OpenAI Rates GPT-6 Cyber Critical After Major Vulnerability Discoveries|ENISA Warns of Cyberattacks Targeting Refrigeration Systems Across Europe|OpenAI Reports Covert Underperformance in GPT-6 Astra|UNM Health Shuts Clinics and Diverts Patients During Security Incident|Russian APT29 Targets Mobile Users with Watering Hole Attacks|U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog|U.S. Charges Canadian Man in Alleged Hack of University Supercomputers|Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released|

Advertisement

Ad Placeholder

Full Width × 90

Security Affairs newsletter Round 380

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box. If you want to also receive for free the newsletter with the international press subscribe here. CISA added 7 new flaws to its Known Exploited Vulnerabilities Catalog TA558 cybercrime group targets hospitality […]

August 20, 2022

newsletter

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box.

If you want to also receive for free the newsletter with the international press subscribe here.

CISA added 7 new flaws to its Known Exploited Vulnerabilities Catalog

TA558 cybercrime group targets hospitality and travel orgs

Russia-linked Cozy Bear uses evasive techniques to target Microsoft 365 users

CISA added SAP flaw to its Known Exploited Vulnerabilities Catalog

A flaw in Amazon Ring could expose user’s camera recordings

Cisco fixes High-Severity bug in Secure Web Appliance

Bumblebee attacks, from initial access to the compromise of Active Directory Services

Estonia blocked cyberattacks claimed by Pro-Russia Killnet group

Safari 15.6.1 addresses a zero-day flaw actively exploited in the wild

Google blocked the largest Layer 7 DDoS reported to date

BlackByte ransomware v2 is out with new extortion novelties

Apple fixed two new zero-day flaws exploited by threat actors

PoC exploit code for critical Realtek RCE flaw released online

China-linked RedAlpha behind multi-year credential theft campaign

Bugdrop dropper includes features to circumvent Google’s security Controls

Google fixed a new Chrome Zero-Day actively exploited in the wild

North Korea-linked APT targets Job Seekers with macOS malware

ÆPIC Leak is the first CPU flaw able to architecturally disclose sensitive data

Clop gang targeted UK drinking water supplier South Staffordshire Water

Russia-linked Gamaredon APT continues to target Ukraine

Phone numbers of 1,900 Signal users exposed as a result of Twilio security breach

Microsoft disrupts SEABORGIUM ’s ongoing phishing operations

VNC instances exposed to Internet pose critical infrastructures at risk

SOVA Android malware now also encrypts victims’ files

A new PyPI Package was found delivering fileless Linux Malware

Iron Tiger APT is behind a supply chain attack that employed messaging app MiMi

A flaw in Xiaomi phones using MediaTek Chips could allow to forge transactions

CISA, FBI shared a joint advisory to warn of Zeppelin ransomware attacks

Follow me on Twitter: @securityaffairs and Facebook

[adrotate banner=”9″]

[adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

Tags

data breach Hacking hacking news information security news IT Information Security Pierluigi Paganini Security Affairs

More Stories>

Inside ARTEX: AI Hacking Tools, Exposed Servers and South Korean Bank Breaches

Artificial Intelligence

Inside ARTEX: AI Hacking Tools, Exposed Servers and South Korean Bank Breaches

One Product Isn’t the Problem: Monetizing an AI Portfolio Without Confusing Your Customers

Artificial Intelligence

One Product Isn’t the Problem: Monetizing an AI Portfolio Without Confusing Your Customers

U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog

Security>

Hacking>

Malware>