Security Affairs newsletter Round 344

A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box.

If you want to also receive for free the newsletter with the international press subscribe here.

Western Digital SanDisk SecureAccess flaws allow brute force and dictionary attacks
New ‘Karakurt’ cybercrime gang focuses on data theft and extortion
Cybereason released Logout4Shell, a vaccine for Log4Shell Apache Log4j RCE
Volvo Cars suffers a data breach. Is it a ransomware attack?
Australian ACSC warns of Conti ransomware attacks against local orgs
A zero-day exploit for Log4j Java library could have a tsunami impact on IT giants
1.6 million WordPress sites targeted in the last couple of days
Dark Mirai botnet spreads targeting RCE on TP-Link routers
Mozilla fixed high-severity bugs in Firefox and Thunderbird mail client
Crooks injects e-skimmers in random WordPress plugins of e-stores
Tens of malicious NPM packages caught hijacking Discord servers
Moobot botnet spreads by exploiting CVE-2021-36260 flaw in Hikvision products
Microsoft Vancouver leaking website credentials via overlooked DS_STORE file
SonicWall strongly urges customers to apply patches to SMA 100 devices
CS Energy foiled a ransomware attack
Emotet directly drops Cobalt Strike beacons without intermediate Trojans
Google disrupts the Glupteba botnet
Bitcoin Miner [oom_reaper] targets QNAP NAS devices
Microsoft seized 42 domains used by the China-linked APT15 cyberespionage group
Nobelium continues to target organizations worldwide with custom malware
Nobelium APT targets French orgs, French ANSSI agency warns
330 SPAR stores close or switch to cash-only payments after a cyberattack
DMEA Colorado electric utility hit by a disruptive cyberattack
Threat actors stole more than $150 million worth of cryptocurrency tokens from BitMart platform
Hackers are sending receipts with anti-work messages to businesses’ printers
Magnat malvertising campaigns spreads malicious Chrome extensions, backdoors and info stealers
Hundreds of vulnerabilities in common Wi-Fi routers affect millions of users
German BSI agency warns of ransomware attacks over Christmas holidays

If you want to also receive for free the newsletter with the international press subscribe here.

Follow me on Twitter: @securityaffairs and Facebook

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

The post Security Affairs newsletter Round 344 appeared first on Security Affairs.

If you like the site, please consider joining the telegram channel or supporting us on Patreon using the button below.

Discord

Original Source