Security Affairs newsletter Round 380

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box.

If you want to also receive for free the newsletter with the international press subscribe here.

CISA added 7 new flaws to its Known Exploited Vulnerabilities Catalog
TA558 cybercrime group targets hospitality and travel orgs
Russia-linked Cozy Bear uses evasive techniques to target Microsoft 365 users
CISA added SAP flaw to its Known Exploited Vulnerabilities Catalog
A flaw in Amazon Ring could expose user’s camera recordings
Cisco fixes High-Severity bug in Secure Web Appliance
Bumblebee attacks, from initial access to the compromise of Active Directory Services
Estonia blocked cyberattacks claimed by Pro-Russia Killnet group
Safari 15.6.1 addresses a zero-day flaw actively exploited in the wild
Google blocked the largest Layer 7 DDoS reported to date
BlackByte ransomware v2 is out with new extortion novelties
Apple fixed two new zero-day flaws exploited by threat actors
PoC exploit code for critical Realtek RCE flaw released online
China-linked RedAlpha behind multi-year credential theft campaign
Bugdrop dropper includes features to circumvent Google’s security Controls
Google fixed a new Chrome Zero-Day actively exploited in the wild
North Korea-linked APT targets Job Seekers with macOS malware
ÆPIC Leak is the first CPU flaw able to architecturally disclose sensitive data
Clop gang targeted UK drinking water supplier South Staffordshire Water
Russia-linked Gamaredon APT continues to target Ukraine
Phone numbers of 1,900 Signal users exposed as a result of Twilio security breach
Microsoft disrupts SEABORGIUM ’s ongoing phishing operations
VNC instances exposed to Internet pose critical infrastructures at risk
SOVA Android malware now also encrypts victims’ files
A new PyPI Package was found delivering fileless Linux Malware
Iron Tiger APT is behind a supply chain attack that employed messaging app MiMi
A flaw in Xiaomi phones using MediaTek Chips could allow to forge transactions
CISA, FBI shared a joint advisory to warn of Zeppelin ransomware attacks

Follow me on Twitter: @securityaffairs and Facebook

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

The post Security Affairs newsletter Round 380 appeared first on Security Affairs.

If you like the site, please consider joining the telegram channel or supporting us on Patreon using the button below.

Discord

Original Source