Articles September 2023

January(103) February(113) March(175) APRIL(74) MAY(28) JUNE(198) July(423) August(462) September(389) October(406) November(309) December(361)

DATE	NAME	CATEGORY	WEB
30.9.23	New Critical Security Flaws Expose Exim Mail Servers to Remote Attacks	Vulnerebility	The Hacker News
30.9.23	Cybercriminals Using New ASMCrypt Malware Loader to Fly Under the Radar	Virus	The Hacker News
30.9.23	Lazarus Group Impersonates Recruiter from Meta to Target Spanish Aerospace Firm	APT	The Hacker News
30.9.23	Post-Quantum Cryptography: Finally Real in Consumer Apps?	Security	The Hacker News
30.9.23	Microsoft's AI-Powered Bing Chat Ads May Lead Users to Malware-Distributing Sites	AI	The Hacker News
30.9.23	Progress Software Releases Urgent Hotfixes for Multiple Security Flaws in WS_FTP Server	Vulnerebility	The Hacker News
30.9.23	Cisco Warns of Vulnerability in IOS and IOS XE Software After Exploitation Attempts	Exploit	The Hacker News
30.9.23	GitHub Repositories Hit by Password-Stealing Commits Disguised as Dependabot Contributions	Virus	The Hacker News
30.9.23	China's BlackTech Hacking Group Exploited Routers to Target U.S. and Japanese Companies	BigBrothers	The Hacker News
30.9.23	China-Linked Budworm Targeting Middle Eastern Telco and Asian Government Agencies	BigBrothers	The Hacker News
30.9.23	Update Chrome Now: Google Releases Patch for Actively Exploited Zero-Day Vulnerability	Vulnerebility	The Hacker News
30.9.23	Red Cross-Themed Phishing Attacks Distributing DangerAds and AtlasAgent Backdoors	Virus	The Hacker News
30.9.23	Researchers Uncover New GPU Side-Channel Vulnerability Leaking Sensitive Data	Vulnerebility	The Hacker News
30.9.23	New Survey Uncovers How Companies Are Confronting Data Security Challenges Head-On	Security	The Hacker News
30.9.23	New ZenRAT Malware Targeting Windows Users via Fake Password Manager Software	Virus	The Hacker News
30.9.23	Critical libwebp Vulnerability Under Active Exploitation - Gets Maximum CVSS Score	Exploit	The Hacker News
30.9.23	Microsoft is Rolling out Support for Passkeys in Windows 11	OS	The Hacker News
30.9.23	ShadowSyndicate: A New Cybercrime Group Linked to 7 Ransomware Families	Ransom	The Hacker News
30.9.23	Xenomorph Banking Trojan: A New Variant Targeting 35+ U.S. Financial Institutions	Virus	The Hacker News
30.9.23	Threat Report: High Tech Industry targeted the most with 46% of attack traffic tagged by NLX	Attack	The Hacker News
30.9.23	Chinese Hackers TAG-74 Targets South Korean Organizations in a Multi-Year Campaign	BigBrothers	The Hacker News
30.9.23	Critical JetBrains TeamCity Flaw Could Expose Source Code and Build Pipelines to Attackers	Vulnerebility	The Hacker News
30.9.23	Ukrainian Military Targeted in Phishing Campaign Leveraging Drone Manuals	BigBrothers	The Hacker News
30.9.23	Are You Willing to Pay the High Cost of Compromised Credentials?	Incindent	The Hacker News
30.9.23	From Watering Hole to Spyware: EvilBamboo Targets Tibetans, Uyghurs, and Taiwanese	BigBrothers	The Hacker News
30.9.23	New Report Uncovers 3 Distinct Clusters of China-Nexus Attacks on Southeast Asian Government	BigBrothers	The Hacker News
24.9.23	Rare Backdoors Suspected to be Tied to Gelsemium APT Found in Targeted Attack in Southeast Asian Government	Malware blog	Palo Alto
24.9.23	Cyberespionage Attacks Against Southeast Asian Government Linked to Stately Taurus, Aka Mustang Panda	BigBrother blog	Palo Alto
24.9.23	Persistent Attempts at Cyberespionage Against Southeast Asian Government Target Have Links to Alloy Taurus	BigBrother blog	Palo Alto
24.9.23	Fake CVE-2023-40477 Proof of Concept Leads to VenomRAT	Malware blog	Palo Alto
24.9.23	BEHIND THE SCENES OF BBTOK: ANALYZING A BANKER’S SERVER SIDE COMPONENTS	Malware blog	Checkpoint
24.9.23	UNVEILING THE SHADOWS: THE DARK ALLIANCE BETWEEN GULOADER AND REMCOS	Malware blog	Checkpoint
24.9.23	New ShroudedSnooper actor targets telecommunications firms in the Middle East with novel Implants	Malware blog	Cisco Blog
24.9.23	What’s the point of press releases from threat actors?	Cyber blog	Cisco Blog
24.9.23	ESET's cutting-edge threat research at LABScon – Week in security with Tony Anscombe	Cyber blog	Eset
24.9.23	Stealth Falcon preying over Middle Eastern skies with Deadglyph	Malware blog	Eset
24.9.23	OilRig’s Outer Space and Juicy Mix: Same ol’ rig, new drill pipes	Malware blog	Eset
24.9.23	New stealthy and modular Deadglyph malware used in govt attacks	Virus	BleepingComputer
24.9.23	Evasive Gelsemium hackers spotted in attack against Asian govt	BigBrothers	BleepingComputer
24.9.23	National Student Clearinghouse data breach impacts 890 schools	Incindent	BleepingComputer
24.9.23	Air Canada discloses data breach of employee and 'certain records'	Incindent	BleepingComputer
24.9.23	Deadglyph: New Advanced Backdoor with Distinctive Malware Tactics	Virus	The Hacker News
23.9.23	New Apple Zero-Days Exploited to Target Egyptian ex-MP with Predator Spyware	Apple	The Hacker News
23.9.23	New Variant of Banking Trojan BBTok Targets Over 40 Latin American Banks	Virus	The Hacker News
23.9.23	Recently patched Apple and Chrome zero-days exploited to infect devices in Egypt with Predator spyware	Apple	Securityaffairs
23.9.23	CISA adds Trend Micro Apex One and Worry-Free Business Security flaw to its Known Exploited Vulnerabilities catalog	BigBrothers	Securityaffairs
23.9.23	Information of Air Canada employees exposed in recent cyberattack	Incindent	Securityaffairs
23.9.23	Sandman APT targets telcos with LuaDream backdoor	APT	Securityaffairs
23.9.23	Experts warn of a 600X increase in P2Pinfect traffic	Virus	Securityaffairs
23.9.23	Apple rolled out emergency updates to address 3 new actively exploited zero-day flaws	Apple	Securityaffairs
23.9.23	Ukrainian hackers are behind the Free Download Manager supply chain attack	Attack	Securityaffairs
23.9.23	Space and defense tech maker Exail Technologies exposes database access	Incindent	Securityaffairs
23.9.23	Pro-Russia hacker group NoName launched a DDoS attack on Canadian airports causing severe disruptions	BigBrothers	Securityaffairs
23.9.23	Experts found critical flaws in Nagios XI network monitoring software	Vulnerebility	Securityaffairs
23.9.23	The dark web drug marketplace PIILOPUOTI was dismantled by Finnish Customs	CyberCrime	Securityaffairs
23.9.23	International Criminal Court hit with a cyber attack	Attack	Securityaffairs
23.9.23	GitLab addressed critical vulnerability CVE-2023-5009	Vulnerebility	Securityaffairs
23.9.23	Trend Micro addresses actively exploited zero-day in Apex One and other security Products	Exploit	Securityaffairs
23.9.23	ShroudedSnooper threat actors target telecom companies in the Middle East	Virus	Securityaffairs
23.9.23	Recent cyber attack is causing Clorox products shortage	Attack	Securityaffairs
23.9.23	Dallas says Royal ransomware breached its network using stolen account	Ransom	BleepingComputer
23.9.23	Nigerian man pleads guilty to attempted $6 million BEC email heist	Spam	BleepingComputer
23.9.23	Recently patched Apple, Chrome zero-days exploited in spyware attacks	Apple	BleepingComputer
23.9.23	Government of Bermuda links cyberattack to Russian hackers	BigBrothers	BleepingComputer
23.9.23	Crypto firm Nansen asks users to reset passwords after vendor breach	Incindent	BleepingComputer
23.9.23	T-Mobile denies new data breach rumors, points to authorized retailer	Incindent	BleepingComputer
23.9.23	Hotel hackers redirect guests to fake Booking.com to steal cards	Incindent	BleepingComputer
23.9.23	‘Sandman’ hackers backdoor telcos with new LuaDream malware	Virus	BleepingComputer
23.9.23	GitHub passkeys generally available for passwordless sign-ins	Incindent	BleepingComputer
23.9.23	Apple emergency updates fix 3 new zero-days exploited in attacks	Apple	BleepingComputer
23.9.23	Microsoft Copilot rolls out with Windows 11 22H2 update next week	OS	BleepingComputer
23.9.23	Pizza Hut Australia warns 193,000 customers of a data breach	Incindent	BleepingComputer
23.9.23	P2PInfect botnet activity surges 600x with stealthier malware variants	Virus	BleepingComputer
23.9.23	T-Mobile app glitch let users see other people's account info	Incindent	BleepingComputer
23.9.23	TransUnion denies it was hacked, links leaked data to 3rd party	Hack	BleepingComputer
23.9.23	Free Download Manager releases script to check for Linux malware	Virus	BleepingComputer
23.9.23	Fake WinRAR proof-of-concept exploit drops VenomRAT malware	Virus	BleepingComputer
23.9.23	Signal adds quantum-resistant encryption to its E2EE messaging protocol	Security	BleepingComputer
22.9.23	How to Interpret the 2023 MITRE ATT&CK Evaluation Results	Cyber	The Hacker News
22.9.23	Iranian Nation-State Actor OilRig Targets Israeli Organizations	BigBrothers	The Hacker News
22.9.23	High-Severity Flaws Uncovered in Atlassian Products and ISC BIND Server	Vulnerebility	The Hacker News
22.9.23	Apple Rushes to Patch 3 New Zero-Day Flaws: iOS, macOS, Safari, and More Vulnerable	Apple	The Hacker News
22.9.23	Mysterious 'Sandman' Threat Actor Targets Telecom Providers Across Three Continents	CyberCrime	The Hacker News
21.9.23	Researchers Raise Red Flag on P2PInfect Malware with 600x Activity Surge	Virus	The Hacker News
21.9.23	China Accuses U.S. of Decade-Long Cyber Espionage Campaign Against Huawei Servers	BigBrothers	The Hacker News
21.9.23	Cyber Group 'Gold Melody' Selling Compromised Access to Ransomware Attackers	Ransom	The Hacker News
21.9.23	Ukrainian Hacker Suspected to be Behind "Free Download Manager" Malware Attack	Virus	The Hacker News
21.9.23	Beware: Fake Exploit for WinRAR Vulnerability on GitHub Infects Users with Venom RAT	Virus	The Hacker News
20.9.23	Finnish Authorities Dismantle Notorious PIILOPUOTI Dark Web Drug Marketplace	CyberCrime	The Hacker News
20.9.23	Critical Security Flaws Exposed in Nagios XI Network Monitoring Software	Vulnerebility	The Hacker News
20.9.23	Fresh Wave of Malicious npm Packages Threaten Kubernetes Configs and SSH Keys	Virus	The Hacker News
20.9.23	Sophisticated Phishing Campaign Targeting Chinese Users with ValleyRAT and Gh0st RAT	Virus	The Hacker News
20.9.23	Signal Messenger Introduces PQXDH Quantum-Resistant Encryption	Social	The Hacker News
20.9.23	GitLab Releases Urgent Security Patches for Critical Vulnerability	Vulnerebility	The Hacker News
20.9.23	Trend Micro Releases Urgent Fix for Actively Exploited Critical Security Vulnerability	Vulnerebility	The Hacker News
20.9.23	Claimants in Celsius crypto bankruptcy targeted in phishing attack	Phishing	BleepingComputer
20.9.23	Trend Micro fixes endpoint protection zero-day used in attacks	Vulnerebility	BleepingComputer
20.9.23	Hackers breached International Criminal Court’s systems last week	Incindent	BleepingComputer
20.9.23	GitLab urges users to install security updates for critical pipeline flaw	Security	BleepingComputer
20.9.23	Microsoft to start retiring Exchange Web Services in October 2026	OS	BleepingComputer
20.9.23	Hackers backdoor telecom providers with new HTTPSnoop malware	Virus	BleepingComputer
20.9.23	APT36 state hackers infect Android devices using YouTube app clones	APT	BleepingComputer
20.9.23	Windows Subsystem for Linux gets new 'mirrored' network mode	OS	BleepingComputer
20.9.23	Thousands of Juniper devices vulnerable to unauthenticated RCE flaw	Vulnerebility	BleepingComputer
20.9.23	Bumblebee malware returns in new attacks abusing WebDAV folders	Virus	BleepingComputer
20.9.23	Microsoft leaks 38TB of private data via unsecured Azure storage	Incindent	BleepingComputer
20.9.23	New SprySOCKS Linux malware used in cyber espionage attacks	Virus	BleepingComputer
20.9.23	TikTok flooded by 'Elon Musk' cryptocurrency giveaway scams	Social	BleepingComputer
20.9.23	Google Chrome tests Microsoft Edge-like Read Aloud feature	Security	BleepingComputer
20.9.23	Microsoft Edge is losing tablet-friendly "Web Select" feature	Security	BleepingComputer
20.9.23	BlackCat ransomware hits Azure Storage with Sphynx encryptor	Ransom	BleepingComputer
19.9.23	ShroudedSnooper's HTTPSnoop Backdoor Targets Middle East Telecom Companies	Virus	The Hacker News
19.9.23	Operation Rusty Flag: Azerbaijan Targeted in New Rust-Based Malware Campaign	Virus	The Hacker News
19.9.23	Inside the Code of a New XWorm Variant	Virus	The Hacker News
19.9.23	Earth Lusca's New SprySOCKS Linux Backdoor Targets Government Entities	Virus	The Hacker News
19.9.23	Microsoft AI Researchers Accidentally Expose 38 Terabytes of Confidential Data	Incindent	The Hacker News
19.9.23	Nearly 12,000 Juniper Firewalls Found Vulnerable to Recently Disclosed RCE Vulnerability	Vulnerebility	The Hacker News
19.9.23	Transparent Tribe Uses Fake YouTube Android Apps to Spread CapraRAT Malware	Virus	The Hacker News
18.9.23	New AMBERSQUID Cryptojacking Operation Targets Uncommon AWS Services	Cryptocurrency	The Hacker News
18.9.23	Think Your MFA and PAM Solutions Protect You? Think Again	Security	The Hacker News
18.9.23	Hook: New Android Banking Trojan That Expands on ERMAC's Legacy	Android	The Hacker News
18.9.23	Retool Falls Victim to SMS-Based Phishing Attack Affecting 27 Cloud Clients	Phishing	The Hacker News
18.9.23	Financially Motivated UNC3944 Threat Actor Shifts Focus to Ransomware Attacks	Ransom	The Hacker News
17.9.23	CardX released a data leak notification impacting their customers in Thailand	Incindent	Securityaffairs
17.9.23	TikTok fined €345M by Irish DPC for violating children’s privacy	Social	Securityaffairs
17.9.23	Iranian Peach Sandstorm group behind recent password spray attacks	Attack	Securityaffairs
17.9.23	Caesars Entertainment paid a ransom to avoid stolen data leaks	Ransom	Securityaffairs
17.9.23	Free Download Manager backdoored to serve Linux malware for more than 3 years	Virus	Securityaffairs
17.9.23	Lockbit ransomware gang hit the Carthage Area Hospital and the Clayton-Hepburn Medical Center in New York	Ransom	Securityaffairs
17.9.23	UK Greater Manchester Police disclosed a data breach	Incindent	Securityaffairs
17.9.23	North Korea's Lazarus Group Suspected in $31 Million CoinEx Heist	APT	The Hacker News
17.9.23	TikTok Faces Massive €345 Million Fine Over Child Data Violations in E.U.	Social	The Hacker News
16.9.23	Threat Group Assessment: Turla (aka Pensive Ursa)	Ransom blog	Palo Alto
16.9.23	Unit 42 Attack Surface Threat Research: Constant Change in Cloud Contributes to 45% of New High/Critical Exposures Per Month	Cyber blog	Palo Alto
16.9.23	RedLine Stealer: Answers to Unit Wireshark Quiz	Malware blog	Palo Alto
16.9.23	Crossing the Line: Unit 42 Wireshark Quiz for RedLine Stealer	Malware blog	Palo Alto
16.9.23	GUARDING AGAINST THE UNSEEN: INVESTIGATING A STEALTHY REMCOS MALWARE ATTACK ON COLOMBIAN FIRMS	Malware blog	Checkpoint
16.9.23	ELECTIONS SPOTLIGHT: GENERATIVE AI AND DEEP FAKES	Security blog	Checkpoint
16.9.23	From Hidden Bee to Rhadamanthys – The Evolution of Custom Executable Formats	Ransom blog	Checkpoint
16.9.23	How Cisco Talos IR helped a healthcare company quickly resolve a Qakbot attack	Attack blog	Cisco Blog
16.9.23	Microsoft Patch Tuesday for September 2023 — Unusually low 5 critical vulnerabilities included in Microsoft Patch Tuesday, along with two zero-days	OS Blog	Cisco Blog
16.9.23	You can try to hide your firmware from Kelly Patterson, but she’ll find it (and break it)	Cyber blog	Cisco Blog
16.9.23	Cybercriminals target graphic designers with GPU miners	Cyber blog	Cisco Blog
16.9.23	Turns out even the NFL is worried about deepfakes	Security blog	Cisco Blog
16.9.23	A secondhand account of the worst possible timing for a scammer to strike	Spam blog	Cisco Blog
16.9.23	Eight vulnerabilities in Open Automation Software Platform could lead to information disclosure, improper authentication	Vulnerebility blog	Cisco Blog
16.9.23	New open-source infostealer, and reflections on 2023 so far	Malware blog	Cisco Blog
16.9.23	SapphireStealer: Open-source information stealer enables credential and data theft	Malware blog	Cisco Blog
16.9.23	What's in a name? Strange behaviors at top-level domains creates uncertainty in DNS	Security blog	Cisco Blog
16.9.23	Years into these games’ histories, attackers are still creating “Fortnite” and “Roblox”-related scams	Hacking blog	Cisco Blog
16.9.23	Lazarus Group's infrastructure reuse leads to discovery of new malware	Malware blog	Cisco Blog
16.9.23	Lazarus Group exploits ManageEngine vulnerability to deploy QuiteRAT	Malware blog	Cisco Blog
16.9.23	Three vulnerabilities in NVIDIA graphics driver could cause memory corruption	Vulnerebility blog	Cisco Blog
16.9.23	Generating FLIRT signatures for Nim and other non-C programming languages	Security blog	Cisco Blog
16.9.23	Recapping the top stories from Black Hat and DEF CON	Cyber blog	Cisco Blog
16.9.23	The rise of AI-powered criminals: Identifying threats and opportunities	Cyber blog	Cisco Blog
16.9.23	Reflecting on supply chain attacks halfway through 2023	Attack blog	Cisco Blog
16.9.23	Out-of-bounds write vulnerabilities in popular chemistry software; Foxit PDF Reader issues could lead to remote code execution	Vulnerebility blog	Cisco Blog
16.9.23	Ballistic Bobcat's Sponsor backdoor – Week in security with Tony Anscombe	Malware blog	Eset
16.9.23	Read it right! How to spot scams on Reddit	Spam blog	Eset
16.9.23	ESET Research Podcast: Sextortion, digital usury and SQL brute-force	Hacking blog	Eset
16.9.23	Sponsor with batch-filed whiskers: Ballistic Bobcat’s scan and strike backdoor	Malware blog	Eset
16.9.23	Will you give X your biometric data? – Week in security with Tony Anscombe	Cyber blog	Eset
16.9.23	Staying ahead of threats: 5 cybercrime trends to watch	Cyber blog	Eset
16.9.23	Getting off the hook: 10 steps to take after clicking on a phishing link	Phishing blog	Eset
16.9.23	Fake Signal and Telegram apps – Week in security with Tony Anscombe	Social blog	Eset
16.9.23	What you need to know about iCloud Private Relay	OS Blog	Eset
16.9.23	BadBazaar espionage tool targets Android users via trojanized Signal and Telegram apps	OS Blog	Eset
16.9.23	The Week in Ransomware - September 15th 2023 - Russian Roulette	Ransom	BleepingComputer
16.9.23	Retool blames breach on Google Authenticator MFA cloud sync feature	Incindent	BleepingComputer
16.9.23	Google extends security update support for Chromebooks to 10 years	Security	BleepingComputer
16.9.23	ORBCOMM ransomware attack causes trucking fleet management outage	Ransom	BleepingComputer
16.9.23	MGM casino's ESXi servers allegedly encrypted in ransomware attack	Ransom	BleepingComputer
16.9.23	Auckland transport authority hit by suspected ransomware attack	Ransom	BleepingComputer
16.9.23	Windows 11 Snipping Tool gets OCR support to copy text from images	OS	BleepingComputer
16.9.23	Caesars Entertainment confirms ransom payment, customer data theft	Ransom	BleepingComputer
16.9.23	Iranian hackers breach defense orgs in password spray attacks	BigBrothers	BleepingComputer
16.9.23	Windows 11 ‘ThemeBleed’ RCE bug gets proof-of-concept exploit	Exploit	BleepingComputer
16.9.23	Manchester Police officers' data exposed in ransomware attack	Ransom	BleepingComputer
16.9.23	Fake Cisco Webex Google Ads abuse tracking templates to push malware	Virus	BleepingComputer
16.9.23	Google Agrees to $93 Million Settlement in California's Location-Privacy Lawsuit	Security	The Hacker News
16.9.23	DDoS 2.0: IoT Sparks New DDoS Alert	Attack	The Hacker News
16.9.23	NodeStealer Malware Now Targets Facebook Business Accounts on Multiple Browsers	Virus	The Hacker News
16.9.23	Cybercriminals Combine Phishing and EV Certificates to Deliver Ransomware Payloads	Ransom	The Hacker News
15.9.23	Iranian Nation-State Actors Employ Password Spray Attacks Targeting Multiple Sectors	BigBrothers	The Hacker News
15.9.23	Microsoft Uncovers Flaws in ncurses Library Affecting Linux and macOS Systems	Apple	The Hacker News
15.9.23	Free Download Manager Site Compromised to Distribute Linux Malware to Users for 3+ Years	Virus	The Hacker News
14.9.23	Rollbar discloses data breach after hackers stole access tokens	Incindent	BleepingComputer
14.9.23	New Windows 11 feature blocks NTLM-based attacks over SMB	OS	BleepingComputer
14.9.23	France demands Apple pull iPhone 12 due to high RF radiation levels	Apple	BleepingComputer
14.9.23	Microsoft Teams down: Ongoing outage behind message failures, delays	Security	BleepingComputer
14.9.23	Hackers steal $53 million worth of cryptocurrency from CoinEx	Cryptocurrency	BleepingComputer
14.9.23	Hackers use new 3AM ransomware to save failed LockBit attack	Ransom	BleepingComputer
14.9.23	Mozilla patches Firefox, Thunderbird against zero-day exploited in attacks	Exploit	BleepingComputer
14.9.23	New 'MetaStealer' malware targets Intel-based macOS systems	Apple	BleepingComputer
14.9.23	Ransomware access broker steals accounts via Microsoft Teams phishing	Ransom	BleepingComputer
14.9.23	Microsoft September 2023 Patch Tuesday fixes 2 zero-days, 59 flaws	OS	BleepingComputer
14.9.23	Windows 10 KB5030211 update released with 11 improvements	OS	BleepingComputer
14.9.23	Adobe warns of critical Acrobat and Reader zero-day exploited in attacks	Vulnerebility	BleepingComputer
14.9.23	Windows 11 KB5030219 cumulative update released with 24 fixes, changes	OS	BleepingComputer
14.9.23	CISA offers free security scans for public water utilities	BigBrothers	BleepingComputer
14.9.23	Free Download Manager site redirected Linux users to malware for years	Virus	BleepingComputer
14.9.23	Apple backports BLASTPASS zero-day fix to older iPhones	Apple	BleepingComputer
14.9.23	'Redfly' hackers infiltrated power supplier's network for 6 months	Hack	BleepingComputer
14.9.23	New WiKI-Eve attack can steal numerical passwords over WiFi	Attack	BleepingComputer
14.9.23	Google fixes another Chrome zero-day bug exploited in attacks	Vulnerebility	BleepingComputer
14.9.23	Microsoft will block 3rd-party printer drivers in Windows Update	OS	BleepingComputer
14.9.23	MGM Resorts shuts down IT systems after cyberattack	Incindent	BleepingComputer
14.9.23	CISA warns govt agencies to secure iPhones against spyware attacks	BigBrothers	BleepingComputer
14.9.23	Iranian hackers backdoor 34 orgs with new Sponsor malware	Virus	BleepingComputer
14.9.23	Square: Last week’s outage was caused by DNS issue, not a cyberattack	Attack	BleepingComputer
14.9.23	Facebook Messenger phishing wave targets 100K business accounts per week	Social	BleepingComputer
14.9.23	Associated Press warns that AP Stylebook data breach led to phishing attack	Phishing	BleepingComputer
14.9.23	'Evil Telegram' Android apps on Google Play infected 60K with spyware	Android	BleepingComputer
14.9.23	N-Able's Take Control Agent Vulnerability Exposes Windows Systems to Privilege Escalation	Vulnerebility	The Hacker News
14.9.23	Russian Journalist's iPhone Compromised by NSO Group's Zero-Click Spyware	BigBrothers	The Hacker News
14.9.23	Alert: New Kubernetes Vulnerabilities Enable Remote Attacks on Windows Endpoints	Vulnerebility	The Hacker News
14.9.23	Researchers Detail 8 Vulnerabilities in Azure HDInsight Analytics Service	Vulnerebility	The Hacker News
14.9.23	Rust-Written 3AM Ransomware: A Sneak Peek into a New Malware Family	Ransom	The Hacker News
14.9.23	Microsoft Warns of New Phishing Campaign Targeting Corporations via Teams Messages	Phishing	The Hacker News
13.9.23	Microsoft Releases Patch for Two New Actively Exploited Zero-Days Flaws	Exploit	The Hacker News
13.9.23	Update Adobe Acrobat and Reader to Patch Actively Exploited Vulnerability	Exploit	The Hacker News
13.9.23	Mozilla Rushes to Patch WebP Critical Zero-Day Exploit in Firefox and Thunderbird	Exploit	The Hacker News
13.9.23	Critical GitHub Vulnerability Exposes 4,000+ Repositories to Repojacking Attack	Attack	The Hacker News
13.9.23	Chinese Redfly Group Compromised a Nation's Critical Grid in 6-Month ShadowPad Campaign	BigBrothers	The Hacker News
13.9.23	Sophisticated Phishing Campaign Deploying Agent Tesla, OriginBotnet, and RedLine Clipper	Virus	The Hacker News
13.9.23	Beware: MetaStealer Malware Targets Apple macOS in Recent Attacks	Virus	The Hacker News
12.9.23	Google Rushes to Patch Critical Chrome Vulnerability Exploited in the Wild - Update Now	Exploit	The Hacker News
12.9.23	Vietnamese Hackers Deploy Python-Based Stealer via Facebook Messenger	Virus	The Hacker News
12.9.23	Charming Kitten's New Backdoor 'Sponsor' Targets Brazil, Israel, and U.A.E.	Virus	The Hacker News
12.9.23	How to Prevent API Breaches: A Guide to Robust Security	Security	The Hacker News
12.9.23	Google Chrome Rolls Out Support for 'Privacy Sandbox' to Bid Farewell to Tracking Cookies	Security	The Hacker News
11.9.23	Cybercriminals Using PowerShell to Steal NTLMv2 Hashes from Compromised Windows	Hack	The Hacker News
11.9.23	New HijackLoader Modular Malware Loader Making Waves in the Cybercrime World	Virus	The Hacker News
10.9.23	US CISA added critical Apache RocketMQ flaw to its Known Exploited Vulnerabilities catalog	Exploit	Securityaffairs
10.9.23	Ragnar Locker gang leaks data stolen from the Israel's Mayanei Hayeshua hospital	Ransom	Securityaffairs
10.9.23	Google rolls out Privacy Sandbox to use Chrome browsing history for ads	Security	BleepingComputer
10.9.23	Microsoft Teams phishing attack pushes DarkGate malware	Virus	BleepingComputer
9.9.23	Millions Infected by Spyware Hidden in Fake Telegram Apps on Google Play	Android	The Hacker News
9.9.23	Cybercriminals Weaponizing Legitimate Advanced Installer Tool in Crypto-Mining Attacks	Cryptocurrency	The Hacker News
9.9.23	North Korea-linked threat actors target cybersecurity experts with a zero-day	APT	Securityaffairs
9.9.23	Zero-day in Cisco ASA and FTD is actively exploited in ransomware attacks	Ransom	Securityaffairs
9.9.23	Nation-state actors exploit Fortinet FortiOS SSL-VPN and Zoho ManageEngine ServiceDesk Plus, CISA warns	Vulnerebility	Securityaffairs
9.9.23	Zero-days fixed by Apple were used to deliver NSO Group’s Pegasus spyware	Apple	Securityaffairs
9.9.23	Apple discloses 2 new actively exploited zero-day flaws in iPhones, Macs	Apple	Securityaffairs
9.9.23	A malvertising campaign is delivering a new version of the macOS Atomic Stealer	Apple	Securityaffairs
9.9.23	Two flaws in Apache SuperSet allow to remotely hack servers	Vulnerebility	Securityaffairs
9.9.23	The Week in Ransomware - September 8th 2023 - Conti Indictments	Ransom	BleepingComputer
9.9.23	Notepad++ 8.5.7 released with fixes for four security vulnerabilities	Vulnerebility	BleepingComputer
9.9.23	Ragnar Locker claims attack on Israel's Mayanei Hayeshua hospital	Incindent	BleepingComputer
9.9.23	Dymocks Booksellers suffers data breach impacting 836k customers	Incindent	BleepingComputer
9.9.23	U.K. and U.S. Sanction 11 Russia-based TrickBot Cybercrime Gang Members	CyberCrime	The Hacker News
8.9.23	Cisco warns of VPN zero-day exploited by ransomware gangs	Exploit	BleepingComputer
8.9.23	Microsoft Paint in Windows 11 gets a background removal tool	OS	BleepingComputer
8.9.23	CISA warns of critical Apache RocketMQ bug exploited in attacks	Exploit	BleepingComputer
8.9.23	Iranian hackers breach US aviation org via Zoho, Fortinet bugs	BigBrothers	BleepingComputer
8.9.23	Google is enabling Chrome real-time phishing protection for everyone	Phishing	BleepingComputer
8.9.23	Apple zero-click iMessage exploit used to infect iPhones with spyware	Apple	BleepingComputer
8.9.23	Cisco BroadWorks impacted by critical authentication bypass flaw	Vulnerebility	BleepingComputer
8.9.23	Google Looker Studio abused in cryptocurrency phishing attacks	Cryptocurrency	BleepingComputer
8.9.23	Microsoft: North Korean hackers target Russian govt, defense orgs	BigBrothers	BleepingComputer
8.9.23	Apple discloses 2 new zero-days exploited to attack iPhones, Macs	Apple	BleepingComputer
8.9.23	Google: State hackers attack security researchers with new zero-day	Attack	BleepingComputer
8.9.23	Windows cryptomining attacks target graphic designer's high-powered GPUs	Cryptocurrency	BleepingComputer
8.9.23	Johnson & Johnson discloses IBM data breach impacting patients	Incindent	BleepingComputer
8.9.23	US and UK sanction 11 TrickBot and Conti cybercrime gang members	CyberCrime	BleepingComputer
8.9.23	Rogers silent as Canadian customers report internet outages	Incindent	BleepingComputer
8.9.23	Apple Rushes to Patch Zero-Day Flaws Exploited for Pegasus Spyware on iPhones	Apple	The Hacker News
8.9.23	Cisco Issues Urgent Fix for Authentication Bypass Bug Affecting BroadWorks Platform	Vulnerebility	The Hacker News
8.9.23	North Korean Hackers Exploit Zero-Day Bug to Target Cybersecurity Researchers	Exploit	The Hacker News
8.9.23	CISA Warning: Nation-State Hackers Exploit Fortinet and Zoho Vulnerabilities	Exploit	The Hacker News
8.9.23	Mac Users Beware: Malvertising Campaign Spreads Atomic Stealer macOS Malware	Apple	The Hacker News
7.9.23	Alert: Apache SuperSet Vulnerabilities Expose Servers to Remote Code Execution Attacks	Vulnerebility	The Hacker News
7.9.23	Mirai Botnet Variant 'Pandora' Hijacks Android TVs for Cyberattacks	BotNet	The Hacker News
7.9.23	Outlook Breach: Microsoft Reveals How a Crash Dump Led to a Major Security Breach	Incindent	The Hacker News
7.9.23	Rockstar Games reportedly sold games with Razor 1911 cracks on Steam	Security	BleepingComputer
7.9.23	University of Michigan requires password resets after cyberattack	Incindent	BleepingComputer
7.9.23	Flipper Zero can be used to launch iOS Bluetooth spam attacks	Apple	BleepingComputer
7.9.23	Hackers stole Microsoft signing key from Windows crash dump	Hack	BleepingComputer
7.9.23	MSI BIOS updates fix Windows unsupported processor BSOD bug	Vulnerebility	BleepingComputer
7.9.23	Mirai variant infects low-cost Android TV boxes for DDoS attacks	Android	BleepingComputer
7.9.23	September Android updates fix zero-day exploited in attacks	Android	BleepingComputer
7.9.23	Toyota says filled disk storage halted Japan-based factories	Security	BleepingComputer
7.9.23	Chinese cyberspies obtained Microsoft signing key from Windows crash dump due to a mistake	BigBrothers	Securityaffairs
7.9.23	Google addressed an actively exploited zero-day in Android	Exploit	Securityaffairs
7.9.23	A zero-day in Atlas VPN Linux Client leaks users' IP address	Vulnerebility	Securityaffairs
7.9.23	Zero-Day Alert: Latest Android Patch Update Includes Fix for Newly Actively Exploited Flaw	Exploit	The Hacker News
7.9.23	Alert: Phishing Campaigns Deliver New SideTwist Backdoor and Agent Tesla Variant	Phishing	The Hacker News
6.9.23	MITRE and CISA release Caldera for OT attack emulation	BigBrothers	Securityaffairs
6.9.23	ASUS routers are affected by three critical remote code execution flaws	Vulnerebility	Securityaffairs
6.9.23	Hackers stole $41M worth of crypto assets from crypto gambling firm Stake	Incindent	Securityaffairs
6.9.23	Freecycle data breach impacted 7 Million users	Incindent	Securityaffairs
6.9.23	Meta disrupted two influence campaigns from China and Russia	Social	Securityaffairs
6.9.23	A massive DDoS attack took down the site of the German financial agency BaFin	Attack	Securityaffairs
6.9.23	X will collect biometric data from its premium users	Safety	Securityaffairs
6.9.23	"Smishing Triad" Targeted USPS and US Citizens for Data Theft	Incindent	Securityaffairs
6.9.23	Publicly available Evil_MinIO exploit used in attacks on MinIO Storage Systems	Exploit	Securityaffairs
6.9.23	W3LL phishing kit hijacks thousands of Microsoft 365 accounts, bypasses MFA	Phishing	BleepingComputer
6.9.23	Coffee Meets Bagel says recent outage caused by destructive cyberattack	Attack	BleepingComputer
6.9.23	Atlas VPN zero-day vulnerability leaks users' real IP address	Vulnerebility	BleepingComputer
6.9.23	Crypto casino Stake.com loses $41 million to hot wallet hackers	Incindent	BleepingComputer
6.9.23	Chaes malware now uses Google Chrome DevTools Protocol to steal data	Virus	BleepingComputer
6.9.23	ASUS routers vulnerable to critical remote code execution flaws	Vulnerebility	BleepingComputer
6.9.23	Freecycle confirms massive data breach impacting 7 million users	Incindent	BleepingComputer
6.9.23	Insurer fined $3M for exposing data of 650k clients for two years	Incindent	BleepingComputer
6.9.23	German financial agency site disrupted by DDoS attack since Friday	BigBrothers	BleepingComputer
6.9.23	Hackers exploit MinIO storage system to breach corporate networks	Exploit	BleepingComputer
6.9.23	Okta: Hackers target IT help desks to gain Super Admin, disable MFA	Hack	BleepingComputer
6.9.23	9 Alarming Vulnerabilities Uncovered in SEL's Power Management Products	Vulnerebility	The Hacker News
6.9.23	W3LL Store: How a Secret Phishing Syndicate Targets 8,000+ Microsoft 365 Accounts	Phishing	The Hacker News
6.9.23	Ukraine's CERT Thwarts APT28's Cyberattack on Critical Energy Infrastructure	APT	The Hacker News
5.9.23	New BLISTER Malware Update Fuelling Stealthy Network Infiltration	Virus	The Hacker News
5.9.23	New Python Variant of Chaes Malware Targets Banking and Logistics Industries	Virus	The Hacker News
5.9.23	Key Cybersecurity Tools That Can Mitigate the Cost of a Breach	Incindent	The Hacker News
5.9.23	Researchers Warn of Cyber Weapons Used by Lazarus Group's Andariel Cluster	Cyber	The Hacker News
5.9.23	Meta Takes Down Thousands of Accounts Involved in Disinformation Ops from China and Russia	BigBrothers	The Hacker News
5.9.23	Hackers Exploit MinIO Storage System Vulnerabilities to Compromise Servers	Exploit	The Hacker News
4.9.23	University of Sydney suffered a security breach caused by a third-party service provider	Incindent	Securityaffairs
4.9.23	Cybercrime will cost Germany $224 billion in 2023	CyberCrime	Securityaffairs
4.9.23	PoC exploit code released for CVE-2023-34039 bug in VMware Aria Operations for Networks	Exploit	Securityaffairs
4.9.23	Windows 11 23H2: Top three new features	OS	BleepingComputer
4.9.23	University of Sydney data breach impacts recent applicants	Incindent	BleepingComputer
4.9.23	Microsoft reminds users Windows will disable insecure TLS soon	OS	BleepingComputer
4.9.23	Children's snack recalled after its website caught serving porn	Hack	BleepingComputer
4.9.23	X (Twitter) to Collect Biometric Data from Premium Users to Combat Impersonation	Social	The Hacker News
4.9.23	Everything You Wanted to Know About AI Security but Were Afraid to Ask	AI	The Hacker News
4.9.23	Vietnamese Cybercriminals Targeting Facebook Business Accounts with Malvertising	Social	The Hacker News
4.9.23	Beware of MalDoc in PDF: A New Polyglot Attack Allowing Attackers to Evade Antivirus	Virus	The Hacker News
4.9.23	Chinese-Speaking Cybercriminals Launch Large-Scale iMessage Smishing Campaign in U.S.	CyberCrime	The Hacker News
3.9.23	Social engineering attacks target Okta customers to achieve a highly privileged role	Hack	Securityaffairs
3.9.23	LockBit ransomware gang hit the Commission des services electriques de Montréal (CSEM)	Ransom	Securityaffairs
3.9.23	Chrome extensions can steal plaintext passwords from websites	Hack	BleepingComputer
3.9.23	Fake YouPorn extortion scam threatens to leak your sex tape	Spam	BleepingComputer
3.9.23	PoC Exploit Released for Critical VMware Aria's SSH Auth Bypass Vulnerability	Exploit	The Hacker News
2.9.23	Talos wars of customizations of the open-source info stealer SapphireStealer	Virus	Securityaffairs
2.9.23	UNRAVELING EternalBlue: inside the WannaCry’s enabler	Virus	Securityaffairs
2.9.23	Researchers released a free decryptor for the Key Group ransomware	Ransom	Securityaffairs
2.9.23	North Korea-linked APT Labyrinth Chollima behind PyPI supply chain attacks	APT	Securityaffairs
2.9.23	Microsoft is killing WordPad in Windows after 28 years	OS	BleepingComputer
2.9.23	Exploit released for critical VMware SSH auth bypass vulnerability	Vulnerebility	BleepingComputer
2.9.23	Microsoft reminds of Windows 11 21H2 forced updates before end of service	OS	BleepingComputer
2.9.23	Microsoft retires Visual Studio for Mac, support ends in a year	OS	BleepingComputer
2.9.23	Golf gear giant Callaway data breach exposes info of 1.1 million	Incindent	BleepingComputer
2.9.23	Okta Warns of Social Engineering Attacks Targeting Super Administrator Privileges	Hack	The Hacker News
2.9.23	Threat Actors Targeting Microsoft SQL Servers to Deploy FreeWorld Ransomware	Ransom	The Hacker News
2.9.23	Russian State-Backed 'Infamous Chisel' Android Malware Targets Ukrainian Military	Android	The Hacker News
2.9.23	New SuperBear Trojan Emerges in Targeted Phishing Attack on South Korean Activists	Virus	The Hacker News
1.9.23	Fashion retailer Forever 21 data breach impacted +500,000 individuals	Incindent	Securityaffairs
1.9.23	Russia-linked hackers target Ukrainian military with Infamous Chisel Android malware	Android	Securityaffairs
1.9.23	Akira Ransomware gang targets Cisco ASA without Multi-Factor Authentication	Ransom	Securityaffairs
1.9.23	Paramount Global disclosed a data breach	Incindent	Securityaffairs
1.9.23	National Safety Council data leak: Credentials of NASA, Tesla, DoJ, Verizon, and 2K others leaked by workplace safety organization	Incindent	Securityaffairs
1.9.23	Abusing Windows Container Isolation Framework to avoid detection by security products	Hack	Securityaffairs
1.9.23	Sourcegraph website breached using leaked admin access token	Incindent	BleepingComputer
1.9.23	Forever 21 data breach: hackers accessed info of 500,000	Incindent	BleepingComputer
1.9.23	North Korean hackers behind malicious VMConnect PyPI campaign	Virus	BleepingComputer
1.9.23	LogicMonitor customers hacked in reported ransomware attacks	Ransom	BleepingComputer
1.9.23	Free Key Group ransomware decryptor helps victims recover data	Ransom	BleepingComputer
1.9.23	GRU hackers attack Ukrainian military with new Android malware	Android	BleepingComputer
1.9.23	Classiscam fraud-as-a-service expands, now targets banks and 251 brands	CyberCrime	BleepingComputer
1.9.23	Classiscam Scam-as-a-Service Raked $64.5 Million During the COVID-19 Pandemic	Spam	The Hacker News
1.9.23	SapphireStealer Malware: A Gateway to Espionage and Ransomware Operations	Virus	The Hacker News
1.9.23	North Korean Hackers Deploy New Malicious Python Packages in PyPI Repository	Virus	The Hacker News
1.9.23	Numbers Don't Lie: Exposing the Harsh Truths of Cyberattacks in New Report	Cyber	The Hacker News
1.9.23	Earth Estries' Espionage Campaign Targets Governments and Tech Titans Across Continents	BigBrothers	The Hacker News