Security Affairs newsletter Round 434 by Pierluigi Paganini – International edition

Security Affairs newsletter Round 434 by Pierluigi Paganini – International edition

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box.

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Cloud and hosting provider Leaseweb took down critical systems after a cyber attack
French employment agency Pôle emploi data breach impacted 10M people
Crypto investor data exposed by a SIM swapping attack against a Kroll employee
China-linked Flax Typhoon APT targets Taiwan
Whiffy Recon malware triangulates the position of infected systems via Wi-Fi
FBI: Patches for Barracuda ESG Zero-Day CVE-2023-2868 are ineffective
Researchers released PoC exploit for Ivanti Sentry flaw CVE-2023-38035
Lazarus APT exploits Zoho ManageEngine flaw to target an Internet backbone infrastructure provider
Lapsus$ member has been convicted of having hacked multiple high-profile companies
More than 3,000 Openfire servers exposed to attacks using a new exploit
DoJ charged Tornado Cash founders with laundering more than $1 billion
FBI identifies wallets holding cryptocurrency funds stolen by North Korea
Carderbee APT targets Hong Kong orgs via supply chain attacks
TP-Link Tapo L530E smart bulb flaws allow hackers to steal user passwords
Defense contractor Belcan leaks admin password with a list of flaws
Akira ransomware gang spotted targeting Cisco VPN products to hack organizations
Snatch gang claims the hack of the Department of Defence South Africa
CISA adds critical Adobe ColdFusion flaw to its Known Exploited Vulnerabilities catalog
A cyber attack hit the Australian software provider Energy One
Ivanti fixed a new critical Sentry API authentication bypass flaw
BlackCat ransomware group claims the hack of Seiko network
New HiatusRAT campaign targets Taiwan and U.S. military procurement system
Spoofing an Apple device and tricking users into sharing sensitive data
Israel and US to Invest $3.85 Million in projects for critical infrastructure protection through the BIRD Cyber Program
N. Korean Kimsuky APT targets S. Korea-US military exercises
Four Juniper Junos OS flaws can be chained to remotely hack devices
Cybersecurity: CASB vs SASE


Japanese watchmaker Seiko breached by BlackCat ransomware gang

Akira ransomware targets Cisco VPNs to breach organizations

Tornado Cash Founders Charged With Money Laundering And Sanctions Violations

Final negotiations on UN cybercrime treaty underway in New York

Lapsus$ hacker targeted Uber, Revolut, Grand Theft Auto maker, London jury finds

Kroll Employee SIM-Swapped for Crypto Investor Data

A Pôle emploi service provider victim of a cyber-malicious act


No Rest For The Wicked: HiatusRAT Takes Little Time Off In A Return To Action

Cuba ransomware uses Veeam exploit against critical U.S. organizations

Lazarus Group exploits ManageEngine vulnerability to deploy QuiteRAT

Telekopye: Hunting Mammoths using Telegram bot


New WinRAR Vulnerability Could Allow Hackers to Take Control of Your PC

WinRAR zero-day exploited since April to hack trading accounts

Exploitation of Openfire CVE-2023-32315

Ivanti Sentry Authentication Bypass CVE-2023-38035 Deep Dive

Suspected PRC Cyber Actors Continue to Globally Exploit Barracuda ESG Zero-Day Vulnerability (CVE-2023-2868)

Cellebrite asks cops to keep its phone hacking tech ‘hush hush’

How Attackers are Circumventing MFA (and How to Stop Them)

Critical Vulnerabilities Patched in Jupiter X Core Plugin

Intelligence and Information Warfare

North Korean hackers target U.S.-South Korea military drills, police say

FBI Identifies Cryptocurrency Funds Stolen by DPRK

Flax Typhoon using legitimate software to quietly access Taiwanese organizations By Microsoft Threat Intelligence  

Uncle Sam: Rest of the world would love to steal our space blueprints – don’t let ’em

Carderbee: APT Group use Legit Software in Supply Chain Attack Targeting Orgs in Hong Kong

Lazarus Group’s infrastructure reuse leads to discovery of new malware


BIRD Foundation invests $3.85 million in critical infrastructure cyber projects via new program

Ivanti Ships Urgent Patch for API Authentication Bypass Vulnerability

Defense contractor Belcan leaks admin password with a list of flaws

Leaseweb is restoring ‘critical’ systems after security breach

Microsoft is now a cybersecurity titan. That could be a problem  

Tor turns to proof-of-work puzzles to defend onion network from DDoS attacks

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

The post Security Affairs newsletter Round 434 by Pierluigi Paganini – International edition appeared first on Security Affairs.

Go to Source
Author: Pierluigi Paganini