A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Chinese cyber spies targeted phones used by Trump and Vance Irish Data Protection Commission fined LinkedIn €310M for […

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box.

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Chinese cyber spies targeted phones used by Trump and Vance

Irish Data Protection Commission fined LinkedIn €310M for GDPR infringement

Change Healthcare data breach impacted over 100 million people

OnePoint Patient Care data breach impacted 795916 individuals

From Risk Assessment to Action: Improving Your DLP Response

U.S. CISA adds Cisco ASA and FTD, and RoundCube Webmail bugs to its Known Exploited Vulnerabilities catalog

Pwn2Own Ireland 2024 Day 2: participants demonstrated an exploit against Samsung Galaxy S24

Cisco fixed tens of vulnerabilities, including an actively exploited one

FortiJump flaw CVE-2024-47575 has been exploited in zero-day attacks since June 2024

U.S. CISA adds Fortinet FortiManager flaw to its Known Exploited Vulnerabilities catalog

Digital Echo Chambers and Erosion of Trust – Key Threats to the US Elections

U.S. CISA adds Microsoft SharePoint flaw to its Known Exploited Vulnerabilities catalog

Crooks are targeting Docker API servers to deploy SRBMiner

Why DSPM is Essential for Achieving Data Privacy in 2024

SEC fined 4 companies for misleading disclosures about the impact of the SolarWinds attack

Samsung zero-day flaw actively exploited in the wild

Experts warn of a new wave of Bumblebee malware attacks

U.S. CISA adds ScienceLogic SL1 flaw to its Known Exploited Vulnerabilities catalog

VMware failed to fully address vCenter Server RCE flaw CVE-2024-38812

Cisco states that data published on cybercrime forum was taken from public-facing DevHub environment

Internet Archive was breached twice in a month

Unknown threat actors exploit Roundcube Webmail flaw in phishing campaign

F5 fixed a high-severity elevation of privilege vulnerability in BIG-IP

International Press – Newsletter

Cybercrime  

Cisco Confirms Security Incident After Hacker Offers to Sell Data

Using gRPC and HTTP/2 for Cryptominer Deployment: An Unconventional Approach

Threat actor abuses Gophish to deliver new PowerRAT and DCRAT

Researchers link Polyfill supply chain attack to huge network of copycat gambling sites

Fake LockBit, Real Damage: Ransomware Samples Abuse AWS S3 to Steal Data 

Illicit Uses for Deepfake Technology

Largest Retail Breach in History: 350 Million “Hot Topic” Customers’ Personal & Payment Data Exposed — As a Result of Infostealer Infection          

Landmark, an administrator for insurance firms, says 800,000 affected by data breach

Voice-enabled AI agents can automate everything, even your phone scams

UnitedHealth says Change Healthcare hack affects over 100 million, the largest-ever US healthcare data breach  

Four REvil Ransomware Members Sentenced in Rare Russian Cybercrime Convictions

Malware

New Bumblebee Loader Infection Chain Signals Possible Resurgence   

Threat Actors Push ClickFix Fake Browser Updates Using Stolen Credentials  

ReliaQuest Uncovers New Black Basta Social Engineering Technique  

Unmasking Lumma Stealer: Analyzing Deceptive Tactics with Fake CAPTCHA  

TeamTNT’s Docker Gatling Gun Campaign

From cyber attacks to sabotage: How Israel’s covert operations are targeting Iran’s vital assets  

Hacking

Fake attachment. Roundcube mail server attacks exploit CVE-2024-37383 vulnerability   

“Hey ESET, Wait for the Leak”: Dissecting the “OctoberSeventh” Wiper targeting ESET customers in Israel

Internet Archive breached again through stolen access tokens   

End-to-End Encrypted Cloud Storage in the Wild A Broken Ecosystem  

CVE-2024-44068: Samsung m2m1shot_scaler0 device driver page use-after-free in Android  

Fortinet warns of new critical FortiManager flaw used in zero-day attacks

Investigating FortiManager Zero-Day Exploitation (CVE-2024-47575)  

Cisco Patches Vulnerability Exploited in Large-Scale Brute-Force Campaign 

Pwn2Own Ireland 2024: Day Three Results

An Update on Windows Downdate   

Threat Actors Are Exploiting Vulnerabilities Faster Than Ever  

Intelligence and Information Warfare 

“Hey ESET, Wait for the Leak”: Dissecting the “OctoberSeventh” Wiper targeting ESET customers in Israel  

The Crypto Game of Lazarus APT: Investors vs. Zero-days

Iranian hacker group aims at US election websites and media before vote, Microsoft says      

Burning Zero Days: FortiJump FortiManager vulnerability used by nation state in espionage via MSPs  

Amazon identified internet domains abused by APT29     

RDP configuration files as a means of obtaining remote access to a computer or “Rogue RDP” (CERT-UA#11690)

Joint Statement by FBI and CISA on PRC Activity Targeting Telecommunications

Chinese hackers targeted Trump and Vance’s phone data       

Cybersecurity

SEC Charges Four Companies With Misleading Cyber Disclosures   

Digital Echo Chambers and Erosion of Trust – Key Threats to the US Elections  

Apple will pay security researchers up to $1 million to hack its private AI cloud

The Global Surveillance Free-for-All in Mobile Ad Data  

Apple: Security research on Private Cloud Compute

How the ransomware attack at Change Healthcare went down: A timeline  

Irish Data Protection Commission fines LinkedIn Ireland €310 million  

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

Source: SecurityAffairs
Source Link: https://securityaffairs.com/170301/security/security-affairs-newsletter-round-495-by-pierluigi-paganini-international-edition.html