Security Affairs newsletter Round 229 – News of the week





A new round of the weekly newsletter arrived! The best news of the week with Security Affairs





Hi folk, let me inform you that I suspended the newsletter service, anyway I’ll continue to provide you a list of published posts every week through the blog.





Once again thank you!






80 defendants charged with participating in massive
BEC and romance scams


Bad Packets warns of over 14,500 Pulse secure VPN
endpoints vulnerable to CVE-2019-11510


Experts uncovered a hacking campaign targeting
several WordPress Plugins


Hostinger disclosed a data breach that affects 14
Million customers


Internal Revenue Service warns taxpayers of a
malware campaign


Apple released an emergency patch to address
CVE-2019-8605 iOS flaw


Binance says that leaked KYC Data are from
third-party vendor.


Judge ordered Capital One hacker Paige Thompson to
remain in prison


Nemty Ransomware, a new malware appears in the
threat landscape


UK National Cyber Security Centre urge to drop
Python 2


Code Execution and DoS flaw addressed in QEMU

Experts uncovered an advanced phishing campaign
delivering the Quasar RAT


Imperva data Breach: WAF customers data exposed

Kaspersky found malware in popular CamScanner app.
Remove it now from your phone!


Lyceum APT made the headlines with attacks in Middle
East


White hat hacker demonstrated how to hack a million
Instagram accounts


French Police remotely disinfected 850,000 PCs from
RETADUP bot


Magecart hackers compromise another 80 eCommerce
sites


TA505 group updates tactics and expands the list of
targets


A new variant of Trickbot banking Trojan targets
Verizon, T-Mobile, and Sprint users


A total of six hackers already become millionaires
on HackerOne


Capital One Hacker indicted on federal charges for
Wire Fraud and Computer Data Theft


Expert releases Metasploit modules for Cisco UCS
flaws


Lumber Liquidators hit by malware attack that took
down its network


BRATA, the Android RAT that infected only Brazilian
users


Expert found Russias SORM surveillance equipment
leaking user data


Foxit Software discloses a data breach that exposed
user passwords


Google revealed how watering hole attacks
compromised iPhone devices earlier this year


Ransomware attack hits DDS Safe backup service used
by hundreds of dental offices


FIN6 recently expanded operations to target
eCommerce sites


Twitter account of Jack Dorsey, Twitter CEO and
co-founder, has been hacked





Pierluigi Paganini





(SecurityAffairs – Newsletter)