"Open AI dismantled an Iranian influence operation targeting the U.S. presidential election."

Views expressed in this cybersecurity, cyber espionage, cyber crime update are those of the reporters and correspondents.  Accessed on 18 August 2024, 1424 UTC.

Content and Source:  Email subscription from https://feedly.com.  https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fsecurityaffairs.co%2Fwordpress%2Ffeed

Please scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Security Affairs

66K followers23 articles per week#security#tech

11

Most popular

OpenAI dismantled an Iranian influence operation targeting the U.S. presidential election

IoC > 5 domains

•

by Pierluigi Paganini / 15h

•

OpenAI disrupts Iranian misinformation campaign

OpenAI announced it had dismantled an Iranian influence operation that was producing content related to the U.S. Presidential election. OpenAI has dismantled an Iran-linked influence operation, tracked as identified as Storm-2035 , that was generating content about the U.S. presidential election. The company blocked a cluster of ChatGPT accounts that were used to create AI-generated articles and

Microsoft urges customers to fix zero-click Windows RCE in the TCP/IP stack

6 TTPs

•

27by Pierluigi Paganini / 2d

Microsoft addressed a critical zero-click Windows remote code execution (RCE) in the TCP/IP stack that impacts all systems with IPv6 enabled. Microsoft urges customers to fix a critical TCP/IP remote code execution (RCE) flaw, tracked as CVE-2024-38063 (CVSS score 9.8), in the TCP/IP stack. The vulnerability impacts all systems with IPv6 enabled (IPv6 is enabled by default). An unauthenticated at

Millions of Pixel devices can be hacked due to a pre-installed vulnerable app

4 TTPs

•

by Pierluigi Paganini / 2d

•

Google launches AI-focused Pixel 9

Many Google Pixel devices shipped since September 2017 have included a vulnerable app that could be exploited for malicious purposes. Many Google Pixel devices shipped since September 2017 have included dormant software that could be exploited by attackers to compromise them. Researchers form mobile security firm iVerify reported that the issue stems from a pre-installed Android app called “Showc

Yesterday

SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 7

by Pierluigi Paganini / 5h

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. Deciphering the Brain Cipher Ransomware Ideal typosquat ‘solana-py’ steals your crypto wallet keys Ransomware attackers introduce new EDR killer to their arsenal Beyond the wail: deconstructing the BANSHEE infostealer A Deep Dive into a New ValleyRAT Campaign Targ

Security Affairs newsletter Round 485 by Pierluigi Paganini – INTERNATIONAL EDITION

CVE-2024-38213

•

by Pierluigi Paganini / 5h

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Large-scale extortion campaign targets publicly accessible environment variable files (.env) OpenAI dismantled an Iranian influence operation targeting th

Large-scale extortion campaign targets publicly accessible environment variable files (.env)

10 TTPs

•

by Pierluigi Paganini / 6h

•

Cybercriminals exploit exposed environment files

A large-scale extortion campaign compromised multiple organizations by exploiting publicly accessible environment variable files (.env). Palo Alto Unit 42 researchers uncovered a large-scale extortion campaign that successfully compromised and extorted multiple victim organizations by leveraging exposed environment variable files (.env files). The exposed files contained sensitive variables such

National Public Data confirms a data breach

by Pierluigi Paganini / 22h

Background check service that exploded millions of social security numbers and other sensitive information. Background check service National Public Data confirms that a threat actor has breached its systems and had access to millions of social security numbers and other sensitive personal information. According to a statement published by the company, exposed data include the name, email addres

Aug 16, 2024

ValleyRAT malware is targeting Chinese-speaking users

21 TTPs

•

by Pierluigi Paganini / 1d

•

ValleyRAT malware targets Chinese Windows users

FortiGuard Labs researchers uncovered an ongoing ValleyRAT malware campaign that is targeting Chinese-speaking users. ValleyRAT is a multi-stage malware that supports multiple techniques to monitor and control compromised devices. The malicious code is also used to deploy arbitrary plugins on the infected systems. A noteworthy characteristic of ValleyRAT malware is the heavy usage of shellcode to

CISA adds SolarWinds Web Help Desk bug to its Known Exploited Vulnerabilities catalog

3 TTPs

•

by Pierluigi Paganini / 1d

•

CVE-2024-28986

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a SolarWinds Web Help Desk bug to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added SolarWinds Web Help Desk deserialization of untrusted data vulnerability, tracked as CVE-2024-28986 (CVSS score of 9.8), to its Known Exploited Vulnerabilities (KEV) catalog . This we

Russian national sentenced to 40 months for selling stolen data on the dark web

Russian sentenced for selling credentials

•

by Pierluigi Paganini / 1d

A Russian national was sentenced to over three years in prison for selling stolen information and credentials on a dark web marketplace. The 27-year-old Russian national Georgy Kavzharadze (also known as “George,” “TeRorPP,” “Torqovec,” and “PlutuSS”) has been sentenced to over three years in prison for selling financial information, login credentials, and other personal data on the dark web mark

Banshee Stealer, a new macOS malware with a monthly subscription price of $3,000

12 TTPs

•

by Pierluigi Paganini / 1d

•

Banshee MacOS Stealer targets keychain data

Russian cybercriminals are advertising a new macOS malware called Banshee Stealer with a monthly subscription price of $3,000. In August 2024, Russian crooks advertised a macOS malware called BANSHEE Stealer that can target both x86_64 and ARM64 architectures. The malware authors claim it can steal a broad range of data from compromised systems, including browser data, cryptocurrency wallets, and

End of feed