"Google fixed a critical vulnerability in Chrome browser."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 30 October 2024, 1424 UTC.

Content and Source:  Email subscription via https://feedly.com.   https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fsecurityaffairs.co%2Fwordpress%2Ffeed

Please scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Security Affairs

68K followers25 articles per week#security#tech

12

Most popular

Google fixed a critical vulnerability in Chrome browser

CVE-2024-10487

•

by Pierluigi Paganini / 1h

Google addressed a critical vulnerability in its Chrome browser, tracked as CVE-2024-10487, which was reported by Apple. Google has patched a critical Chrome vulnerability, tracked as CVE-2024-10487, reported by Apple Security Engineering and Architecture (SEAR) on October 23, 2024. The vulnerability is an out-of-bounds write issue that resides in the Dawn implementation. Dawn is an open-source a

Fog and Akira ransomware attacks exploit SonicWall VPN flaw CVE-2024-40766

8 TTPs

•

by Pierluigi Paganini / 1d

•

CVE-2024-40766

Fog and Akira ransomware operators are exploiting SonicWall VPN flaw CVE-2024-40766 to breach enterprise networks. Fog and Akira ransomware operators are exploiting the critical SonicWall VPN vulnerability CVE-2024-40766 (CVSS v3 score: 9.3) to breach corporate networks via SSL VPN access. CVE-2024-40766 is an Improper Access Control Vulnerability impacting SonicWall SonicOS, the company addresse

France’s second-largest telecoms provider Free suffered a cyber attack

Free suffers data breach affecting millions

•

by Pierluigi Paganini / 1d

French internet service provider (ISP) Free disclosed a cyber attack, threat actors allegedly had access to customer personal information. Free S.A.S. is a French telecommunications company, subsidiary of Iliad S.A. that provides voice, video, data, and Internet telecommunications to consumers in France. The company is the second-largest ISP in France with over 22.9 million mobile and fixed subsc

Yesterday

QNAP fixed NAS backup zero-day demonstrated at Pwn2Own Ireland 2024

3 TTPs

•

by Pierluigi Paganini / 5h

QNAP fixed critical zero-day CVE-2024-50388 which was demonstrated against a TS-464 NAS device during the Pwn2Own Ireland 2024 competition. QNAP addressed a critical zero-day vulnerability, tracked as CVE-2024-50388, which was exploited by white hat hackers against a TS-464 NAS device during the recent Pwn2Own Ireland 2024 hacking competition. The flaw is an OS command injection vulnerability in

International law enforcement operation dismantled RedLine and Meta infostealers

3 TTPs

•

by Pierluigi Paganini / 16h

•

Dutch police disrupt Redline Meta infostealers

A global law enforcement operation disrupted RedLine and Meta infostealers, seizing their infrastructure and making arrests. The Dutch police announced it has dismantled infrastructure used by RedLine and Meta infostealers as part of an international law enforcement operation led by Eurojust that was code-named Operation Magnus . RedLine and META targeted millions of victims worldwide, according

Oct 28, 2024

Russia-linked espionage group UNC5812 targets Ukraine’s military with malware

IoC > 1 domain

•

by Pierluigi Paganini / 1d

•

Russian group targets Ukrainian recruits

Suspected Russia-linked espionage group UNC5812 targets Ukraine’s military with Windows and Android malware via Telegram. Google TAG and Mandiant observed a Russia-linked group, tracked as UNC5812, targeting Ukraine’s military with Windows and Android malware via the Telegram channel “ Civil Defense .” The Telegram channel was created on September 10, 2024 and at this time has 189 subscribers. Th

A crime ring compromised Italian state databases reselling stolen info

Italy arrests four over database access

•

by Pierluigi Paganini / 1d

Italian police arrested four and are investigating dozens, including Leonardo Maria Del Vecchio, for alleged unauthorized access to state databases. Italian authorities have arrested four individuals as part of an investigation into alleged illegal access to state databases. The police are also investigating dozens of other individuals, including the son of Luxottica founder Leonardo Maria Del Ve

Third-Party Identities: The Weakest Link in Your Cybersecurity Supply Chain

by Pierluigi Paganini / 2d

A long supply chain adds third-party risks, as each partner’s security affects your own, making identity and access management more challenging. Identity-related attack vectors are a significant concern, with a substantial percentage of cyberattacks —often cited as over 70%—involving compromised credentials or identity theft. However, this problem primarily stems from a lack of visibility. Do you

Oct 27, 2024

Black Basta affiliates used Microsoft Teams in recent attacks

IoC > 4 domains

•

by Pierluigi Paganini / 2d

•

Initial Access (Enterprise TA0001)

•

Black Basta uses Teams for attacks

ReliaQuest researchers observed Black Basta affiliates relying on Microsoft Teams to gain initial access to target networks. ReliaQuest researchers warn that Black Basta ransomware affiliates switched to Microsoft Teams, posing as IT support to deceive employees into granting access. The BlackBasta ransomware operators were spotted posing as corporate help desks and contacting employees to help t

SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 17

by Pierluigi Paganini / 3d

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. New Bumblebee Loader Infection Chain Signals Possible Resurgence Trojanized Ethers Forks on npm Attempting to Steal Ethereum Priv

Security Affairs newsletter Round 495 by Pierluigi Paganini – INTERNATIONAL EDITION

CVE-2024-47575

•

by Pierluigi Paganini / 3d

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Chinese cyber spies targeted phones used by Trump and Vance Irish Data Protection Commission fined LinkedIn €310M for GDPR infringement Change Healthcare

Four REvil Ransomware members sentenced for hacking and money laundering

Russia seeks prison for REvil hackers

•

by Pierluigi Paganini / 3d

Russian authorities sentenced four members of the REvil ransomware operation to several years in prison in Russia. Four former members of the REvil ransomware group were sentenced in Russia for hacking and money laundering, marking a rare case of Russian gang members being convicted in the country. The four men are Artem Zaets, Alexei Malozemov, Daniil Puzyrevsky, and Ruslan Khansvyarov. They wer

End of feed