"T-Mobile is one of the victims of the massive Chinese breach of telecome firms.:

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 18 November 2024, 1437 UTC.

Content and Source:  Email subscription via feedly.com.   https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fsecurityaffairs.co%2Fwordpress%2Ffeed

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Security Affairs

68K followers23 articles per week#security#tech

8

Today

T-Mobile is one of the victims of the massive Chinese breach of telecom firms

2 TTPs

•

by Pierluigi Paganini / 3h

•

T-Mobile hacked in Chinese breach

T-Mobile confirmed being a victim of recent hacking campaigns linked to China-based threat actors targeting telecom companies. T-Mobile confirms it was hacked as part of a long-running cyber espionage campaign targeting Telco companies. Recently, the FBI and CISA announced they are continuing to investigate a large-scale cyber-espionage campaign by China-linked threat actors targeting U.S. teleco

Yesterday

Increased GDPR Enforcement Highlights the Need for Data Security

by Pierluigi Paganini / 5h

GDPR protects sensitive data like health and financial details, and its enforcement underscores the growing need for stronger data security measures. GDPR: The landscape of data privacy and protection has never been more critical. With regulators around the world intensifying scrutiny, companies are facing increasing pressure to comply with stringent data protection laws. The latest case involvin

Critical Really Simple Security plugin flaw impacts 4M+ WordPress sites

by Pierluigi Paganini / 6h

A Really Simple Security plugin flaw affects 4M+ sites, allowing attackers full admin access. It’s one of the most critical WordPress vulnerabilities ever. Wordfence researchers warn of a vulnerability, tracked as CVE-2024-10924 (CVSS Score of 9.8), in the Really Simple Security plugin that affects 4M+ sites. The Really Simple Security plugin, formerly Really Simple SSL, is a popular WordPress to

SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 20

CVE-2024-43451

•

by Pierluigi Paganini / 23h

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. New Campaign Uses Remcos RAT to Exploit Victims Bengal cat lovers in Australia get psspsspss’d in Google-driven Gootloader campai

Security Affairs newsletter Round 498 by Pierluigi Paganini – INTERNATIONAL EDITION

by Pierluigi Paganini / 23h

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. A botnet exploits e GeoVision zero-day to compromise EoL devices Palo Alto Networks confirmed active exploitation of recently disclosed zero-day NSO Group

Nov 16, 2024

A botnet exploits e GeoVision zero-day to compromise EoL devices

5 TTPs

•

by Pierluigi Paganini / 1d

•

CVE-2024-11120

A botnet employed in DDoS or cryptomining attacks is exploiting a zero-day in end-of-life GeoVision devices to grow up. Researchers at the Shadowserver Foundation observed a botnet exploiting a zero-day in GeoVision EOL (end-of-Life) devices to compromise devices in the wild. The GeoVision zero-day, tracked as CVE-2024-11120 (CVSS 9.8), is a pre-auth command injection vulnerability that was disco

Palo Alto Networks confirmed active exploitation of recently disclosed zero-day

IoC > 1 IP and 1 hash

•

by Pierluigi Paganini / 1d

•

8 TTPs

Palo Alto Networks confirmed active exploitation of a zero-day in its PAN-OS firewall and released new indicators of compromise (IoCs). Last week, Palo Alto Networks warned customers to limit access to their next-gen firewall management interface due to a potential remote code execution vulnerability (CVSSv4.0 Base Score: 9.3) in PAN-OS. The cybersecurity company had no further details on the vul

NSO Group used WhatsApp exploits even after Meta-owned company sued it

4 TTPs

•

by Pierluigi Paganini / 2d

Court filing revealed that NSO Group used WhatsApp exploits after the instant messaging firm sued the surveillance company. NSO Group developed malware that relied on WhatsApp exploits to infect target individuals even after the Meta-owned instant messaging company sued the surveillance firm. “As a threshold matter, NSO admits that it developed and sold the spyware described in the Complaint, and

End of feed