Security Affairs newsletter Round 219 – News of the week

A new round of the weekly SecurityAffairs newsletter arrived!

The best news of the week with Security Affairs.

Kindle Edition

Once again thank you!

Bella Thorne published her private nude photos
before a hacker that was threatening her

Linux worm spreading via Exim servers hit Azure
customers

New Echobot Botnet targets Oracle, VMware Apps and
includes 26 Exploits

XSS flaw would have allowed hackers access to
Googles network and impersonate its employees

A free Decryptor tool for GandCrab Ransomware
released

From Targeted Attack to Untargeted Attack

Hacker is targeting DNA sequencer applications from
Iranian IP address

New phishing campaign targets bank customers with
WSH RAT

NYT Report: U.S. Cyber units planted destructive
Malware in Russian Power Grid

Android Apps uses a novel technique to by-pass 2FA
and steal Bitcoin

DHS also issued an alert for the Windows BlueKeep
flaw

Expert found a critical RCE zero-day in TP-Link
Wi-Fi Extenders

Multiple DoS vulnerabilities affect Linux and
FreeBSD

Researcher leaked a dataset of over 7,000,000
transactions scraped from the Venmo public API

Yana Peel, chief executive of Londons Galleries,
resigned after discovery of her links with NSO group

AMCA files for bankruptcy following the recently
disclosed security breach

Another Remote Code Execution flaw in WebLogic
exploited in the wild

Eatstreet, the online food ordering service
disclosed a security breach

Modular Plurox backdoor can spread over local
network

Mozilla fixed a Firefox Zero-Day flaw exploited in
targeted attacks

Bouncing Golf cyberespionage campaign targets
Android users in Middle East

CVE-2019-11707 Firefox Zero-Day exploited to infect
employees at cryptocurrency exchanges

Oregon Department of Human Services data breach
impacted 645,000 clients

The Riviera Beach City pays $600,000 in ransom

Tor Browser 8.5.2 fixes Firefox zero-day. Update it
now!

Bird Miner, a macOS miner that runs by emulating
Linux

Credit Union Giant Desjardins suffered a massive
data breach

Microsoft fixed CVE-2019-1105 flaw in Outlook for
Android

Russia-Linked Turla APT group Hijacked C2 of the
Iranian OilRig

Android Botnet leverages ADB ports and SSH to spread

Flaws allow hacking a system playing untrusted
videos on VLC Player

(SecurityAffairs – newsletter)

The post Security Affairs newsletter Round 219 – News of the week appeared first on Security Affairs.