Security Affairs newsletter Round 240

A new round of the weekly newsletter arrived! The best news of the week with Security Affairs

Bad News: AI and 5G Are Expected to Worsen Cybersecurity Risks
Boardriders and its subsidiarities QuikSilver and
Billabong infected with ransomware
Major ASP.NET hosting provider SmarterASP hit by
ransomware attack
Apple Mail stores parts of encrypted emails in
plaintext DB
Australian Govt agency ACSC warns of Emotet and
BlueKeep attacks
CERTrating a new Tool to evaluate CERT/CSIRT
maturity level
ZoneAlarm forum site hack exposed data of thousands
of users
Bugcrowd paid over $500,000 in bug bounty rewards in
one week
Buran ransomware-as-a-service continues to improve
Experts warn of spike in TCP DDoS reflection attacks
targeting Amazon, SoftLayer and telco infrastructure
Facebook is secretly using iPhones camera as users
scroll their feed
Mexican state-owned oil company Pemex hit by
ransomware
TA505 Cybercrime targets system integrator companies
A flaw in PMx Driver can give hackers full access to
a device
Adobe patch Tuesday updates addressed critical flaws
in Media Encoder and Illustrator products
Microsoft Patch Tuesday updates fix CVE-2019-1429
flaw exploited in the wild
New TSX Speculative Attack allows stealing sensitive
data from latest Intel CPUs
Russian man Aleksei Burkov extradited for running
online criminal marketplace
Canadian intelligence agencies CSE and CSIS are
divided on Huawei 5G ban
CVE-2019-3648 flaw in all McAfee AV allows DLL Hijacking
Experts found privilege escalation issue in Symantec
Endpoint Protection
Flaws in Qualcomm chips allows stealing private from
devices
Tracking Iran-linked APT33 group via its own VPN
networks
A new sophisticated JavaScript Skimmer dubbed Pipka
used in the wild
DDoS-for-Hire Services operator sentenced to 13
months in prison
New TA2101 threat actor poses as government agencies
to distribute malware
The Australian Parliament was hacked earlier this
year
Two men arrested for stealing $550,000 in
cryptocurrency with Sim Swapping
Checkra1n, a working iPhone Jailbreak, was released
WhatsApp flaw CVE-2019-11931 could be exploited to
install spyware


Pierluigi Paganini

(SecurityAffairs – newsletter)

The post Security Affairs newsletter Round 240 appeared first on Security Affairs.