Security News Bundle-Google News

"Microsoft says recent windows updates break SSH connections."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 10 November 2024, 2322 UTC.

Content and Source:  Email subscription via https://feedly.com.   https://feedly.com/i/collection/content/user/f401222a-bca6-4c45-9cc1-183f239e8d86/category/7737d3c9-5fe2-4b34-8708-85e57085f895

Please scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.blogspot.com).

Security News Bundle

15

Most popular

Microsoft says recent Windows 11 updates break SSH connections

4 TTPs

•

500+BleepingComputer / 1d

Microsoft has confirmed that last month's Windows security updates are breaking SSH connections on some Windows 11 22H2 and 23H2 systems. [...]

Security Affairs newsletter Round 497 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs / 11h

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Mazda Connect flaws allow to hack some Mazda vehicles Veeam Backup & Replication exploit reused in new Frag ransomware attack Texas oilfield supplier Newp

Palo Alto Advises Securing PAN-OS Interface Amid Potential RCE Threat Concerns

5 TTPs

•

63The Hacker News / 1d

Palo Alto Networks on Friday issued an informational advisory urging customers to ensure that access to the PAN-OS management interface is secured because of a potential remote code execution vulnerability. "Palo Alto Networks is aware of a claim of a remote code execution vulnerability via the PAN-OS management interface," the company said. "At this time, we do not know the specifics of the

Today

SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 19

Security Affairs / 11h

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. CRON#TRAP: Emulated Linux Environments as the Latest Tactic in Malware Staging Typosquat Campaign Targeting npm Developers ToxicP

U.S. agency cautions employees to limit phone use due to Salt Typhoon hack of telco providers

5 TTPs

•

Security Affairs / 13h

US CFPB warns employees to avoid work-related mobile calls and texts following China-linked Salt Typhoon hack over security concerns. The US government’s Consumer Financial Protection Bureau (CFPB) advises employees to avoid using cellphones for work after China-linked APT group Salt Typhoon hackers breached major telecom providers . The Consumer Financial Protection Bureau (CFPB) is a U.S. gover

Yesterday

Mazda Connect flaws allow to hack some Mazda vehicles

3 TTPs

•

Security Affairs / 1d

Multiple vulnerabilities in the infotainment unit Mazda Connect could allow attackers to execute arbitrary code with root access. Trend Micro’s Zero Day Initiative warned of multiple vulnerabilities in the Mazda Connect infotainment system that could allow attackers to execute code with root privileges. This occurs due to improper input sanitization in the Mazda Connect CMU, allowing attackers wi

Google says “Enhanced protection” feature in Chrome now uses AI

91BleepingComputer / 1d

Google has quietly updated the description of one of the Chrome's security features "Enchaned protection" to confirm that it will be powered by AI in a future release. [...]

Scammers target UK senior citizens with Winter Fuel Payment texts

IoC > 1 domain

•

28BleepingComputer / 1d

As the winter season kicks in, scammers are not missing the chance to target senior British residents with bogus "winter heating allowance" and "cost of living support" scam texts. [...]

Hands on with AI features in Windows 11 Paint and Notepad

Notepad adds AI text rewriting

•

37BleepingComputer / 1d

As part of its efforts to add AI everywhere, Microsoft is now bringing AI features to the popular Paint and Notepad apps on Windows 11. [...]

Malicious PyPI package with 37,000 downloads steals AWS keys

IoC > 1 IP

•

39BleepingComputer / 1d

•

20 TTPs

•

Malicious package steals AWS keys

A malicious Python package named 'fabrice' has been present in the Python Package Index (PyPI) since 2021, stealing Amazon Web Services credentials from unsuspecting developers. [...]

Veeam Backup & Replication exploit reused in new Frag ransomware attack

7 TTPs

•

Security Affairs / 1d

A critical flaw, tracked as CVE-2024-40711, in Veeam Backup & Replication (VBR) was also recently exploited to deploy Frag ransomware. In mid-October, Sophos researchers warned that ransomware operators are exploiting the critical vulnerability CVE-2024-40711 in Veeam Backup & Replication to create rogue accounts and deploy malware. In early September 2024, Veeam released security updates to addr

Hackers Are Stealing Tickets From Ticketmaster Accounts

Ticketmaster accounts hacked for tickets

•

Packet Storm Security / 1d

[no content]

US Gov Agency Urges Employees To Limit Phone Use After China Salt Typhoon Hack

CFPB restricts phone use amid hack

•

Packet Storm Security / 1d

[no content]

Nov 8, 2024

Bitcoin Fog Founder Sentenced to 12 Years for Cryptocurrency Money Laundering

Bitcoin Fog operator sentenced 150 months

•

34The Hacker News / 1d

The 36-year-old founder of the Bitcoin Fog cryptocurrency mixer has been sentenced to 12 years and six months in prison for facilitating money laundering activities between 2011 and 2021. Roman Sterlingov, a dual Russian-Swedish national, pleaded guilty to charges of money laundering and operating an unlicensed money-transmitting business earlier this March. The U.S. Department of Justice (DoJ)

Texas oilfield supplier Newpark Resources suffered a ransomware attack

Newpark Resources ransomware incident disclosed

•

Security Affairs / 2d

that disrupted its information systems and business applications. Texas oilfield supplier Newpark Resources revealed that a ransomware attack on October 29 disrupted access to some of its information systems and business applications. The company immediately activated its cybersecurity response plan and launched an investigation into the incident with the help of external experts. “On October 29

End of feed