Updates
- CISA warns of critical Citrix ShareFile flaw exploited in the wild
- Critical Security Flaws Affect Ivanti Avalanche, Threatening 30,000 Organizations
- Jenkins Patches High-Severity Vulnerabilities in Multiple Plugins
- Microsoft reveals severe vulnerabilities in CODESYS industrial software
Threats
- LinkedIn accounts hacked in widespread hijacking campaign
- Experts Uncover Weaknesses in PowerShell Gallery Enabling Supply Chain Attacks
- WinRAR flaw lets hackers run programs when you open RAR archives
- New Wave of Attack Campaign Targeting Zimbra Email Users for Credential Theft
- AI Steals Passwords by Listening to Keystrokes With Scary Accuracy
- New Apple iOS 16 Exploit Enables Stealthy Cellular Access Under Fake Airplane Mode
Incidents
- 3D printer nightmare fuel: Bambu X1C and P1P started printing while owners were asleep
- Fukushima-Verklappung: Anonymous greift Website der japanischen Atombehörde an
- Discord.io confirms breach after hacker steals data of 760K users
- Over 100K hacking forums accounts exposed by info-stealing malware
- Hundreds of executives are falling for Microsoft 365 phishing attacks: Report | IT World Canada News
Cyber Crime
- Cybercrime-Durchsuchungen: Notebooks und Munition sichergestellt
- The Week in Ransomware - August 18th 2023 - LockBit on Thin Ice
Malware
- Thousands of Android Malware Apps Using Stealthy APK Compression to Evade Detection
- WoofLocker Toolkit Hides Malicious Codes in Images to Run Tech Support Scams
- Monti ransomware targets VMware ESXi servers with new Linux locker
Misc.
- BSI fördert Cyber-Sicherheit in Kommunen: 18 Checklisten als Community Draft veröffentlicht
- Weg in die Basis-Absicherung (WiBA)
- New CVE-2023-3519 scanner detects hacked Citrix ADC, Gateway devices
- Google released first quantum-resilient FIDO2 key implementation
- Blach Hat - 'DoubleDrive' attack turns Microsoft OneDrive into ransomware
- Black Hat - How a hacking crew overtook a satellite from inside a Las Vegas convention center and won $50,000