A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box.

Blue Mockingbird Monero-Mining campaign targets web appsShiny Hunters group is selling data from 11 companies on the Dark WebSwiss rail vehicle manufacturer Stadler hit by a malware-based attackATM vendor Diebold Nixdorf suffered a Ransomware attackExperts disclose security flaws in Oracles iPlanet Web ServerGDPR Data Security Checklist in the Age of COVID-19 and the Remote WorkforceSodinokibi ransomware uses MS API to encrypt open and locked filesSTAMINA, a new approach to malware detection by Microsoft, IntelVMware is going to fix recent Salt issues in vROpsA cyber attack hit a port on Strait of Hormuz, Iran saidAdobe addresses critical issues in Acrobat, Reader, and DNG SDKPatch now your vBulletin install before hacker will target your forumPopular Page Builder WordPress plugin fixes critical issues. Update it now!Trojan Lampion is back after 3 monthsZeus Sphinx continues to be used in Coronavirus-themed attacksChancellor Merkel has ‘hard evidence of Russian hackers targeted herCrooks continues to use COVID-19 lures, Microsoft warnsExpert found 1,236 websites infected with Magecart e-skimmerHealthcare giant Magellan Health discloses data breach after ransomware attackMicrosoft May 2020 Patch Tuesday fixes 111 flaws, 13 CriticalUSCYBERCOM shares five new North Korea-linked malware samplesChina-linked hackers are attempting to steal COVID-19 Vaccine ResearchCrooks stole $10 million from Norways state investment fund NorfundGoogle WordPress Site Kit plugin grants attacker Search Console AccessNew Ramsay malware allows exfiltrating files from air-gapped computersZerodium will no longer acquire certain types of iOS exploits due to surplusChinese APT Tropic Trooper target air-gapped military Networks in AsiaInterserve UK defense contractor hacked, up to 100,000 past and present employees details exposedPalo Alto Networks addresses tens of serious issues in PAN-OSRussian APT Turlas COMpfun malware uses HTTP status codes to receive commandsThreat actors are offering for sale 550 million stolen user recordsAPT group targets high profile networks in Central AsiaMicrosoft is open-sourcing COVID-19 threat intelligenceQNodeService Trojan spreads via fake COVID-19 tax relief

window._mNHandle = window._mNHandle || {};
window._mNHandle.queue = window._mNHandle.queue || [];
medianet_versionId = “3121199”;

try {
window._mNHandle.queue.push(function () {
window._mNDetails.loadTag(“762221962”, “300×250”, “762221962”);
});
}
catch (error) {}

Pierluigi Paganini

(SecurityAffairs – newsletter, hacking)

The post Security Affairs newsletter Round 264 appeared first on Security Affairs.