SecurityWeek

China-Linked Hackers Have Breached Deep Inside Teleco Providers and Have Complete Control of Data and Networks

Swiss industrial tech company ABB has patched a dozen vulnerabilities, including serious issues, in some of its human-machine interface (HMI) products.

LokiBot info-stealing malware is again being distributed in a malspam campaign using attached ISO image file attachments. Similar was reported in August 2018, but it remains an unusual method of distribution. This new campaign is also separately distributing NanoCore.

In the 1996 thriller, Mission Impossible I, Ethan Hunt hacks the HVAC system of a building to breach its security controls and carry out his mission. Well, the future has arrived. 

Several vulnerabilities affecting the Phoenix Contact Automationworx automation software suite can be exploited for remote code execution using specially crafted project files.

VideoLAN has addressed a critical double-free vulnerability in the VLC media player that could allow an attacker to execute arbitrary code on target systems.

A vulnerability recently addressed in Outlook for Android allows an attacker to steal information from the affected device.

Protection against Spectre, Meltdown, Rowhammer,

Real-time application behavior analytics, control, and protection provider TrueFort has raised $13.7 million in a Series A funding round.

A recently discovered malicious campaign is aiming at infecting victim machines by delivering the notorious FlawedAmmyy RAT directly in memory, Microsoft warns.FlawedAmmyy is a remote access Trojan (RAT) that provides attackers with full access to a victim’s machine, and which also provides capabilities required for lateral movement on the network.

A researcher has conducted a detailed analysis of the two pieces of Mac malware delivered recently by threat actors to cryptocurrency exchanges via two Firefox vulnerabilities.

The popular file transfer service WeTransfer issued a security notice on Friday after discovering that some file transfer emails were sent to the wrong individuals.

A former congressional staffer was sentenced to four years in prison Wednesday after pleading guilty to illegally posting online the home addresses and telephone numbers of five Republican senators who backed Brett Kavanaugh’s Supreme Court nomination.

A report says hackers stole data from NASA's Jet Propulsion Laboratory in Southern California for nearly a year without being detected.

The United States launched cyber attacks against Iranian missile control systems and a spy network this week after Tehran downed an American surveillance drone, US media reported on Saturday.

A newly discovered crypto-currency mining botnet can spread via open ADB (Android Debug Bridge) ports and Secure Shell (SSH), Trend Micro reports. 

78,000 Patient Healthcare Records Exposed in Unsecured MongoDB Database

New crypto-currency mining malware is targeting systems running macOS, and works by emulating Linux, Malwarebytes security researchers have discovered.