10/18

CVE-2023-26369: Adobe Acrobat PDF Reader RCE when processing TTF fonts | 0-days In-the-Wild

https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2023/CVE-2023-26369.html
CVE-2023-26369: Adobe Acrobat PDF Reader RCE when processing TTF fonts | 0-days In-the-Wild

Over 40,000 admin portal accounts use 'admin' as a password

https://www.bleepingcomputer.com/news/security/over-40-000-admin-portal-accounts-use-admin-as-a-password/
Over 40,000 admin portal accounts use 'admin' as a password

Hacker leaks millions of new 23andMe genetic data profiles

https://www.bleepingcomputer.com/news/security/hacker-leaks-millions-of-new-23andme-genetic-data-profiles/
Hacker leaks millions of new 23andMe genetic data profiles

Lazarus Group Targeting Defense Experts with Fake Interviews via Trojanized VNC Apps

https://thehackernews.com/2023/10/lazarus-group-targeting-defense-experts.html
Lazarus Group Targeting Defense Experts with Fake Interviews via Trojanized VNC Apps

Qubitstrike Targets Jupyter Notebooks with Crypto Mining and Rootkit Campaign

https://thehackernews.com/2023/10/qubitstrike-targets-jupyter-notebooks.html
Qubitstrike Targets Jupyter Notebooks with Crypto Mining and Rootkit Campaign

TetrisPhantom: Cyber Espionage via Secure USBs Targets APAC Governments

https://thehackernews.com/2023/10/tetrisphantom-cyber-espionage-via.html
TetrisPhantom: Cyber Espionage via Secure USBs Targets APAC Governments

Critical Citrix NetScaler Flaw Exploited to Target from Government, Tech Firms

https://thehackernews.com/2023/10/critical-citrix-netscaler-flaw.html
Critical Citrix NetScaler Flaw Exploited to Target from Government, Tech Firms

Microsoft disables bad spam rule flagging all sent emails as junk

https://www.bleepingcomputer.com/news/microsoft/microsoft-disables-bad-spam-rule-flagging-all-sent-emails-as-junk/
Microsoft disables bad spam rule flagging all sent emails as junk

New Admin Takeover Vulnerability Exposed in Synology's DiskStation Manager

https://thehackernews.com/2023/10/new-admin-takeover-vulnerability.html
New Admin Takeover Vulnerability Exposed in Synology's DiskStation Manager

D-Link Confirms Data Breach: Employee Falls Victim to Phishing Attack

https://thehackernews.com/2023/10/d-link-confirms-data-breach-employee.html
D-Link Confirms Data Breach: Employee Falls Victim to Phishing Attack