Your daily dose of relevant cybersecurity advisories, industry news, and product updates for September 20, 2023.
Advisories
- Microsoft reveals memory corruption bugs in ‘ncurses’ library
- Thousands of Juniper devices vulnerable to unauthenticated RCE flaw
- Payment Card-Skimming Campaign Now Targeting Websites in North America
- New AMBERSQUID Cryptojacking Operation Targets Uncommon AWS Services
- APT36 state hackers infect Android devices using YouTube app clones
- Trend Micro addresses actively exploited zero-day in Apex One and other security Products
- GitLab Patches Critical Pipeline Execution Vulnerability
- Qatar Cyber Chiefs Warn on Mozilla RCE Bugs
- Hackers backdoor telecom providers with new HTTPSnoop malware
- Critical Security Flaws Exposed in Nagios XI Network Monitoring Software
- Fortinet FortiOS Flaw Let Attacker Execute Malicious JavaScript Code
- Atos Unify Vulnerabilities Could Allow Hackers to Backdoor Systems
- Fresh Wave of Malicious npm Packages Threaten Kubernetes Configs and SSH Keys