Security news weekly round-up - 12th November 2021
Tags: security
Published: 2021-11-12 17:56:40

---
title: Security news weekly round-up - 12th November 2021
published: true
description: Curated links about computer security from around the web
tags: security
cover_image: https://dev-to-uploads.s3.amazonaws.com/i/0jupjut8w3h9mjwm8m57.jpg
series: Security news weekly round-up
---

## __Introduction__

Hello there. Welcome to this week's security review where we talk about stories that are worthy of your time.

I am your host [Habdul Hazeez](https://dev.to/ziizium).

This week, if your device could get infected with malware or affected by a vulnerability just by reading this edition, I am sure your device will get infected _or_ an attacker might find a vulnerability on an app on your device and might just execute an RCE on it. Just saying 😇.

Let's get on with it.

<hr />

## __[New Android malware targets Netflix, Instagram, and Twitter users](https://www.bleepingcomputer.com/news/security/new-android-malware-targets-netflix-instagram-and-twitter-users/)__

It's a banking Trojan using a fake overlay in an attempt to steal your credit card information.

Stay safe.

Excerpt from the article:

> By utilizing the Application Accessibility toolkit installed on Android by default, the attacker is able to use the application to implement the Overlay attack to trick the user into entering credit card information for fake account breaches on both Netflix and Twitter

## __[PhoneSpy: Android spyware campaign targeting South Korean users](https://www.bleepingcomputer.com/news/security/phonespy-android-spyware-campaign-targeting-south-korean-users/)__

I told you, it's _spooky malware_ week. 😄

This malware in question can steal sensitive information from a device and also take over its camera and microphone. Unauthorized access to the latter and the former make spying possible.

Excerpt from the article:

> The 'PhoneSpy' spyware comes **disguised** as a **Yoga companion app**, the **Kakao Talk messaging app**, an **image gallery browser**, a **photo editing tool**, and more.

> Zimperium identified **23 laced apps** that **appear as harmless lifestyle apps**, but **in the background, the apps run all the time, silently spying on the user**.

## __[Critical Flaw in WordPress Plugin Leads to Database Wipe](https://www.securityweek.com/critical-flaw-wordpress-plugin-leads-database-wipe)__

When you read the article's title, what's is the first thing that popped into your mind?

Share it in the comments section.

Excerpt from the article:

> A major security vulnerability in the WP Reset PRO WordPress plugin could be exploited by an authenticated user to wipe the entire database of a website, according to a warning from researchers at Packstack (formerly WebARX).

> The issue can be exploited by any authenticated user, regardless of their authorization, to wipe all tables in a WordPress installation's database.

## __[Invisible characters could be hiding backdoors in your JavaScript code](https://www.bleepingcomputer.com/news/security/invisible-characters-could-be-hiding-backdoors-in-your-javascript-code/)__

Do you remember the story that we covered last week titled ['Trojan Source' Attack Abuses Unicode to Inject Vulnerabilities Into Code](https://www.securityweek.com/trojan-source-attack-abuses-unicode-inject-vulnerabilities-code)?

Well, this attack from [_Certitude Consulting_](https://certitude.consulting/en) is an inspiration from that article.

Excerpt from the article:

> Security researcher Wolfgang Ettlinger, who is also the Director of Certitude Consulting, surmised "what if a backdoor literally cannot be seen and thus evades detection even from thorough code reviews?"

> And surely enough, it didn't take long for Ettlinger to come up with a proof of concept (PoC)

## __[Palo Alto Warns of Zero-Day Bug in Firewalls Using GlobalProtect Portal VPN](https://thehackernews.com/2021/11/palo-alto-warns-of-zero-day-bug-in.html)__

One of the scariest things you can think of in computer security is when the software designed to protect a system becomes vulnerable to attacks. I mean, a firewall has a zero-day bug 🤔.

Excerpt from the article:

> The vulnerability chain consists of a method for bypassing validations made by an external web server (HTTP smuggling) and a stack-based buffer overflow," Randori researchers said. "Exploitation of the vulnerability chain has been proven and allows for remote code execution on both physical and virtual firewall products.

## __[13 New Flaws in Siemens Nucleus TCP/IP Stack Impact Safety-Critical Equipment](https://thehackernews.com/2021/11/13-new-flaws-in-siemens-nucleus-tcpip.html)__

In context, this is similar to the previous story.

Excerpt from the article:

> Collectively called "NUCLEUS:13," successful attacks abusing the flaws can "result in devices going offline and having their logic hijacked," and "spread[ing] malware to wherever they communicate on the network

## __[Careful: 'Smart TV remote' Android app on Google Play is malware](https://www.bleepingcomputer.com/news/security/careful-smart-tv-remote-android-app-on-google-play-is-malware/)__

The applications in question(the other being the Halloween Coloring app) are laced with Joker malware.

Excerpt from the article:

> Joker malware hide malicious code in seemingly benign apps and publish these to official app stores. Earlier this year, over 500,000 Huawei Android devices were found to be infected with Joker.

> The malware is known to subscribe users to premium mobile services without their consent or knowledge.

## __Support Me__

Writing makes me thirsty. I'll appreciate a cup of coffee 😉.

<a href="https://www.buymeacoffee.com/ziizium" target="_blank"><img src="https://cdn.buymeacoffee.com/buttons/v2/default-yellow.png" alt="Buy Me A Coffee" style="height: 60px !important;width: 217px !important;" ></a>

## __Credits__

Cover photo by [Debby Hudson on Unsplash](https://unsplash.com/@hudsoncrafted).

<hr>

That's it for this week, I'll see you next Friday.