Security news weekly round-up - 16th July 2021
Tags: security
Published: 2021-07-16 21:04:01

---
title: Security news weekly round-up - 16th July 2021
published: true
description: Curated links about computer security from around the web
tags: security
cover_image: https://dev-to-uploads.s3.amazonaws.com/i/0jupjut8w3h9mjwm8m57.jpg
series: Security news weekly round-up
---

> **8 weeks and counting.**

## __Introduction__

Welcome to this week's edition of Security news weekly round-up. I am your host [Habdul Hazeez](https://dev.to/ziizium).

In this week's edition, we'll cover stories related to malware, zero-day bugs, cybercrime, and one story about nation-state hackers.

<hr />

## __[Adobe: Critical Flaws in Reader, Acrobat, Illustrator](https://www.securityweek.com/adobe-critical-flaws-reader-acrobat-illustrator)__

Adobe products are popular in the tech industry, therefore, if you use any of the above-named software, update now.

Excerpt from the article:

> Successful exploitation could lead to arbitrary code execution in the context of the current user,” Adobe warned, noting that most of the flaws are memory safety issues.

## __[16 Cybercriminals Behind Mekotio and Grandoreiro Banking Trojan Arrested in Spain](https://thehackernews.com/2021/07/16-cybercriminals-behind-mekotio-and.html)__

Banking Trojan? Not good.

Excerpt from the article:

> The malware — dubbed "Mekotio" and "Grandoreiro" — functioned by intercepting transactions on a banking website to unauthorizedly siphon funds to accounts under the attackers' control. At least 68 email accounts belonging to official bodies were infected to facilitate such fraudulent transfers.

## __[Chinese Hackers Target Government Entities in Widespread Campaign](https://www.securityweek.com/chinese-hackers-target-government-entities-widespread-campaign)__

The title says it all.

Excerpt from the article:

> The threat actor uses spear-phishing emails as the initial assault vector. The emails include a Dropbox download link that fetches a RAR archive posing as a Word document that deploys malware onto target machines.

## __[REvil Ransomware Gang Mysteriously Disappears After High-Profile Attacks](https://thehackernews.com/2021/07/revil-ransomware-gang-mysteriously.html)__

REvil has been all over the news in recent weeks, therefore, this disappearance might come as a surprise to some, and others, not so much.

Excerpt from the article:

>  The situation is still unfolding, but evidence suggests REvil has suffered a planned, concurrent takedown of their infrastructure, either by the operators themselves or via industry or law enforcement action," FireEye Mandiant's John Hultquist told CNBC.

## __[iOS zero-day let SolarWinds hackers compromise fully updated iPhones](https://arstechnica.com/gadgets/2021/07/solarwinds-hackers-used-an-ios-0-day-to-steal-google-and-microsoft-credentials/)__

Scary to say the least.

Excerpt from the article:

> The Russian state hackers who orchestrated the SolarWinds supply chain attack last year exploited an iOS zero-day as part of a separate malicious email campaign aimed at stealing Web authentication credentials from Western European governments, according to Google and Microsoft.

## __[WooCommerce fixes vulnerability exposing 5 million sites to data theft](https://www.bleepingcomputer.com/news/security/woocommerce-fixes-vulnerability-exposing-5-million-sites-to-data-theft/)__

Woo, Woo, Woo. Patch now!

Excerpt from the article:

> Administrators are urged to install the latest release of the platform as the flaw affects more than 90 versions starting with 5.5.0.

## __[Israeli Firm Helped Governments Target Journalists, Activists with 0-Days and Spyware](https://thehackernews.com/2021/07/israeli-firm-helped-governments-target.html)__

The title says it all.

Excerpt from the article:

> The spyware vendor was also formally identified as the commercial surveillance company that Google's Threat Analysis Group (TAG) revealed as exploiting multiple zero-day vulnerabilities in Chrome browser to target victims located in Armenia, according to a report published by the University of Toronto's Citizen Lab.

## __Credits__

Cover photo by [Debby Hudson on Unsplash](https://unsplash.com/@hudsoncrafted).

<hr>

That's it for this week, I'll see you next Friday.