Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!
For the less technical
- U.S. DOJ will no longer prosecute ethical hackers under CFAA
- Hacker and ransomware designer charged for use and sale of ransomware, and profit sharing arrangements with cybercriminals
- Three arrested in the Netherlands for ATM explosion spree in Germany
- National bank hit by ransomware trolls hackers with dick pics
- Top passwords used by business executives
- Bloomberg: Google is sharing our data at a startling scale
For the more technical
- Microsoft’s May patch tuesday updates cause Windows AD authentication errors
- The underrated bugs, clickjacking, CSS injection, drag-drop XSS, cookie bomb, login+logout CSRF…
- How to disable ad ID tracking on iOS and Android, and why you should do it now
- When wireless malware stays on after turning off iPhones (PDF)
- About the security content of iOS 15.5 and iPadOS 15.5
- Protecting Android users from 0-day attacks
- Kali Linux 2022.2 released with 10 new tools, WSL improvements, and more
- VMware patches critical auth bypass flaw in multiple products
- Lazarus group exploiting Log4Shell vulnerability (NukeSped)
- Millions of attacks target Tatsu Builder plugin
- Stack under attack: what we learned about handling DDoS attacks
- Radware mitigates 1.1Tbps DDoS attack
- New Bluetooth hack can unlock your Tesla—and all kinds of other devices
- Nozomi Networks discovers vulnerability in Siemens building automation software
- Fake mobile apps steal Facebook credentials, cryptocurrency-related keys
- RedLine stealer campaign using Binance Mystery Box videos to spread GitHub-hosted payload
- Vidar distributed through backdoored Windows 11 downloads and abusing Telegram
- New SYK crypter distributed via Discord
- UpdateAgent adapts again
- HTML attachments in phishing e-mails
- Over 380 000 open Kubernetes API servers
- Evaluation of cyber activities and the threat landscape in Ukraine
- Custom PowerShell RAT targets Germans seeking information about the Ukraine crisis
- Chaos ransomware variant sides with Russia
- Chinese ‘Space Pirates’ are hacking Russian aerospace firms
- Software updates strategies: a quantitative evaluation against Advanced Persistent Threats (PDF)
- Rise in XorDdos: A deeper look at the stealthy DDoS malware targeting Linux devices
- Conti ransomware shuts down operation, rebrands into smaller units
- Wizard Spider in-depth analysis (PDF)
Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.