Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!
For the less technical
- Texas man charged with intent to attack data centers
- Hacking startup ‘Azimuth Security’ unlocked the San Bernardino iPhone
- White House formally blames Russian intelligence service SVR for SolarWinds hack
- Sanctioned firm accused of helping Russian intelligence was part of Microsoft’s early vuln access program — MAPP
- Dutch supermarkets run out of cheese after ransomware attack
- Mexico will require new cell phone users to provide biometric data to the government
- The EU is considering a ban on AI for mass surveillance and social credit scores
- European tech companies warn of lowering data protection levels in the EU
For the more technical
- Google Project Zero testing 30-day grace period on bug details to boost user patching
- Google Chrome, Microsoft Edge zero-day vulnerability shared on Twitter
- Second Google Chrome zero-day exploit dropped on twitter this week
- NAME:WRECK: Nine DNS vulnerabilities found in four open source TCP/IP stacks
- NSA, CISA, and FBI warn of Russian intelligence exploiting 5 vulnerabilities
- Microsoft April 2021 Patch Tuesday
- Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild
- Justice Department announces court-authorized effort to disrupt exploitation of Microsoft Exchange Server vulnerabilities
- Compromised Exchange server hosting cryptojacker targeting other Exchange servers
- Malicious code in APKPure app
- Investigating a unique “form” of email delivery for IcedID malware
- Ryuk ransomware anatomy of an attack in 2021
- Meet the ransomware gang behind one of the biggest supply chain hacks ever
- Analysis of the world’s first ransomware cartel (PDF)
- Are the hackers all Russian?
- Cybercrime groups are selling their hacking skills. Some countries are buying
- FireEye report: M-Trends 2021
- Estonian Internal Security Service annual review 2020-2021 (PDF)
- [VIDEO] Operational Threat Intelligence – webinar by Joe Slowik
- LKRG 0.9.0 has been released
- DuckDuckGo announces plans to block Google’s FLoC
- Firefox, Edge, Safari, and other browsers won’t use Google’s new FLoC ad tech
Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.