Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!
For the less technical
- UK’s first AI traffic cameras that detect mobile phone use rolled out in Devon and Cornwall
- Argentina will use AI to ‘predict future crimes’ but experts worry for citizens’ rights
- Stolen data from scraping service National Public Data leaked online
- Major leak exposes S. Korean intelligence agents
- Phish-friendly domain registry “.top” put on notice
- US dismantles laptop farm used by undercover North Korean IT workers
- Low-drama ‘Dark Angels’ reap record ransoms
- NASA likely to significantly delay the launch of Crew 9 due to Starliner issues
- A deep dive into how developers trick App Store review into approving malicious apps
- SEC decides against penalizing MOVEit software maker
- Indonesia bans search engine DuckDuckGo on gambling, pornography concerns
- Iran targeting 2024 US election
- Signal has been blocked by Venezuela and Russia
- Russian spies hacked UK government systems earlier this year, stole data and emails
- Police recover over USD 40 million from international email scam
For the more technical
- Microsoft discloses Office zero-day, still working on a patch
- Windows Downdate: Downgrade attacks using Windows Updates
- Dismantling Smart App Control
- Over 20,000 Ubiquiti cameras and routers are vulnerable to amplification attacks and privacy risks
- Anyone can access deleted and private repository data on GitHub
- Government emails at risk: Critical cross-site scripting vulnerability in Roundcube Webmail
- Container breakouts: Escape techniques in cloud environments
- 0.0.0.0 Day: Exploiting localhost APIs from the browser
- How someone I don’t know hacked the scammers back
- Announcing Swift homomorphic encryption
- Zola ransomware: The many faces of the Proton family
- Mimic ransomware campaign against organizations in India
- Unmasking Cronus: How fake PayPal documents deliver fileless ransomware via PowerShell
- New widespread extension trojan malware campaign
- PureHVNC deployed via Python multi-stage loader
- Chameleon is now targeting employees: Masquerading as a CRM app
- BlankBot – a new Android banking trojan with screen recording, keylogging and remote control capabilities
- LianSpy: new Android spyware targeting Russian users
- Botnet 7777: Are you betting on a compromised router?
- Panamorfi: A new Discord DDoS campaign
- New APT group Actor240524: A closer look at its cyber tactics against Azerbaijan and Israel
- A dive into Earth Baku’s latest campaign
Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.