Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!
For the less technical
- Lapsus$: Court finds teenagers carried out hacking spree
- The secret weapon hackers can use to dox nearly anyone in America for $15
- Tornado Cash founders charged with money laundering and sanctions violations
- How a hacking crew overtook a satellite from inside a Las Vegas convention center and won $50,000
- Disinformation and the resilience of democratic societies (PDF)
- Why US tech giants are threatening to quit the UK
- MOVEit, the biggest hack of the year, by the numbers
- Japanese watchmaker Seiko breached by BlackCat ransomware gang
- Too many users abused unlimited Dropbox plans, so they’re getting limits
For the more technical
- WinRAR 0-day that uses poisoned JPG and TXT files under exploit since April
- CVE-2020-19909 is everything that is wrong with CVEs
- [VIDEO] How to turn SQL injection into an RCE or a file read? Case study of 128 bug bounty reports
- Pixel Binary Transparency: verifiable security for Pixel devices
- Switching from Chrome to Firefox? Here are some tips
- You can now code websites with SQL
- Critical vulnerabilities patched in Jupiter X Core plugin
- Kali Linux 2023.3 release (Internal Infrastructure & Kali Autopilot)
- Announcing Python in Excel: Combining the power of Python and the flexibility of Excel
- New Python URL parsing flaw could enable command execution attacks
- Suspected PRC cyber actors continue to globally exploit Barracuda ESG zero-day vulnerability (CVE-2023-2868)
- Exploitation of Openfire CVE-2023-32315
- Smoke Loader drops Whiffy Recon Wi-Fi scanning and geolocation malware
- Scarabs colon-izing vulnerable servers
- Lockbit leak, research opportunities on tools leaked from TAs
- From Conti to Akira: Decoding the latest Linux & ESXi Ransomware families
- Agniane Stealer: Dark web’s crypto threat
- No rest for the wicked: HiatusRAT takes little time off in a return to action
- Chinese entanglement: DLL hijacking in the Asian gambling sector
Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.