Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!
For the less technical
- The global version of Steam appears to be banned in China
- Samsung’s Galaxy Store is distributing apps that could infect phones with malware
- Fintech firm hit by Log4j hack refuses to pay $5 million ransom
- Cyberattack on one of Norway’s largest media companies shuts down presses
- Ransomware gang coughs up decryptor after realizing they hit the police
- LastPass users warned their master passwords are compromised
- US logistics company exposes Fortune 500 clients
- University loses 77TB of research data due to backup error
- [VIDEO] 2021 in review: The biggest cybersecurity stories of the year
- Russian national extradited for role in hacking and illegal trading scheme
For the more technical
- Log4j 2.17.1 out now, fixes new remote code execution bug
- Implant.ARM.iLOBleed.a – technical abstract (PDF)
- Critical flaws in myPRO HMI/SCADA product could allow takeover vulnerable systems
- Firmware attack can drop persistent malware in hidden SSD area (PDF)
- QNAP NAS devices hit in surge of ech0raix ransomware attacks
- Redline Stealer targeting accounts saved to web browser with automatic login feature included
- T‑Mobile releases 2021 scam and robocall report
- Phishing in organizations: Findings from a large-scale and long-term study (PDF)
- The day when the AWS Support got access to your S3 data
- Double authentication is not as effective as it used to be, beware of hackers (PDF)
- Cyberattacks shut down building automation systems
- Strategically aged domain detection: Capture APT attacks with DNS traffic trends
- OverWatch exposes AQUATIC PANDA in possession of Log4Shell exploit tools during hands-on intrusion attempt
- Flagpro: The new malware used by BlackTech
- A deep dive into DoubleFeature, Equation Group’s post-exploitation dashboard
- Attackers are abusing MSBuild to evade defenses and implant Cobalt Strike beacons
Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.