Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!
For the less technical
- The FBI’s most controversial surveillance tool is under threat
- Revealed: the hacking and disinformation team meddling in elections
- Elon Musk’s Twitter fails first EU disinformation test
- Russian businessman guilty in hacking, insider trade scheme
- Crypto buyers beware: 1 in 4 new tokens of any value is a scam
- Eurostar forces ‘password resets’ — then fails and locks users out
- Scandinavian Airlines website hit by cyber attack, customer details exposed
- GoDaddy: Hackers stole source code, installed malware in multi-year breach
- Video game voice actors doxed and harassed in targeted AI voice attack
- Alleged SIM swapper ransomed Instagram influencer for dates, striptease video
- For a former ‘Yahoo Boy,’ romance is a cut-and-paste proposition
For the more technical
- Apple fixes new WebKit zero-day exploited to hack iPhones, Macs
- Microsoft February 2023 Patch Tuesday
- ClamAV 0.103.8, 0.105.2 and 1.0.1 patch versions published + more information
- Fortinet fixes critical RCE flaws in FortiNAC and FortiWeb
- OpenSSH pre-auth double free CVE-2023-25136 – writeup and proof-of-concept
- TikTok challenge spurs rise in thefts of Kia, Hyundai cars
- The essential techniques to bypass anti-virus and EDR
- The return of ICEFALL: Two critical bugs revealed in Schneider Electric tech (PDF)
- cURL audit: How a joke led to significant findings
- Threat actors are using fake Emsisoft code-signing certificates to disguise their attacks
- Havoc across the cyberspace
- Phylum discovers revived crypto wallet address replacement attack
- Spam and phishing in 2022
- Cloudflare mitigates record-breaking 71 million request-per-second DDoS attack
- These aren’t the apps you’re looking for: fake installers targeting Southeast and East Asia
- Mirai variant V3G4 targets IoT devices
- Dragos’s annual ICS/OT cybersecurity year in review (PDF)
- Ransomware and commodity loader topic summary report: Cisco Talos year in review 2022
- Screentime: Sometimes it feels like somebody’s watching me
- 2023 report by Estonia’s Foreign Intelligence Agency (PDF)
- Fog of war: How the Ukraine conflict transformed the cyber threat landscape
- Decoding how the People’s Republic of China uses cyberattacks (PDF)
- Fake Hogwarts Legacy cracks lead to adware, scams
- Frebniis: New malware abuses Microsoft IIS feature to establish backdoor
- Don’t sleep on the new ProxyShellMiner campaign
- Writing a decryptor for Jaff ransomware
- Uncle Sow: Dark Caracal in Latin America
- Nice try Tonto Team
- Sustained activity by specific threat actors (PDF)
Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.