Afraid of missing important security news during the week? We're here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!
For the less technical
- Meta's Zuckerberg denies at LA trial that Instagram targets kids
- Microsoft says bug causes Copilot to summarize confidential emails
- Angola: Prominent journalist hacked with Predator spyware
- Cellebrite used on Kenyan activist and politician Boniface Mwangi
- Major operation in Africa targeting online scams nets 651 arrests, recovers USD 4.3 million
- Spain orders NordVPN, ProtonVPN to block LaLiga piracy sites
- US plans online portal to bypass content bans in Europe and elsewhere
- Sex toys maker Tenga says hacker stole customer information
- Vibe password generation: Predictable by design
- System Breach: a terminal hacking simulator with moral choices
For the more technical
- GrapheneOS - break free from Google and Apple
- Operation MacroMaze: new APT28 campaign using basic tooling and legit infrastructure
- From BRICKSTORM to GRIMBOLT: UNC6201 exploiting a Dell RecoverPoint for Virtual Machines zero-day
- Have you tried turning it off and on again? On bricking OT devices
- Paged Out! zine Issue #8 (PDF)
- Old-school IRC, new victims: Inside the newly discovered SSHStalker Linux botnet
- Spam campaign abuses Atlassian Jira, targets government and corporate entities
- Spying Chrome extensions: 287 extensions spying on 37M users
- Phishing on the edge of the web and mobile using QR codes
- PromptSpy ushers in the era of Android threats using GenAI
- Breaking down ZeroDayRAT - new spyware targeting Android and iOS
- Massiv: When your IPTV app terminates your savings
- (Don't) TrustConnect: It's a RAT in an RMM hat
- MIMICRAT: ClickFix campaign delivers custom RAT via compromised legitimate websites
- ClickFix won't die. Neither will Matanbuchus. A new RAT and a hands-on-keyboard intrusion
- How ClickFix opens the door to stealthy StealC information stealer
- LATAM businesses hit by XWorm via fake financial receipts: Full campaign analysis
- The Booking.com phishing campaign targeting hotels and customers
- 0APT ransomware: The real fake
- Crescentharvest: Iranian protestors and dissidents targeted in cyberespionage campaign
Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.
Comments