Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!
For the less technical
- More bosses are using software to monitor remote workers
- Quad9 public domain name service moves to Switzerland for maximum internet privacy protection
- Is social media hijacking our minds?
- Why hot new social app Clubhouse spells nothing but trouble
- Attack on RIPE NCC access: Please enable two-factor authentication
- Kia Motors America experiences massive IT outage across the US
- Egregor ransomware affiliates arrested by Ukrainian, French police
- Three North Korean military hackers indicted in wide-ranging scheme to commit cyberattacks and financial crimes across the globe
- 270 service deposit addresses drive 55% of money laundering in cryptocurrency
For the more technical
- Best WhatsApp alternatives that respect your privacy
- Brave privacy bug exposes Tor onion URLs to your DNS provider
- Telegram flaw could have allowed access to users secret chats
- The “P” in Telegram stands for Privacy
- Clubhouse in China: Is the data safe?
- SHAREit flaw could lead to remote code execution
- Microsoft force installs Windows 10 update to remove Flash Player
- Stored XSS in icloud.com — $5000
- Don’t call us we’ll call you: McAfee ATR finds vulnerability in Agora Video SDK
- Conti ransomware: Evasive by nature
- Arm’d & dangerous – malicious code, now native on apple silicon
- AppleJeus: Analysis of North Korea’s cryptocurrency malware
- Massive campaign targeting UK banks bypassing 2FA
- Data theft using Google Apps Script
- The EMV Standard: Break, fix, verify
- Bluetooth overlay skimmer that blocks chip
- Spam and phishing in 2020
- New phishing attack identified: Malformed URL prefixes
- Malvertiser “ScamClub” bypasses iframe sandboxing with postMessage() shenanigans [CVE-2021–1801]
- Masslogger campaigns exfiltrates user credentials
- WatchDog – exposing a cryptojacking campaign that’s operated for two years
- ApoMacroSploit – apocalyptical FUD race
- Microsoft internal Solorigate investigation – final update
- Sandworm intrusion set campaign targeting Centreon systems (PDF)
- Centreon provides clarification following the publication of the ANSSI Report
- DDoS attacks in Q4 2020
Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.