Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!
For the less technical
- Russian ransomware hackers increasingly posing as tech support on Microsoft Teams
- Otelier data breach exposes info, hotel reservations of millions
- HPE investigates breach as hacker claims to steal source code
- Trump pardons Silk Road founder Ross Ulbricht for online drug scheme
- Court rules FBI’s warrantless searches violated Fourth Amendment
For the more technical
- Oracle critical patch update advisory – January 2025
- Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform
- VeraCrypt: update drops 32-bit support on Windows and fixes several security issues
- Windows BitLocker – screwed without a screwdriver
- Cisco Meeting Management REST API privilege escalation vulnerability
- 7-Zip Mark-of-the-Web bypass vulnerability
- Hacking Subaru: Tracking and controlling cars via the Starlink admin panel
- EtherHiding and ClickFix: new mask of social engineering campaign
- Malicious extensions circumvent Google’s remote code ban
- Fake Homebrew Google ads target Mac users with malware
- 2024 macOS malware review: Infostealers, backdoors, and APT campaigns targeting the enterprise
- Malicious PyPI package ‘pycord-self’ targets Discord developers with token theft and backdoor exploit
- Targeted supply chain attack against Chrome browser extensions
- A beginner(s) guide to hunting web-based credit card skimmers
- No honour among thieves: Uncovering a trojanized XWorm RAT builder propagated by threat actors and disrupting its operations
- Record-breaking 5.6 Tbps DDoS attack and global DDoS trends for 2024 Q4
- Mass campaign of Murdoc botnet Mirai: A new variant of Corona Mirai
- Akira ransomware: A shifting force in the RaaS domain
- HellCat and Morpheus: Two brands, one payload as ransomware affiliates drop identical code
- The new face of ransomware: Key players and emerging tactics of 2024
- Android malware in DoNot APT operations
- How hackers use PHP backdoors and GSocket to facilitate illegal gambling in Indonesia
- New Star Blizzard spear-phishing campaign targets WhatsApp accounts
- Researchers say new attack could take down the European power grid
- PlushDaemon compromises supply chain of Korean VPN service
- InvisibleFerret malware: Technical analysis
- Quick overview of Babyshark campaign disguise as defense-themed HWP document, involving the Kimsuky APT group
- Unveiling Silent Lynx APT targeting entities across Kyrgyzstan & neighbouring nations
Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.