Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!
For the less technical
- [VIDEO] iPhone thief explains how he breaks into your phone
- [VIDEO] New Apple update includes ‘Stolen Device Protection’
- Stop using Opera Browser and Opera GX
- OpenAI ChatGPT Free & Plus privacy policies explained
- Founder of Neo-Nazi group the Base instructs followers to use ‘uncensored’ AI
- Trello API abused to link email addresses to 15 million accounts
- Fujitsu bugs that sent innocent people to prison were known “from the start”
- French regulator fines Amazon $35M over its surveillance system of warehouse workers
- France: CNIL fines Yahoo €10M for unlawful use of cookies
- Russian national sentenced for involvement in development and deployment of Trickbot malware
- Investigating worldwide SMS scams, and tens of millions of dollars in fraud
For the more technical
- The Artemis security scanner
- Stealing your email with a .txt file
- Microsoft actions following attack by nation state actor Midnight Blizzard
- Midnight Blizzard: Guidance for responders on nation-state attack
- HPE: Russian hackers breached its security team’s email accounts
- Chinese espionage group UNC3886 found exploiting CVE-2023-34048 since late 2021
- Over a million sites at risk: Hackers are exploiting CVE-2023-6933 flaw in WordPress plugin
- [VIDEO] How to hack WordPress?
- Tales from the cloud trenches: Amazon ECS is the new EC2 for crypto mining
- CVE-2024-0204: Fortra GoAnywhere MFT authentication bypass deep-dive
- Pwn2Own Automotive: $1.3M for 49 zero-days, Tesla hacked twice
- Cisco warns of critical RCE flaw in communications software
- Another Phobos ransomware variant launches attack – FAUST
- NSPX30: A sophisticated AitM-enabled implant evolving since 2005
- ScarCruft: Attackers gather strategic intelligence and target cybersecurity professionals
- Kasseika ransomware deploys BYOVD attacks, abuses PsExec and exploits Martini driver
- Cybercrime central: VexTrio operates massive criminal affiliate program
- Location tracking on the battlefield (PDF)
Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.