Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!
For the less technical
- “Software installed by hackers”- how the Polish Press Agency lies about the Newag scandal
- Former IT employee gets 2.5 years for wiping 180 virtual servers
- Ukrainian police identify suspected affiliate of Conti, LockBit groups
- London hospitals cancel over 800 operations after ransomware attack
- Spam blocklist SORBS closed by its owner, Proofpoint
- Two people arrested in connection with investigation into homemade mobile antenna used to send thousands of smishing text messages to the public
- Adobe clarifies Terms of Service change, says it doesn’t train AI on customer content
- YouTube tests harder-to-block server-side ad injection in videos
- US and Poland to fight together against Russian disinformation
For the more technical
- Microsoft Patch Tuesday June 2024
- Update on the Recall preview feature for Copilot+ PCs
- Ransomware attackers may have used privilege escalation vulnerability as zero-day
- Update now! Google Pixel vulnerability is under active exploitation
- Cinterion EHS5 3G UMTS/HSPA module research
- Semiconductor giants Nvidia and Arm warn of new flaws in their graphics processors
- How we hacked multi-billion dollar companies in 30 minutes using a fake VSCode extension
- Nasty bug with very simple exploit hits PHP just in time for the weekend
- Updates for security issue affecting IntelliJ-based IDEs 2023.1+ and JetBrains GitHub Plugin
- Exposing malicious extensions: Shocking statistics from the VS Code Marketplace
- A letter to Microsoft: Uncovering design flaws of Visual Studio Code extensions
- Arid Viper poisons Android apps with AridSpy
- Technical analysis of the latest variant of ValleyRAT
- IcedID brings ScreenConnect and CSharp Streamer to ALPHV ransomware deployment
- Noodle RAT: Reviewing the backdoor used by Chinese-speaking groups
- 2024: Old CVEs, new targets – active exploitation of ThinkPHP
- Dipping into danger: The WarmCookie backdoor
- APT attacks using cloud storage
- UNC5537 targets Snowflake customer instances for data theft and extortion
Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.