Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!
For the less technical
- FBI warns of hackers selling credentials for U.S. college networks
- Russian credit card data floods the market following the Russo-Ukrainian war
- WeLeakInfo.to and related domain names seized
- [VIDEO] Bank scams: How far would cyber criminals go?
- Takedown of SMS-based FluBot spyware infecting Android phones
- Foxconn confirms ransomware attack disrupted production in Mexico
- The faces from China’s Uyghur detention camps
- Brave joins Mozilla in declaring Google’s First-Party Sets feature harmful to privacy
- The underground company that hacks iPhones for ordinary consumers
For the more technical
- Follina – a Microsoft Office code execution vulnerability
- Confluence Server and Data Center – CVE-2022-26134 – Critical severity unauthenticated remote code execution vulnerability
- CVE-2022-0337 System environment variables leak on Google Chrome, Microsoft Edge and Opera
- New Windows Search zero-day added to Microsoft protocol nightmare
- Hackers steal WhatsApp accounts using call forwarding trick
- Android apps with millions of downloads exposed to high-severity vulnerabilities
- Vulnerability within the UNISOC baseband opens mobile phones communications to remote hacker attacks
- Over 3.6 million exposed MySQL servers on IPv4 and IPv6
- Unsecured Elasticsearch data replaced with ransom note
- ServiceNSW’s digital drivers licence security appears to be super bad
- ESET Threat Report T 1 2022 (PDF)
- Rapidly evolving IoT malware EnemyBot now targeting Content Management System servers and Android devices
- Conti targets critical firmware
- YourCyanide: A CMD-based ransomware with multiple layers of obfuscation
- Karakurt data extortion group
- Trend Micro partners with Interpol and Nigeria’s EFCC for Operation Killer Bee, takes down Nigerian BEC actors
- To HADES and back: UNC2165 shifts to LOCKBIT to evade sanctions
- Exposing POLONIUM activity and infrastructure targeting Israeli organizations
- Clipminer botnet makes operators at least $1.7 million
Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.