IT Security Weekend Catch Up – June 7, 2020

Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!

For the less technical

  1. Google faces class action for allegedly tracking private browsing activity
  2. Grandmother posting Facebook photos of her grandchildren violates GDPR privacy rule, court says
  3. With the coronavirus under control, this Chinese city wants to score and rank its residents based on their health and lifestyle
  4. Minnesota is now using contact tracing to track protestors, as demonstrations escalate
  5. Hacking Team founder: ‘Hacking Team is dead’
  6. Hacker leaks database of dark web hosting provider
  7. Hackers plan to use stolen cryptocurrency exchange data for SIM swapping
  8. A whopping 13,500 Vivo Smartphones found running on same IMEI number
  9. Tor Browser makes it easier to visit mainstream websites’ .onion addresses
  10. The biggest leaks revealed by Edward Snowden

For the more technical

  1. Zero-day in Sign in with Apple
  2. Apple releases iOS 13.5.1, patching out the Unc0ver jailbreak
  3. Two vulnerabilities in Zoom could lead to code execution
  4. Wallpaper crash explained: Here’s how a simple image can soft-brick phones
  5. An EL1/EL3 coldboot vulnerability affecting 7 years of LG Android devices
  6. Android Security Bulletin—June 2020
  7. Full infrastructure takeover of VMware Cloud Director (CVE-2020-3956)
  8. Any Mitron (viral TikTok clone) profile can be hacked in seconds
  9. Dabangg: Time for fearless flush based cache attacks (PDF)
  10. Research report – Zephyr and MCUboot security assessment
  11. Joomla team discloses data breach
  12. Ongoing eCh0raix ransomware campaign targets QNAP NAS devices
  13. Ransomware gang says it breached one of NASA’s IT contractors
  14. Fake ransomware decryptor double-encrypts desperate victims’ files
  15. Tycoon ransomware targets education and software sectors
  16. REvil ransomware operators targets Elexon
  17. Nworm: TrickBot gang’s new stealthy malware spreading module
  18. Cycldek: Bridging the (air) gap
  19. The zero-day exploits of Operation WizardOpium
  20. Famous video apps with 157M+ installations operating as spyware
  21. Large scale attack campaign targets database credentials
  22. The Brave web browser is hijacking links, and inserting affiliate codes
  23. Stolen YouTube credentials growing in popularity on dark web forums
  24. Analysing the (alleged) Minneapolis police department “hack”
  25. Privacy threats in intimate relationships
  26. (How) do people change their passwords after a breach? (PDF)
  27. Looking back at how Signal works, as the world moves forward
  28. iMessage for Windows

Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.

Leave a Reply

Your email address will not be published. Required fields are marked *