Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!
For the less technical
- Losing Signal
- Twitter’s privacy-preserving Tor service goes dark
- New Pegasus spyware abuses identified in Mexico
- The FBI just admitted it bought US location data
- The gender-equal cybercriminal underground
- Germany and Ukraine hit two high-value ransomware targets
- Police seize Netwire RAT malware infrastructure, arrest admin
- Acer confirms server intrusion after miscreant offers 160GB cache of stolen files
- Facebook’s powerful large language model leaks online
For the more technical
- An ultra-rare Radeon driver bug is breaking PCs. This exotic fix revived mine
- TCG TPM2.0 implementations vulnerable to memory corruption
- Traveling with OAuth – Account takeover on Booking.com
- Cobalt Strike 4.8: (System) Call me maybe
- GoBruteforcer: Golang-based botnet actively harvests web servers
- Prometei botnet improves modules and exhibits new capabilities in recent updates
- How cybercriminals are abusing OneNote – Part 1, Part 2
- OneNote spear-phishing campaign
- Malvertising through search engines
- New HiatusRAT router malware covertly spies on victims
- Suspected Chinese campaign to persist on SonicWall Devices, highlights importance of monitoring edge devices
- Emotet sending malicious emails after three-month hiatus
- FiXS the new ATM malware in LATAM
- Xenomorph v3: a new variant with ATS targeting more than 400 institutions
- A border-hopping PlugX USB worm takes its act on the road
- A look back at 2022 and insight on what 2023 could hold for healthcare data breaches (PDF)
- The state of stalkerware in 2022 (PDF)
- Scarleteel: Operation leveraging Terraform, Kubernetes, and AWS for data theft
- IceFire ransomware now encrypts both Linux and Windows systems
- Old cyber gang uses new crypter – ScrubCrypt
- Threat landscape for industrial automation systems. Statistics for H2 2022
- Russia-aligned TA499 beleaguers targets with video call requests
- DBatLoader and Remcos RAT sweep Eastern Europe
- Stealing the LIGHTSHOW (Part One) — North Korea’s UNC2970
- Stealing the LIGHTSHOW (Part Two) — LIGHTSHIFT and LIGHTSHOW
Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.