Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!
For the less technical
- What you need to know before installing Clubhouse
- How IT security leaders can unlock the potential of their teams
- Mapping internet shutdowns around the world
- Copying China’s online blockade
- Internet providers tracking sites we visit in secretive trial
- Hackers breach thousands of security cameras, exposing Tesla, jails, hospitals
- Cracking of encrypted messaging service dealt major blow to organised crime + more information
- The FBI should stop attacking encryption and tell congress about all the encrypted phones it’s already hacking into
For the more technical
- Zero-day vulnerabilities in Microsoft Exchange Server
- Reproducing the Microsoft Exchange Proxylogon exploit chain
- Researcher publishes code to exploit Microsoft Exchange vulnerabilities on Github
- Barracuda detects increased probing for Microsoft Exchange vulnerabilities
- Microsoft Exchange Server attack timeline
- Analyzing attacks against Microsoft Exchange Server with China Chopper webshells
- Ransomware now attacks Microsoft Exchange servers with ProxyLogon exploits
- Exchange servers under siege from at least 10 APT groups
- Supernova webshell deployment linked to Spiral threat group
- Internet Explorer memory corruption vulnerability (CVE-2021-26411)
- Vulnerabilities in Microsoft DNS Server
- Multiple vulnerabilities in Netgear ProSAFE Plus JGS516PE / GS116Ev2 switches
- How we could have listened to anyone’s call recordings
- QNAP NAS users, make sure you check your system
- Sex in the digital era: How secure are smart sex toys?
- Image file trickery: Fake icon delivers NanoCore
- [VIDEO] Mobile banking malware
- Avast researchers obtain Ursnif victim data: Reach out to help victims
- Clast82 – A new dropper on Google Play dropping the AlienBot banker and MRAT
- Fin8 group is back in business with improved BADHATCH kit
- Ad blocker with miner included
- How six advanced persistent threat-connected Chinese universities are advancing AI research
- Lessons learned after Google nearly killed my site
- 7-Zip developer releases the first official Linux version
- Google’s FLoC is a terrible idea
- Prime+Probe 1, JavaScript 0: Overcoming browser-based side-channel defenses
- The Hitchhiker’s Guide to Online Anonymity (PDF)
- How to poison the data that Big Tech uses to surveil you
- Privacy-friendly video embeds
Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.