Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!
For the less technical
- The Instagram ads Facebook won’t show you
- Edward Snowden, “What I learned from games: playing for and against mass surveillance”
- ‘Deepfake’ that supposedly fooled European politicians was just a look-alike, say pranksters
- How China turned a prize-winning iPhone hack against the Uyghurs
- They told their therapists everything. Hackers leaked it all
- Peloton’s leaky API let anyone grab riders’ private account data
- ‘Phishing’ sites buying workplace login details linked to well-funded startup
- Credit card fraudster Sergey Pavlovich writes a new chapter
- Brazilian gang defrauds Uber, Lyft, DoorDash using GPS spoofing and stolen IDs
- Ransom demanded by cybercriminals in HSE attack but officials insist: ‘we won’t pay… it would open up Pandora’s Box’
- Ransomware attack leads to shutdown of major U.S. pipeline system
- Colonial Pipeline paid hackers nearly $5 million in ransom
- Darkside ransomware gang says it lost control of its servers & money a day after Biden threat
- Popular Russian hacking forum XSS bans all ransomware topics
- Ransomware ads now also banned on Exploit cybercrime forum
- Germany busts international child porn site used by 400,000
For the more technical
- 21Nails vulnerabilities impact 60% of the internet’s email servers + more information
- New Spectre flaws in Intel and AMD CPUs affect billions of computers (PDF)
- CVE-2021-21551- Hundreds of millions of Dell computers at risk due to multiple BIOS driver privilege escalation flaws
- Flexxon launches X-Phy SSD with embedded AI-based security features
- AirTag will interact with any NFC-capable smartphone to view a Lost Mode message
- Time to patch against FragAttacks but good luck with home routers and IoT devices + more information
- Microsoft May 2021 Patch Tuesday
- Exploiting custom protocol handlers for cross-browser tracking in Tor, Safari, Chrome and Firefox
- Vulnerable protocols leave firms open to further compromises
- China-linked APT group targets Russian nuclear sub designer with an undocumented backdoor
- UK and US share more vulnerabilities exploited by Russia’s APT29 hackers
- Privacy implications of accelerometer data: A review of possible inferences (PDF)
- Rapid7’s response to Codecov incident
- Malware group leaks millions of stolen authentication cookies
- Chinese military unit accused of cyber-espionage bought multiple western antivirus products
- RM3 – Curiosities of the wildest banking malware
- TeaBot: a new Android malware emerged in Italy, targets banks in Europe
- Fake Android and iOS apps disguise as trading and cryptocurrency apps
- Newly observed PHP-based skimmer shows ongoing Magecart Group 12 activity
- Microsoft warns: Watch out for this new malware that steals passwords, webcam and browser data
- Ransomware world in 2021: who, how and why
- The Fortnite trial is exposing details about the biggest iPhone hack on record
- Thousands of Tor exit nodes attacked cryptocurrency users over the past year
Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.