IT Security Weekend Catch Up – May 20, 2017

Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!

For the less technical

1. Researcher under threat for reporting potential security breach
2. Activist arrested for not revealing computer password
3. [PDF] Russian secret services using criminal networks
4. Access codes for United Airlines cockpit doors posted online
5. Hacker claim they stole new Disney movie

For the more technical

1. WannaCry updates:
   • technical analysis by BAE
   • operational analysis by thegrugq
   • new WannaCry variants
   • killswitch domain under DDoS attacks
   • infection statistics by OS version
   • sinkhole count accuracy
   • tool attempting to reconstruct the encryption key
   • locating the key in the memory is not that simple
   • Mikko Hypponen on WannaCry
   • other attacks using EternalBlue
   • EternalBlue history
   • EternalBlue and security tools
   • link between Lazarus and WannaCry
   • WannaCry April attacks on South Korea
   • infected medical devices
   • ransomware effect in China
   • how MalwareTech stopped the attack
   • MalwareTech doxed by journalists
2. Tinder multilateration scenario
3. NSA DanderSpritz platform analysis
4. NSA exploit EPICHERO analysis
5. AppLocker bypass
6. Memory leak from Yahoo mailservers
7. Google bug bounty with error page
8. Oracle PeopleSoft RCE
9. Uber account takeover
10. Weak WiFi security in Trump’s estate
11. Joomla SQLi
12. Chinese ministry is APT3
13. CVE-2017-0263 analysis (Windows)
14. Astrum, the return of an old exploit pack
15. Terror Exploit Kit analysis
16. DocuSign breach leading to malware campaign
17. Stealing Windows credentials with Google Chrome
18. Individual patterns recovered form aggregated data
19. APT32 – offensive cyber from Vietnam
20. Finding a vulnerability in a file sharing script
21. Getting paid for infecting your own phone
22. Fresh dump of more CIA tools
23. Apache Struts 0day impact stats
24. Interesting approach to fight ransomware
25. AWS storage in penetration testing
26. Jaff ransomware campaign
27. SSH MiTM tool
28. New Loki campaign
29. Improving offensive macro
30. Recovering deleted iCloud notes past retention period

Did you enjoy this list? You can retweet it and subscribe to one of our feeds on Twitter, Facebook or RSS.