IT Security Weekend Catch Up – November 5, 2023

Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!

For the less technical

  1. Russian reshipping service ‘SWAT USA Drop’ exposed
  2. Pro-Ukraine group says it breached Russian card payment system
  3. Sam Bankman-Fried convicted of multi-billion dollar FTX fraud
  4. Boeing confirms cyberattack amid LockBit ransomware claims
  5. Alliance of 40 countries to vow not to pay ransom to cybercriminals, US says
  6. British police are testing women for abortion drugs and requesting data from menstrual tracking apps
  7. Privacy advocate challenges YouTube’s ad blocking detection scripts under EU law
  8. EU urged to drop new law that could allow member states to intercept and decrypt global web traffic
  9. Canada bans WeChat and Kaspersky products on govt devices

For the more technical

  1. Common Vulnerability Scoring System version 4.0
  2. CloudKeys in the air: Tracking malicious operations of exposed IAM keys
  3. Google Chrome’s new “IP Protection” will hide users’ IP addresses
  4. Opera browsers address bar spoofing vulnerabilities
  5. Unpatched powerful SSRF in Exchange OWA – getting response through attachments
  6. “This vulnerability is now under mass exploitation.” Citrix Bleed bug bites hard
  7. BIG-IP configuration utility is vulnerable for an authentication bypass
  8. Atlassian CISO warns that new vulnerability can cause ‘significant data loss’
  9. Exploit released for critical Cisco IOS XE flaw, many hosts still hacked
  10. Suspected exploitation of Apache ActiveMQ CVE-2023-46604
  11. [VIDEO] Wrapping up Pwn2Own Toronto 2023
  12. unwyze – a Wyze Cam v3 RCE exploit
  13. How I hacked 1000 + Tesla cars using OSINT
  14. IAmReboot: Malicious NuGet packages exploit loophole in MSBuild integrations
  15. Android 14’s user-profile data bug seems indistinguishable from ransomware
  16. New Hunters International ransomware possible rebrand of Hive
  17. Who killed Mozi? Finally putting the IoT zombie botnet in its grave
  18. Prolific Puma: Shadowy link shortening service enables cybercrime
  19. WhatsApp spy mod spreads through Telegram, attacks Arabic-speaking users
  20. Popping Blisters for research: An overview of past payloads and exploring recent developments
  21. From Albania to the Middle East: The Scarred Manticore is listening

Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.

Leave a Reply

Your email address will not be published. Required fields are marked *