Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!
For the less technical
- Facebook to drop Face Recognition, will delete templates on more than one billion people
- Yahoo secretly scanned customer emails for U.S. intelligence
- US sanctions four companies selling hacking tools, including NSO Group & Candiru
- Sergey Pavlovich, wanted by US on hacking-related charges since 2008, was ‘surprised’ by Russian arrest
- TrickBot malware dev extradited to U.S. faces 60 years in prison
- Man charged with hacking MLB, NBA, NFL, and NHL user accounts to stream games
- How a Squid Game crypto scam got away with millions
- ‘Destructive’ cyberattack hits National Bank of Pakistan
- Ransomware attack disrupts Toronto’s public transportation system
For the more technical
- Android Security Bulletin – November 2021
- Trojan Source attacks. Invisible source code vulnerabilities
- GitLab unauthenticated remote code execution CVE-2021-22205 exploited in the wild
- CVE-2021-43267: Remote Linux kernel heap overflow. TIPC module allows arbitrary code execution
- Signal is adding a closed-source spam reduction piece of code to its servers
- Malware found in coa and rc, two npm packages with 23M weekly downloads
- The 2021 CWE Most Important Hardware Weaknesses
- Known Exploited Vulnerabilities Catalog
- Pwn2Own Austin 2021 – Schedule and live results
- Sneaking through Windows: Infostealer malware masquerades as Windows application
- Snake infostealer malware
- TA575 uses ‘Squid Game’ lures to distribute Dridex malware
- Identification of a new cybercriminal group: Lockean (PDF)
- Holy SEO poisoning
- The ‘Groove’ ransomware gang was a hoax
- BlackMatter ransomware says its shutting down due to pressure from local authorities
- Chaos ransomware variant in fake Minecraft alt list brings destruction to Japanese gamers
- BlackShadow hackers breach Israeli hosting firm and extort customers
- Spam and phishing in Q3 2021
- Pink, a botnet that competed with the vendor to control the massive infected devices
Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.