Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!
For the less technical
- Governor wants to prosecute journalist who clicked ‘view source’ on government site
- Acer hacked – Private data of millions of clients sold on hacker forum
- ‘Urgent Pizza’: The untold story of the largest hack in Twitch’s history
- The cost of hiring a hacker on the dark web: report
- ProtonMail is launching ProtonChat, ProtonDrive, ProtonWallet and more
- We need to talk about how Apple is normalising surveillance
For the more technical
- Microsoft October 2021 Patch Tuesday
- Microsoft to disable Excel 4.0 macros, one of the most abused Office features
- Microsoft Office Excel 2019/365 ConditionalFormatting code execution vulnerability
- Sysmon For Linux install and build instructions
- Business as usual for Azure customers despite 2.4 Tbps DDoS attack
- How the Microsoft MFA system almost brought me to a complete nervous breakdown in under 24 hours
- Bindiff and POC for the IOMFB vulnerability, iOS 15.0.2
- Transient execution of non-canonical accesses (PDF)
- AMD prefetch attacks through power and time (PDF)
- IoT hacking and rickrolling my high school district
- Azure, GitHub, GitLab, BitBucket mass-revoke SSH keys following bug report
- End-to-end encrypted backups on WhatsApp
- Android mobile OS snooping by Samsung, Xiaomi, Huawei and Realme handsets (PDF)
- Defining Cobalt Strike components so you can BEA-CONfident in your analysis
- MysterySnail attacks with Windows zero-day
- VirusTotal: Ransomware in a global context (PDF)
- CryptoRom fake iOS cryptocurrency apps hit US, European victims for at least $1.4 million
- The ad blocker that injects ads
- Ongoing cyber threats to U.S. water and wastewater systems
- Necro Python botnet goes after vulnerable VisualTools DVR
- The king is dead, long live MyKings!
- FontOnLake malware strikes Linux systems in targeted attacks
- Actors target Huawei Cloud using upgraded Linux malware
- Iran-linked DEV-0343 targeting defense, GIS, and maritime sectors
- SnapMC skips ransomware, steals data
Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.