IT Security Weekend Catch Up – October 20, 2018

Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!

For the less technical

1. North Korean hacker crew steals $571M in cryptocurrency across 5 attacks
2. Equifax engineer who designed breach portal gets 8 months of house arrest for insider trading
3. Facebook eyes spammers for mega-breach
4. How to irregular cyber warfare
5. Israel’s cyber-spy industry helps world dictators hunt dissidents and gays
6. Apple CEO is calling for Bloomberg to retract its Chinese spy chip story

For the more technical

1. libssh have an authentication bypass vulnerability in the server code
2. Patching, re-patching and meta-patching the Jet Database Engine RCE
3. Oracle Critical Patch Update for October 2018
4. Google’s Project Zero has again called Apple out for silently patching flaws
5. Ghostscript sandbox escape
6. Exploitation for the recent RCE in Git
7. Security advisories for Drupal core
8. DOM-XSS bug affecting Tinder, Shopify, Yelp, and more
9. Remote Code Execution in Moxa ThingsPro IIoT
10. Sony fixes PlayStation 4 bug that allowed message to crash consoles
11. Linksys E Series multiple OS command injection vulnerabilities
12. D-Link routers – full takeover
13. VMware ESXi, Workstation, and Fusion updates address an out-of-bounds read vulnerability
14. Octopus-infested seas of Central Asia
15. VestaCP compromised in a new supply-chain attack
16. Analysing new RTF-based campaign distributing Agent Tesla, Loki with PyREbox
17. NSA-linked DarkPulsar exploit tool detailed
18. “Big Star Labs” spyware campaign affects over 11,000,000 people
19. Godzilla loader and the long tail of malware
20. Mouse Underlaying: Global key and mouse listener based on an almost invisible window
21. Analyzing Turla’s keylogger
22. Shedding skin – Turla’s fresh faces
23. The mysterious return of years-old chinese malware
24. How we discovered a Ukranian cybercrime hotspot
25. How to remove fileless malware
26. VBA stomping –  advanced maldoc techniques
27. How Office 365 learned to reel in phish
28. How I “found” the database of the Donald Daters App
29. Researcher finds simple way of backdooring Windows PCs 
30. Building a Titan: Better security through a tiny chip
31. Android Protected Confirmation: Taking transaction security to the next level
32. Meet Helm, the startup taking on Gmail with a server that runs in your home
33. Modernizing IDA Pro: How to make processor module glitches go away

Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.