IT Security Weekend Catch Up – September 27, 2020

Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!

For the less technical

1. The EU is set to declare war on encryption + more information
2. Cianan Brennan: How data becomes money – the price we pay for keeping web content free
3. I asked an online tracking company for all of my data and here’s what I found
4. Amazon will launch a new location-tracking mesh network system later this year
5. Amazon employee warns internal groups they’re being monitored for labor organizing
6. The inside story of how Signal became the private messaging app for an age of fear and distrust
7. Mass rallies and police data leaks in Belarus keep pressure on Lukashenko
8. Windows XP source code leaked online, on 4chan, out of all places
9. The Internet did my homework
10. Nigerian man sentenced to three years in prison for computer hacking scheme that targeted government employees
11. Ex-eBay global intel staffers to admit they cyberstalked online tat bazaar’s critics – who got pig heads, funeral wreath, and more in the mail
12. International sting against dark web vendors leads to 179 arrests
13. Sydney man sentenced for unlawful cryptocurrency mining using CSIRO supercomputers
14. UK national sentenced to prison for role in “The Dark Overlord” hacking group

For the more technical

1. Code execution vulnerability in Instagram app for Android and iOS
2. $25K Instagram almost XSS filter link — Facebook bug bounty
3. uMatrix development has ended
4. Samba: Unauthenticated domain takeover via netlogon (“ZeroLogon”)
5. [VIDEO] Hacking modern desktop apps with RCE and XSS
6. 200K businesses are exposed to WFH attack scenario
7. The return of raining SYSTEM shells with Citrix Workspace app
8. Firefox for Android LAN-based intent triggering
9. Online fashion retailer exposes European customers in massive data leak
10. Unsecured server exposed Bing mobile app data
11. Avast research found iOS and Android Scam Apps spreading via TikTok
12. Alien – the story of Cerberus’ demise
13. Microsoft Security – detecting empires in the cloud
14. AgeLocker ransomware targets QNAP NAS devices, steals data
15. The art and science of detecting Cobalt Strike (PDF)
16. A notable increase in the use of LokiBot malware
17. Sophisticated groups and cyber criminals set sights on lucrative financial sector (PDF)
18. [VIDEO] hacker:HUNTER Ha(ck)cine: Healthcare on the Edge
19. Federal agency compromised by malicious cyber actor
20. APT28 delivers Zebrocy malware campaign using NATO theme as lure
21. Rampant Kitten – An Iranian espionage campaign
22. German-made FinSpy spyware found in Egypt, and Mac and Linux versions revealed
23. Threat landscape for industrial automation systems. H1 2020
24. Attack landscape update: Facebook phishing, COVID-19 spam, and more (PDF)
25. Big game hunting: Now in Russia
26. A new botnet attack just mozied into town
27. Evasive URLs in spam

Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.