IT Security Weekend Catch Up – September 27, 2020

Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!

For the less technical

  1. The EU is set to declare war on encryption + more information
  2. Cianan Brennan: How data becomes money – the price we pay for keeping web content free
  3. I asked an online tracking company for all of my data and here’s what I found
  4. Amazon will launch a new location-tracking mesh network system later this year
  5. Amazon employee warns internal groups they’re being monitored for labor organizing
  6. The inside story of how Signal became the private messaging app for an age of fear and distrust
  7. Mass rallies and police data leaks in Belarus keep pressure on Lukashenko
  8. Windows XP source code leaked online, on 4chan, out of all places
  9. The Internet did my homework
  10. Nigerian man sentenced to three years in prison for computer hacking scheme that targeted government employees
  11. Ex-eBay global intel staffers to admit they cyberstalked online tat bazaar’s critics – who got pig heads, funeral wreath, and more in the mail
  12. International sting against dark web vendors leads to 179 arrests
  13. Sydney man sentenced for unlawful cryptocurrency mining using CSIRO supercomputers
  14. UK national sentenced to prison for role in “The Dark Overlord” hacking group

For the more technical

  1. Code execution vulnerability in Instagram app for Android and iOS
  2. $25K Instagram almost XSS filter link — Facebook bug bounty
  3. uMatrix development has ended
  4. Samba: Unauthenticated domain takeover via netlogon (“ZeroLogon”)
  5. [VIDEO] Hacking modern desktop apps with RCE and XSS
  6. 200K businesses are exposed to WFH attack scenario
  7. The return of raining SYSTEM shells with Citrix Workspace app
  8. Firefox for Android LAN-based intent triggering
  9. Online fashion retailer exposes European customers in massive data leak
  10. Unsecured server exposed Bing mobile app data
  11. Avast research found iOS and Android Scam Apps spreading via TikTok
  12. Alien – the story of Cerberus’ demise
  13. Microsoft Security – detecting empires in the cloud
  14. AgeLocker ransomware targets QNAP NAS devices, steals data
  15. The art and science of detecting Cobalt Strike (PDF)
  16. A notable increase in the use of LokiBot malware
  17. Sophisticated groups and cyber criminals set sights on lucrative financial sector (PDF)
  18. [VIDEO] hacker:HUNTER Ha(ck)cine: Healthcare on the Edge
  19. Federal agency compromised by malicious cyber actor
  20. APT28 delivers Zebrocy malware campaign using NATO theme as lure
  21. Rampant Kitten – An Iranian espionage campaign
  22. German-made FinSpy spyware found in Egypt, and Mac and Linux versions revealed
  23. Threat landscape for industrial automation systems. H1 2020
  24. Attack landscape update: Facebook phishing, COVID-19 spam, and more (PDF)
  25. Big game hunting: Now in Russia
  26. A new botnet attack just mozied into town
  27. Evasive URLs in spam

Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.

Leave a Reply

Your email address will not be published. Required fields are marked *