Afraid of missing important security news during the week? We’re here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!
For the less technical
- Cellphone hacking and millions in Gulf deals: Inner workings of top secret Israeli cyberattack firm revealed
- A Saudi prince’s attempt to silence critics on Twitter
- Covid is accelerating a global censorship crisis
- New steps to combat disinformation
- India bans PUBG Mobile, and over 100 other Chinese apps
- Google removes Android app that was used to spy on Belarusian protesters
- Education apps are sending your location data and personal info to advertisers
- U.S. court: Mass surveillance program exposed by Snowden was illegal
- Norwegian Parliament discloses cyber-attack on internal email system
- Twitter hack may have had another mastermind: A 16-year-old
- Russian national indicted for conspiracy to introduce malware into a computer network
- AlphaBay dark web marketplace moderator gets 11 years in prison
- San Jose man pleads guilty to damaging Cisco’s Network
For the more technical
- Operation PowerFall: CVE-2020-0986 and variants
- Microsoft Defender can be used to directly download a file from the internet
- Malicious npm package caught trying to steal sensitive Discord and browser files
- Cisco IOS XR software DVMRP memory exhaustion vulnerabilities
- Four vulnerabilities in Cisco Jabber
- Remote Code Execution in Slack desktop apps
- Takeover an account that doesn’t have a Shopify ID and more
- Exploits in the wild for vBulletin pre-auth RCE vulnerability CVE-2020-17496
- Critical zero-day vulnerability fixed in WordPress File Manager (700,000+ installations)
- Critical vulnerabilities discovered in MoFi routers
- In the wild QNAP NAS attacks
- IT threat evolution Q2 2020 + PC statistics + mobile statistics
- (Yet another one) CenturyLink BGP incident and the blinking Internet
- European ISPs report mysterious wave of DDoS attacks
- Cybersquatting: Attackers mimicking domains of major brands including Facebook, Apple, Amazon and Netflix to scam consumers
- Who is Pioneer Kitten?
- Charming Kitten campaign evolved and deploying spear-phishing link by WhatsApp (PDF)
- New web skimmer steals credit card data, sends to crooks via Telegram
- Warner Music discloses months-long web skimming incident
- KryptoCibule: The multitasking multicurrency cryptostealer
- NetWalker ransomware in 1 hour
- AV-TEST: 14 Android security apps put to an endurance test
- 6 new apps with Joker malware on Google Play
- Terracotta Android malware: A technical study
- Apple accidentally approved malware disguised as Flash
- What does your car know about you? We hacked a Chevy to find out
- On the uniqueness and reidentifiability of web browsing histories (PDF)
- The underground cybercrime economy of hacked Fortnite and gaming accounts
- “Alexa, who is the number one cybercriminal forum to rule them all?”
- Understanding the money laundering techniques that support large-scale cyber-heists (PDF)
Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.