homethehackernews.comUnveiled: How xHelper Android Malware Re-Installs Even After Factory ResetSecure Remote Working During COVID-19 — Checklist for CISOsZoom Caught in Cybersecurity Debate — Here's Everything You Need To KnowHow Just Visiting A Site Could Have Hacked Your iPhone or MacBook CameraMagecart Hackers Inject iFrame Skimmers in 19 Sites to Steal Payment DataNew Zoom Hack Lets Hackers Compromise Windows and Its Login Passwordsciencedaily.comSome mobile phone apps may contain hidden behaviors that users never seePhysicist develops new photon source for tap-proof communicationFaster way to replace bad info in networksChip-based devices improve practicality of quantum-secured communicationComputer scientists' new tool fools hackers into sharing keys for better cybersecurityNew sandboxing approach in web browser increases securitywired.comThe Defense Production Act Won’t Fix America’s N95 Face Mask ShortageThis Map Shows the Global Spread of Zero-Day Hacking TechniquesHow to Keep Your Zoom Chats Private and SecureA Notorious Spyware Vendor Wants to Track Coronavirus SpreadA Hacker Found a Way to Take Over Any Apple WebcamSo Wait, How Encrypted Are Zoom Meetings Really?zerodayinitiative.comExploiting the TP-Link Archer A7 at Pwn2Own TokyoCVE-2020-3947: Use-After-Free Vulnerability in the VMware Workstation DHCP ComponentCVE-2020-0729: Remote Code Execution Through .LNK FilesPwn2Own Day Two – Results and Master of PwnPwn2Own 2020 – Day One ResultsWelcome to Pwn2Own 2020 - The Schedule and Live Resultsbleepingcomputer.comMicrosoft and Google postpone insecure authentication removalChrome 81 Released With 32 Security Fixes and Web NFC APINASA under 'significantly increasing' hacking, phishing attacksDrug testing firm sends data breach alerts after ransomware attackMicrosoft buys corp.com to prevent Windows account hijackingFirefox 75 released with Windows 10 performance improvementsitpro.co.ukCyber security experts form COVID-19 taskforce to combat ransomware attacksFive essentials of a secure modern workplaceNCA warns of spike in online threats to children during coronavirus lockdownGoogle releases location data to show effectiveness of coronavirus lockdownsHackers torn over how to adapt their tactics to the coronavirus pandemicMimecast discovers rise in LimeRAT malware using read-only Excel spreadsheetsreddit.com/r/securityBest “Security for the Less Tech/Security Savvy” resourcesAnnouncement: r/security is now closed down and will be re-launched soon. Please use r/cybersecurity for all cybersecurity topics.FCC: Watch Out for Robocall Scams Offering Fake Coronavirus Test KitsUnidentified Database Exposes 200 Million Americans | CyberNewsDetailed audit of Voatz' voting app confirms security flawsHave you noticed a surge in phishing emails since the coronavirus outbreak?reddit.com/r/netsecThe /r/netsec Monthly Discussion Thread - April 2020/r/netsec's Q2 2020 Information Security Hiring ThreadCryptoHack - A fun challenge platform for learning cryptographyOffensive OSINT s01e01 - OSINT & RDPScanner of Default Logins in Administrative Web InterfacesNot just another BGP Hijackreddit.com/r/websecOriginTracer: An In-Browser System for Identifying Extension-based Ad InjectionUserdir URLs like https://example.org/~username/ are dangerousExcision: An In-Browser System for Detection of Malicious Third-Party Content InclusionsCrawlium (DeepCrawling): A crawling platform based on Chrome (Chromium) browser to get a deeper look into the ecosystem of content inclusion on the Web.Daily updated list of COVID-19 themed cyber attacks and threats you should be aware of.Automatically Generate Content Security Policy Headers (Chrome/Firefox)reddit.com/r/InfoSecNewsxHelper, the Unkillable Android malware that re-Installs after factory resetCoronavirus: Europol arrests man behind €6M face masks and hand sanitisers scamItalian email provider Email.it hacked, data of 600k users available for saleRussian telco Rostelecom hijacks traffic for IT giants, including Google, Amazon and FacebookMy Telegram Honeypot ChannelKey Ring digital wallet exposes data of 14 Million users in data leakkrebsonsecurity.comMicrosoft Buys Corp.com So Bad Guys Can’t‘War Dialing’ Tool Exposes Zoom’s Password ProblemsPhish of GoDaddy Employee Jeopardized Escrow.com, Among OthersAnnual Protest to ‘Fight Krebs’ Raises €150K+Russians Shut Down Huge Card Fraud RingUS Government Sites Give Bad Security Advicedarkreading.comPrivacy & Digital-Rights Experts Worry Contact-Tracing Apps Lack LimitsChinese APT Groups Targeted Enterprise Linux Systems in Decade-Long Data Theft CampaignCybercriminals Hide Malware & Phishing Sites Under SSL CertificatesThe Edge Names 'Holy Cow' Cartoon Caption WinnersHow Do I Make Sure My Work-From-Home Users Install Updates?Mature DevOps Teams Are Secure DevOps Teamsthreatpost.comSerious Exchange Flaw Still Plagues 350K ServersxHelper: The Russian Nesting Doll of Android MalwareFIN6 and TrickBot Combine Forces in ‘Anchor’ AttacksOfficial Government COVID-19 Apps Hide a Raft of ThreatsA Brisk Private Trade in Zero-Days Widens Their UseFBI Threatens ‘Zoom Bombing’ Trolls With Jail Timewelivesecurity.com600,000 people affected in email provider breachWhat to do you if your phone is lost or stolenWeek in security with Tony AnscombeZoom’s privacy and security woes in the spotlightWork from home: Securing RDP and remote accessMarriott hacked again, 5.2 million guests affectedscmagazine.comCoronavirus turns up the heat on cybersecurity projectsCOVID-19 phishing campaigns reel in victims with stimulus fund luresGoogle faces new legal action for violating COPPAGlobal COVID-19 apps found suffering from flaws, malicious copycatsThe inside scoop on insider threatshelpnetsecurity.comRadio frequency: An invisible espionage threat to enterprisesHappy developers more likely to build secure appsEncryption is finally being used primarily to protect personal data rather than just for complianceOn-demand webinar: Securing your remote workforceTufin unveils new tool that delivers real-time visibility into firewall rule changes for orgs of all sizestrendmicro.comNCSA Small Business Webinar SeriesThis Week in Security News: More Than 8,000 Unsecured Redis Instances Found in the Cloud and Wiper Malware Called “Coronavirus” Spreads Among Windows VictimsUsing Zoom? Here’s how to keep your business and employees safeCloud-First but Not Cloud-Only: Why Organizations Need to Simplify CybersecurityThe AWS Service to Focus On – Amazon EC2securityweek.comIncrease in Exploited Zero-Days Shows Broader Access to VulnerabilitiesFree Security Tools, Resources Offered During Coronavirus OutbreakEnterprise Content Firewall Provider Accellion Raises $120 MillionHow Has the Coronavirus Pandemic Impacted Cybersecurity Professionals?WhatsApp Tightens Sharing Limits to Curb Virus Misinformationsiliconrepublic.comAn essential guide to keeping your Zoom meetings secure‘Major data breaches are far too common, with human error often being a cause’US warns that ‘Zoombombing’ could result in imprisonment‘The recruitment industry is being completely disrupted by digital transformation’Zoom facing lawsuit over sharing of data with Facebooknakedsecurity.sophos.comTwitter warns users – Firefox might retain private messagesTwo schoolkids sue Google for collecting biometricsThousands of Android apps contain undocumented backdoors, study findsWill Apple’s “microphone switch” stop your iPad getting bugged?Rights groups appeal to governments over COVID-19 surveillancecsoonline.comBrandPost: How to Prioritize Application Security Flaws7 PSD2 questions every CISO should be prepared to answerWhat is phishing? How this cyber attack works and how to prevent itWhite House strategy paper to secure 5G envisions America leading global 5G developmentHow one healthcare CISO is navigating the COVID-19 crisisNew coronavirus-era surveillance and biometric systems pose logistical, privacy problemskitploit.comTails 4.5 - Live System to Preserve Your Privacy and AnonymityMSOLSpray - A Password Spraying Tool For Microsoft Online Accounts (Azure/O365)Git-Hound v1.1 - GitHound Pinpoints Exposed API Keys On GitHub Using Pattern Matching, Commit History Searching, And A Unique Result Scoring SystemDNSteal v2.0 - DNS Exfiltration Tool For Stealthily Sending Files Over DNS RequestsOSSEM - Open Source Security Events Metadatasecurityboulevard.com5 Tips for Successful Remote Workforce IT ManagementHow to Scale User ProvisioningVideoconferencing Is Being Weaponized, Tips on Making Your Meetings More SecureTrue Passwordless? Show me…Business Continuity During the COVID-19 Outbreak – We Are Here to Helpgrahamcluley.comCrazy cryptomining Cooking Mama rumours spread as game pulled from Nintendo Switch online storeUnlock the power of threat intelligence with this practical guide. Get your free copy nowHacking the iOS/macOS webcam – Apple pays out $75,000 to bug hunterZoom promises to improve its security and privacy as usage (and concern) soarsSmashing Security #172: UncleF***Face