homethehackernews.comNew USBCulprit Espionage Tool Steals Data From Air-Gapped ComputersTwo Critical Flaws in Zoom Could've Let Attackers Hack Systems via ChatNewly Patched SAP ASE Flaws Could Let Attackers Hack Database ServersNew Skill Testing Platform For 6 Most In-Demand Cybersecurity JobsCritical VMware Cloud Director Flaw Lets Hackers Take Over Corporate ServersHow to Create a Culture of Kick-Ass DevSecOps Engineerssciencedaily.comGenetic barcodes can ensure authentic DNA fingerprintsPhysicists develop world's best quantum bitsIdentifying light sources using artificial intelligenceScientists take steps to create a 'racetrack memory,' potentially enhancing data storageBeyond encryption: Protecting consumer privacy while keeping survey results accurateCritical 'starbleed' vulnerability in FPGA chips identifiedwired.comGames Don't Do Enough to Combat Toxicity at LaunchZoom's End-to-End Encryption Will Be for Paying Customers OnlyThe Pentagon’s Hand-Me-Downs Helped Militarize Police. Here’s How‘Nonlethal’ Anti-Protest Weapons Can Cause Serious HarmFacebook 'Manage Activity' Is a Long Overdue Privacy FeatureThis Bot Hunts Software Bugs for the Pentagonzerodayinitiative.comMindShaRE: How to “Just Emulate It With QEMU”CVE-2020-8871: Privilege Escalation in Parallels Desktop via VGA DeviceThe May 2020 Security Update ReviewDetails on the Oracle WebLogic Vulnerability Being Exploited in the WildHow a Deceptive Assert Caused a Critical Windows Kernel VulnerabilityAnalyzing a Trio of Remote Code Execution Bugs in Intel Wireless Adaptersbleepingcomputer.comMicrosoft fixes admin mode bugs affecting Windows 10 PowerToysCPA Canada discloses data breach affecting 329,000 individualsMozilla Firefox to let you export saved passwords in plain textHackers tried to steal database logins from 1.3M WordPress sitesBusiness services giant Conduent hit by Maze RansomwareNew Tycoon ransomware targets both Windows and Linux systemsitpro.co.ukHackers leverage Saltbox flaw to breach LineageOS, Ghost and DigiCert serversHow do you become an ethical hacker?Creator of notorious 'Love Bug' virus comes clean after 20 yearsSwitch to the anonymous webNew Android banking trojan is able to bypass two-factor authenticationHow to improve Zoom video chat privacy and securityreddit.com/r/securityAnnouncement: r/security is now closed down and will be re-launched soon. Please use r/cybersecurity for all cybersecurity topics.Threat Intel Update | Cyber Attacks Leveraging the COVID-19/CoronaVirus PandemicThe State of Secure Software: Past, Present, and FutureDetailed audit of Voatz' voting app confirms security flawsOngoing DDoS attacks against ISPs?1Password Is the Best Password Manager in Consumer Reports' New Ratingsreddit.com/r/netsec/r/netsec's Q2 2020 Information Security Hiring ThreadThe /r/netsec Monthly Discussion Thread - June 2020When it’s not only about a Kubernetes CVE…Be careful what you request for: Injection using the HTTP verb in DjangoHelp us deGoogle FOSS (free and open source software)!The DevSecOps toolset for HTTP APIsreddit.com/r/websecFacebook SSRF4 Million Computers Compromised: Zoom's Biggest Security Scandal ExplainedWordPress website attack using JavaScript and XSSGuardian Web Application Firewall - Open SourceApplication Modernisation: What Are the Main Security Concerns?Nginx Free WAF: ModSecurity vs Nemesida WAF Freereddit.com/r/InfoSecNewsTor Browser 9.5 is available for download, with new interesting featuresThreat Assessment: Hangover Threat GroupLarge-scale campaign targets configuration files from WordPress sitesSodinokibi ransomware gang launches auction site to sell stolen dataKaspersky IDs Sophisticated New Malware Targeted at Air-Gapped SystemsTaiwan government mega-breach feared as trove of 20m citizens’ data found on dark webkrebsonsecurity.comRomanian Skimmer Gang in Mexico Outed by KrebsOnSecurity Stole $1.2 BillionREvil Ransomware Gang Starts Auctioning Victim DataCareer Choice Tip: Cybercrime is Mostly BoringUK Ad Campaign Seeks to Deter CybercrimeReport: ATM Skimmer Gang Had Protection from Mexican Attorney General’s OfficeRiding the State Unemployment Fraud ‘Wave’darkreading.comNew 'Tycoon' Ransomware Strain Targets Windows, LinuxMalware Campaign Hides in Resumes and Medical Leave FormsStrengthening Secure Information Sharing Through Technology & StandardsMicrosoft Office Files Most Popular for Exploit TestsCould Automation Kill the Security Analyst?COVID-19: Latest Security News & Commentarythreatpost.comTycoon Ransomware Banks on Unusual Image File TacticTrump, Biden Campaign Staffers Targeted By APT Phishing EmailsUnderstanding the Payload-Less Email Attacks Evading Your Security TeamZoom Restricts End-to-End Encryption to Paid UsersU.S. Nuclear Contractor Hit with Maze Ransomware, Data LeakedGoogle Faces Privacy Lawsuit Over Tracking Users in Incognito Modewelivesecurity.comFacebook now lets you delete old posts in bulkGoogle adds Nest devices to Advanced Protection ProgramBug in ‘Sign in with Apple’ could have allowed account hijacking3 things to discuss with your kids before they join social mediaWeek in security with Tony AnscombePeople know reusing passwords is risky – then do it anywayscmagazine.comUCSF, Conduent are latest to suffer the slings and arrows of ransomwareChinese, Iranian phishing campaigns target Biden, Trump campaigns‘Enterprise-grade’ BazarBackdoor malware delivered via spear phishing emailsNew Tycoon ransomware leverages JIMAGE files, steals PII, encrypts Linux and Windows systemsSan Francisco benefits program breach exposes PII on 74,000helpnetsecurity.comEnterprise mobile phishing increased by 37% in Q1 2020Lumu helps security teams minimize alert fatigue, prioritize response, and accelerate remediationKudelski Security enables Microsoft clients to simplify their security and compliance strategyAdaptiva unveils OneSite Cloud, speeding software deployment and increasing distribution reliabilityBigID Application Development Framework empowers customers to get more value from their datatrendmicro.comThis Week in Security News: How the Cybercriminal Underground Has Changed in 5 Years and the NSA Warns of New Sandworm Attacks on Email ServersPrinciples of a Cloud Migration – Security W5H – The HOWSecuring the Connected World with Support for The Shadowserver Foundation21 Tips to Stay Secure, Private, and Productive as You Work from Home on Your MacIs Cloud Computing Any Safer From Malicious Hackers?securityweek.comBiden, Trump Campaigns Targeted by Foreign Hackers: GoogleMulti-Platform 'Tycoon' Ransomware Uses Rare Java Image Format for EvasionHackers Attempted to Steal Credentials From Millions of WordPress WebsitesChinese Hackers Target Air-Gapped Systems With Custom USB MalwareSD-WAN Must Be Secure, Flexible, and Scale Across the Entire Enterprisesiliconrepublic.comThese 10 companies are busy hiring in Ireland right nowHow will data be managed and transferred in autonomous cars?How cybercriminals are taking advantage of Covid-19Max Schrems’ group calls for EU help to speed up ‘Kafkaesque’ DPC procedureHackers release jailbreak for Apple’s iOS 11 to iOS 13.5nakedsecurity.sophos.comYou DID change your password after that data breach, didn’t you?Nuclear missile contractor hacked in Maze ransomware attackGoogle deletes Indian app that deleted Chinese appsFirefox fixes cryptographic data leakage in latest security updateVMware flaw allows takeover of multiple private cloudscsoonline.comWhat's next? CISOs weigh in on COVID’s long-term effects on securityWhat is pretexting? Definition, examples and preventionInstall latest SAP Adaptive Server Enterprise patches, experts urgeSkipped patch from 2012 makes old Microsoft Office systems a favored targetSummer 2020: CISO risingCloud infrastructure operators should quickly patch VMware Cloud Director flawkitploit.comJshole - A JavaScript Components Vulnrability Scanner, Based On RetireJSGitMonitor - A Github Scanning System To Look For Leaked Sensitive Information Based On RulesEviloffice - Inject Macro And DDE Code Into Excel And Word Documents (Reverse Shell)Ligolo - Reverse Tunneling Made Easy For Pentesters, By PentestersInshackle - Instagram Hacks: Track Unfollowers, Increase Your Followers, Download Stories, Etcsecurityboulevard.comEnsuring cybersecurity resilience in an ultra-connected worldHow to stop sophisticated attacks during COVID with behavioral technologiesWhy Use Intune & Jamf Together?Remote Code Execution Deserialization Vulnerability Blocked by ContrastCMMC Compliance in Office 365grahamcluley.comGoodbye Naked Security?The scammer who tried to launder over $500,000 through Business Email CompromiseSmashing Security podcast #181: Anti-cybercrime ads, tricky tracing, and a 5G BioshieldCoincheck cryptocurrency exchange targeted by hackers, customer emails exposedWhat the NHS Test and Trace scheme could learn from banks about stopping scams