InfoSec / Cyber Security Newsthehackernews.comUkraine Police Arrest Cyber Criminals Behind Clop Ransomware AttacksMalware Attack on South Korean Entities Was Work of Andariel GroupRansomware Attackers Partnering With Cybercrime Groups to Hack High-Profile TargetsCritical ThroughTek Flaw Opens Millions of Connected Cameras to EavesdroppingExperts Shed Light On Distinctive Tactics Used by Hades RansomwareInstagram Bug Allowed Anyone to View Private Accounts Without Following Thembleepingcomputer.comUkraine arrests Clop ransomware gang members, seizes serversWindows 10 KB5003698 update fixes VPN bug, blurry text issuesPeloton Bike+ vulnerability allowed complete takeover of devicesAvaddon ransomware's exit sheds light on victim landscapeMicrosoft Defender ATP now warns of jailbroken iPhones, iPadsWindows 11 Leaked - What we know so far about Microsoft's new OSwired.comDuckDuckGo’s Quest to Prove Online Privacy Is PossibleApple Says It's Time to Digitize Your ID, Ready or NotAll the New Privacy Features Coming to iOS and macOSGoogle Won't Kill the URL After AllWhat You Should Know About Voilà, the Latest Viral Selfie AppAs Ransomware Demands Boom, Insurance Keeps Paying Outzerodayinitiative.comThe June 2021 Security Update ReviewCVE-2021-31181: Microsoft SharePoint WebPart Interpretation Conflict Remote Code Execution VulnerabilityCVE-2021-31440: An Incorrect Bounds Calculation in the Linux Kernel eBPF VerifierCVE-2021-22909- Digging into a Ubiquiti Firmware Update bugCVE-2021-31166: A Wormable Code Execution Bug in HTTP.sysThe May 2021 Security Update Reviewitpro.co.ukAttackIQ teams with VMware to offer expert advice on network securityCD Projekt acknowledges stolen data is being circulated onlineDoJ shuts down infamous stolen credentials marketplace SlilppUK and US announce new science and technology partnershipCanadian mounted police broke law with Clearview AI dealEA hackers steal source code for FIFA, Battlefield game serieskrebsonsecurity.comHow Does One Get Hired by a Top Cybercrime Gang?Microsoft Patches Six Zero-Day Security HolesJustice Dept. Claws Back $2.3M Paid by Colonial Pipeline to Ransomware GangAdventures in Contacting the Russian FSBUsing Fake Reviews to Find Dangerous ExtensionsBoss of ATM Skimming Syndicate Arrested in Mexicoreddit.com/r/InfoSecNewsThe source code of the Paradise Ransomware was leaked on XSS hacking forumHow Does One Get Hired by a Top Cybercrime Gang?Cyberium malware-hosting domain employed in multiple Mirai variants campaignsFujifilm restores operations after recent ransomware attackVPN Attacks Surged in First QuarterWear your MASQ! New Device Fingerprint Spoofing Tool Available in Dark Webreddit.com/r/cybersecurityPersonal Security Support MonthlyMentorship Monday20+ years of cybersecurity experience in Fortune 500s and now I run my own company - AMAHow to get an entry-level security analyst job after getting a college degree in cybersecurity?Truck driver wanting to switch to infosec with no degree and no real relevant experience.Any experiences with The Learning People?reddit.com/r/netsec/r/netsec's Q2 2021 Information Security Hiring ThreadI’m putting a WiFi router into a wall charger (Part 1)Handy guide to a new Fivehands ransomware variant: notes from incident response cases..Unauthenticated Gitlab SSRF through CI Lint APIRescue Your Amazon Dash Buttons (By Exploiting Them)RetroArch for Windows - Versions 1.9.0 - 1.9.4 (High-Risk Vuln)reddit.com/r/websec[FREE GIFT] SQL Injections Unlocked Course — Giving Away Honestly, Not really a Promotion 😉Does CSRF attacks really work?Researching how organizations help developers tackle application securityFully automate your bug bounty with Nuclei and a sprinkle of bash[CVE-2021-28379] Abusing file uploads to get an SSH backdoorAround 200 attacks per minute while testing a HoneyPotembracethered.comSomewhere today a company is breachedGoogle's FLoC - Privacy Red Teaming OpportunitiesSpoofing credential dialogs on macOS, Linux and WindowsBroken NFT standardsHong Kong InfoSec Summit 2021 Talk - The adversary will come to your house!An alternative perspective on the death of manual red teamingdarkreading.comThousands of VMware vCenter Servers Remain Open to Attack Over the InternetMicrosoft Disrupts Large-Scale BEC Campaign Across Web ServicesSecurity Experts Scrutinize Apple, Amazon IoT NetworksAndariel Group Targets South Korean Entities in New CampaignDeloitte Buys Terbium Labs to Expand Threat Intel CapabilitiesWhat Industrial Control System Vulnerabilities Can Teach Us About Protecting the Supply Chainthreatpost.com5 Tips to Prevent and Mitigate Ransomware AttacksAvaddon Ransomware Gang Evaporates Amid Global Crackdowns Researchers: Booming Cyber-Underground Market for Initial-Access BrokersPeloton Bike+ Bug Gives Hackers Complete ControlMillions of Connected Cameras Open to EavesdroppingMalicious PDFs Flood the Web, Lead to Password-Snarfingreddit.com/r/pwnedGeico data breach exposed customers' driver's license numbersCodecov.io: "Unauthorized access and alterations to our Bash Uploader since Jan 31, 2021, which enabled them to potentially export information stored in our users' continuous integration (CI) environments"Mobikwik (India) KYC data leaked$5.7 Million Crypto Stolen Due To A Security Breach at Cryptocurrency platform RollAmerican Armed Forces Mutual Aid Association hack impacted more than 161,000welivesecurity.comMicrosoft takes down large‑scale BEC operationVishing: What is it and how do I avoid getting scammed?Week in security with Tony AnscombeTracking ransomware cryptocurrency payments: What now for Bitcoin?Google fixes actively exploited Chrome zero‑dayBackdoorDiplomacy: Upgrading from Quarian to Turianscmagazine.comFour ways to shut down cyberattacks following mergers and acquisitionsDeloitte acquires online antifraud firm Terbium LabsState and local governments granted free access to timely, in-depth cyber intelTSA offers peek at second pipeline directiveUChecker tool scans Linux servers for outdated librarieshelpnetsecurity.comApple fixes actively exploited vulnerabilities affecting older iDevicesHow to secure data one firewall at a timeUnderstanding the cloud shared responsibility modelCorporate attack surfaces growing concurrently with a dispersed workforceEffects of the pandemic on consumer security behaviorstrendmicro.comThis Week in Security News: Ransomware Gang is Raking in Tens of Millions of Dollars and Microsoft Patch Tuesday Update Fixes 17 Critical BugsThis Week in Security News: US Cyber Command Exposes New Russian Malware and REvil Ransomware Gang ‘Acquires’ KPOT MalwareThis Week in Security News: Trend Micro Researcher Uncover Two Espionage Backdoors Associated with Operation Earth Kitsune and Trickbot and Ransomware Attackers Plan Big Hit on U.S. HospitalsTrend Micro HouseCall for Home Networks: Giving You a Free Hand in Home Network Securitysecurityweek.comGoogle Releases Open Source Tools and Libraries for Fully Homomorphic EncryptionSecurity Camera Feeds Exposed Due to Flaw in SDK Used by Many VendorsEU Court Leaves Facebook More Exposed to Privacy ChallengesHow to Create a Post-Pandemic Data Security RFPVulnerabilities Allow Hackers to Disrupt, Hijack Schneider PowerLogic Devicessiliconrepublic.comIrish researchers create new tool to assess cyber risksDell Technologies exec on AI, 5G and edge computing trendsImmersive Labs raises $75m to plug skills gaps in cybersecurityCIOs should focus on using new tools, ‘not just adopting them’Hackers swipe source code from EA in cyberattacknakedsecurity.sophos.comClop ransomware suspects busted in Ukraine, money and motors seized“Face of Anonymous” suspect deported from Mexico to face US hacking chargesALPACA – the wacky TLS security vulnerability with a funky nameS3 Ep36: Trickbot coder busted, passwords cracked, and breaches judged [Podcast]Chrome zero-day, hot on the heels of Microsoft’s IE zero-day. Patch now!insights.infosec-jobs.comShare your salary and see what everyone else is making in InfoSec / the Cyber Security spaceThe 10 most in-demand roles in the Information Security domain2021 so far – A few UpdatesWe launched “jobmarks”We now have “Dark Mode”Employer Interview – The Questionnairecsoonline.com4 steps to prevent spear phishingThousands of publicly accessible VMware vCenter Servers vulnerable to critical flawsBrandPost: The Top Ten Industries Under Cyber AttackUnique TTPs link Hades ransomware to new threat groupSecurity firm COO indicted for allegedly aiding hospital's attackers: What CSOs should knowBest new Windows 10 security features: Improvements to Intune, Windows Defender Application Guardkitploit.comGundog - Guided Hunting In Microsoft 365 DefenderTChopper - Conduct Lateral Movement Attack By Leveraging Unfiltered Services Display Name To Smuggle Binaries As Chunks Into The Target MachineA2P2V - Automated Attack Path Planning and ValidationdefenselessV1 - Just Another Vulnerable Web ApplicationRedpill - Assist Reverse Tcp Shells In Post-Exploration Taskssecurityboulevard.comMicrosoft’s Legal Head: U.S. must Stop Secret Gag OrdersOpManager makes network monitoring easy for Heritage Credit UnionWhat We Can Learn from the Colonial Pipeline BreachAkamai Platform Update: New Security Enhancements That Intelligently Automate Application and API Security, Mitigate Online Fraud, and Reduce Burden on Security ProfessionalsWhat’s New in v8 of the CIS Controlsgrahamcluley.comRansomware is the biggest threat, says GCHQ cybersecurity chiefMeat supplier JBS probed after paying $11 million ransom to attackersSmashing Security podcast #231: Sexy snaps and encrypted chat trapsIt’s time to get serious about enterprise password management – download this 1Password white paper nowCriminal networks smashed after using “secure” chat app secretly run by cops