InfoSec / Cyber Security Newsthehackernews.comResearchers Find Additional Infrastructure Used By SolarWinds HackersCost of Account Unlocks, and Password Resets Add UpCybercriminals Using Telegram Messenger to Control ToxicEye MalwareFacebook Busts Palestinian Hackers' Operation Spreading Mobile SpywareHackers threaten to leak stolen Apple blueprints if $50 million ransom isn't paidImprove Your Cyber Security Posture by Combining State of the Art Security Toolsbleepingcomputer.comTwinkle Twinkle the test post 5ab65a9a5376c9458c904423726ca4dbMicrosoft releases first non-subscription Office 2021, LTSC previewsWindows 10 1909 KB5001396 cumulative update preview releasedNVIDIA staff suggests rolling back Windows 10 update to fix game issuesBotnet backdoors Microsoft Exchange servers, mines cryptocurrencyWindows 10 News and Interests taskbar news feed rolling out worldwidewired.comA New Facebook Bug Exposes Millions of Email AddressesPalestinian Hackers Tricked Victims to Install iOS SpywareA Clubhouse Bug Let People Lurk in Rooms InvisiblyThey Hacked McDonald’s Ice Cream Machines—and Started a Cold WarHow the FBI Got Into the San Bernardino Shooter’s iPhoneUS Sanctions on Russia Rewrite Cyberespionage's Ruleszerodayinitiative.comCVE-2021-20226: A Reference-Counting Bug in the Linux Kernel io_uring SubsystemThe April 2021 Security Update ReviewPwn2Own 2021 - Schedule and Live ResultsCVE-2021-25646: Getting Code Execution on Apache DruidCVE-2021-27076: A Replay-Style Deserialization Attack Against SharePointThe Battle Between White Box and Black Box Bug Hunting in Wireless Routersitpro.co.ukWhat is HTTP error 503 and how do you fix it?How does a SQL injection attack work?HackBoss malware is using Telegram to steal cryptocurrency from other hackersMastering endpoint security implementationProject Zero trials 30-day ‘patching window’US, UK say Russia was behind SolarWinds hackkrebsonsecurity.comNote to Self: Create Non-Exhaustive List of CompetitorsDid Someone at the Commerce Dept. Find a SolarWinds Backdoor in Aug. 2020?Microsoft Patch Tuesday, April 2021 EditionParkMobile Breach Exposes License Plate Data, Mobile Numbers of 21M UsersAre You One of the 533M People Who Got Facebooked?Ransom Gangs Emailing Victim Customers for Leveragereddit.com/r/cybersecuritySub UpdateMentorship MondayCan we stop Chromifying web browsers please?Signal's CEO Just Hacked the Cops' Favorite Phone Cracking ToolLinux bans University of Minnesota for sending buggy patches in the name of researchApple targeted in $50 million ransomware attack resulting in unprecedented schematic leaksreddit.com/r/netsec/r/netsec's Q2 2021 Information Security Hiring ThreadLeaky John Deere API’s: Serious PII & Food Supply Chain Vulnerabilities Discovered In John Deere WebsiteDuo two-factor authentication bypassExploiting vulnerabilities in Cellebrite UFED and Physical Analyzer from an app’s perspectiveDesigning sockfuzzer, a network syscall fuzzer for XNURemote code execution in Homebrew by compromising the official Cask repositoryreddit.com/r/websecDoes CSRF attacks really work?Researching how organizations help developers tackle application securityFully automate your bug bounty with Nuclei and a sprinkle of bash[CVE-2021-28379] Abusing file uploads to get an SSH backdoorAround 200 attacks per minute while testing a HoneyPotDoes your WAF have False Positive?reddit.com/r/InfoSecNewsZero-Day Flaws in SonicWall Email Security Tool Under AttackRapid7 Acquires Velociraptor Open Source ProjectWhatsApp Pink malware spreads via group chat messagesFirefox 88 clamps down on window.name abuses by trackersLazarus Group Uses New Tactic to Evade DetectionA Deep Dive into Zebrocy’s Dropper Docsembracethered.comSpoofing credential dialogs on macOS, Linux and WindowsBroken NFT standardsHong Kong InfoSec Summit 2021 Talk - The adversary will come to your house!An alternative perspective on the death of manual red teamingCybersecurity Attacks - Red Team Strategies Kindle Edition for freeTeam A and Team B: Sunburst, Teardrop and Raindropdarkreading.comSupernova Malware Actors Masqueraded as Remote Workers to Access Breached NetworkThe Edge Pro Tip: Brush Up on Web ShellsEdge Poll: Passwordless PlansNew CISA Advisories Warn of ICS VulnerabilitiesPrometei Botnet Adds New Twist to Exchange Server AttacksImproving the Vulnerability Reporting Process With 5 Stepsthreatpost.comMount Locker Ransomware Aggressively Changes Up TacticsSpotlight on Cybercriminal Supply ChainsTelegram Platform Abused in ‘ToxicEye’ Malware CampaignsIt’s Easy to Become a Cyberattack Target, but a VPN Can Help4 Innovative Ways Cyberattackers Hunt for Security BugsQR Codes Offer Easy Cyberattack Avenues as Usage Spikesreddit.com/r/pwnedGeico data breach exposed customers' driver's license numbersCodecov.io: "Unauthorized access and alterations to our Bash Uploader since Jan 31, 2021, which enabled them to potentially export information stored in our users' continuous integration (CI) environments"Mobikwik (India) KYC data leaked$5.7 Million Crypto Stolen Due To A Security Breach at Cryptocurrency platform RollWorldwide Hack: Microsoft Exchange Server Zero-day Exploitswelivesecurity.comAirDrop flaws could leak phone numbers, email addressesGoogle rushes out fix for zero‑day vulnerability in ChromeWhatsApp Pink: Watch out for this fake updateGoogle’s Project Zero to wait longer before disclosing bug detailsWeek in security with Tony AnscombeSpring cleaning? Don’t forget about your digital footprintscmagazine.comKnowBe4 CEO Stu Sjouwerman talks IPO, and ‘strengthening that human firewall’Vendors are getting better at spotting malicious execution techniquesMalware operators leverage TLS in 46% of detected communicationsNew chief of Carnegie Mellon’s CERT: Feds needs to do better with info sharingSW Labs | Overview: Attack Surface Managementhelpnetsecurity.comZerto data protection offers backup and disaster recovery for hybrid and native AWS deploymentsVarada helps security teams deliver faster time-to-insights on exabytes of data directly on the data lakeIBM Watson helps businesses develop trustworthy AI and mitigate riskOptions empowers Murex MX.3 through its enterprise-grade SaaS-enabled managed apps platformCritical infrastructure implications of the Pulse Secure multi-factor authentication bypasstrendmicro.comThis Week in Security News: Ransomware Gang is Raking in Tens of Millions of Dollars and Microsoft Patch Tuesday Update Fixes 17 Critical BugsThis Week in Security News: US Cyber Command Exposes New Russian Malware and REvil Ransomware Gang ‘Acquires’ KPOT MalwareThis Week in Security News: Trend Micro Researcher Uncover Two Espionage Backdoors Associated with Operation Earth Kitsune and Trickbot and Ransomware Attackers Plan Big Hit on U.S. HospitalsTrend Micro HouseCall for Home Networks: Giving You a Free Hand in Home Network Securitysecurityweek.comAPT Abuses Pulse Secure, SolarWinds Appliances at the Same OrganizationAs You Modernize Your SOC, Remember the Human ElementAV Under Attack: Trend Micro Confirms Apex One ExploitationWebinar Today: DDoS Attack Trends and Mitigation StrategiesThe Logistics Supply Chain is Being Targeted by Both Cybercriminals and Nation Statessiliconrepublic.com‘No matter how much we innovate, passwords are here to stay’Data watchdog says Facebook may have broken GPDRWire raises $21m for its secure collaboration platformWhy have Apple and Google blocked the NHS Covid app update?Clubhouse pushes back on reports about user data leaknakedsecurity.sophos.comLinux team in public bust-up over fake “patches” to introduce bugsS3 Ep29: Anti-tracking, rowhammer problems and IoT vulns [Podcast]When cryptography attacks – how TLS helps malware hide in plain sightFirefox 88 patches bugs and kills off a sneaky JavaScript tracking trickNaked Security Live – To hack or not to hack?csoonline.comBrandPost: The Way Forward: 5 Security Fixes to Support a Hybrid WorkforceBrandPost: Insurer Secures Edges with Fortinet Secure SD-WAN and SD-BranchBiden administration releases 100-day plan to address electric system cybersecurity risks8 things CISOs want to hear from XDR vendorsFour years after NotPetya, cyber insurance is still catching upGlobal trends will increase nation-state threats for the US in next 20 yearskitploit.comVulnerablecode - A Free And Open Vulnerabilities Database And The Packages They Impact And The Tools To Aggregate And Correlate These VulnerabilitiesKubesploit - A Cross-Platform Post-Exploitation HTTP/2 Command And Control Server And Agent Written In GolangDnspeep - Spy On The DNS Queries Your Computer Is MakingOverlord - Overlord - Red Teaming Infrastructure AutomationBetterXencrypt - A Better Version Of Xencrypt - Xencrypt It Self Is A Powershell Runtime Crypter Designed To Evade AVssecurityboulevard.comHAFNIUM Exploits Live OnCPDP 2021 – Moderator: Juraj Sajfert ‘The Effective Supervision Of Law Enforcement Authorities: A Reality Or A Myth?’EdTech Awards Honors JumpCloud’s Platform as Innovative and Exceptional as 2021 FinalistVintage XKCD ‘Circuit Diagram’Reporting Live From Collision Conference 2021: Part One!grahamcluley.comREvil ransomware – what you need to knowSmashing Security podcast #224: The Lazarus Heist, Facebook faux pas, and no-cost securityFacebook suffers a data breach about how it’s hoping to stop the media talking about its last data breachCluley and Cisco: Preparing for cybersecurity threats in a permanently hybrid worldSix million male members may have been exposed after hack of gay dating service