Archives

Issue 164

Supported by Julian Talbot.

4th Jan 2021

Issue 163

• Citrix devices are being abused as DDoS attack vectors
• Windows zero-day still circulating after faulty fix

28th Dec 2020

Issue 162

• The SolarWinds cyberattack: The hack, the victims, and what we know
• WordPress sites running 'Contact Form 7' plugin open to remote compromise

21st Dec 2020

Issue 161

• Amnesia:33 vulnerabilities impact millions of smart and industrial devices
• Pwnie Awards 2020 winners include Zerologon, CurveBall, Checkm8, BraveStarr attacks

14th Dec 2020

Issue 160

• Microsoft says three APTs have targeted seven COVID-19 vaccine makers
• Ticketmaster receives $1.65 million GDPR fine over 2018 data breach

16th Nov 2020

Issue 159

• Maze ransomware confirms shut down operations
• As Maze retires, clients turn to Sekhmet ransomware spin-off Egregor

9th Nov 2020

Issue 158

• FBI warns of large-scale imminent ransomware attack against U.S. hospitals
• Maze ransomware is shutting down its cybercrime operation

2nd Nov 2020

Issue 157

• Google reveals the most powerful DDoS attack in history… albeit three years late
• NSA: Top 25 vulnerabilities actively abused by Chinese hackers

26th Oct 2020

Issue 156

• "Bad Neighbor": Windows ICMP vulnerability can lead to DoS and (maybe) remote code execution
• Google warns of 'zero-click' Bluetooth vulnerability in Linux-based IoT devices

19th Oct 2020

Issue 155

• Unpatched (and unpatchable?) Apple T2 chip flaw
• Four npm packages found uploading user details

12th Oct 2020