2020–2022

2022 715

December 2022

1. 25 DecA week in security (December 19 – 25)
2. 21 DecThe Guardian hit by “ransomware attack”
3. 21 DecGodfather Android banking malware is on the rise
4. 21 DecSharing Netflix, Disney+, other passwords is illegal, according to new guidance
5. 21 DecLego’s Bricklink steps on cross site scripting blocks
6. 20 DecThe pitfalls of blocking IP addresses
7. 20 DecPlay ransomware group claims to have stolen hotel chain data
8. 20 DecMillions of Gemini cryptocurrency exchange user details leaked
9. 20 DecBEC scammers go after more than just money
10. 19 DecAdult popunder campaign used in mainstream ad fraud scheme
11. 18 DecChasing cryptocurrency through cyberspace, with Brian Carter: Lock and Code S03E26
12. 18 DecA week in security (December 12 – 18)
13. 15 DecVirtual kidnapping scam strikes again. Spot the signs
14. 15 DecUpdate now! Apple patches active exploit vulnerability for iPhones
15. 15 DecInfraGard infiltrated by cybercriminal
16. 15 DecWorldwide law enforcement action takes down major DDoS booter services
17. 14 DecIs Apple about to embrace third-party app stores?
18. 14 DecUber data stolen via third-party vendor
19. 13 DecPlay ransomware attacks city of Antwerp
20. 12 DecElectronic Sales Suppression Tools are cooking the books
21. 12 DeciPhone user watches as stolen phone travels from UK to China
22. 11 DecThe weirdest security stories of 2022
23. 11 DecIranian hacking group uses compromised email accounts to distribute MSP remote access tool
24. 11 DecIndiana sues TikTok, describes it as “Chinese Trojan Horse”
25. 11 DecA week in security (December 5 – 11)
26. 8 DecEpic Games introduces safer accounts for kids
27. 8 DecApple announces 3 new security features
28. 7 DecUpdate now! NetGear routers’ default configuration allows remote attacks
29. 7 DecApple’s AirTag stalker safeguards are “woefully inadequate,” alleges lawsuit
30. 6 DecUpdate now! Google patches Android vulnerability that allows remote code execution over Bluetooth
31. 6 DecHo, ho, no! Scams to avoid this festive season
32. 5 DecVehicle Identification Numbers reveal driver data via telematics
33. 5 DecSIM swapper jailed for 18 months over crypto heist
34. 4 DecSecurity advisories are falling short. Here’s why, with Dustin Childs: Lock and Code S03E25
35. 4 DecUpdate now! Emergency fix for Google Chrome’s V8 JavaScript engine zero-day flaw released
36. 4 DecWatch out for this triple threat PayPal phish
37. 4 Dec“Baby dumped at the gate” post is a Facebook hoax
38. 4 DecHive Social pulls the plug on itself after security flaws found
39. 4 DecLazarus group uses fake cryptocurrency apps to plant AppleJeus malware
40. 4 DecEufy “no cloud” security cameras streaming data to the cloud
41. 4 DecA week in security (November 28 – December 4)
42. 3 DecAndroid is slowly mastering memory management vulnerabilities
43. 1 DecTime to uninstall! Abandoned Android apps pack a vulnerability punch

November 2022

1. 30 NovFriendster is back! Or is it…?
2. 30 NovSouth Dakota first to ban TikTok on state-owned devices
3. 30 Nov“Legal but harmful” clause from Online Safety Bill dropped in the name of free speech
4. 30 NovLastPass breach affects customer data—but not passwords
5. 30 NovGoogle sues “harassing and deceptive” impersonator
6. 30 NovSnapchat gives Californians more power over their personal data
7. 29 NovTikTok Invisible Challenge “Unfilter” steals credit cards and other info
8. 29 NovMega Facebook data breach sees Meta fined $277m
9. 28 NovTwitter user data leaks continue to drip from the faucet
10. 28 NovSensitive police records stolen and published by ransomware gang
11. 28 NovChina-made equipment banned by FCC due to national security threat
12. 27 NovFraudster site iSpoof shut down, 142 arrested internationally
13. 27 NovA week in security (November 21 – 27)
14. 27 Nov3 threats to watch out for this Cyber Monday
15. 24 NovTwitter may be on fire, but scams are still all systems go
16. 24 NovTikTok’s data handling is the subject of “several ongoing proceedings” by the EU
17. 24 NovPatch now! Google Chrome’s GPU code has a zero-day
18. 23 NovBeware freebie bots looking for Christmas pricing miracles
19. 23 NovMeta finds connection between rogue social media campaign and members of US military
20. 23 NovAndroid bugs going unfixed thanks to a double patch gap
21. 22 NovHow to avoid pig butcher scams
22. 22 NovDraftKings denies a breach but still loses its shirt
23. 21 NovSupport for Windows 8.1 ends January 10, 2023
24. 21 NovScammers capitalize on Black Friday week with massive malvertising campaign
25. 20 NovThreat hunting: How MDR secures your business: Lock and Code S03E24
26. 20 NovMeta contractors ousted after internal probe catches them abusing Oops tool
27. 20 NovA week in security (November 14 – 20)
28. 19 NovStealing Mastodon passwords
29. 19 NovFBI concerned about TikTok’s US operations
30. 17 NovEncrypted DMs may be coming to Twitter (assuming it survives the weekend)
31. 16 NovLongest running WordPress malware campaign promotes rogue McAfee affiliate
32. 16 NovRepair firms might be rifling through your personal data
33. 15 NovHow stolen streaming logins result in torrents of legal action
34. 15 NovGoogle coughs up $392 million for sneaky location tracking
35. 15 NovScammers threaten businesses with “total reputation damage”
36. 14 NovUpdate your Android to fix this simple lock screen bypass
37. 14 Nov7 tips for safe online shopping this Black Friday and Cyber Monday
38. 14 Nov400+ big brands impersonated in phishing campaign
39. 13 NovApple sued for “pervasive and unlawful data tracking”
40. 12 NovA week in security (November 7 – 13)
41. 10 NovImportant fixes for iPhones, iPads and Macs released
42. 10 NovHow to get started on Mastodon
43. 8 NovSilk Road mega thief James Zhong pleads guilty
44. 8 NovFace search engine PimEyes accused of “surveillance and stalking on a scale previously unimaginable”
45. 6 NovStumble Guys free gem spam manipulates event calendar to display in Google News
46. 6 NovTikTok privacy chief: China’s not the only country that can access your data
47. 6 NovRecovery scammers target existing scam victims for second round
48. 6 NovIs the RomCom Trojan targeting English-speaking countries?
49. 6 NovNCSC scans UK internet to better understand the big security picture
50. 6 NovInstagram scammer pleads guilty to money laundering, wire fraud, and wire fraud conspiracy
51. 6 NovICRC proposes digital emblem to protect medical sector and humanitarian organizations during cyberwarfare
52. 6 NovHow student surveillance fails everyone: Lock and Code S03E23
53. 6 NovAstraZeneca leaked a password that gave access to patient data
54. 6 NovA week in security (October 31 – November 6)
55. 2 NovRoyal Mail breach allowed customers to see other people’s data
56. 2 NovGitHub patches flaw that allowed repojacking
57. 2 NovDropbox breached, GitHub repositories stolen
58. 2 NovAndroid droppers on the PlayStore used to install banking Trojans
59. 1 NovElon Musk’s plans to charge for Twitter verification opens the door for phishing
60. 1 NovHow to delete your email and phone number from Facebook

October 2022

1. 31 OctPolice warn of fake law enforcement arrest warrant calls
2. 31 OctRaccoon Stealer admin will be extradited to the US, charged for computer crimes
3. 31 OctLinkedIn introduces new security features to combat fake accounts
4. 31 OctMalware on the Google Play store leads to harmful phishing sites
5. 30 OctA week in security (October 24 – 30)
6. 27 OctA Chrome fix for an in-the-wild exploit is out—Check your version
7. 26 OctDormant Colors browser hijackers could be used for more nefarious tasks, report says
8. 26 OctChrome users, you have 3 months to say goodbye to Windows 7 and 8.1
9. 26 OctNew streaming ad technology plays hide-and-seek with gamers
10. 26 OctMedibank customers’ personal data compromised by cyber attack
11. 26 OctMaintenance Mode aims to keep phone data private during repairs
12. 26 OctFake Proof-of-Concepts used to lure security professionals
13. 25 OctiPhone zero-day. Update your devices now!
14. 25 OctPoint-of-sale malware used to steal 167,000 credit cards
15. 23 OctHealthcare site leaks personal health information via Google and Meta tracking pixels
16. 23 OctAn odd kind of cybercrime: Gift vouchers, medical records, and…food
17. 23 OctA week in security (October 17 – 23)
18. 23 OctA gym heist in London goes cyber: Lock and Code S03E22
19. 20 OctLooking for student debt relief? Watch out for scammers says the FBI
20. 20 OctLarge typosquatting campaign delivers tech support scams
21. 20 OctGas, a positive social network for teens (no, really)
22. 20 OctFormer cop abused unrevoked system access to extort women
23. 19 OctNew PHP-based Ducktail infostealer is now after crypto wallets
24. 19 OctSuspected LAPSUS$ group member arrested in Brazil
25. 19 OctMicrosoft fixes driver blocklist placing users at risk from BYOVD attacks
26. 19 OctMicrosoft breach reveals some customer data
27. 18 OctMan scammed IRL for a phone he sold online
28. 18 OctRansomware attack freezes newspaper printing system
29. 17 OctThermal cameras could help reveal your password
30. 17 OctHow to spot a scam
31. 17 OctFake tractor fraudsters plague online transactions
32. 17 OctWarning: “FaceStealer” iOS and Android apps steal your Facebook login
33. 17 OctCriminal group busted after stealing hundreds of keyless cars
34. 16 OctA week in security (October 10 – 16)
35. 15 OctAndroid and iOS leak some data outside VPNs
36. 14 OctFBI, CISA warn of disinformation ahead of midterms
37. 12 OctOnly half of teens agree they “feel supported online” by parents
38. 12 OctAndroid and Chrome start showing passwords the door
39. 11 OctUK government sounds alarm on tax scams
40. 10 OctSmart lights vulnerable to “blink and you’ll miss it” attack
41. 10 OctSecurity awareness campaign highlights things your bank will never say
42. 10 OctCourt rules webcam monitoring of remote employee was an invasion of privacy
43. 10 OctAn 18 year scam odyssey of stranded astronauts
44. 9 OctThreat Intelligence Reports
45. 9 OctWhite House unveils Blueprint for an AI Bill of Rights
46. 9 OctMeta accuses apps of stealing WhatsApp accounts
47. 9 OctTeen talk: What it’s like to grow up online, and the role of parents: Lock and Code S03E21
48. 9 OctCredential stuffers take aim at Final Fantasy XIV players
49. 9 OctA week in security (October 3 – 9)
50. 6 OctRomance scammer given 25 years of alone time
51. 6 OctMalwarebytes’ modernized bug bounty program—here’s all you need to know
52. 5 OctAndroid vulnerabilities could allow arbitrary code execution
53. 5 OctCyberstalking, pig masks, and cockroaches: Former eBay execs are sentenced
54. 5 OctData Access Agreement offers a new path for UK – US data requests
55. 4 OctKim Kardashian gets huge fine for crypto ad
56. 4 OctAdmin from hell facing 10 years for sabotaging ex-employer’s network
57. 4 OctBogus job offers hide trojanised open-source software
58. 3 OctTikTok’s “secret operation” tracks you even if you don’t use it
59. 3 OctRansomware-affected school district refuses to pay, gets stolen data released
60. 3 OctHuge increase in smishing scams, warns IRS
61. 2 OctActively exploited vulnerability in Bitbucket Server and Data Center
62. 2 OctRomance scammer deepfakes Mark Ruffalo to con elderly artist
63. 2 OctA week in security (September 26 – October 2)
64. 1 OctWhy (almost) everything we told you about passwords was wrong

September 2022

1. 28 SepOptus data breach “attacker” says sorry, it was a mistake
2. 28 SepFast Company hacked to send obscene and racist messages
3. 27 SepSpyware disguises itself as Zoom downloads
4. 27 SepAPT28 attack uses old PowerPoint trick to download malware
5. 27 SepErbium stealer on the hunt for data
6. 27 SepFCC moves to block robotexts
7. 26 Sep4 times students compromised school cybersecurity
8. 26 SepTikTok faces $28m fine for failing to protect children’s privacy
9. 26 SepFacebook users sue Meta for allegedly building “secret workaround” to Apple privacy safeguards
10. 25 SepWindows 11 pulls ahead of Windows 10 in anti-phishing stakes
11. 25 SepCritical WhatsApp vulnerabilities patched: Check you’ve updated!
12. 25 SepCalling in the ransomware negotiator, with Kurtis Minder: Lock and Code S03E20
13. 25 SepTwitter fixes bug that left devices logged in after password reset
14. 25 SepA week in security (September 19 – 25)
15. 21 SepUpdate Firefox and Thunderbird now! Mozilla patches several high risk vulnerabilities
16. 21 SepWelcome to high tech hacking in 2022: Annoying users until they say “yes”
17. 21 SepMorgan Stanley’s years-long “extensive failure” to protect customer data ends in huge fine
18. 21 SepMedtronic’s MiniMed 600 series insulin pumps potentially at risk of compromise, says FDA
19. 21 Sep2K games helpdesk abused to spread RedLine malware
20. 20 SepTax refund phish logs keystrokes to swipe personal details
21. 20 SepVulnerable children’s identities used in tax fraud scheme
22. 20 SepScammers send fake ‘Energy Bills Support Scheme’ texts
23. 20 Sep5 things to teach your kids about social media
24. 19 SepGrand Theft Auto 6 suffers grand theft
25. 19 SepKiwi Farms breached, user data potentially exposed
26. 19 Sep[update] American Airlines suffers data breach after phishing incident
27. 18 SepHookup site targeted by typo-squatters
28. 18 SepA week in security (September 12 – 18)
29. 15 SepUber hacked
30. 14 SepSchool app Seesaw compromised to send shock NSFW image
31. 14 SepHere are the new security and privacy features of iOS 16
32. 13 SepWPGateway WordPress plugin vulnerability could allow full site takeover
33. 13 SepThe privacy concerns of tying SIM cards to real identities
34. 13 SepMalvertising on Microsoft Edge’s News Feed pushes tech support scams
35. 13 SepHow to help your child manage their online reputation
36. 12 Sep[updated] Important update! iPhones, Macs, and more vulnerable to zero-day bug
37. 12 SepUpdate now! Google patches vulnerabilities for Pixel mobile phones
38. 12 SepSteam account credentials phished in browser-in-a-browser attack
39. 12 SepBackupBuddy WordPress plugin vulnerable to exploitation, update now!
40. 12 SepApple puts the password on life support with passkey
41. 11 SepThe North Face hit by credential stuffing attack
42. 11 SepThe MSP playbook on deciphering tech promises and shaping security culture
43. 11 SepFacebook engineers aren’t sure where all user data is kept
44. 11 SepA week in security (September 5 – 11)
45. 7 SepInterContinental Hotels’ booking systems disrupted by cyberattack
46. 6 SepYouTube transparency report shows battle against misinformation
47. 6 SepSextortionists used mobile malware to steal nude videos, contact lists from victims
48. 6 SepHow to set up an Android for your kids
49. 6 SepEvasive Shikitega Linux malware drops Monero cryptominer
50. 5 SepYouTuber on the run after allegedly swiping $55m from followers
51. 5 SepDon’t share the WhatsApp ‘Martinelli’ phone hacking alert: It’s a hoax
52. 5 SepUpdate now! QNAP warns users DeadBolt is exploiting Photo Station vulnerability
53. 5 SepInstagram receives record fine of $400M for abuse of children’s data
54. 4 SepZero-day puts a dent in Chrome’s mojo
55. 4 SepPhishers use verified status as bait for Instagram users
56. 4 SepA week in security (August 29 – September 4)

August 2022

1. 31 AugWhat is a keylogger?
2. 31 AugTikTok vulnerability could have allowed hijackers to take over accounts
3. 31 AugData broker sued for allegedly selling individuals’ sensitive location data
4. 31 AugControversial Kids’ Code aims to keep children safe online
5. 31 AugApple releases security update for iPhones and iPads to address vulnerability
6. 30 AugJames Webb telescope images used to hide malware
7. 30 AugHow to set up an iPhone for your kids
8. 30 AugFinal Fantasy 14 players targeted by QR code phishing
9. 29 AugBritish Airways customers targeted in lost luggage Twitter scam
10. 29 AugChromium browsers can write to the system clipboard without your permission
11. 28 AugTwilio data breach turns out to be more elaborate than suspected
12. 28 AugPlaying Doom on a John Deere tractor with Sick Codes: Lock and Code S03E18
13. 28 AugA week in security (August 22 – August 28)
14. 25 AugSource code of password manager LastPass stolen by attacker
15. 25 AugAdware found on Google Play — PDF Reader serving up full screen ads
16. 23 AugTwitter security under scrutiny after former executive turns whistleblower
17. 23 AugReset your password now! Plex suffers data breach
18. 23 AugChromeOS vulnerability found by Microsoft
19. 23 AugHow to secure a Mac for your kids
20. 23 AugBinance chief says a “sophisticated hacking team” turned him into a deepfake hologram
21. 22 AugGoogle flags man as sex abuser after he sends photos of child to doctor
22. 21 AugReddit users crowdsourcing explicit images and identities
23. 21 AugCryptojackers growing in numbers and sophistication
24. 21 AugCriminals socially engineer their way to bank details with fake arrest warrants
25. 21 AugA week in security (August 15 – August 21)
26. 18 AugTech support scammers target Microsoft users with fake Office 365 USB sticks
27. 18 AugSpying on the spies. See what JavaScript commands get injected by in-app browsers
28. 18 AugExplained: Steganography
29. 17 AugUrgent update for macOS and iOS! Two actively exploited zero-days fixed
30. 17 AugBad rhythm: Janet Jackson song resonates poorly with some old hard drives
31. 16 AugUpdate Chrome now! Google issues patch for zero day spotted in the wild
32. 16 AugRansomwater confusion, does the criminal know who the victim is?
33. 16 AugNearly 2,000 Signal users affected by Twilio phishing attack
34. 16 Aug$6 million heist targets video game skin trading site
35. 15 AugHow to secure a Windows PC for your kids
36. 14 AugDonut breach: Lessons from pen-tester Mike Miller: Lock and Code S03E17
37. 14 AugA week in security (August 8 – August 14)
38. 11 AugViral video drives malvertising on social media platform
39. 11 AugAnti-tracking tool tells you if you’re being followed
40. 11 AugResearchers found one-click exploits in Discord and Teams
41. 10 AugSlack flaw exposed users’ hashed passwords
42. 9 AugNow it’s BlenderBot’s turn to make shocking, inappropriate, and untrue remarks
43. 9 Aug5 cybersecurity tips for students going back to school
44. 8 AugTwilio breached after social engineering attack on employees
45. 8 AugSummer of exploitation leads to healthcare under fire
46. 8 AugEducation hammered by exploits and backdoors in 2021 and 2022
47. 7 AugTwitter data breach affects 5.4M users
48. 7 AugKMSpico explained: No, KMS is not “kill Microsoft”
49. 6 AugA week in security (August 1 – August 7)
50. 5 AugPhishy calls and emails play on energy cost increase fears
51. 4 AugDHS says to update your Emergency Alert Systems immediately
52. 2 AugFCC warns of steep rise in phishing over SMS
53. 2 AugHow to protect yourself and your kids against device theft
54. 2 AugFor months, JusTalk messages were accessible to everyone on the Internet
55. 2 AugBank fraud scammers trick victims with claims of bogus Zelle transfers

July 2022

1. 31 JulWrestling star Mick Foley’s Twitter compromised, selling PS5 consoles
2. 31 JulWhen a sextortion victim fights back
3. 31 JulMillions of Arris routers are vulnerable to path traversal attacks
4. 31 JulHave we lost the fight for data privacy? Lock and Code S03E16
5. 31 JulA week in security (July 25 – July 31)
6. 28 JulTo settle with the DoJ, Uber must confess to a cover-up. And it did.
7. 28 JulGoogle delays Chrome third party cookie sunsetting…again
8. 28 JulCriminals using compromised social media accounts to “post indecent images of children” says UK cybercrime organization
9. 27 JulTikTok owner ByteDance pushed a pro-China agenda to Americans, say former employees
10. 27 JulRadioactivity monitoring and warning system hacked, disabled by attackers
11. 27 Jul“Orwellian in the extreme” food store installs facial recognition cameras to stop crime, faces backlash
12. 26 JulT-Mobile agrees to pay customers $350 million in settlement over data breach
13. 26 JulPrestaShop warns of vulnerability: Update your stores now!
14. 26 JulIn post-Roe US, experts share how to keep your data private
15. 26 JulTiktok challenged by China-centric promotion & censorship issues
16. 26 JulAnti-vaxxer dating site exposes user data
17. 24 JulUpdate Google Chrome now! New version includes 11 important security patches
18. 24 JulMalware spent months hoovering up credit card details from 300 US restaurants
19. 24 JulLock down your Neopets account: Data breach being investigated
20. 24 JulLightning Framework, modular Linux malware
21. 24 JulA week in security (July 18 – July 24)
22. 20 JulVulnerabilities in GPS tracker could have “life-threatening” implications
23. 20 JulThe Wren Eleanor story: Why you should keep your kids’ images off social media
24. 19 JulThe Winding Road to Compliance
25. 19 JulRing shares data with police without consent (but it’s in good faith), says Amazon
26. 19 JulGoogle ads lead to major malvertising campaign
27. 19 JulFacebook gets round tracking privacy measure by encrypting links
28. 19 JulAnother ransomware payment recovered by the Justice Department
29. 19 JulHow to protect yourself against device theft
30. 18 JulRoblox breached: Internal documents posted online by unknown attackers
31. 18 JulPayPal phishing campaign goes after more than just your login credentials
32. 18 JulFraudulent cryptocurrency investment apps are duping investors
33. 17 JulThe FTC will go after companies misusing location, health, and other sensitive data
34. 17 JulRoe v. Wade: How the cops can use your data: Lock and Code S03E15
35. 17 JulExtortionists target restaurants, demand money to take down bad reviews
36. 17 JulA week in security (July 11 – July 17)
37. 13 JulNew variant of Android SpyJoker malware removed from Play Store after 3 million+ installs
38. 13 JulLow-income consumers preyed on by fake ISP during pandemic, FCC says
39. 13 JulElden Ring maker Bandai Namco hit by ransomware and data leaks
40. 13 JulChina’s Tonto Team increases espionage activities against Russia
41. 12 JulWhatsApp warns users: Fake versions of WhatsApp are trying to steal your personal info
42. 11 JulPyPI starts rolling out required 2FA for important projects
43. 11 JulFake streamed cricket matches knocks victims for six
44. 10 JulTech support scammers caught by their own cameras
45. 10 JulInsecure password leads to Mangatoon data exposure
46. 10 JulEurope threatens to ban Facebook over data transfers to the US
47. 10 JulA week in security (July 4 – July 10)
48. 9 JulHow the FBI quietly added itself to criminals’ instant message conversations
49. 7 JulYouTube AI wrongfully flags horror short “Show for Children” as suitable for children
50. 7 JulReport: Brazil must do more to encrypt, back up data
51. 7 JulFake job offer leads to $600 million theft
52. 6 JulApple Lockdown Mode helps protect users from spyware
53. 5 JulVerified Twitter accounts phished via hate speech warnings
54. 5 JulIconBurst software supply chain attack offers malicious versions of NPM packages
55. 5 JulGoogle to delete location data of trips to abortion clinics
56. 5 JulDiscord Shame channel goes phishing
57. 4 JulUpdate now! Chrome patches ANOTHER zero-day vulnerability
58. 4 JulTikTok is “unacceptable security risk” and should be removed from app stores, says FCC
59. 3 JulWhen good-faith hacking gets people arrested, with Harley Geiger: Lock and Code S03E14
60. 3 JulMy Body, My Data Act would lock down reproductive and sexual health data
61. 3 JulHackerOne insider fired for trying to claim other people’s bounties
62. 3 Jul“Free UK visa” offers on WhatsApp are fakes
63. 3 JulA week in security (June 27 – July 3)
64. 3 Jul5 pro-freedom technologies that could change the Internet

June 2022

1. 30 JunYTStealer targets YouTube content creators
2. 30 JunAstraLocker 2.0 ransomware isn’t going to give you your files back
3. 29 JunZuoRAT is a sophisticated malware that mainly targets SOHO routers
4. 29 JunUpdate now! Mozilla fixes security vulnerabilities and introduces a new privacy feature for Firefox
5. 29 JunRansomHouse claims to have stolen at least 450GB of AMD’s data
6. 29 JunImmigration organisations targeted by APT group Evilnum
7. 29 JunCriminals are applying for remote work using deepfake and stolen identities, says FBI
8. 29 JunAmazon Photos vulnerability could have given attackers access to user files and data
9. 28 JunInternet Safety Month: Everything you need to know about Omegle
10. 28 JunHermit spyware is deployed with the help of a victim’s ISP
11. 28 JunForced Chrome extensions get removed, keep reappearing
12. 27 JunLGBTQ+ community targeted by extortionists who threaten to publish nudes
13. 27 JunCity worker loses USB stick containing data on every resident after day of drinking
14. 26 JunInstagram introduces new ways for users to verify their age
15. 26 JunBrave Search wants to replace Google’s biased search results with yours
16. 26 JunA week in security (June 20 – June 26)
17. 24 Jun5 ways to avoid being catfished
18. 22 JunRogue cryptocurrency billboards go phishing for wallets
19. 22 JunPolice seize and dismantle massive phishing operation
20. 22 JunDial 311 for… cybersecurity emergencies?
21. 21 JunWatch out for the email that says “You have a new voicemail!”
22. 21 JunMEGA claims it can’t decrypt your files. But someone’s managed to…
23. 21 Jun7-Zip gets Mark of the Web feature, increases protection for users
24. 20 JunYou can be tracked online using your Chrome browser extensions
25. 19 JunSecuring the software supply chain, with Kim Lewandowski: Lock and Code S03E13
26. 19 JunLinkedIn scams are a “significant threat”, warns FBI
27. 19 JunDDoS-for-hire service provider jailed
28. 19 JunClient-side Magecart attacks still around, but more covert
29. 19 JunA week in security (June 13 – June 19)
30. 19 Jun7 tips for staying safe online while on vacation
31. 15 JunPhotos of kids taken from spyware-ridden phones found exposed on the internet
32. 15 JunInterpol’s First Light operation smashes crime on a global scale
33. 14 JunStealthy Symbiote Linux malware is after financial institutions
34. 14 JunRecord breaking HTTPS DDoS attack
35. 14 JunIt’s official, today you can say goodbye to Internet Explorer. Or can you?
36. 14 JunFirefox stops advertisers tracking you as you browse, calls itself the most “private and secure major browser”
37. 14 JunEmail compromise leads to healthcare data breach at Kaiser Permanente
38. 13 Jun“Multiple adversaries” exploiting Confluence vulnerability, warns Microsoft
39. 13 JunInstagram scam steals your selfies to trick your friends
40. 13 JunDon’t panic! “Unpatchable” Mac vulnerability discovered
41. 12 JunUpdate Chrome now: Four high risk vulnerabilities found
42. 12 JunTaking down the IP2Scam tech support campaign
43. 12 JunRussia’s APT28 uses fear of nuclear war to spread Follina docs in Ukraine
44. 12 JunA week in security (June 6 – June 12)
45. 9 JunWhatsApp spam offers up “B&Q Father’s Day Contest 2022”
46. 8 Jun[updated]Update now! Patch against vulnerabilities in Meeting Owl Pro and Whiteboard Owl devices
47. 8 JunFacebook users targeted in massive phishing campaign
48. 8 JunApple’s passkeys attempt to solve the password problem
49. 7 JunSSNDOB stolen data marketplace shut down by global law enforcement operation
50. 7 JunMakeMoney malvertising campaign adds fake update template
51. 7 JunCoffee app in hot water for constant tracking of user location
52. 7 JunAwful 4chan chat bot spouts racial slurs and antisemitic abuse
53. 6 JunRotten apples banned from the App store
54. 6 JunHackers can take over accounts you haven’t even created yet
55. 5 JunTor’s (security) role in the future of the Internet, with Alec Muffett
56. 5 JunPrometheus ransomware’s flaws inspired researchers to try to build a near-universal decryption tool
57. 5 JunMicrosoft Autopatch is here…but can you use it?
58. 5 JunFBI warns of scammers soliciting donations for Ukraine
59. 5 JunA week in security (May 30 – June 5)
60. 2 JunParental controls—what they can and can’t do for you
61. 2 JunInternet Safety Month: Avoiding the consequences of unsafe Internet practices

May 2022

1. 31 MayWhatsApp accounts hijacked by call forwarding
2. 31 MayTrustPid is another worrying, imperfect attempt to replace tracking cookies
3. 31 MayRansomware attack turns 2022 into 1977 for Somerset County
4. 31 MayPhishing mail claims a 3D Secure upgrade is required
5. 31 MayMore than a quarter of Americans fell for robocall scam calls in past year
6. 30 MayRunescape phish claims your email has been changed
7. 30 MayIs quantum teleportation the future of secure communications?
8. 30 MayFBI warns of education sector credentials on dark web forums
9. 29 MayThe Quad commits to strengthening cybersecurity in software, supply chains
10. 29 MayIntuit phish says “we have put a temporary hold on your account”
11. 29 MayDouble-whammy attack follows fake Covid alert with a bogus bank call
12. 29 MayA week in security (May 23 – 29)
13. 26 MayTwitter fined $150M after using 2FA phone numbers for marketing
14. 26 MayFirefox, Thunderbird, receive patches for critical security issues
15. 25 MayWatch out! Tinder and Grindr users targeted by cruel scammers using real abuse photos
16. 25 MayIf you get an email saying “Item stopped due to unpaid customs fee”, it’s a fake
17. 25 MayChromeLoader targets Chrome Browser users with malicious ISO files
18. 24 MayUpdate now! Multiple vulnerabilities patched in Google Chrome
19. 24 MayMassive increase in XorDDoS Linux malware in last six months
20. 24 MayEerie GoodWill ransomware forces victims to publish videos of good deeds on social media
21. 23 MayZero-day vulnerabilities in Chrome and Android exploited by commercial spyware
22. 23 MayInstagram verification services: What are the dangers?
23. 23 MayGeneral Motors suffers credential stuffing attack
24. 22 MayUpdate now! Nvidia released fixes for 10 flaws in Windows GPU drivers
25. 22 MayHunting down your data with Whitney Merrill: Lock and Code S03E11
26. 22 MayChicago students lose data to ransomware attackers
27. 22 MayA week in security (May 16 – 22)
28. 19 MayWhy you should act like your CEO’s password is “qwerty”
29. 18 MayHow iPhones can run malware even when they’re off
30. 18 MayCardiologist moonlighted as successful ransomware developer
31. 17 MaySysrv botnet is out to mine Monero on your Windows and Linux servers
32. 16 MayUpdate now! Apple patches zero-day vulnerability affecting Macs, Apple Watch, and Apple TV
33. 16 May“Look what I found here” phish targets Facebook users
34. 16 MayLong lost @ symbol gets new life obscuring malicious URLs
35. 16 MayGmail-linked Facebook accounts vulnerable to attack using a chain of bugs—now fixed
36. 16 MayCar owners warned of another theft-enabling relay attack
37. 16 MayAirTag stalking: What is it, and how can I avoid it?
38. 15 MayHow COVID-19 fuelled a surge in malware
39. 15 MayFake reCAPTCHA forms dupe users via compromised WordPress sites
40. 15 MayA week in security (May 9 – 15)
41. 14 MayHow to spot the signs of a virtual kidnap scam
42. 11 MayVirtual credit cards coming to Chrome: What you need to know
43. 11 MayCollege closes down after ransomware attack
44. 11 MayClearview AI banned from selling facial recognition data in the US
45. 10 MayCanon printer owners: Be careful of bogus driver download sites
46. 9 MayClient side scanning may cost more than it delivers
47. 9 May“Chemical attack” email warnings deliver Jester Stealer malware
48. 8 MayRecovering from romance scams with Cindy Liebes: Lock and Code S03E10
49. 8 MayHow to remove Google from your life
50. 8 MayA week in security (May 2 – 8)
51. 8 MayA special browser designed for online banking. Good idea, or not so much?
52. 8 MayA scanning tool for open-sourced software packages? Yes, please!
53. 8 May$600 a week to wrap your car? It’s a scam
54. 7 MayGoogle, Apple, and Microsoft step hand in hand into a passwordless future
55. 5 MaySteer clear of these Instagram “Get rich with Bitcoin” scams
56. 5 MaySteer clear of fake premium mobile app unlockers
57. 5 MayOpenSea warns of Discord channel compromise
58. 5 MayHow Instagram scammers talk users out of their accounts
59. 4 MayWorld Password Day: Brushing up on the basics
60. 4 MayThe $43 billion Business Email Compromise threat
61. 4 MayNigerian Tesla: 419 scammer gone malware distributor unmasked
62. 4 MayGoogle fixes two critical Pixel vulnerabilities: Get your updates when you can!
63. 3 MayUnfixed vulnerability in popular library puts IoT products at risk
64. 3 MayFake Cyberpunk Ape Executives target artists with malware-laden job offer
65. 3 May8 security tips for small businesses
66. 2 MayUS healthcare billing services group hacked, affecting at least half a million individuals
67. 2 MayState-backed hacking group from China is targeting the Russian military
68. 2 MayOver 50 countries sign the “Declaration for the Future of the Internet”
69. 2 MayCraft fair vendors targeted by fake event scammers on Facebook
70. 2 MayAirdrop phishing: what is it, and how is my cryptocurrency at risk?
71. 1 MayA week in security (April 25 – May 1)

April 2022

1. 29 AprUpdate now! Critical patches for Chrome and Edge
2. 29 AprRussia continues digital onslaught against Ukrainian systems
3. 28 AprWarning! Instagram Stories hides a scam in plain sight
4. 28 AprUkraine government and pro-Ukrainian sites hit by DDoS attacks
5. 28 AprGoogle Play’s Data safety section empowers Android users to make informed app choices
6. 28 AprBeware Twitter Messages claiming “Your blue badge Twitter account has been reviewed as spam”
7. 28 AprBeware scammers disguised as fraud busters
8. 27 AprWhy you should be taking security advice from your grandmother
9. 27 AprQNAP customers urged to disable AFP to protect against severe vulnerabilities
10. 27 AprOnyx ransomware destroys files, and also the criminal circle of trust
11. 27 AprHackers fool major tech companies into handing over data of women and minors to abuse
12. 27 AprFake USA for UNHCR site wants your Ukraine donations in Bitcoin
13. 27 AprFacebook phishers threaten users with Page Recovery Help Support
14. 27 AprCall of Duty cheats can expect embarrassment with new anti-cheat feature
15. 26 AprWhat’s happening in the world of personal cyber insurance?
16. 26 Apr“URGENT BUSINESS PROPOSAL!!!” 419 scammer wants your help to move someone’s inheritance
17. 26 Apr“Reject All” cookie consent button is coming to European Google Search and YouTube
18. 26 AprEmotet fixes bug in code, resumes spam campaign
19. 26 AprElon Musk-themed cryptocurrency scam uses fake Medium as the promotion site
20. 25 AprRogue ads phishing for cryptocurrency: Are you secure?
21. 25 AprHospitals taken offline after cyberattack
22. 24 AprWhy software has so many vulnerabilities, with Tanya Janca: Lock and Code S03E09
23. 24 AprWhy MITRE matters to SMBs
24. 24 AprWatch out for this SMS phish promising a tax refund
25. 24 AprApple’s child safety features are coming to a Messages app near you
26. 24 AprA week in security (April 18 – 24)
27. 20 AprPegasus spyware found on UK government office phone
28. 20 AprIt’s legal to scrape public data—US appeals court
29. 20 AprBeware of fake Twitter philanthropists offering to put $750 into your Cash App account
30. 19 AprThe fake Elon Musk Bitcoin giveaway marathon will NOT make you rich
31. 19 AprOracle releases massive Critical Patch Update containing 520 security patches
32. 19 AprBeware tragic “my daughter died…” Facebook posts offering free PS5s
33. 18 AprWatch out for Ukraine donation scammers in Twitter replies
34. 18 AprNorth Korean Lazarus APT group targets blockchain tech companies
35. 17 AprA week in security (April 11 – 17)
36. 13 Apr“Your AppI‌e‌ ‌l‌D‌ ‌‌h‌‌a‌‌s‌‌ ‌‌b‌‌e‌‌e‌‌n‌‌ ‌‌l‌‌ocke‌‌d‌‌” spam email takes you on a website mystery tour
37. 13 AprStalkerware-type detections hit record high in 2021, but fell in second half
38. 13 AprFiling your taxes? Be wary of help found through search engines
39. 12 AprSteer clear of this “TestNTrace” SMS spam
40. 12 AprSMS group spam promises free gifts in return for bill payment
41. 11 AprWhy identity management matters
42. 11 AprUSPS “Your package could not be delivered” text is a smishing scam
43. 11 AprMalwarebytes Evaluation of the MITRE ENGENUITY ATT&CK Round 4 Emulations
44. 11 AprHow to password protect a folder
45. 11 AprConti ransomware offshoot targets Russian organizations
46. 11 AprApps removed from Google Play for harvesting user data
47. 10 AprWhy data protection and privacy are not the same, and why that matters: Lock and Code S03E08
48. 10 AprOld Play Store apps served notice by upcoming API level changes
49. 10 AprDenonia cryptominer is first malware to target AWS Lambda
50. 10 AprCredential-stealing malware disguises itself as Telegram, targets social media users
51. 10 AprA week in security (April 4 – 10)
52. 7 AprYouTube channels of Taylor Swift, Justin Bieber, Harry Styles, and other musicians compromised
53. 7 AprSuccessful operations against Russian Sandworm and Strontium groups targeting Ukraine revealed
54. 7 AprDon’t enter your recovery phrase! Phishers target Ledger crypto-wallet users
55. 6 AprWatch out for fake WhatsApp “New Incoming Voicemessage” emails
56. 6 AprCash App breached by a former employee could affect millions
57. 5 AprBeware Ukraine-themed fundraising scams
58. 4 AprGitLab issues security updates; watch out for hard coded passwords
59. 4 AprCISA advises D-Link users to take vulnerable routers offline
60. 3 AprUpdate now! Zyxel patches critical firewall bypass vulnerability
61. 3 Apr“Free easter chocolate basket” is a social media scam after your personal details
62. 3 AprA week in security (March 28 – April 3)
63. 3 Apr5 ways to spring clean your security

March 2022

1. 31 MarUpdate now! Apple patches two zero-day vulnerabilities that may have been actively exploited
2. 31 MarHive ransomware impacts California non-profit health organisation
3. 31 MarGlobant suffers network breach due to LAPSUS$ compromise
4. 30 MarURI spoofing flaw could phish WhatsApp, Signal, Instagram, and iMessage users
5. 30 MarUkraine shuts down disinformation bot farm
6. 30 MarTech support scam campaign targets Japanese visitors to PornHub
7. 30 MarPhishers make a date with your calendar apps
8. 29 MarWatch out for LinkedIn fakes who want to get connected
9. 29 MarUpdate now! Google launches Chrome version 100 and fixes 28 vulnerabilities
10. 29 Mar“A little gift for you” SMS spam appears to come from your own phone number
11. 28 MarSatellites are critical infrastructure and need to be cybersecured
12. 28 MarMITRE ATT&CK® Evaluation results: Malwarebytes’ efficiency, delivered simply, earns high marks
13. 28 MarLooking over your shoulder: when small mistakes have big consequences
14. 28 MarAttacks on Ukraine communications are a major part of the war
15. 27 MarUpdate now! Google releases emergency patch for Chrome zero-day used in the wild
16. 27 MarTelling stories securely, with Runa Sandvik: Lock and Code S03E07
17. 27 MarTech support fraud is still very much alive, says latest FBI report
18. 27 MarA week in security (March 21 – 27)
19. 23 MarUpdate now! Many HP printers affected by three critical security vulnerabilities
20. 23 MarElden Ring exploit traps players in infinite death loop
21. 23 MarAnti-war open-source software developer targets Russians and Belarussians with “protestware”
22. 22 Mar[updated]Okta admits 366 customers may have been impacted by LAPSUS$ breach
23. 21 MarFacebook users wary of security mail find themselves locked out of accounts
24. 21 MarA new rootkit comes to an ATM near you
25. 20 MarFake Esports voting sites looking to phish Steam users
26. 20 MarFacebook phish claims “Someone tried to log into your account”
27. 20 MarA week in security (March 14 – 20)
28. 17 MarOnline Safety Bill’s provisions for “legal but harmful” content described as “censor’s charter”
29. 17 MarMeet Exotic Lily, access broker for ransomware and other malware peddlers
30. 17 MarDeepfake Zelenskyy video surfaces on compromised websites
31. 17 MarBeware of this bogus (and phishy) “Instagram Support” email
32. 16 MarGh0stCringe RAT makes database servers squeal for protection
33. 16 MarFBI catches up with one of its Most Wanted, arrests head of advance-fee crime network
34. 16 MarClouding the issue: what cloud threats lie in wait in 2022?
35. 15 MarValorant cheats on YouTube are actually information-stealing malware
36. 15 MarFake Royal Mail chatbot offers up…a new iPhone?
37. 15 MarCafePress faces $500,000 fine for data breach cover up
38. 15 Mar“Threatening and coercive” cold-callers who targeted the elderly hit with big fines
39. 14 MarUpdate now! Apple fixes several serious vulnerabilities in iOS and macOS
40. 14 MarEscobar is the new Android banking Trojan we’ve met before
41. 14 MarDDoS barrage against Israel described as the “largest ever” cyberattack its faced
42. 13 MarDe-Googling Carey Parker’s (and your) life: Lock and Code S03E06
43. 13 MarA week in security (March 7 – March 13)
44. 10 MarHBO sued for sharing subscriber data with Facebook
45. 10 MarBlunting RDP brute-force attacks with rate limiting
46. 9 MarExtortion scheme impersonates government officials, law enforcement
47. 9 MarBrave browser goes the extra mile to block third party cookies
48. 8 MarTwitter makes the leap to Tor
49. 8 MarAzure AutoWarp brings automation headaches
50. 7 MarWhen fake dating profiles try the military approach
51. 7 MarGoogle takes on Docs notification spammers
52. 6 MarUpdate now! Mozilla patches two actively exploited vulnerabilities
53. 6 MarA week in security (February 28 – March 6)
54. 4 MarBeware of malware offering “Warm greetings from Saudi Aramco”
55. 3 MarTips to protect your data, security, and privacy from a hands-on expert
56. 2 MarFour key cybersecurity practices during geopolitical upheaval
57. 2 MarDon’t fall for the “Donate to help children in Ukraine” scam
58. 1 MarToyota’s just in time manufacturing faced with disruptive cyberattack
59. 1 MarMeta blocks Russia-Ukraine disinformation campaigns on Facebook, Instagram
60. 1 MarGoogle launches Chrome 99, fixes 28 vulnerabilities
61. 1 MarDeepfake study suggests fakes can run but not hide
62. 1 MarBiden wants stronger privacy protections, no targeted ads for children

February 2022

1. 28 FebData breaches leave customers very shaky, report says
2. 27 FebTrickBot takes down server infrastructure after months of inactivity
3. 27 FebHow Crisis Text Line crossed the line in the public’s mind: Lock and Code S03E05
4. 27 FebCovid app’s privacy information ruled not clear enough
5. 27 FebA week in security (February 21 – February 27)
6. 24 FebPotential cybersecurity impacts of Russia’s invasion of Ukraine
7. 24 FebGoogle and Microsoft accused of feeding smaller search engines spam ads
8. 23 FebYik Yak “cyberbullying”: What can be done?
9. 23 FebHow to update your drivers and when you need to
10. 23 FebCyclops Blink malware: US and UK authorities issue alert
11. 22 FebHive ransomware: Researchers figure out a method to decrypt files
12. 21 FebXenomorph banking Trojan downloaded over 50,000 times from Play Store
13. 21 Feb“Ethnicity recognition” tool listed on surveillance camera app store built by fridge-maker’s video analytics startup
14. 20 FebFacebook sued for siphoning facial recognition data without consent
15. 20 FebCISA offers guidance on dealing with information manipulation
16. 20 FebA week in security (February 14 – February 20)
17. 18 FebUS senators introduce the Kids Online Safety Act (KOSA)
18. 16 FebFirefox and Chrome reaching major versions 100 may break some websites
19. 15 FebRoblox Beamers steal items from kids
20. 15 FebJournalist won’t be indicted for hacking for viewing a state website’s HTML
21. 15 FebBan Pegasus spyware, urges European Union Data Protection Supervisor
22. 14 FebUpdate now! Chrome patches actively exploited zero-day vulnerability
23. 13 FebThe world’s most coveted spyware, Pegasus: Lock and Code S03E04
24. 13 FebRansomware gang hits 49ers’ network before Super Bowl kick off
25. 13 FebDon’t let scammers ruin your Valentine’s Day
26. 13 FebCity: Skylines developers warn of rogue mod
27. 13 FebAdobe patches actively exploited Magento/Adobe Commerce zero-day
28. 13 FebA week in security (February 7 – February 13)
29. 12 FebTwitter cans 2FA service provider over surveillance claims
30. 10 FebUpdate now! Apple fixes actively exploited zero-day
31. 10 FebOnline Safety Bill will legally require porn sites to verify users’ age
32. 9 FebSAP customers are urged to patch critical vulnerabilities in multiple products
33. 9 FebRansomware author releases decryption keys, says goodbye forever
34. 9 FebA new Magecart campaign is making waves
35. 8 FebMicrosoft: Slow MFA adoption presents “dangerous mismatch” in security
36. 8 FebIRS abandons facial recognition plans for online services
37. 8 FebApple accidentally kept some Siri recordings from iPhones, even for opted-out users
38. 7 Feb“We absolutely do not care about you”: Sugar ransomware targets individuals
39. 7 FebMicrosoft takes macros out of the equation for five Office apps
40. 7 FebMeta blows safety bubble around users after reports of sexual harassment
41. 6 FebSecuritas breached, 3TB of airport employee records exposed
42. 6 FebNews Corp falls victim to cyberattack
43. 6 FebHow to avoid being scammed this Valentine’s Day
44. 6 FebA week in security (January 31 – February 6)
45. 3 FebThreat actor steals email with Zimbra zero-day
46. 3 FebInvestment scams are on the rise
47. 3 FebFBI warns of bogus job postings on recruitment sites
48. 2 FebBeware bogus OperaGX sponsorship offers
49. 2 FebA worrying Etsy listing reveals the stalking potential of Apple’s AirTags
50. 2 Feb$320 milllion stolen from Wormhole crypto-trading platform
51. 1 FebWatch out for this bump in LinkedIn phishing
52. 1 Feb[updated]Cyberattack on fuel supplier causes supply chain disruption
53. 1 FebHow to speed up your computer or laptop

January 2022

1. 31 JanSamba patches critical vulnerability that allows remote code execution as root
2. 31 JanDuo of Android dropper and payload target certain countries and app users
3. 31 JanApply those updates now: CVE bypass offers up admin privileges for Windows 10
4. 31 JanAndroid malware BRATA can wipe devices
5. 30 JanHow a few PhD students revealed that phishing trainings might just not work: Lock and Code S03E03
6. 30 JanActor’s verified Twitter profile hijacked to spam NFT giveaways
7. 30 JanA week in security (January 24 – 30)
8. 27 Jan[updated]QNAP update stops Deadbolt ransomware, annoys some users, starts debate
9. 27 JanBig Mother is watching: What parents REALLY think about tracking their kids
10. 26 JanUpdate now! Apple patches another actively used zero-day
11. 26 JanLet’s Encrypt to revoke “mis-issued” certificates
12. 26 JanApple fixes Mac bug that could have allowed takeover of webcams and browser tabs
13. 25 JanWindows Update has changed over the years. Here are 25 group policies to avoid
14. 25 JanSenate Committee passes new antitrust bill aimed at Big Tech companies
15. 25 JanNew DazzleSpy malware attacks macOS
16. 25 JanMicrosoft warns of phishy OAuth apps
17. 25 JanGoogle sued over deceptive location tracking
18. 25 JanCyberinsurance companies don’t want to pay out for “acts of war”
19. 24 JanWarning issued over tampered QR codes
20. 24 JanMicrosoft is now disabling Excel 4.0 macros by default
21. 24 JanDiscord scammers go CryptoBatz phishing
22. 24 JanDark Souls servers taken offline over hacking fears
23. 24 JanA week in security (January 17 – 23)
24. 23 JanSegway store compromised with Magecart skimmer
25. 22 JanData Privacy Day: Know your rights, and the right tools to stay private
26. 20 JanCISA calls for urgent action against critical threats
27. 19 JanUpdate now! Chrome patches critical RCE vulnerability in Safe Browsing
28. 19 JanSteer clear of gift card balance scams
29. 19 JanRed Cross begs attackers to “Do the right thing” after family reunion service compromised
30. 19 JanOpen Subtitles breach: The dangers of password reuse
31. 19 JanCombatting SMS and phone fraud: UK government issues guidance
32. 18 JanMac users, update now! “Powerdir” flaw could allow attackers to spy on you
33. 18 JanCybercriminals’ friend VPNLab.net shut down by law enforcement
34. 18 JanCampaign launched to delay social media end-to-end encryption
35. 18 JanBrowsers on iOS, iPadOS and Mac leak your browsing activity and personal identifiers
36. 17 JanWhy we don’t patch, with Jess Dodson: Lock and Code S03E02
37. 17 JanNintendo warns of imitation websites and suspicious hardware
38. 17 JanInfamous dark net carding site UniCC to close
39. 16 JanREvil ransomware gang busted by Russian Federal Security Service
40. 16 JanA week in security (January 10 – 16)
41. 12 JanSome Android users can disable 2G now and why that is a good thing
42. 12 JanRansomware cyberattack forces New Mexico jail to lock down
43. 12 JanPhishers on the prowl with fake parking meter QR codes
44. 11 JanSoftware engineer hacked webcams to spy on girls—Here’s how to protect yourself
45. 11 JanIntimate photo hacker spared from jail, said he “liked the detective work”
46. 11 JanFIFA 22 phishers tackle customer support with social engineering
47. 10 JanThe Facebook Pixel Hunt aims to unravel Facebook’s tracking methods. Will you join?
48. 10 JanNight Sky: the new corporate ransomware demanding a sky high ransom
49. 10 JanHow to share your Wi-Fi password safely
50. 10 JanAttackers are mailing USB sticks to drop ransomware on victims’ computers
51. 9 JanA week in security (January 3 – 9)
52. 6 JanSophisticated phishing scheme spent years robbing authors of their unpublished work
53. 6 JanRansomware attacks Finalsite, renders 8,000 school sites unreachable for days
54. 6 JanGoogle and Facebook fined $240 million for making cookies hard to refuse
55. 5 JanNew iPhone malware spies via camera when device appears off
56. 5 JanIntercepting 2FA: Over 1200 man-in-the-middle phishing toolkits detected
57. 5 JanHackers take over 1.1 million accounts by trying reused passwords
58. 5 JanCard skimmers strike Sotheby’s in Brightcove supply chain attack
59. 4 JanCareful! Uber flaw allows anyone to send an email from uber.com
60. 4 Jan$10m of funds goes missing in what appears to be a cryptocurrency rug-pull
61. 3 JanPurple Fox rootkit now bundled with Telegram installer
62. 3 JanCustomer support scammers take aim at NFT enthusiasts
63. 2 JanWhat angered us most about cybersecurity in 2021: Lock and Code S03E01

2021 511

December 2021

1. 28 DecThe three most significant cyberattacks of 2021
2. 26 DecA week in security (Dec 20 – 26)
3. 22 DecLogistics giant warns of scams following ransomware attack
4. 22 DecFBI traces and grabs back $150 million theft that was turned into bitcoins
5. 22 DecDridex affiliate dresses up as Scrooge
6. 20 DecPolice forces pipe 225 million pwned passwords into ‘Have I Been Pwned?’
7. 19 DecWhen a deepfake “empire” continues to grow
8. 19 DecEverything you always wanted to know about NFTs (but were too afraid to ask): Lock and Code S02E24
9. 19 DecA week in security (Dec 13 – 19)
10. 15 DecGrindr fined for selling user data to advertisers
11. 14 DecWhat SMBs can do to protect against Log4Shell attacks
12. 13 DecKronos crippled by ransomware, service may be out for weeks
13. 13 Dec5 security lessons from 18 months of working from home
14. 12 DecSpear phish, whale phish, regular phish: What’s the difference?
15. 12 DecA week in security (Dec 6 – 12)
16. 9 Dec[Update: CISA issues Log4j vulnerabilities scanner] Log4j zero-day “Log4Shell” arrives just in time to ruin your weekend
17. 9 DecClick “OK” to defeat MFA
18. 8 DecWhat is a search engine and why does anyone care which one you use?
19. 8 DecHas your WordPress site been backdoored by a skimmer?
20. 8 DecFake job interviews plague major game developers like Riot Games and Rockstar
21. 7 DecWas threat actor KAX17 de-anonymizing the Tor network?
22. 7 DecVulnerability in Windows 10 URI handler leads to remote code execution
23. 6 DecMicrosoft disrupts China-based hacking group Nickel
24. 6 DecIs your web browser vulnerable to data theft? XS-Leak explained
25. 6 DecHow to check for Windows updates and install them
26. 5 DecWhy Macs are the best, according to Mac expert Thomas Reed: Lock and Code S02E23
27. 5 DecNSO Group spyware found on iPhones of US State Department employees
28. 5 DecA week in security (Nov 29 – Dec 5)
29. 2 DecEmotet’s back and it isn’t wasting any time
30. 2 DecAttacker unmasked by VPN flubs charged with Ubiquiti hack
31. 1 DecEmotet being spread via malicious Windows App Installer packages

November 2021

1. 30 NovMost people aren’t upgrading to Windows 11: Not the end of the world
2. 30 NovHere’s what data the FBI can get from WhatsApp, iMessage, Signal, Telegram, and more
3. 30 NovHave you downloaded that Android malware from the Play Store lately?
4. 30 NovCapcom Arcade Stadium’s record player numbers blamed on card mining
5. 29 NovMassive faceprint scraping company Clearview AI hauled over the coals
6. 28 NovHackers all over the world are targeting Tasmania’s emergency services
7. 28 NovCronRAT targets Linux servers with e-commerce attacks
8. 28 NovA week in security (Nov 22 – Nov 28)
9. 25 NovICO challenges adtech to step up privacy protection
10. 24 NovNew law will issue bans, fines for using default passwords on smart devices
11. 24 NovImproving security for mobile devices: CISA issues guides
12. 24 NovGoogle’s Threat Horizons report: Will the straightforward approach get results?
13. 24 NovBeware card skimmers this Black Friday
14. 23 NovWindows Installer vulnerability becomes actively exploited zero-day
15. 23 NovWhat is facial recognition?
16. 23 NovPassword usage analysis of brute force attacks on honeypot servers
17. 23 Nov“Free Steam games” videos promise much, deliver malware
18. 22 NovWindows 10 chills out, gives sysadmins a break
19. 22 NovPlease don’t buy this! 3 gift card scams to watch out for this holiday season
20. 22 NovMillions of GoDaddy customer data compromised in breach
21. 21 NovThe Internet is not safe enough for women, and Sue Krautbauer has some ideas about why: Lock and Code S02E22
22. 21 NovHow to defend your website against card skimmers
23. 21 NovA week in security (Nov 15 – Nov 21)
24. 18 NovMalwarebytes CrackMe – contest summary
25. 17 NovUpdate now! Netgear vulnerability patched
26. 17 NovPhishers target TikTok influencers with verification promises and copyright threats
27. 17 NovPatch now! FatPipe VPN zero-day actively exploited
28. 16 NovFake ransomware warnings hit WordPress sites: How to stay safe
29. 16 NovBogus JS libraries become sustained ransomware threat for Roblox gamers
30. 15 NovWhen renting a hitman online goes horribly wrong
31. 15 NovSoNot SoSafe: Android malware disguises itself as secure messaging app
32. 15 NovSharkBot Android banking Trojan cleans users out
33. 15 NovNew Mac malware raises more questions about Apple’s security patching
34. 14 NovInstagram’s memorialize feature abused to memorialize…Instagram’s boss
35. 14 NovFBI server hijacked to send up to 100,000 bogus attack mails
36. 14 NovEvasive maneuvers: HTML smuggling explained
37. 14 NovA week in security (Nov 8 – Nov 14)
38. 11 NovThe importance of backing up
39. 11 NovCould Apple’s new MacBooks signal a change in direction on security?
40. 10 NovMurder-for-hire, money laundering, and more: How organised criminals work online
41. 9 NovPlaystation 5 hacked—twice!
42. 9 NovAre cybercriminals turning away from the US and targeting Europe instead?
43. 8 NovSmart TV adverts put a wrinkle in your programming
44. 8 NovHow to remove adware on an Android phone
45. 7 NovWhy we fail at getting the cybersecurity basics right, with Jess Dodson: Lock and Code S02E21
46. 7 NovMultiple video games break after domain name snafu
47. 7 NovA week in security (Nov 1 – Nov 7)
48. 2 NovUpdate now! Mozilla fixes security vulnerabilities in Firefox 94
49. 2 NovTrojan Source: Hiding malicious code in plain sight
50. 2 NovCredit card skimmer evades Virtual Machines
51. 1 NovZuckerberg’s Metaverse, and the possible privacy and security concerns
52. 1 NovWhat is Twitch?
53. 1 NovThis Steam phish baits you with free Discord Nitro
54. 1 NovIs Apple’s Safari browser the last, best hope for web privacy?
55. 1 NovGoogle patches zero-day vulnerability, and others, in Android

October 2021

1. 31 OctLessons from a real-life ransomware attack
2. 31 OctCelebrity jewelry house Graff falls victim to ransomware
3. 31 OctA week in security (Oct 25 – Oct 31)
4. 28 OctUpdate your OptinMonster WordPress plugin immediately
5. 28 OctThe return of the Malwarebytes CrackMe
6. 28 OctShrootless: Microsoft finds Apple macOS vulnerability
7. 27 OctWhat is fileless malware?
8. 27 OctThreat profile: Ranzy Locker ransomware
9. 26 OctWatch out for the Steam skin “free knife” scam
10. 26 OctUpdate now! Apple patches bugs in iOS and iPadOS
11. 25 OctPatch now to bypass Firefox add-ons that abuse the proxy API to deny updates
12. 25 OctHow social media mistakes can impact cybersecurity
13. 24 OctBeyond the VPN: Ultimate online privacy, with The Tor Project’s Isabela Bagueros: Lock and Code S02E20
14. 24 OctA week in security (Oct 18 – Oct 24)
15. 21 OctWe dig into the Game Players Code
16. 21 OctRansomware: Why do backups fail when you need them most?
17. 21 OctA bug is about to confuse a lot of computers by turning back time 20 years
18. 20 OctUpdate now! Chrome fixes more security issues
19. 20 OctChrome targeted by Magnitude exploit kit
20. 19 OctHow to delete your Snapchat account
21. 19 OctHigh school student rickrolls entire school district, and gets praised
22. 18 Octq-logger skimmer keeps Magecart attacks going
23. 17 OctMultiple vulnerabilities in popular WordPress plugin WP Fastest Cache
24. 17 OctA week in security (Oct 11 – Oct 17)
25. 17 Oct“Killware”: Is it just as bad as it sounds?
26. 14 OctWhat is an .exe file? Is it the same as an executable?
27. 13 OctInside Apple: How Apple’s attitude impacts security
28. 13 OctAdblocker promises to blocks ads, injects them instead
29. 12 Oct“Free Steam game” scams on TikTok are Among Us
30. 11 OctUpdate now! Apple patches another privilege escalation bug in iOS and iPadOS
31. 11 OctThe joy of phishing your employees
32. 11 OctRansom Disclosure Act would mandate ransomware payment reporting
33. 11 OctInside Apple: How macOS attacks are evolving
34. 11 OctExpressVPN made a choice, and so did I: Lock and Code S02E19
35. 10 OctGoogle warns some users that FancyBear’s been prowling around
36. 10 OctA week in security (Oct 4 – Oct 10)
37. 7 OctMaking better cybersecurity training: Q&A with Malwarebytes expert Kelsey Prichard
38. 7 OctGnuPG fixes a problem with Let’s Encrypt certificate chain validation
39. 7 OctFirefox reveals sponsored ad “suggestions” in search and address bar
40. 7 OctDiscord scammers lure victims with promise of free Nitro subscriptions
41. 7 OctAt long last, Microsoft is disabling Excel 4.0 macros by default
42. 6 OctUS Navy ship Facebook page hijacked to stream video games
43. 6 OctStop. Do you really need another security tool?
44. 6 OctGoogle to auto-enrol users, YouTubers into 2SV
45. 5 OctWhat special needs kids need to stay safe online
46. 5 Oct[Updated, again] Apache fixes zero-day vulnerability in HTTP Server
47. 5 OctTwitch compromised: What we know so far, and what you need to do
48. 4 OctFacebook shoots own foot, hits Instagram and WhatsApp too
49. 4 OctCriminals were inside Syniverse for 5 years before anyone noticed
50. 3 OctPolice take a piece out of a ransomware gang, but won’t say which one
51. 3 OctNeiman Marcus data breach affects millions
52. 3 OctDoes Cybersecurity Awareness Month actually improve security?
53. 3 OctA week in security (Sept 27 – Oct 3)

September 2021

1. 30 SepThe FCC moves to curb SIM swap attacks
2. 30 SepApple Pay vulnerable to wireless pickpockets
3. 29 SepTelegram-powered bots circumvent 2FA
4. 29 SepAndroid Trojan GriftHorse, the gift horse you definitely should look in the mouth
5. 28 SepVaccine passport app leaks users’ personal data
6. 28 SepInstagram Kids put on hold
7. 27 SepPhone screenshots accidentally leaked online by stalkerware-type company
8. 27 SepFoggyWeb, analysis of a Nobelium backdoor
9. 26 SepTeaching cybersecurity skills to special needs children with Alana Robinson: Lock and Code S02E18
10. 26 SepMalwarebytes research shows an unequal, unsafe Internet
11. 26 SepA week in security (Sept 20 – Sept 26)
12. 23 SepUber security alert scam spoofs real Uber number—Watch out!
13. 23 SepSonicWall warns users to patch critical vulnerability “as soon as possible”
14. 23 SepParents and teachers believe digital surveillance of kids outweighs risks
15. 22 SepItalian mafia cybercrime sting leads to 100+ arrests
16. 22 SepHow to clear your cache
17. 21 SepPatch vCenter Server “right now”, VMWare expects CVE-2021-22005 exploitation within minutes of disclosure
18. 21 SepPatch now! Insecure Hikvision security cameras can be taken over remotely
19. 21 SepNo, Colonel Gaddafi’s daughter isn’t emailing to give you untold riches
20. 21 SepMSHTML attack targets Russian state rocket centre and interior ministry
21. 21 SepGoogle, geofence warrants, and you
22. 20 SepNew Mac malware masquerades as iTerm2, Remote Desktop and other apps
23. 20 SepInternet safety tips for kids and teens: A comprehensive guide for the modern parent
24. 19 SepMicrosoft makes a bold move towards a password-less future
25. 19 SepFreedom Hosting operator gets 27 years for hosting Dark Web child abuse sites
26. 19 SepA week in security (Sept 13 – Sept 19)
27. 16 SepWhat is the Dark Web? The Dark Web explained
28. 16 SepFacebook’s own research reveals the harm that Instagram can inflict
29. 15 SepWhat are computer cookies?
30. 15 SepRansomware scammers target artists with fake Krita revenue deals
31. 15 SepHP OMEN users, update your driver now!
32. 14 SepWhat are SSL certificates?
33. 13 SepUpdate now! Google Chrome fixes two in-the-wild zero-days
34. 13 SepParts of the Dark Web “awash” with school children’s personal data
35. 13 SepApple releases emergency update: Patch, but don’t panic
36. 12 SepWhy backups aren’t a “silver bullet” against ransomware, with Matt Crape: Lock and Code S02E17
37. 12 SepThe many tentacles of Magecart Group 8
38. 12 SepA week in security (Sept 6 – Sept 12)
39. 9 SepThat’s the way the cookie banner crumbles?
40. 9 SepGamers beware: The risks of Real Money Trading (RMT) explained
41. 9 SepFacebook puts on Ray-Bans, struts into the privacy minefield of smart glasses
42. 8 Sep500,000 Fortinet VPN credentials exposed: Turn off, patch, reset passwords
43. 7 SepSextortion on the rise, warns FBI
44. 6 SepTor vs VPN—What is the difference?
45. 6 SepProtonMail hands user’s IP address and device info to police, showing the limits of private email
46. 6 SepPatch now! Netgear fixes serious smart switch vulnerabilities
47. 6 SepApple delays plans to search devices for child abuse imagery
48. 5 SepA week in security (August 30 – September 5)
49. 2 SepWatch what you send on anonymous SMS websites
50. 2 SepFBI warns of ransomware threat to food and agriculture
51. 1 SepWhatsApp hit with €225 million fine for GDPR violations
52. 1 SepVulnerable WordPress plugin leaves online shoppers vulnerable
53. 1 SepBrakTooth Bluetooth vulnerabilities, crash all the devices!

August 2021

1. 31 AugMacs turn on apps signed by Symantec, treat them as malware
2. 31 AugGoogle Play sign-ins can be abused to track another person’s movements
3. 31 AugFTC bans SpyFone and its CEO from continuing to sell stalkerware
4. 29 AugHackers, tractors, and a few delayed actors. How hacker Sick Codes learned too much about John Deere: Lock and Code S02E16
5. 29 AugA week in security (August 23 – August 29)
6. 26 AugMicrosoft warns about phishing campaign using open redirects
7. 26 AugHow to stay secure from ransomware attacks during holidays and special events
8. 25 AugUS government and private sector agree to invest time, money in cybersecurity
9. 25 AugLatest iPhone exploit, FORCEDENTRY, used to launch Pegasus attack against Bahraini activists
10. 25 AugCold wallet, hot wallet, or empty wallet? What is the safest way to store cryptocurrency?
11. 24 AugThe best browsers for privacy and security
12. 24 AugMice “taking over the world!”, one Windows machine at a time
13. 23 AugRealtek-based routers, smart devices are being gobbled up by a voracious botnet
14. 23 AugCriminals exploited weak checks and old tech to pull off vast COVID benefit fraud
15. 22 AugA week in security (August 16 – August 22)
16. 19 AugLargest DDoS attack ever reported gets hoovered up by Cloudflare
17. 18 AugT-Mobile customers, change your PINs
18. 18 AugCisco Small Business routers vulnerable to remote attacks, won’t get a patch
19. 18 AugBeware of COVID Pass scams
20. 17 AugmacOS 11’s hidden security improvements
21. 17 AugCars and hospital equipment running Blackberry QNX may be affected by BadAlloc vulnerability
22. 16 AugAnalysts “strongly believe” the Russian state colludes with ransomware gangs
23. 15 AugKatie Moussouris hacked Clubhouse. Her emails went unanswered for weeks: Lock and Code S02E15
24. 15 AugHow to troubleshoot hardware problems that look like malware problems
25. 15 AugA week in security (August 9 – August 15)
26. 12 AugVPN Test: How to check if your VPN is working or not
27. 12 AugPhishing campaign goes old school, dusts off Morse code
28. 12 AugCyberbullying 101: A Primer for kids, teens, and parents
29. 12 AugCrypto-scams you should be steering clear of in 2021
30. 10 AugTwitter says it out loud: Removing anonymity will not stop online abuse
31. 10 AugThief pulls off colossal, $600m crypto-robbery …and gives the money back
32. 10 AugIf a QR code leads you to a Bitcoin ATM at a gas station, it’s a scam
33. 9 AugCheck your passwords! Synology NAS devices under attack from StealthWorker
34. 8 AugHome routers are being hijacked using vulnerability disclosed just 2 days ago
35. 8 AugA week in security (August 2 – August 8)
36. 5 AugEdge’s Super Duper Secure Mode benchmarked: How much speed would you trade for security?
37. 5 AugApple’s search for child abuse imagery raises serious privacy questions
38. 4 AugWhat is Tor?
39. 4 AugAmazon will pay you $10 for your palm prints. Should you be worried?
40. 3 AugNSA issues advice for securing wireless devices
41. 3 AugCOVID-19 vaccine appointment system attacked in Italy
42. 3 AugChrome casts away the padlock—is it good riddance or farewell?
43. 2 AugZoom and gloom? Video comms org agrees to settle for $85m
44. 2 AugThe 3 biggest threats reaching for your antivirus software’s off switch
45. 1 AugDisaster planning with Lesley Carhart, and the slim chance of a critical infrastructure “big one”: Lock and Code S02E14
46. 1 AugA week in security (July 26 – August 1)

July 2021

1. 29 JulSpear-phishing now targets employees outside the finance and executive teams, report says
2. 29 JulLemonDuck no longer settles for breadcrumbs
3. 28 JulMicrosoft provides more mitigation instructions for the PetitPotam attack
4. 27 JulUDP Technology IP Camera firmware vulnerabilities allow for attacker to achieve root
5. 27 JulThe Olympics: a timeline of scams, hacks, and malware
6. 26 JulThe Clubhouse database “breach” is likely a non-breach. Here’s why.
7. 26 JulKaseya Unitrends has unpatched vulnerabilities that could help attackers expand a breach
8. 25 JulOSX.XLoader hides little except its main purpose: What we learned in the installation process
9. 25 JulA week in security (July 19 – July 25)
10. 22 JulCNA legal filings lift the curtain on a Phoenix CryptoLocker ransomware attack
11. 22 JulBusted! Fraud-as-a-Service gang that sold 2FA-proof phishing arrested
12. 21 JulPegasus spyware has been here for years. We must stop ignoring it
13. 21 JulMillions of Windows machines affected by ancient printer vulnerability
14. 21 Jul5 years for swatter who caused a man’s death for a Twitter handle
15. 20 JulID theft ghouls targeting Surfside victims is appalling, but no surprise
16. 20 JulHiveNightmare zero-day lets anyone be SYSTEM on Windows 10 and 11
17. 18 Jul“Seven or eight” zero-days: The failed race to fix Kaseya VSA, with Victor Gevers, Lock and Code S02E13
18. 18 JulBeware, crypto-scammer seeks foreigner with BLOCK CHAIN ACCOUNT
19. 18 JulA week in security (July 12 – July 18)
20. 15 JulWhat is scareware?
21. 15 JulUS offers huge reward in fight against state-sponsored cybercriminals
22. 15 JulDoes using a VPN slow down your Internet?
23. 14 JulSonicWall warns users of “imminent ransomware campaign”
24. 13 JulIs crypto’s criminal rollercoaster approaching a terminal dip?
25. 11 JulNope, that isn’t Elon Musk, and he isn’t offering a free Topmist Dust watch either
26. 11 JulDNS-over-HTTPS takes another small step towards global domination
27. 11 JulA week in security (July 5 – July 11)
28. 8 JulJudge drops hammer, dishes 7 years slammer for BEC and romance scammer
29. 8 JulHow to send an anonymous email
30. 8 JulHow one word can disable an iPhone’s WiFi functionality
31. 7 JulMalspam banks on Kaseya ransomware attack
32. 7 JulKaseya update delayed for security reasons
33. 6 JulGame over: Apex Legends players locked out by protest message
34. 6 Jul3 things the Kaseya attack can teach us about ransomware recovery
35. 5 JulRacing against a real-life ransomware attack, with Ski Kacoroski: Lock and Code S02E12
36. 5 JulKaseya CEO: “The impact of this incredibly sophisticated attack is very minimal”
37. 4 JulA week in security (June 28 – July 4)
38. 1 JulBeware password-spraying fancy bears

June 2021

1. 30 JunSMS authentication code includes ad: a very bad idea
2. 30 JunPrintNightmare 0-day can be used to take over Windows domain controllers
3. 30 JunMicrosoft exec reveals “routine” secrecy orders from government investigators
4. 29 JunSecond colossal LinkedIn “breach” in 3 months, almost all users affected
5. 29 JunPolice seize DoubleVPN data, servers, and domain
6. 29 JunBabuk ransomware builder leaked following muddled “retirement”
7. 28 JunFired by algorithm: The future’s here and it’s a robot wearing a white collar
8. 27 JunWhat is the WireGuard VPN protocol?
9. 27 JunLil’ skimmer, the Magecart impersonator
10. 27 JunIs it game over for VR advergaming?
11. 27 JunBinance receives the ban hammer from UK’s FCA
12. 27 JunA week in security (June 21 – June 27)
13. 23 JunComplicated Active Directory setups are undermining security
14. 23 JunBrave takes aim at Google with privacy-first search engine
15. 22 JunMITRE introduces D3FEND framework
16. 22 JunCity of Liège hit by ransomware, Ryuk suspected
17. 21 JunHotel staff bust Hermes SMS scammer with suspiciously large number of cables
18. 20 JunWant to stop ransomware attacks? Send the cybercriminals to jail, says Brian Honan: Lock and Code S02E11
19. 20 JunAtomic research institute breached via VPN vulnerability
20. 20 JunA week in security (June 14 – June 20)
21. 17 JunTwo Google plans that could make open source code more secure
22. 16 JunThe 6 best Chrome extensions for privacy and security
23. 16 JunPolazert Trojan using poisoned Google Search results to spread
24. 15 JunTwitter takes aim at the chaos, clutter and trolls with new feature concepts
25. 15 JunJail for consultant who scraped colossal trove of Alibaba customer data
26. 15 JunClop stopped? Ransomware gang loses Tesla and other treasures in police raid
27. 14 JunWindows 10 to retire in four years (or 52 Patch Tuesdays, in sysadmin years)
28. 14 JunPatch now! Apple fixes in-the-wild iPhone vulnerabilities
29. 13 JunWorking from home? You’re probably being spied on
30. 13 JunHow to delete your Instagram account
31. 13 JunA week in security (June 7 – June 13)
32. 10 JunHow to deactivate or delete your Facebook account
33. 10 JunCloud vs on premises: 3 reasons the Cloud is winning
34. 9 JunRussia accused of hacking Dutch police during MH17 investigation
35. 9 JunHow a Resident Evil image leaked in a ransomware attack ended up in the middle of $12m copyright claim
36. 8 JunHow to clear cookies
37. 7 JunTrickBot indictment reveals the scale and complexity of organized cybercrime
38. 7 Jun800 arrests after police dupe crime groups into using backdoored phones
39. 6 JunWhite hat, black hat, grey hat hackers: What’s the difference?
40. 6 JunCan two VPN “wrongs” make a right? Lock and Code S02E10
41. 6 JunAmazon Sidewalk starts sharing your WiFi tomorrow, thanks
42. 6 JunA week in security (May 31 – June 6)
43. 3 JunSecurity pros agree about threats—convincing everyone else is the problem
44. 3 JunRansomware to be investigated like terrorism
45. 2 JunSteamship Authority answers question: Who’s the next ransomware victim?
46. 2 JunCybercrime, fraud, and insider threats increased in 2020 in the UK, report says
47. 2 JunCoronavirus phishing: “Welcome back to the office…”
48. 1 JunJBS says it is recovering quickly from a ransomware attack

May 2021

1. 31 MayWhatsApp reverses course, will not limit app functionality
2. 31 MayCobalt Strike, a penetration testing tool abused by criminals
3. 30 MayThe slow trend away from facial recognition technology
4. 30 MayA week in security (May 24 -30)
5. 27 MaySolarWinds attackers launch new campaign
6. 26 MayRMM software: What is it and do you need it?
7. 26 MayHealthcare service faces test of willpower with Ransomware authors
8. 26 MayFalsifying and weaponizing certified PDFs
9. 25 MayWhat is encryption? And why it matters in a VPN
10. 25 MayHow to delete your Twitter account: the deactivation process
11. 24 MayWhat is Incognito mode? Our private browsing 101
12. 24 MayInsider threats: If it can happen to the FBI, it can happen to you
13. 23 MayVPN Android apps: What you should know
14. 23 MayShining a light on dark patterns with Carey Parker: Lock and Code S02E09
15. 23 MayA week in security (May 17 – May 23)
16. 19 MayApple confirms Macs get malware
17. 19 MayAndroid patches for 4 in-the-wild bugs are out, but when will you get them?
18. 19 MayA doctor reveals the human cost of the HSE ransomware attack
19. 18 MayRoyal Mail phish deploys evasion tricks to avoid analysis
20. 18 MayPega Infinity patches authentication vulnerability
21. 18 May“Have I been pwnd?”– What is it and what to do when you *are* pwned
22. 17 MayBizarro: a banking Trojan full of nasty tricks
23. 17 May4 things you should know about testing AV software with VirusTotal’s free online multiscanner
24. 16 MayA week in security (May 10 – 16)
25. 13 MayWhatsApp calls and messages will break unless you share data with Facebook
26. 13 MayWhat is a honeypot? How they are used in cybersecurity
27. 13 MayiPhone calendar spam attacks on the rise
28. 13 MayGamers level up with rewards for better security
29. 12 MayWhy MITRE ATT&CK matters—Choosing alert quality over quantity
30. 12 MayWhat does WiFi stand for?
31. 12 MayUsing iPhones and AirTags to sneak data out of air-gapped networks
32. 12 MayNewly observed PHP-based skimmer shows ongoing Magecart Group 12 activity
33. 11 MayFragAttack: New Wi-Fi vulnerabilities that affect… basically everything
34. 10 MayAvaddon ransomware campaign prompts warnings from FBI, ACSC
35. 9 MayAlleviating ransomware’s legal headaches with Jake Bernstein: Lock and Code S02E08
36. 9 MayA week in security (May 3 – 9)
37. 6 MayVPN protocols explained and compared
38. 6 MayMillions put at risk by old, out of date routers
39. 6 MayGoogle to start automatically enrolling users in two-step verification “soon”
40. 5 MayFacebook bans Signal ads that reveal the depth of what it knows about you
41. 3 MaySpectre attacks come back from the dead
42. 2 MayA week in security (April 26 – May 2)

April 2021

1. 29 AprWhat is an IP address? Do I need one?
2. 29 AprSignal app insists it’s so private it can’t provide subpoenaed call data
3. 29 AprIoT riddled with BadAlloc vulnerabilities
4. 28 AprWhat is Smishing? The 101 guide
5. 28 AprCity fined for tracking its citizens via their phones
6. 27 AprWatch out! Android Flubot spyware is spreading fast
7. 27 AprRansomware group threatens to leak information about police informants
8. 27 AprBitcoin scammers phish for wallet recovery codes on Twitter
9. 26 AprPassword manager hijacked to deliver malware in supply chain attack
10. 25 AprZoom deepfaker fools politicians…twice
11. 25 AprBreaking free from the VirusTotal silo: Lock and Code S02E07
12. 25 AprA week in security (April 19 – 25)
13. 25 Apr11-13 year old girls most likely to be targeted by online predators
14. 22 AprHow to choose the best VPN for you
15. 22 AprArtificial Intelligence ban slammed for failing to address “vast abuse potential”
16. 20 AprTake action! Multiple Pulse Secure VPN vulnerabilities exploited in the wild
17. 20 AprFBI face recognition trawl finds Capitol rioter via his girlfriend’s Instagram
18. 19 AprInterview with a bug bounty hunter: Youssef Sammouda
19. 19 AprFIN7 sysadmin behind “billions in damage” gets 10 years
20. 19 AprCodeCov supply-chain compromise likened to SolarWinds attack
21. 18 AprA week in security (April 12 – 18)
22. 15 AprShady scam bots trick Omegle users into nonconsensual video sex recordings
23. 15 AprDeepfakes were going to change everything. And then they didn’t
24. 14 AprMalwarebytes releases SMB Cybersecurity Trust & Confidence Report 2021
25. 14 Apr“Huge upsurge” in DDoS attacks during pandemic
26. 14 AprChrome users, here’s how to opt out of the Google FLoC trial
27. 13 AprUpdate now! Chrome needs patching against two in-the-wild exploits
28. 12 AprSorry, Joe Biden isn’t offering you a work visa, it’s a scam
29. 12 AprNAME:WRECK, a potential IoT trainwreck
30. 11 AprHow bitcoin payments unmasked a man who hired a Dark Web contract killer
31. 11 AprBeating security fatigue with Troy Hunt, Chloé Messdaghi, and Tanya Janca: Lock and Code S02E06
32. 8 AprMillions of Chrome users quietly added to Google’s FLoC pilot
33. 8 AprCryptomining containers caught coining cryptocurrency covertly
34. 7 AprZoom zero-day discovery makes calls safer, hackers $200,000 richer
35. 6 AprSAP warns of malicious activity targeting unpatched systems
36. 6 AprFake Trezor app steals more than $1 million worth of crypto coins
37. 5 AprResearch claims Google Pixel phones share 20 times more data than iPhones
38. 5 AprPre-installed auto installer threat found on Android mobile devices in Germany
39. 5 AprHas Facebook leaked your phone number?
40. 4 AprA week in security (March 29 – April 4)

March 2021

1. 31 MarRelax. Internet password books are OK
2. 31 MarAndroid “System Update” malware steals photos, videos, GPS location
3. 30 MarThe npm netmask vulnerability explained so you can actually understand it
4. 29 MarPYSA, the ransomware attacking schools
5. 29 MarMalicious commits found in PHP code repository: What you need to know
6. 28 MarWhy you need to trust your VPN: Lock and Code S02E05
7. 28 MarThe one reason your iPhone needs a VPN
8. 28 MarSteam users: Don’t fall for the “I accidentally reported you” scam
9. 28 Mar5G slicing vulnerability could be used in DoS attacks
10. 25 MarDon’t post it! Six social media safety sins to say goodbye to
11. 24 MarSlack hurries to fix direct message flaw that allowed harassment
12. 24 MarPerkiler malware turns to SMB brute force to spread
13. 23 MarSoftware renewal scammers unmasked
14. 22 MarWhen contractors attack: two years in jail for vengeful IT admin
15. 22 MarThe human impact of a Royal Mail phishing scam
16. 21 MarSafe Connections Act could help domestic abuse survivors take control of their digital lives
17. 21 MarReport goes “behind enemy lines” to reveal SilverFish cyber-espionage group
18. 21 MarHow to enable Facebook’s hardware key authentication for iOS and Android
19. 21 MarA week in security (March 15 – 21)
20. 19 MarResident Evil 8 just the latest game plagued by fake demos and early access scams
21. 18 MarReport reveals the staggering scale of Business Email Compromise losses
22. 17 MarNFTs explained: daylight robbery on the blockchain
23. 17 MarMother charged with using deepfakes to shame daughter’s cheerleading rivals
24. 17 MarHelloKitty: When Cyberpunk met cy-purr-crime
25. 16 MarTeen behind 2020 Twitter hack pleads guilty
26. 16 MarFBI warns of increase in PYSA ransomware attacks targeting education
27. 16 MarApple shines and buffs Mac security—Is it enough to stop today’s malware?
28. 15 MarProxyLogon PoCs trigger a game of whack-a-mole
29. 15 MarCareers in cybersecurity: Malwarebytes talks to teachers and students
30. 14 MarThe Malwarebytes 2021 State of Malware report: Lock and Code S02E04
31. 14 MarRoyal Mail scam says your parcel is waiting for delivery
32. 14 MarHow your iPhone could tell you if you’re being stalked
33. 10 MarPolice credit “unlocked” SKY ECC encryption for organized crime bust
34. 10 Mar5 common VPN myths busted
35. 9 MarREvil ransomware’s calling, and it’s not good news
36. 9 MarOVH cloud datacenter destroyed by fire
37. 9 MariPhone app exposed other people’s call recordings
38. 8 MarTinyCheck: Stalkerware detection that doesn’t leave a trace
39. 7 MarInternational Women’s Day: Women in tech name their heroes
40. 7 MarA week in security (March 1 – 7)
41. 5 MarWill Google’s Privacy Sandbox take the bite out of tracking cookies?
42. 4 MarChina’s RedEcho accused of targeting India’s power grids
43. 3 MarUpdate now! Chrome fix patches in-the-wild zero-day
44. 2 Mar21 million free VPN users’ data exposed
45. 1 MarRyuk ransomware develops worm-like capability

February 2021

1. 28 FebDefending online anonymity and speech with Eva Galperin: Lock and Code S02E03
2. 26 FebTo pay, or not to pay? That is the VPN question
3. 25 FebTikTok pays $92 million to end data theft lawsuit
4. 24 FebScammers, profiteers, and shady sites? It must be tax season
5. 22 FebThe mystery of the Silver Sparrow Mac malware
6. 22 FebClop targets execs, ransomware tactics get another new twist
7. 21 FebA week in security (February 15 – February 21)
8. 19 FebOmegle investigation raises new concerns for kids’ safety
9. 18 FebNorth Korean hackers charged with $1.3 billion of cyberheists
10. 18 FebCybersecurity in Cyberpunk 2077: the good, the bad, and the cringeworthy
11. 17 FebRomance scams: FTC reveals $304 million of heartache
12. 16 FebYandex sysadmin caught selling access to email accounts
13. 16 FebClubhouse under scrutiny for sending data to Chinese servers
14. 15 FebRDP, the ransomware problem that won’t go away
15. 15 FebExtortion, precision malware, and ruthless scams. Read the State of Malware 2021 report
16. 15 FebEgregor ransomware hit by arrests
17. 14 FebTalking Emotet’s takedown with Adam Kujawa: Lock and Code S02E02
18. 14 FebGang arrested for SIM-swapping celebrities, stealing $100 million
19. 11 FebWho is to blame for the malicious Barcode Scanner that got on the Google Play store?
20. 11 FebNude photo theft offers lessons in selfie security
21. 11 FebMalvertising campaign on PornHub and other top adult brands exposes users to tech support scams
22. 10 FebResearcher’s audacious hack demonstrates new type of supply-chain attack
23. 9 FebWhat Google learned from 1 billion evil email scams
24. 8 FebHackers try to poison Florida City’s drinking water
25. 8 FebCyberpunk 2077 developer hit by ransomware
26. 8 FebAndroid devices caught in Matryosh botnet
27. 7 FebHow NOT to fail at PDF redaction
28. 7 FebA week in security (February 1 – February 7)
29. 4 FebUpdate now! Chrome patches zero-day that was exploited in the wild
30. 4 FebBarcode Scanner app on Google Play infects 10 million users with one update
31. 4 FebAndroid emulator abused to introduce malware onto PCs
32. 2 FebWould real identities make social media safer?
33. 2 FebBrowser sync—what are the risks of turning it on?
34. 1 FebCredit card skimmer piggybacks on Magento 1 hacking spree

January 2021

1. 31 JanFonix ransomware gives up life of crime, apologizes
2. 31 JanA week in security (January 25 – January 31)
3. 27 JanWhy Data Privacy Day matters: A Lock and Code special with Mozilla, DuckDuckGo, and EFF
4. 27 JanWhy Data Privacy Day matters
5. 27 Jan3 tips to top up your privacy
6. 27 Jan$12m Grindr fine shows GDPR’s got teeth
7. 26 JanPow! Emotet’s down. Is it out?
8. 26 JanGoogle FLoC puts ad trackers on a cookie-free diet
9. 24 JanA week in security (January 18 – January 24)
10. 21 JanChrome wants to make your passwords stronger
11. 21 JanAre TikTok’s new settings enough to keep kids safe?
12. 20 JanDNSpooq bugs haunt dnsmasq
13. 19 JanZoom watermarking: pros and cons
14. 18 JanThe story of ZeroLogon
15. 18 JanMalwarebytes targeted by Nation State Actor implicated in SolarWinds breach. Evidence suggests abuse of privileged access to Microsoft Office 365 and Azure environments
16. 17 JanWhat’s up with WhatsApp’s privacy policy?
17. 17 JanA week in security (January 11 – January 17)
18. 14 JanMSPs, have you picked the right PSA for you yet?
19. 14 JanHow a VPN can protect your online privacy
20. 11 JanUbiquiti breach, and other IoT security problems
21. 10 JanA week in security (January 4 – January 10)
22. 6 Jan“I have full control of your device”: Sextortion scam rears its ugly head in time for 2021
23. 6 JanFunke Media Group suffers nationwide ransomware attack in Germany
24. 5 JanAdobe Flash Player reaches end-of-life
25. 4 JanVPN usage is increasing, says December 2020 survey
26. 3 JanA week in security (December 28 – January 3)

2020 47

December 2020

1. 30 DecThe strangest cybersecurity events of 2020: a look back
2. 29 DecThe most enticing cyberattacks of 2020
3. 28 DecSearchDimension search hijackers: An overview of developments
4. 27 DecA week in security (December 21- December 27)
5. 23 DecVideoBytes: Offensive security tools and the bad guys that use them
6. 22 DecI played the free online games your kids are playing and here’s what happened
7. 21 DecBeware: not so festive social media scams
8. 20 DecA week in security (December 14 – December 20)
9. 17 DecThe many ways you can be scammed on Facebook, part II
10. 16 DecVideoBytes: Brute force attacks increase due to more open RDP ports
11. 16 DecSmart toy security: How to keep your kids safe this Christmas
12. 15 DecLikely lead generation scam targets potential Malwarebytes MSP partners
13. 14 DecThreat profile: Egregor ransomware is making a name for itself
14. 14 DecNCSC: Be Cyber Aware, especially during the Christmas season
15. 13 DecA week in security (December 7 – December 13)
16. 9 DecMalwarebytes detects leaked tools from FireEye breach
17. 9 DecBuying COVID-19 vaccines from the Dark Web? No thanks!
18. 8 DecVideoBytes: Ryuk Ransomware Targeting US Hospitals
19. 7 DecGet a head start on defending against tax scams
20. 6 DecLock and Code S1Ep21: Lesson planning your school’s cybersecurity with Doug Levin
21. 6 Dec50 percent of schools did not prepare for secure distance learning, Labs report reveals
22. 3 DecFile-sharing and cloud storage sites: How safe are they?
23. 2 DecVideoBytes: Is it goodbye forever to Maze ransomware?
24. 1 DecThe many ways you can be scammed on Facebook, part I

November 2020

1. 30 NovDeep learning: An explanation and a peek into the future
2. 29 NovNovember spam roundup: Stalkers, property tips, porn, stern words and PayPal
3. 29 NovBaltimore gets hit by ransomware again, the schools this time
4. 29 NovA week in security (November 23 – November 29)
5. 24 NovSpotify resets some user logins after hacker database found floating online
6. 24 NovIoT cybersecurity bill passed by Senate
7. 23 NovLooks like we’re stuck with Zoom: Is it any safer?
8. 23 NovApple security hampers detection of unwanted programs
9. 22 NovLock and Code S1Ep20: Tracking the charities that track you online with Chris Boyd
10. 19 NovDemystifying two common misconceptions with e-commerce security
11. 19 NovBlack Friday 2020: How to shop safely online
12. 18 NovIoT forecast: Running antivirus on your smart device?
13. 17 NovChris Krebs, director of Cybersecurity and Infrastructure Security Agency, fired by President
14. 16 NovWebNavigator Chromium browser published by search hijackers
15. 15 NovA week in security (November 9 – November 15)
16. 11 NovSurviving college distance learning during the pandemic: a cybersecurity guide
17. 11 NovHat trick for Google as it patches two more zero-days in Chrome
18. 10 NovRegretLocker, new ransomware, can encrypt Windows virtual hard disks
19. 9 NovMozilla patches critical security issues in Firefox and Thunderbird
20. 8 NovLock and Code S1Ep19: Forecasting IoT cybersecurity with John Donovan and Adam Kujawa
21. 5 NovUpdate your iOS now! Apple patches three zero-day vulnerabilities
22. 5 NovRegTech explained: a crucial toolset for the financial industry
23. 4 NovProp 24 passes in California, will change data privacy law