Best Long-Reads of the Week, 6/25/22

Tighten those privacy settings right now, Post-Roe world will rely on electronic surveillance, Widespread surveillance of pregnant people can be used to ferret out other crimes, more Metacurity is pleased to offer our free and paid subscribers this weekly digest of some long-form infosec pieces and related articles that we

Italian Company Developed Tools to Spy on Smartphones in Italy and Kazakhstan

Feds issue warning about VMWare Horizon and Unified Access Gateway (UAG) servers, Chinese APT group using ransomware as decoy, Intel agencies given greenlight to hire past pot smokers, more

Russia Has Stepped Up Cyberattacks Against Nations Providing Aid to Ukraine

Trove of documents stolen from Ecuadorian embassy reveal comms about Snowden, CISA committee proposes 311 cybersecurity emergency line, Intel agencies say don't disable PowerShell, much more

ToddyCat Threat Group Is Targeting Microsoft Exchange Servers in Asia and Europe

Police bust nine in the Netherlands for phishing, fraud, and scams, Ukraine CERT exposes two new hacking campaigns, Delivery company Yodel impacted by 'cyber incident,' much more

Unidentified Operatives Have Been Tracking Israeli Military Personnel Using Strava Fitness App

Russians can't download Windows 10 and 11 ISOs, Phishing campaign against Facebook users nets hundreds of millions of credentials, Office 365 and Outlook phishing campaign steals credentials, more

Suspected Iranian Hackers May Have Caused Rocket Sirens to Blare in Two Israeli Cities

Infosec community outraged over BSides Cleveland 'surprise' speaker, Paige Thompson found guilty over Capital One hacking charges, Int'l op disrupts RSocks malware botnet, much more

Best Long-Reads of the Week, 6/18/22

What did Nakasone mean by offensive U.S. operations in Ukraine?, How cybersecurity pros can avoid nihilism, How state surveillance of women might emerge after Roe v. Wade is overturned, more Metacurity is pleased to offer our free and paid subscribers this weekly digest of some long-form infosec pieces and

Best Long-Reads of the Week, 6/18/22

What did Nakasone mean by offensive U.S. operations in Ukraine?, How cybersecurity pros can avoid nihilism, How state surveillance of women might emerge after Roe v. Wade is overturned, more

Police in India Planted False and Incriminating Files on Activists' Computers to Arrest Them

UK's home secretary approves Assange's extradition to U.S., Russian spy tried to infiltrate International Criminal Court, Interpol arrests 2,000 social engineering scammers, more

U.S. Has Stepped Up Funding for VPN Companies to Help Russians Evade Censorship

Cyber Partisans are finding new forms of asymmetrical warfare in Belarus, Ukrainian ISPs are forced to route through Russia, New bill would ban sale of location and health data, much more

Controversy Erupts Over U.S. Defense Contractor's Talks to Buy NSO Group's Spyware

Hertzbleed side-channel attack threatens cryptographic software security, Microsoft issues fix for Follina and other flaws, Microsoft accused of taking too long to fix Azure flaws, much more

Iranian Hackers Are Targeting Israeli Officials, Military Officers, Others Using Spearphishing

Sandworm may be exploiting Follina, Gallium has new stealth RAT, BlackCat actors target Microsoft Exchange servers, AZ medical center exposed 700K patients' data, Man sentenced for DDoS attack, more