ZDNET – The worst passwords of 2020 show we are just as lazy about security as ever
“Can’t we do any better than “123456”?”
NakedSecurity – Cult videogame company Capcom pays a big round $0.00 to ransomware crooks
“The good news is that, as far we know, Capcom hasn’t paid the crooks one brass satoshi. “
Security.nl – Salaris Zwitserse universiteitsmedewerkers gestolen via phishingaanval
“Criminelen zijn erin geslaagd om door middel van phishingaanvallen de salarissen van Zwitserse universiteitsmedewerkers te stelen.”
AP – German hospital hacked, patient taken to another city dies
“The woman’s death appeared to be the first resulting from a ransomware attack, even if indirectly so. “
Hackread – Ex-employee hacked Cisco’s AWS Infrastructure; erased virtual machines
“Employee malcontent can lead to dire consequences. Something that worldwide leader in IT, networking, and cybersecurity solutions company, Cisco learned the hard way.”
Nakedsecurity – Porn blast disrupts bail hearing of alleged Twitter hacker
“Instead, the courtroom was hooked up to a Zoom meeting that was, it seems, not adequately secured against – how shall we put this? – external interference…”
Cuberscoop.com – Zero-day flaw found in Zoom for Windows 7
“A previously unknown flaw in the videoconferencing software Zoom could allow a hacker to remotely commandeer computers running old versions of the Microsoft Windows operating system, security researchers said Thursday.”
ThreatPost – TikTok To Stop Clipboard Snooping After Apple Privacy Feature Exposes Behavior
“A new privacy feature in Apple iOS 14 sheds light on TikTok’s practice of reading iPhone users’ cut-and-paste data, even though the company said in March it would stop.”
BBCNews- How hackers extorted $1.14m from University of California, San Francisco
“A leading medical-research institution working on a cure for Covid-19 has admitted it paid hackers a $1.14m (£910,000) ransom after a covert negotiation witnessed by BBC News.”
Nakedsecurity – United States wants HTTPS for all government sites, all the time
“As well as saying all dot-gov sites should be available over HTTPS, the government wants to get to the point that all of its web servers are publicly committed to use HTTPS by default.”