Copy
Click 'Display images' to view images
Vulnerabilities & Patches
Google Project Zero expert found 3 flaws in Apache Web Server - Read more
Forget Your Perimeter: RCE in Pulse Connect Secure (CVE-2020-8218) - Read more
Remote Code Execution in Slack desktop apps - Read more
Cisco releases Security Updates - Read more
Google releases Security Updates for Chrome - Read more
Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird - Read more
Vulnerability Spotlight: Remote code execution, privilege escalation bugs in Microsoft Azure Sphere - Read more
Stealing local files using Safari Web Share API - Read more
Cyber Crime & Incidents
San Jose Man Pleads Guilty To Damaging Cisco’s Network - Read more
NCR confirms malware in lab environment, says clients not at risk - Read more
SourMint: malicious code, ad fraud, and data leak in iOS - Read more
Primary Indian ticket vendor suffers crippling data breach - Read more
Abnormal Attack Stories: Bitcoin Malware - Read more
Statement on Security Incident at Freepik Company - Read more
New Zealand stock exchange hit by cyber attack for second day - Read more
Tesla employee foregoes $1M payment, works with FBI to thwart cybersecurity attack - Read more
Threats
Cetus: Cryptojacking Worm Targeting Docker Daemons - Read more
Emotet malware's new 'Red Dawn' attachment is just as dangerous - Read more
Lifting the veil on DeathStalker, a mercenary triumvirate - Read more
Cybercriminal greeners from Iran attack companies worldwide for financial gain - Read more
QakBot Banking Trojan Returned With New Sneaky Tricks to Steal Your Money - Read more
North Korean Malicious Cyber Activity: FASTCash - Read more
Iranian Hackers Pose as Journalists to Trick Victims Into Installing Malware - Read more
New Mercenary APT Group Targeted Autodesk Software - Read more
Triada software backdoor and malware downloader - Read more
FBI/CISA Warn US Firms of State-Mandated Tax Malware - Read more
The Shoe is a Lie: How an Android Botnet Defrauded Advertisers and Consumers - Read more
Reports
The Kittens Are Back in Town 3 - Read more
DEVELOPMENT OF THE ACTIVITY OF THE TA505 CYBERCRIMINAL GROUP - Read more
Securing the Pandemic-Disrupted Workplace - Read more
Threat Landscape Trends – Q2 2020 - Read more
Group with numerous faces: chronicle of UltraRank's deceptive JS-sniffer campaigns - Read more
More Evidence of APT Hackers-for-Hire Used for Industrial Espionage - Read more
No need to Hack when it's Leaking - Read more
Papers
Incident Response in a Security Operation Center - Read more
Detection of Malicious Documents Utilizing XMP Identifiers - Read more
Risk Management with Automated Feature Analysis of Software Components - Read more
You've Had the Power All Along: Process Forensics With Native Tools - Read more
Upcoming Events
Experts Talk. Why master YARA: from routine to extreme threat hunting cases - Read more
Analyzing the OWASP API Security Top 10 for Pen Testers - Read more
Events Materials
DEF CON Red Team Village - Read more
RESTCON'20 || CYBERSECURITY CONFERENCE || RESETHACKER - Read more
Keynote: Using CTF Challenges to Level-Up Your Cybersecurity Career w/ Ed Skoudis - HackFest 2020 - Read more
How to
FRITZFROG: A NEW GENERATION OF PEER-TO-PEER BOTNETS - Read more
Emulation of Malicious Shellcode With Speakeasy - Read more
The Basics of Keeping Kubernetes Clusters Secure - Read more
Privacy and Compliance
Instagram Retained Deleted User Data Despite GDPR Rules - Read more
A quarter of the Alexa Top 10K websites are using browser fingerprinting scripts - Read more
Surprise! Even Google's engineers don't understand its privacy controls - Read more
Facebook Hits Back At Apple’s iOS 14 Privacy Update - Read more
Q-CERT Weekly Newsletter Service is prepared by Cyber Security Intelligence Team, all concerns, recommendations and complaints are welcomed.The views and opinions expressed in media article are those of the authors and media organizations alone.

Q-CERT | Ministry of Transport and Communications, State of Qatar | Doha P.O.Box 24514 | Qatar