A week in security (Sept 13

Why backups aren’t a “silver bullet” against ransomware, with Matt Crape: Lock and Code S02E17
The many tentacles of Magecart Group 8
Apple releases emergency update: Patch, but don’t panic
Update now! Google Chrome fixes two in-the-wild zero-days
Parts of the Dark Web “awash” with school children’s personal data
Patch now! PrintNightmare over, MSHTML fixed, a new horror appears … OMIGOD
What are SSL certificates?
Ransomware scammers target artists with fake Krita revenue deals
HP OMEN users, update your driver now!
What are computer cookies?
What is the Dark Web? The Dark Web explained
FBI and CISA warn of APT groups exploiting ADSelfService Plus
Facebook’s own research reveals the harm that Instagram can inflict

Hackers stole the source code of an application Puma, the German sportswear company, is using internally. (Source: The Record)
Fake UPS courier phishers unmasked by researchers. (Source: vpnMentor)
What are zero-click attacks, and how do they work? (Source: Security Week)
There’s a black market for fake COVID vaccine certificates, and it’s booming (Source: Check Point Blog)
Threat actors pretended to be the US Department of Transportation, so they can harvest Microsoft credentials (Source: INKY)
New Zealand companies are being bombarded with DDoS, but their government is mum about it. (Source: The Register)
A top FBI official said that there is “no indication” that Russia has cracked down ransomware gangs. (Source: The Record)
Exclusive: Gaggle follows kids home for remote learning. (Source: The 74 Million)
A ransomware gang has encrypted the entire network of South Africa’s Department of Justice (Source: BleepingComputer)
One ransomware gang has threatened to delete decryption keys if its victims contact law enforcement or hire a negotiator. (Source: BleepingComputer)