A week in security (Sept 20

Freedom Hosting operator gets 27 years for hosting dark web abuse sites
Microsoft makes a bold move towards a password-less future
New Mac malware masquerades as iTerm2, remote desktop and other apps
Internet safety tips for kids and teens: a comprehensive guide for the modern parent
Google, geofence warrants, and you
No, Colonel Gaddafi’s daughter isn’t emailing to give you untold riches
Patch vCenter Server “right now”, VMWare expects CVE-2021-22005 exploitation within minutes of disclosure
Patch now! Insecure Hikvision security cameras can be taken over remotely
MSHTML attack targets Russian state rocket centre and interior ministry
Italian mafia cybercrime sting leads to 100+ arrests
How to clear your cache
Microsoft exchange autodiscover flaw reveals users’ passwords
Parents and teachers believe digital surveillance of kids outweighs risks
SonicWall warns users to patch critical vulnerability “as soon as possible”
Beware! Uber scam lures victims with alert from a real Uber number
Teaching cybersecurity skills to special needs children with Alana Robinson: Lock and Code S02E18

UK ministry of defence apologises – again – after another major email blunder in Afghanistan (Source: The Register)
Database containing personal info of 106 million international visitors to Thailand exposed online (Source: Comparitech)
Fake WhatsApp backup message delivers malware to Spanish speakers’ devices (Source: The Daily Swig)
Mobile phones of 5 French cabinet ministers infected by Pegasus malware (Source: France 24)
Ransomware dropping malware swaps phishing for sneaky new attack route (Source: ZDNet)
Phishing attacks more sophisticated, malicious emails time to coincide with periods of low energy and inattentiveness (Source: CPO magazine)
Keeping your data secure at work (Source: Minute Hack)