Port 22

~ 26 May 2023 ~

Travel-Themed Phishing, BEC Campaigns Get Smarter as Summer Season Arrives

Phishing Domains Tanked After Meta Sued Freenom

Severe Flaw in Google Cloud's Cloud SQL Service Exposed Confidential Data

How an innocuous app morphed into a trojan Week in security with Tony Anscombe

How an innocuous app morphed into a trojan Week in security with Tony Anscombe

How Safe Is Your Wearable Device?

Predator Android Spyware: Researchers Sound the Alarm on Alarming Capabilities

5 Must-Know Facts about 5G Network Security and Its Cloud Benefits

Expeditionary Cyberspace Operations

New COSMICENERGY Malware Exploits ICS Protocol to Sabotage Power Grids

Barracuda Warns of Zero-Day Exploited to Breach Email Security Gateway Appliances

BlackByte ransomware crew lists city of Augusta after cyber 'incident'

Cybersecurity Jobs: Technical Director (Japanese)

A Visual Summary of SANS AI Cybersecurity Summit 2023

It's 2023 and Sri Lanka doesn't have a cyber security authority

Russia's War in Ukraine Shows Cyberattacks Can Be War Crimes

~ 25 May 2023 ~

'Volt Typhoon' Breaks Fresh Ground for China-Backed Cyber Campaigns

Red Hat Tackles Software Supply Chain Security

CosmicEnergy Malware Emerges, Capable of Electric Grid Shutdown

Lazarus Group Striking Vulnerable Windows IIS Web Servers

Spotted: Suspected Russian malware designed to disrupt Euro, Asia energy grids

Netflix's Password-Sharing Ban Offers Security Upsides

Bcrypt, a Popular Password Hashing Algorithm, Starts Its Long Goodbye

Perception Point Report Finds That Advanced Phishing Attacks Grew by 356% in 2022

Memcyco Delivers Real-Time Brandjacking Detection and Protection Solution

Bank of Ghana Opens SOC to Enable Threat Intelligence Sharing

'Operation Magalenha' Attacks Gives Window Into Brazil's Cybercrime Ecosystem

Dark Frost Botnet Launches Devastating DDoS Attacks on Gaming Industry

Zyxel Issues Critical Security Patches for Firewall and VPN Products

So the FBI 'persistently' abused its snoop powers. What's to worry about?

Google Cloud Bug Allows Server Takeover From CloudSQL Service

Dangerous Regions: Isolating Branch Offices in High-Risk Countries

Cynet Protects Hospital From Lethal Infection

New PowerExchange Backdoor Used in Iranian Cyber Attack on UAE Government

CISO Criminalization, Vague Cyber Disclosure Rules Create Angst for Security Teams

Moxa MXsecurity Series

Alert: Brazilian Hackers Targeting Users of Over 30 Portuguese Banks

On the Poisoning of LLMs

Webinar with Guest Forrester: Browser Security New Approaches

Buhti Ransomware Gang Switches Tactics, Utilizes Leaked LockBit and Babuk Code

Facial recog system used by Met Police shows racial bias at low thresholds

Confirmation & Research Note 1: Pegasus infections in Armenian Civil Society

Shedding light on AceCryptor and its operation

China's Stealthy Hackers Infiltrate U.S. and Guam Critical Infrastructure Undetected

Iranian Agrius Hackers Targeting Israeli Organizations with Moneybird Ransomware

The Security Hole at the Heart of ChatGPT and Bing

GUAC 0.1 Beta: Google's Breakthrough Framework for Secure Software Supply Chains

Five Eyes and Microsoft accuse China of attacking US infrastructure again

~ 24 May 2023 ~

This legit Android app turned into audio-snooping malware and Google missed it

China Hacks US Critical Networks in Guam, Raising Cyberwar Fears

'Volt Typhoon' China-Backed APT Infiltrates US Critical Infrastructure Orgs

Honeywell Releases Cyber Insights to Better Identify Cybersecurity Threats and Vulnerabilities

Harvard Pilgrim Health Care Notifies Individuals of Privacy Incident

Technology Veterans James Wickett and Ken Johnson Launch DryRun Security to Bring Security to Developers

Appdome Launches Build-to-Test, Automated Testing Option for Protected Mobile Apps

Netwrix Report: Enterprises Suffer More Ransomware and Other Malware Attacks Than Smaller Organizations

Philly Inquirer says Cuba ransomware gang's data leak claims are fake news

Threat Actors Compromise Barracuda Email Security Appliances

Volt Typhoon targets US critical infrastructure with living-off-the-land techniques

Google's .zip, .mov Domains Give Social Engineers a Shiny New Tool

OAuth Flaw in Expo Platform Affects Hundreds of Third-Party Sites, Apps

How Universities Can Bridge Cybersecurity's Gender Gap

Israeli Shipping, Logistics Companies Targeted in Watering Hole Attacks

How AI Can Help Organizations Adapt and Recover From Cyberattacks

5 Questions to Ask When Evaluating a New Cybersecurity Technology

Iranian Tortoiseshell Hackers Targeting Israeli Logistics Industry

Indiana, Iowa, and Tennessee Pass Comprehensive Privacy Laws

What to Look for When Selecting a Static Application Security Testing (SAST) Solution

Data Stealing Malware Discovered in Popular Android Screen Recorder App

Legion Malware Upgraded to Target SSH Servers and AWS Credentials

Digital security for the selfemployed: Staying safe without an IT team to help

IT security analyst admits hijacking cyber attack to pocket ransom payments

N. Korean Lazarus Group Targets Microsoft IIS Servers to Deploy Espionage Malware

Cyber Attacks Strike Ukraine's State Bodies in Espionage Operation

US bans North Korean outsourcer and its feisty freelancers

Google Adds Guardrails to Keep AI in Check

~ 23 May 2023 ~

Apria Healthcare says potentially 2M people caught up in IT security breach

SuperMailer Abuse Bypasses Email Security for Super-Sized Credential Theft

What Security Professionals Need to Know About Aggregate Cyber Risk

FBI: Human Trafficking Rings Force Job Seekers Into Cryptokjacking Schemes

Chinese Labs Are Selling Fentanyl Ingredients for Millions in Crypto

Theres Finally a Way to Improve Cloud Container Registry Security

A New Look for Risk in Awareness Training

Dish confirms 300,000 people's data was exposed in February's attack

GoldenJackal: New Threat Group Targeting Middle Eastern and South Asian Governments

Microsoft Build 2023: Announcing new identity, compliance, and security features from Microsoft Security

Microsoft: BEC Attackers Evade 'Impossible Travel' Flags With Residential IP Addresses

TikTok to let Oracle view source code, algorithm, and content moderation

Bridgestone CISO: Lessons From Ransomware Attack Include Acting, Not Thinking

Enterprises Must Prepare Now for Shorter TLS Certificate Lifespans

North Korean Kimsuky Hackers Strike Again with Advanced Reconnaissance Malware

China Bans U.S. Chip Giant Micron, Citing "Serious Cybersecurity Problems"

Mitsubishi Electric MELSEC Series CPU module

Horner Automation Cscape

Hitachi Energys RTU500 Series Product

Hitachi Energys AFS65x, AFS67x, AFR67x and AFF66x Products

The Rising Threat of Secrets Sprawl and the Need for Action

Credible Handwriting Machine

New WinTapix.sys Malware Engages in Multi-Stage Attack Across Middle East

Android app breaking bad: From legitimate screen recording to file exfiltration within a year