Port 22

~ 18 Jan 2023 ~

Lares Research Highlights Top 5 Penetration Test Findings From 2022

AI and Political Lobbying

Iranian Government Entities Under Attack by New Wave of BackdoorDiplomacy Attacks

Guide: How MSSPs and vCISOs can extend their services into compliance readiness without increasing cost

Critical Security Vulnerabilities Discovered in Netcomm and TP-Link Routers

Git Users Urged to Update Software to Prevent Remote Code Execution Attacks

What threatens corporations in 2023: media blackmail, fake leaks and cloud attacks

CISA Warns of Flaws in Siemens, GE Digital, and Contec Industrial Control Systems

Been hit by BianLian ransomware? Here's your get-out-of-jail-free card

Thinking of Hiring or Running a Booter Service? Think Again.

Okta Expands No-Code Offerings for Identity Cloud

Russian criminals can't wait to hop over OpenAI fence, use ChatGPT for evil

~ 17 Jan 2023 ~

Initial Access Broker Market Booms, Posing Growing Threat to Enterprises

Secrets Rotation Recommended After CircleCI Security Incident

Nearly 300 MSI motherboards will run any code in Secure Boot, no questions asked

VIPRE Security Group Launches New Endpoint Detection and Response (EDR) Technology Built for SMEs

Unpatched Zoho MangeEngine Products Under Active Cyberattack

Why Businesses Need to Think Like Hackers This Year

A New Era Is Dawning in Cybersecurity, but Only the Best Algorithms Will Win

Microsoft locks door to default guest authentication in Windows Pro

Secure your business like you secure your home: 5 steps to protect against cybercrime

Cygna Labs Introduces Entitlement and Security for Active Directory

Microsoft Patches 4 SSRF Flaws in Separate Azure Cloud Services

5 Cybersecurity Tips for Higher Education Institutions

3 Lessons Learned in Vulnerability Management

Microsoft Azure Services Flaws Could've Exposed Cloud Resources to Unauthorized Access

Hackers Can Abuse Legitimate GitHub Codespaces Feature to Deliver Malware

The FBI Identified a Tor User

4 Places to Supercharge Your SOC with Automation

Zoho ManageEngine PoC Exploit to be Released Soon - Patch Before It's Too Late!

Top 10 Venmo scams and how to stay safe

GE Digital Proficy Historian

Mitsubishi Electric MELSEC iQ-F, iQ-R Series

Siemens SINEC INS

Researchers Uncover 3 PyPI Packages Spreading Malware to Developer Systems

Crypto exchanges freeze accounts tied to North Koreas notorious Lazarus Group

Tencent fired 100 people for corruption during 2022

~ 16 Jan 2023 ~

The Dangers of Default Cloud Configurations

Java, .NET Developers Prone to More Frequent Vulnerabilities

Raccoon and Vidar Stealers Spreading via Massive Network of Fake Cracked Software

A Secure User Authentication Method Planning is More Important than Ever

Hacked Cellebrite and MSAB Software Released

You Move, They Follow: Uncovering Irans Mobile Legal Intercept System

All the Data Apple Collects About Youand How to Limit It

For password protection, dump LastPass for open source Bitwarden

CISA Warns for Flaws Affecting Industrial Control Systems from Major Manufacturers

Hybrid commerce: Blurring the lines between business and pleasure

New Backdoor Created Using Leaked CIA's Hive Malware Discovered in the Wild

China aims to grow local infosec industry by 30 percent a year, to $22 billion by 2025

~ 14 Jan 2023 ~

NSA asks Congress to let it get on with that warrantless data harvesting, again

Upcoming Speaking Engagements

Booklist Review of A Hackers Mind

Russian Ransomware Gang Attack Destabilizes UK Royal Mail

Malware Attack on CircleCI Engineer's Laptop Leads to Recent Security Incident

Cacti Servers Under Attack as Majority Fail to Patch Critical Vulnerability

Russians say they can grab software from Intel again

TikTok Fined $5.4 Million by French Regulator for Violating Cookie Laws

Cisco Issues Warning for Unpatched Vulnerabilities in EoL Business Routers

~ 13 Jan 2023 ~

Why Mean Time to Repair Is Not Always A Useful Security Metric

Friday Squid Blogging: How to Buy Fresh or Frozen Squid

Norton LifeLock Warns on Password Manager Account Compromises

Malware Comes Standard With This Android TV Box on Amazon

Canadian must pay employer for 'time theft' based on tracking software data

Sneaky New Stealer Woos Corporate Workers Through Fake Zoom Downloads

CircleCI, LastPass, Okta, and Slack: Cyberattackers Pivot to Target Core Enterprise Tools