Port 22

~ 1 May 2023 ~

APT28 Employs Windows Update Lures to Trick Ukrainian Targets

BlackCat Trolls Western Digital With Leaked Response Meeting Image

IT giant Bitmarck shuts down customer, internal systems after cyberattack

APT28 Targets Ukrainian Government Entities with Fake "Windows Update" Emails

Centralized secrets management picks up pace

What the Cybersecurity Industry Can Learn From the SVB Crisis

Name That Edge Toon: Fare Thee Well

New Decoy Dog Malware Toolkit Uncovered: Targeting Enterprise Networks

Google adds account sync for Authenticator, without E2EE

The High-Stakes Scramble to Stop Classified Leaks

Wanted Dead or Alive: Real-Time Protection Against Lateral Movement

What does ChatGPT know about phishing?

Vietnamese Threat Actor Infects 500,000 Devices Using 'Malverposting' Tactics

Your security failure was so bad we have to close the company .... NOT!

Google Blocks 1.43 Million Malicious Apps, Bans 73,000 Bad Accounts in 2022

China has 50 hackers for every FBI cyber agent, says Bureau boss

A Visual Summary of SANS ICS Summit 2023

~ 30 Apr 2023 ~

Apple, Google, and Microsoft Just Fixed Zero-Day Security Flaws

~ 29 Apr 2023 ~

The Tragic Fallout From a School Districts Ransomware Breach

How to Remove Your Personal Info From Google's Search Results

CISA Warns of Critical Flaws in Illumina's DNA Sequencing Instruments

ChatGPT is Back in Italy After Addressing Data Privacy Concerns

~ 28 Apr 2023 ~

Friday Squid Blogging: More Squid Camouflage Research

'BellaCiao' Showcases How Iran's Threat Groups Are Modernizing Their Malware

Hacking the Layoff Process

ZeroTier: What Leaders Need To Know About Modern Virtual Networking

Your Attack Surface May Be Growing, But You Can Still Contain Your Risk

Wiz: Breaking Up Silos With CNAPP And the Future Of Cloud Security

VMware Offers Up New Ground Truth For Improved Cloud Security

TXOne: Industrial Security Is Evolving to Keep the Operation Running

The Promise and Urgency of Building a Successful SaaS Security Program

Sumo Logic Ponders Why We Aren't There Yet With Security Automation

Sophos Reveals New Insights for Protecting Against Active Adversaries

SlashNext: How Generative AI is Changing the Threat Landscape

OpenText: Integrating Processes and Strategy Is Still the Best Defense

Mend: Building a Long-Term Health Plan For Open Source Security

Mandiant Report: Dwell Time Decreases While Ransomware, Extortion Flourish

JupiterOne Weighs In On the Need For Unified Cyber Insights

Invicti Zooms In On Vulnerabilities That Plague Developers, Security Pros

Infoblox Combines Networking and Security, Doubles Down on DNS Threats

How Better Integration of Systems, Apps Bolsters Enterprise Security

How An Identity-First Approach Can Stop Attacks on Critical Infrastructure

Elastic Expands Cloud Security Capabilities With Improved App Security

Darktrace Takes A Closer Look At the Shifting Email Security Conversation

Cybersixgill And the State Of Today's Cybercrime Underground

Cisco Offers Customers New Ways To Tame Today's Threat Landscape

Beyond Identity: What Is Zero-Trust Authentication and Why Does It Matter?

Automox: Getting Smarter Where Endpoint Management's Concerned

AT&T: What Security Pros Should Know About the Evolving Edge Ecosystem

Google Bans Thousands of Play Store Developer Accounts to Block Malware

DOJ Detected SolarWinds Breach Months Before Public Disclosure

Firmware Looms as the Next Frontier for Cybersecurity

What was hot at RSA Conference 2023? Week in security with Tony Anscombe

Online Safety Bill age checks? We won't do 'em, says Wikipedia

What was hot at RSA Conference 2023? Week in security with Tony Anscombe

SOSSA and CRA Spell Trouble for Open Source Software

Assistant Professor Social Sciences and Digital Technologies

New Atomic macOS Malware Steals Keychain Passwords and Crypto Wallets

Why Your Detection-First Security Approach Isn't Working

Zyxel Firewall Devices Vulnerable to Remote Code Execution Attacks Patch Now

ViperSoftX InfoStealer Adopts Sophisticated Techniques to Avoid Detection

Cyber Certainty: Investing in Resilience During a Post Correction Market

Attention Online Shoppers: Don't Be Fooled by Their Sleek, Modern Looks It's Magecart!

Tonto Team Uses Anti-Malware File to Launch Attacks on South Korean Institutions

Many Public Salesforce Sites are Leaking Private Data

Cybersecurity Jobs: Security Architect & Engineer (Japanese)

~ 27 Apr 2023 ~

Google sues CryptBot slingers, gets court order to shut down malware domains

Tessian Fully Integrates With M365 To Provide Threat Protection and Insider Risk Protection

Uptycs Launches Cloud Security Early Warning System

MajorKey Accelerates Pureplay Information Security Strategy With Acquisition of Legion Star

Delinea Onsite RSA Conference Survey Reveals Cloud Security Remains Top Cybersecurity Concern in 2023

CISO Survival Guide for Cyberattacks

Microsoft is busy rewriting core Windows library code in memory-safe Rust

'Anonymous Sudan' Claims Responsibility for DDoS Attacks Against Israel

Threat Actor Names Proliferate, Adding Confusion

Lazarus, Scarcruft North Korean APTs Shift Tactics, Thrive

China's 'Evasive Panda' Hijacks Software Updates to Deliver Custom Backdoor

SANS Reveals Top 5 Most Dangerous Cyberattacks for 2023

The White House National Cybersecurity Strategy Has a Fatal Flaw

NSA Cybersecurity Director Says Buckle Upfor Generative AI

Why you should practice rollbacks to prevent data loss in a ransomware attack

Continuous Scanning Is Imperative for Effective Web Application Security

Google Gets Court Order to Take Down CryptBot That Infected Over 670,000 Computers

Combating Kubernetes the Newest IAM Challenge

Paperbug Attack: New Politically-Motivated Surveillance Campaign in Tajikistan

Security Risks of AI

Tenable Makes Generative AI Security Tools Available to the Research Community

LimeRAT Malware Analysis: Extracting the Config

Brace Yourself for the 2024 Deepfake Election

RTM Locker's First Linux Ransomware Strain Targeting NAS and ESXi Hosts

APT trends report Q1 2023

Microsoft Confirms PaperCut Servers Used to Deliver LockBit and Cl0p Ransomware

~ 26 Apr 2023 ~

Google 2FA Syncing Feature Could Put Your Privacy at Risk

Microsoft probes complaints of Edge leaking URLs to Bing

BigID and Thales Collaborate to Deliver Comprehensive Data Protection and Privacy Compliance

A US Bill Would Ban Kids Under 13 From Joining Social Media

DoJ, Treasury accuses 3 men of laundering crypto for North Korea

Linux Shift: Chinese APT Alloy Taurus Is Back With Retooling

High-Severity SLP Flaw Can Amplify DDoS Attacks up to 2,200 Times

CyberGRX Announces Winners of the Inaugural Cyber Risk Nation Awards