Port 22

~ 25 May 2023 ~

Netflix's Password-Sharing Ban Offers Security Upsides

Bcrypt, a Popular Password Hashing Algorithm, Starts Its Long Goodbye

Perception Point Report Finds That Advanced Phishing Attacks Grew by 356% in 2022

Memcyco Delivers Real-Time Brandjacking Detection and Protection Solution

Bank of Ghana Opens SOC to Enable Threat Intelligence Sharing

'Operation Magalenha' Attacks Gives Window Into Brazil's Cybercrime Ecosystem

Dark Frost Botnet Launches Devastating DDoS Attacks on Gaming Industry

Zyxel Issues Critical Security Patches for Firewall and VPN Products

So the FBI 'persistently' abused its snoop powers. What's to worry about?

Google Cloud Bug Allows Server Takeover From CloudSQL Service

Dangerous Regions: Isolating Branch Offices in High-Risk Countries

Cynet Protects Hospital From Lethal Infection

New PowerExchange Backdoor Used in Iranian Cyber Attack on UAE Government

CISO Criminalization, Vague Cyber Disclosure Rules Create Angst for Security Teams

Moxa MXsecurity Series

Alert: Brazilian Hackers Targeting Users of Over 30 Portuguese Banks

On the Poisoning of LLMs

Webinar with Guest Forrester: Browser Security New Approaches

Buhti Ransomware Gang Switches Tactics, Utilizes Leaked LockBit and Babuk Code

Facial recog system used by Met Police shows racial bias at low thresholds

Confirmation & Research Note 1: Pegasus infections in Armenian Civil Society

Shedding light on AceCryptor and its operation

China's Stealthy Hackers Infiltrate U.S. and Guam Critical Infrastructure Undetected

Iranian Agrius Hackers Targeting Israeli Organizations with Moneybird Ransomware

The Security Hole at the Heart of ChatGPT and Bing

GUAC 0.1 Beta: Google's Breakthrough Framework for Secure Software Supply Chains

Five Eyes and Microsoft accuse China of attacking US infrastructure again

~ 24 May 2023 ~

This legit Android app turned into audio-snooping malware and Google missed it

China Hacks US Critical Networks in Guam, Raising Cyberwar Fears

'Volt Typhoon' China-Backed APT Infiltrates US Critical Infrastructure Orgs

Honeywell Releases Cyber Insights to Better Identify Cybersecurity Threats and Vulnerabilities

Harvard Pilgrim Health Care Notifies Individuals of Privacy Incident

Technology Veterans James Wickett and Ken Johnson Launch DryRun Security to Bring Security to Developers

Appdome Launches Build-to-Test, Automated Testing Option for Protected Mobile Apps

Netwrix Report: Enterprises Suffer More Ransomware and Other Malware Attacks Than Smaller Organizations

Philly Inquirer says Cuba ransomware gang's data leak claims are fake news

Threat Actors Compromise Barracuda Email Security Appliances

Volt Typhoon targets US critical infrastructure with living-off-the-land techniques

Google's .zip, .mov Domains Give Social Engineers a Shiny New Tool

OAuth Flaw in Expo Platform Affects Hundreds of Third-Party Sites, Apps

How Universities Can Bridge Cybersecurity's Gender Gap

Israeli Shipping, Logistics Companies Targeted in Watering Hole Attacks

How AI Can Help Organizations Adapt and Recover From Cyberattacks

5 Questions to Ask When Evaluating a New Cybersecurity Technology

Iranian Tortoiseshell Hackers Targeting Israeli Logistics Industry

Indiana, Iowa, and Tennessee Pass Comprehensive Privacy Laws

What to Look for When Selecting a Static Application Security Testing (SAST) Solution

Data Stealing Malware Discovered in Popular Android Screen Recorder App

Legion Malware Upgraded to Target SSH Servers and AWS Credentials

Digital security for the selfemployed: Staying safe without an IT team to help

IT security analyst admits hijacking cyber attack to pocket ransom payments

N. Korean Lazarus Group Targets Microsoft IIS Servers to Deploy Espionage Malware

Cyber Attacks Strike Ukraine's State Bodies in Espionage Operation

US bans North Korean outsourcer and its feisty freelancers

Google Adds Guardrails to Keep AI in Check

~ 23 May 2023 ~

Apria Healthcare says potentially 2M people caught up in IT security breach

SuperMailer Abuse Bypasses Email Security for Super-Sized Credential Theft

What Security Professionals Need to Know About Aggregate Cyber Risk

FBI: Human Trafficking Rings Force Job Seekers Into Cryptokjacking Schemes

Chinese Labs Are Selling Fentanyl Ingredients for Millions in Crypto

Theres Finally a Way to Improve Cloud Container Registry Security

A New Look for Risk in Awareness Training

Dish confirms 300,000 people's data was exposed in February's attack

GoldenJackal: New Threat Group Targeting Middle Eastern and South Asian Governments

Microsoft Build 2023: Announcing new identity, compliance, and security features from Microsoft Security

Microsoft: BEC Attackers Evade 'Impossible Travel' Flags With Residential IP Addresses

TikTok to let Oracle view source code, algorithm, and content moderation

Bridgestone CISO: Lessons From Ransomware Attack Include Acting, Not Thinking

Enterprises Must Prepare Now for Shorter TLS Certificate Lifespans

North Korean Kimsuky Hackers Strike Again with Advanced Reconnaissance Malware

China Bans U.S. Chip Giant Micron, Citing "Serious Cybersecurity Problems"

Mitsubishi Electric MELSEC Series CPU module

Horner Automation Cscape

Hitachi Energys RTU500 Series Product

Hitachi Energys AFS65x, AFS67x, AFR67x and AFF66x Products

The Rising Threat of Secrets Sprawl and the Need for Action

Credible Handwriting Machine

New WinTapix.sys Malware Engages in Multi-Stage Attack Across Middle East

Android app breaking bad: From legitimate screen recording to file exfiltration within a year

Meet the GoldenJackal APT group. Dont expect any howls

Ads for lucrative jobs in Asia fail to mention chance of slavery as crypto-scammer

China hasn't told Micron why it failed security review, or what its ban means

Top 5 Reasons to Attend SANS Blue Team Summit 2023

A Visual Summary of SANS Cybersecurity Leadership Summit 2023

Interview With a Crypto Scam Investment Spammer

Uncle Sam strangles criminals' cashflow by reining in money mules

~ 22 May 2023 ~

Improving Cybersecurity Requires Building Better Public-Private Cooperation

PyPI Shuts Down Over the Weekend, Says Incident Was Overblown

Meta Hit With $1.3B Record-Breaking Fine for GDPR Violations

A Leaked Document Shows Spain Wants to Ban End-to-End Encryption

EU Regulators Hit Meta with Record $1.3 Billion Fine for Data Transfer Violations

Indonesian Cybercriminals Exploit AWS for Profitable Crypto Mining Operations

IBM's Polar Buy Creates Focus on a New 'Shadow Data' Cloud Security Area

Google settles location tracking lawsuit for only $39.9M

Metas $1.3 Billion Fine Is a Strike Against Surveillance Capitalism

Cyber Warfare Lessons From the Russia-Ukraine Conflict

Bad Magic's Extended Reign in Cyber Espionage Goes Back Over a Decade

More UK councils caught by Capita's open AWS bucket blunder

Google Is Not Deleting Old YouTube Videos

Are Your APIs Leaking Sensitive Data?