Port 22

~ 11 May 2023 ~

How Attack Surface Management Supports Continuous Threat Exposure Management

New ransomware trends in 2023

Andoryu Botnet Exploits Critical Ruckus Wireless Flaw for Widespread Attack

Twitter Finally Rolling Out Encrypted Direct Messages Starting with Verified Users

GitHub Extends Push Protection to Prevent Accidental Leaks of Keys and Other Secrets

Twitters Encrypted DMs Are Deeply Inferior to Signal and WhatsApp

How Boards Can Set Enforceable Cyber Risk Tolerance Levels

A Visual Summary of SANS Small Business Cyber Summit 2023

Google Touts Security Features for Gmail, Drive

~ 10 May 2023 ~

Coalfire Compliance Report Unveils the Next Horizon in Compliance

Secureframe Finds 37% of Organizations Reuse Passwords for Cloud Service Providers

Experian Announces US Fintech Data Network to Combat Fraud

Global Research From Delinea Reveals That 61% of IT Security Decision Makers Think Leadership Overlooks the Role of Cybersecurity in Business Success

Infamous Twitter Hacker Cops to Cybercrimes, Extradited to US for Trial

Sonatype axes 14 percent of staff, reminds them not to talk to the press

Microsoft Fixes Failed Patch for Exploited Outlook Vulnerability

Dark Reading Goes Global

~ 11 May 2023 ~

Google Announces New Privacy, Safety, and Security Features Across Its Services

~ 10 May 2023 ~

Sysco Data Breach Exposes Customer, Employee Data

Twitter adds new DM features, and Musk says E2EE is here, starting today

RapperBot Crew Drops DDoS/CryptoJacking Botnet Collab

Leak of Intel Boot Guard Keys Could Have Security Repercussions for Years

FBI Disables Russian Malware

Experts Detail New Zero-Click Windows Vulnerability for NTLM Credential Theft

What should protection for your 365 data really look like?

The Industrywide Consequences of Making Security Products Inaccessible

Free Tool Unlocks Some Encrypted Data in Ransomware Attacks

Sophisticated DownEx Malware Campaign Targeting Central Asian Governments

23-year-old Brit linked to 2020 Twitter SIM-swap attack pleads guilty

New Startup SquareX Targets Brower-Based Attacks

Why Honeytokens Are the Future of Intrusion Detection

Capita looking at a bill of 20M over breach clean-up costs

How to Reclaim Your Online Privacy

Mastermind Behind Twitter 2020 Hack Pleads Guilty and Faces up to 70 Years in Prison

A Mysterious New Hacker Group, Red Stinger, Is Lurking in Ukraines Cyberspace

Turning on stealth mode: 5 simple strategies for staying under the radar online

U.S. Government Neutralizes Russia's Most Sophisticated Snake Cyber Espionage Tool

Microsoft's May Patch Tuesday Fixes 38 Flaws, Including Active Zero-Day Bug

Japan's ubiquitous convenience stores now serving up privacy breaches

Microsoft Patch Tuesday, May 2023 Edition

Blog - Stronger Together: Recapping RSA Conference 2023

~ 9 May 2023 ~

Two Microsoft Windows bugs under attack, one in Secure Boot with a manual fix

Keeper Security Announces Minority Growth Equity Investment From Summit Partners

Microsoft Patches Two Zero-Day Vulnerabilities

Privoro and Samsung Partner to Provide Trusted Control Over Smartphone Radios and Sensors

FBI Disarms Russian FSB 'Snake' Malware Network

FBI-led Op Medusa slays NATO-bothering Russian military malware network

Microsoft disarms push notification bombers with number matching in Authenticator

ESET APT Report: Attacks by China-, North Korea-, and Iran-aligned Threat Actors; Russia Eyes Ukraine and the EU

The Problem of Old Vulnerabilities and What to Do About It

U.S. Authorities Seize 13 Domains Offering Criminal DDoS-for-Hire Services

EU proposes spyware Tech Lab to keep Big Brother governments in check

Justice Department Targets 13 Websites Linked to DDoS-for-Hire

PIPEDREAM Malware against Industrial Control Systems

SideWinder Strikes Victims in Pakistan, Turkey in Multiphase Polymorphic Attack

Feds Take Down 13 More DDoS-for-Hire Services

Keep Your Company Cyber Competent Without Adding Cyber Anxiety

Royal Ransomware Expands to Target Linux, VMware ESXi

Half of npm Packages Vulnerable to Old-School Weapon: the 'Shift' Key

Operation ChattyGoblin: Hackers Targeting Gambling Firms via Chat Apps

From DevOps to DevSecOps: Strengthen Product Security with Collaborative Tools

BEC Campaign via Israel Spotted Targeting Large Multinational Companies

The Team of Sleuths Quietly Hunting Cyberattack-for-Hire Services

Researchers Uncover SideWinder's Latest Server-Based Polymorphism Technique

ESET APT Activity Report Q42022Q1 2023