Port 22

~ 2 May 2023 ~

North Korean APT Gets Around Macro-Blocking With LNK Switch-Up

Google Ads Abused to Lure Corporate Workers to LOBSHOT Backdoor

Researchers Uncover New BGP Flaws in Popular Internet Routing Protocol Software

In the face of data disaster

NIST Draft Document on Post-Quantum Cryptography Guidance

4 Principles for Creating a New Blueprint for Secure Software Development

China 'Innovated' Its Cyberattack Tradecraft, Mandia Says

BouldSpy Android Spyware: Iranian Government's Alleged Tool for Spying on Minority Groups

Why Telecoms Struggle with SaaS Security

Data loss costs are going up and not just for those who choose to pay thieves

SolarWinds: The Untold Story of the Boldest Supply-Chain Hack

APT groups muddying the waters for MSPs

Managed Detection and Response in 2022

LOBSHOT: A Stealthy, Financial Trojan and Info Stealer Delivered through Google Ads

Microsoft Digital Defense Report: Trends In Device and Infrastructure Attacks

North Korea's ScarCruft Deploys RokRAT Malware via LNK File Infection Chains

Russia's APT28 targets Ukraine government with bogus Windows updates

Alert: Active Exploitation of TP-Link, Apache, and Oracle Vulnerabilities Detected

Feds rethink warrantless search stats and oh look, a huge drop in numbers

~ 1 May 2023 ~

US Wellness Provides Notification of Data Security Incident

Enterprise Strategy Group Research Reveals 75% of Organizations Change or Update APIs on a Daily or Weekly Basis

FBI Focuses on Cybersecurity With $90M Budget Request

APT28 Employs Windows Update Lures to Trick Ukrainian Targets

BlackCat Trolls Western Digital With Leaked Response Meeting Image

IT giant Bitmarck shuts down customer, internal systems after cyberattack

Centralized secrets management picks up pace

What the Cybersecurity Industry Can Learn From the SVB Crisis

Name That Edge Toon: Fare Thee Well

New Decoy Dog Malware Toolkit Uncovered: Targeting Enterprise Networks

Google adds account sync for Authenticator, without E2EE

The High-Stakes Scramble to Stop Classified Leaks

Wanted Dead or Alive: Real-Time Protection Against Lateral Movement

What does ChatGPT know about phishing?

Vietnamese Threat Actor Infects 500,000 Devices Using 'Malverposting' Tactics

Your security failure was so bad we have to close the company .... NOT!

Google Blocks 1.43 Million Malicious Apps, Bans 73,000 Bad Accounts in 2022

China has 50 hackers for every FBI cyber agent, says Bureau boss

A Visual Summary of SANS ICS Summit 2023

~ 30 Apr 2023 ~

Apple, Google, and Microsoft Just Fixed Zero-Day Security Flaws

~ 29 Apr 2023 ~

The Tragic Fallout From a School Districts Ransomware Breach

How to Remove Your Personal Info From Google's Search Results

CISA Warns of Critical Flaws in Illumina's DNA Sequencing Instruments

ChatGPT is Back in Italy After Addressing Data Privacy Concerns

~ 28 Apr 2023 ~

Friday Squid Blogging: More Squid Camouflage Research

'BellaCiao' Showcases How Iran's Threat Groups Are Modernizing Their Malware

Hacking the Layoff Process

The Promise and Urgency of Building a Successful SaaS Security Program

Sumo Logic Ponders Why We Aren't There Yet With Security Automation

Sophos Reveals New Insights for Protecting Against Active Adversaries

SlashNext: How Generative AI is Changing the Threat Landscape

OpenText: Integrating Processes and Strategy Is Still the Best Defense

Mend: Building a Long-Term Health Plan For Open Source Security

Mandiant Report: Dwell Time Decreases While Ransomware, Extortion Flourish

JupiterOne Weighs In On the Need For Unified Cyber Insights

Invicti Zooms In On Vulnerabilities That Plague Developers, Security Pros

Infoblox Combines Networking and Security, Doubles Down on DNS Threats

How Better Integration of Systems, Apps Bolsters Enterprise Security

How An Identity-First Approach Can Stop Attacks on Critical Infrastructure

Elastic Expands Cloud Security Capabilities With Improved App Security

Darktrace Takes A Closer Look At the Shifting Email Security Conversation

Cybersixgill And the State Of Today's Cybercrime Underground

Cisco Offers Customers New Ways To Tame Today's Threat Landscape

Beyond Identity: What Is Zero-Trust Authentication and Why Does It Matter?

Automox: Getting Smarter Where Endpoint Management's Concerned

AT&T: What Security Pros Should Know About the Evolving Edge Ecosystem