Port 22

~ 19 May 2023 ~

3 Common Initial Attack Vectors Account for Most Ransomware Campaigns

How You, or Anyone, Can Dodge Montanas TikTok Ban

Keep Your Friends Close and Your Identity Closer

Google Debuts Quality Ratings for Security Bug Disclosures

The real cost of a free lunch Week in security with Tony Anscombe

Privacy Sandbox Initiative: Google to Phase Out Third-Party Cookies Starting 2024

Security Risks of New .zip and .mov Domains

Dr. Active Directory vs. Mr. Exposed Attack Surface: Who'll Win This Fight?

Developer Alert: NPM Packages for Node.js Hiding Dangerous TurkoRat Malware

CloudWizard APT: the bad magic story goes on

Cyber Signals: Shifting tactics fuel surge in business email compromise

A Mysterious Group Has Ties to 15 Years of Ukraine-Russia Hacks

UK's GDPR replacement could wipe out oversight of live facial recognition

AppSec Teams Stuck in Catch-Up Cycle Due to Massive Cloud-Native Enablement Gap

Searching for AI Tools? Watch Out for Rogue Sites Distributing RedLine Malware

WebKit Under Attack: Apple Issues Emergency Patches for 3 New Zero-Day Vulnerabilities

Apple warns of three WebKit vulns under active exploitation, dozens more CVEs across its range

Cybersecurity Jobs: OSINT investigator/Analyst (Japanese)

~ 18 May 2023 ~

Enterprises Rely on Multicloud Security to Protect Cloud Workloads

Cisco squashes critical bugs in small biz switches

KeePass Vulnerability Imperils Master Passwords

Trojan-Rigged Phishing Attacks Pepper China-Taiwan Conflict

10 Types of AI Attacks CISOs Should Track

Google May Delete Your Old Accounts. Heres How to Stop It

Microsoft decides it will be the one to choose which secure login method you use

Embedding Security by Design: A Shared Responsibility

This Cybercrime Syndicate Pre-Infected Over 8.9 Million Android Phones Worldwide

OX Security Launches OX-GPT, AppSec's First ChatGPT Integration

Satori Augments Its Data Security Platform With Posture Management and Data Store Discovery Capabilities

Microsoft Azure VMs Highjacked in Cloud Cyberattack

Once Again, Malware Discovered Hidden in npm

LexisNexis Risk Solutions Cybercrime Report Reveals 20% Annual Increase in Global Digital Attack Rate

WithSecure Launches New Range of Incident Response and Readiness Services

3 Ways Hackers Use ChatGPT to Cause Security Headaches

ActZero Teams Up With UScellular to Secure Mobile Devices From Ransomware Attacks

LayerZero Labs Launches $15M Bug Bounty; Largest in the World

Eagle Eye Networks and Brivo Announce $192M Investment One of the Largest Ever in Cloud Physical Security

Join This Webinar Zero Trust + Deception: Learn How to Outsmart Attackers!

How to Reduce Exposure on the Manufacturing Attack Surface

Escalating China-Taiwan Tensions Fuel Alarming Surge in Cyber Attacks

8220 Gang Exploiting Oracle WebLogic Flaw to Hijack Servers and Mine Cryptocurrency

5 useful search engines for internetconnected devices and services

Darknet Carding Kingpin Pleads Guilty: Sold Financial Info of Tens of Thousands

Apple Thwarts $2 Billion in App Store Fraud, Rejects 1.7 Million App Submissions

Critical Flaws in Cisco Small Business Switches Could Allow Remote Attacks

Six million patients' data feared stolen from PharMerica

~ 17 May 2023 ~

Lemon Group Uses Millions of Pre-Infected Android Phones to Enable Cybercrime Enterprise

5 Ways Security Testing Can Aid Incident Response

BianLian Cybercrime Group Changes Up Extortion Methods, Warns CISA

'Strictly limit' remote desktop unless you like catching BianLian ransomware

Houthi-Backed Spyware Effort Targets Yemen Aid Workers

Rebinding Attacks Persist With Spotty Browser Defenses

Apple Boots a Half-Million Developers From Official App Store

The US Post Office Is Spying on the Mail. Senators Want to Stop It

Microsoft Teams Features Amp Up Orgs' Cyberattack Exposure

Talking Security Strategy: Cybersecurity Has a Seat at the Boardroom Table

How to Protect Your Organization From Vulnerabilities

Sunday Paper Debacle: Philadelphia Inquirer Scrambles to Respond to Cyberattack

I Was an RSAC Innovation Sandbox Judge Here's What I Learned

OilAlpha: Emerging Houthi-linked Cyber Threat Targets Arabian Android Users

Microsoft Digital Defense Report: Nation-State Threats and Cyber Mercenaries

Another security calamity for Capita: An unsecured AWS bucket

Identifying a Patch Management Solution: Overview of Key Criteria

Threat Group UNC3944 Abusing Azure Serial Console for Total VM Takeover

Microsoft Secure Boot Bug