Port 22

~ 2 Mar 2023 ~

On Shaky Ground: Why Dependencies Will Be Your Downfall

Hackers Exploit Containerized Environments to Steals Proprietary Data and Software

Intruder alert: UK retailer WH Smith hit by another data leak

Dumb Password Rules

This Hacker Tool Can Pinpoint a DJI Drone Operator's Exact Location

<a href="https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-03" hreflang="en">Rittal CMC III Access systems</a>

<a href="https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-02" hreflang="en">Baicells Nova</a>

<a href="https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-01" hreflang="en">Mitsubishi Electric MELSEC iQ-F Series</a>

New Cryptojacking Campaign Leverages Misconfigured Redis Database Servers

2023 Browser Security Report Uncovers Major Browsing Risks and Blind Spots

Experts Identify Fully-Featured Info Stealer and Trojan in Python Package on PyPI

MQsTTang: Mustang Pandas latest backdoor treads new ground with Qt and MQTT

Forget ChatGPT, the most overhyped security tool is technology itself, Wiz warns

SysUpdate Malware Strikes Again with Linux Version and New Evasion Tactics

Critical Flaw in Cisco IP Phone Series Exposes Users to Command Injection Attack

How to Automate in Azure Using PowerShell - Part 2

~ 1 Mar 2023 ~

Ermetic Adds Kubernetes Security to CNAPP

Octillo Launches Women's Cybersecurity Scholarship in Partnership With the Center for Cyber Safety and Education

DoControl's 2023 SaaS Security Threat Landscape Report Finds Enterprises and Mid-Market Organizations Have Exposed Public SaaS Assets

Visibility Is as Vital as Zero Trust for Low-Code/No-Code Security

Forescout Addresses Modern SecOps Challenges With Launch of Forescout XDR

Fastly Launches Managed Security Service to Protect Enterprises From Rising Web Application Attacks

Dish Blames Ransomware Attack for Disruptions of Internal Systems, Call Center Services

It's official: BlackLotus malware can bypass Secure Boot on Windows machines

Offensive Security Is Now OffSec - Refresh Reflects Future of Cybersecurity Learning and Skills Development

Linux Support Expands Cyber Spy Group's Arsenal

What Happened in That Cyberattack? With Some Cloud Services, You May Never Know

The Importance of Recession-Proofing Security Operations

SEC cyber risk management rulea security and compliance opportunity

The Microsoft Intune Suite fuels cyber safety and IT efficiency

CISA: ZK Java Framework RCE Flaw Under Active Exploit

Without FIDO2, MFA Falls Short

Cyberattackers Double Down on Bypassing MFA

Cybercriminals Targeting Law Firms with GootLoader and FakeUpdates Malware

Fooling a Voice Authentication System with an AI-Generated Voice

BlackLotus Becomes First UEFI Bootkit Malware to Bypass Secure Boot on Windows 11

CISOs Are Stressed Out and It's Putting Companies at Risk

BlackLotus UEFI bootkit: Myth confirmed

Gmail and Google Calendar Now Support Client-Side Encryption (CSE) to Boost Data Privacy

PlugX RAT masquerades as legit Windows debugger to slip past security

Parallax RAT Targeting Cryptocurrency Firms with Sophisticated Injection Techniques

Google: You get crypto, you get crypto, almost everyone gets email crypto!

CISOs Share Their 3 Top Challenges for Cybersecurity Management

Google Adds Client-Side Encryption to Gmail, Calendar

US government sets a 30-day deadline for wiping TikTok from feds' phones

~ 28 Feb 2023 ~

Hoxhunt Launches Human Risk Management Platform

Two of The Worst Healthcare Data Breaches in US History Happened Last Year

US cybersecurity chief: Software makers shouldn't lawyer their way out of security responsibilities

LastPass DevOps Engineer Targeted for Cloud Decryption Keys in Latest Breach Revelation

Exfiltrator-22: The Newest Post-Exploitation Toolkit Nipping at Cobalt Strike's Heels

US Marshals Ransomware Hit Is 'Major' Incident

Dish: Someone snatched our data, if you're wondering why our IT systems went down

WannaCry Hero & Kronos Malware Author Named Cybrary Fellow

Pernicious Permissions: How Kubernetes Cryptomining Became an AWS Cloud Data Heist

Microsoft Security Experts discuss evolving threats in roundtable chat

Hackers Claim They Breached T-Mobile More Than 100 Times in 2022

China's BlackFly Targets Materials Sector in 'Relentless' Quest for IP

The DoJ Disruption of the Hive Ransomware Group Is a Short-Lived Win

New EX-22 Tool Empowers Hackers with Stealthy Ransomware Attacks on Enterprises

Bitdefender Releases Free Decryptor for MortalKombat Ransomware Strain

Side-Channel Attack against CRYSTALS-Kyber

China Is Relentlessly Hacking Its Neighbors

Apple Users Need to Update iOS Now to Patch Serious Flaws

<a href="https://www.cisa.gov/news-events/ics-advisories/icsa-23-059-02" hreflang="en">Hitachi Energy Gateway Station</a>

<a href="https://www.cisa.gov/news-events/ics-advisories/icsa-23-059-01" hreflang="en">Hitachi Energy Gateway Station</a>

<a href="https://www.cisa.gov/news-events/ics-advisories/icsa-22-139-01-0" hreflang="en">Mitsubishi Electric MELSEC iQ-F Series (Update B)</a>

Application Security vs. API Security: What is the difference?

APT-C-36 Strikes Again: Blind Eagle Hackers Target Key Industries in Colombia

ESET Research Podcast: Ransomware trashed data, Android threats soared in T3 2022

News Corp outfoxed by IT intruders for years

Russian hacktivists DDoS hospitals, with pathetic results

US Marshals Service leaks law enforcement sensitive information in ransomware incident

CISA Issues Warning on Active Exploitation of ZK Java Web Framework Vulnerability

LastPass Reveals Second Attack Resulting in Breach of Encrypted Password Vaults

Feeling VEXed by software supply chain security? Youre not alone

~ 27 Feb 2023 ~

Active Digital Identity Apps to Surpass 4.1B by 2027

Attackers Were on Network for 2 Years, News Corp Says

Wiz Reaches $10B Valuation With Consolidated Cloud Security Platform

Vouched Raises $6.3M to Expand AI Identity Verification Offering to Telemedicine and Healthcare

Dish multi-day outage rolls on as ransomware fears grow

How to Reduce Code Risk Using Pipelineless Security

All CVEs Are Not Created Equal

Palo Alto Announces Zero-Trust Security Solution for OT

Mobile Banking Trojans Surge, Doubling in Volume

ThreatHunter.ai Launches "More Eyes" Program to Help Large Organizations Mitigate Cyber Threats

Edgio Strengthens Security Offering With WAAP Enhancements and DDoS Scrubbing Solution

5 reasons to adopt a Zero Trust security strategy for your business

How the Ukraine War Opened a Fault Line in Cybercrime, Possibly Forever

Researchers Share New Insights Into RIG Exploit Kit Malware's Operations

As Social Engineering Attacks Skyrocket, Evaluate Your Security Education Plan

Shocking Findings from the 2023 Third-Party App Access Report

China makes it even harder for data to leave its shores

Banning TikTok

Russian charged with smuggling US counterintel tech to Motherland

ChromeLoader Malware Targeting Gamers via Fake Nintendo and Steam Game Hacks

PureCrypter Malware Targets Government Entities in Asia-Pacific and North America

The mobile malware threat landscape in 2022

PlugX Trojan Disguised as Legitimate Windows Debugger Tool in Latest Attacks

Dutch Police Arrest 3 Hackers Involved in Massive Data Theft and Extortion Scheme

When Low-Tech Hacks Cause High-Impact Breaches