Port 22

~ 6 Mar 2023 ~

Shein Shopping App Glitch Copies Android Clipboard Contents

Police Raid Rounds Up Core Members of DoppelPaymer Ransomware Gang

NIST's Quantum-Proof Algorithm Has a Bug, Analysts Say

SANS Institute Partners With Google to Launch Cloud Diversity Academy

Protecting Android clipboard content from unintended exposure

The Role of Verifiable Credentials In Preventing Account Compromise

Name That Edge Toon: Domino Effect

New HiatusRAT Malware Targets Business-Grade Routers to Covertly Spy on Victims

From Disinformation to Deep Fakes: How Threat Actors Manipulate Reality

Core Members of DoppelPaymer Ransomware Gang Targeted in Germany and Ukraine

New National Cybersecurity Strategy

This Algorithm Could Ruin Your Life

Experts Reveal Google Cloud Platform's Blind Spot for Data Exfiltration Attacks

Threat landscape for industrial automation systems for H2 2022

Experts Discover Flaw in U.S. Govt's Chosen Quantum-Resistant Encryption Algorithm

Where are the women in cyber security? On the dark side, study suggests

~ 5 Mar 2023 ~

A Privacy Hero's Final Wish: An Institute to Redirect AI's Future

~ 4 Mar 2023 ~

The LastPass Hack Somehow Gets Worse

What to Do When Your Boss Is Spying on You

The High-Stakes Blame Game in the White House Cybersecurity Plan

Security and IT Teams No Longer Need To Pay For SaaS-Shadow IT Discovery

New FiXS ATM Malware Targeting Mexican Banks

Secret Service, ICE break the law over and over with fake cell tower spying

Rapid7 Brings Threat Intel Data to USF Cybersecurity Lab

Snap CISO: I rate software supply chain risk 9.9 out of 10

~ 3 Mar 2023 ~

Friday Squid Blogging: Were Almost at Flying Squid Drones

FTC: BetterHelp pushed users to share mental health info then gave it to Facebook

EV Charging Infrastructure Offers an Electric Cyberattack Opportunity

Indigo Books Refuses LockBit Ransomware Demand

Polish Politician's Phone Patrolled by Pegasus

Frankenstein malware stitched together from code of others disguised as PyPI package

3 Ways Security Teams Can Use IP Data Context

Chick-fil-A Gives Customers a Bone to Pick After Data Breach

Nick Weaver on Regulating Cryptocurrency

It's Time to Assess the Potential Dangers of an Increasingly Connected World

What does $5,000 buy you on a hacking forum? Week in security with Tony Anscombe

The Sketchy Plan to Build a Russian Android Phone

Warning on SolarWinds-like supply-chain attacks: 'They're just getting bigger'

German Digital Affairs Committee hearing heaps scorn on Chat Control

New Flaws in TPM 2.0 Library Pose Threat to Billions of IoT and Enterprise Devices

Smart security

Chinese Hackers Targeting European Entities with New MQsTTang Backdoor

U.S. Cybersecurity Agency Raises Alarm Over Royal Ransomware's Deadly Capabilities

IBM Contributes Supply Chain Security Tools to OWASP

Highlights from the New U.S. Cybersecurity Strategy

Crappy insecure software in Biden's crosshairs

Why Certify with GIAC? (Korean)

Top 5 Reasons to Earn GIAC Certifications & Keep Them Active (Korean)

~ 2 Mar 2023 ~

Axis Security Acquisition Strengthens Aruba's SASE Solutions With Integrated Cloud Security and SD-WAN

CI/CD: Necessary for modern software development, yet it carries a lot of risk

CISA, MITRE Look to Take ATT&CK Framework Out of the Weeds

Biden's Cybersecurity Strategy Calls for Software Liability, Tighter Critical Infrastructure Security

BlackLotus Bookit Found Targeting Windows 11

What GoDaddy's Years-Long Breach Means for Millions of Clients

Sale of Stolen Credentials and Initial Access Dominate Dark Web Markets

Everybody Wants Least Privilege, So Why Isn't Anyone Achieving It?

New Report: Inside the High Risk of Third-Party SaaS Apps

Microsoft is named a Leader in the 2022 Gartner Magic Quadrant for Endpoint Protection Platforms

Booking.com's OAuth Implementation Allows Full Account Takeover

Hackers Target Young Gamers: How Your Child Can Cause Business Compromise

New research, tooling, and partnerships for more secure AI and machine learning

On Shaky Ground: Why Dependencies Will Be Your Downfall

Hackers Exploit Containerized Environments to Steals Proprietary Data and Software

Intruder alert: UK retailer WH Smith hit by another data leak

Dumb Password Rules