Port 22

~ 22 Nov 2022 ~

Policy trends: where are we today on regulation in cyberspace?

Crimeware and financial cyberthreats in 2023

Updated Windows Forensic Analysis Poster

~ 21 Nov 2022 ~

Microsoft's attempts to harden Kerberos authentication broke it on Windows Servers

Identity Security Needs Humans and AI Working Hand in Hand

Luna Moth's Novel, Malware-Free Extortion Campaign Takes Flight

Google Releases YARA Rules to Disrupt Cobalt Strike Abuse

Autonomous Vehicles Join the List of US National Security Threats

Microsoft Warns of Rise in Stolen Cloud Tokens Used to Bypass MFA

World Cup phishing emails spike in Middle Eastern countries

Investors Are Pouring Cash Into These 10 Cybersecurity Startups

Name That Toon: Fall Cleanup

Major Security Breach From Business Users' Low-Code Apps Could Come in 2023, Analysts Warn

Time to Get Kids Hacking: Our 2022 Holiday Gift Guide

MIT Research Documents Effectiveness of Consensus Cyber Risk Oversight Principles

US offshore oil and gas installation at 'increasing' risk of cyberattack

Daixin Ransomware Gang Steals 5 Million AirAsia Passengers' and Employees' Data

BlueVoyant Research Reveals Private Equity Portfolio Company Cybersecurity Challenges

A Third of Global Organizations Were Breached Over Seven Times in the Past Year

#BeCyberSmart All Year Round With Educational Resources From Microsoft

Better Together: Why It's Time for Ops and Security to Converge

Notorious Emotet Malware Returns With High-Volume Malspam Campaign

Been Doing It The Same Way For Years? Think Again.

Cyber security pros: move to the next level next year

Breaking the Zeppelin Ransomware Encryption Scheme

A Leak Details Apple's Secret Dirt on Corellium, a Trusted Security Startup

Google Wins Lawsuit Against Russians Linked to Blockchain-based Glupteba Botnet

Google Identifies 34 Cracked Versions of Popular Cobalt Strike Hacking Toolkit in the Wild

~ 20 Nov 2022 ~

Google looking outside the usual channels to fix security skills gap

Serendipitous discovery nets security researcher $70k bounty

~ 19 Nov 2022 ~

A Destabilizing Hack-and-Leak Operation Hits Moldova

Indian Government Publishes Draft of Digital Personal Data Protection Bill 2022

Microsoft Warns of Hackers Using Google Ads to Distribute Royal Ransomware

Chinese 'Mustang Panda' Hackers Actively Targeting Governments Worldwide

Atlassian Releases Patches for Critical Flaws Affecting Crowd and Bitbucket Products

New Startup OpsHelm Tackles Cloud Misconfigurations

~ 18 Nov 2022 ~

Charting the Path to Zero Trust: Where to Begin

Friday Squid Blogging: Squid Brains

DEV-0569 Ransomware Group Remarkably Innovative, Microsoft Cautions

Australia's Hack-Back Plan Against Cyberattackers Raises Familiar Concerns

Hive ransomware crooks extort $100m from 1,300 global victims

Amid Legal Fallout, Cyber Insurers Redefine State-Sponsored Attacks as Act of War

First Review of A Hackers Mind

Palo Alto Networks Focuses on Secure Coding with $195M Cider Deal

Secure Offboarding in the Spotlight as Tech Layoffs Mount

Latest insights on APT activity Week in security with Tony Anscombe

Successful Hack of Time-Triggered Ethernet

The Next Generation of Supply Chain Attacks Is Here to Stay

County of Tehama, Calif., Identifies and Addresses Data Security Incident

Meta Reportedly Fires Dozens of Employees for Hijacking Users' Facebook and Instagram Accounts

LodaRAT Malware Resurfaces with New Variants Employing Updated Functionalities

Threat hunting with MITRE ATT&CK and Wazuh

Hardware-assisted encryption of data in use gets confidential

Tor vs. VPN: Which should you choose?

Z-Library operators arrested, charged with criminal copyright infringement

IT threat evolution in Q3 2022. Non-mobile statistics

IT threat evolution in Q3 2022. Mobile statistics

IT threat evolution Q3 2022

Hive Ransomware Attackers Extorted $100 Million from Over 1,300 Companies Worldwide

Israel sets robotic target-tracking turrets in the West Bank

W4SP Stealer Constantly Targeting Python Developers in Ongoing Supply Chain Attack

Researchers Quietly Cracked Zeppelin Ransomware Keys

Heres How Bad a Twitter Mega-Breach Would Be

~ 17 Nov 2022 ~

Analysts Welcome NSA's Advice for Developers to Adopt Memory-Safe Languages

Security firms hijack New York trees to monitor private workforce

Iranian APT Actors Breached a US Government Network

DEV-0569 finds new ways to deliver Royal ransomware, various payloads

Zero-Trust Initiatives Stall, as Cyberattack Costs Rocket to $1M per Incident

Instagram Impersonators Target Thousands, Slipping by Microsoft's Cybersecurity

Spacecraft Vulnerable to Failure, Thanks to Aerospace Networking Bug

Google wins lawsuit against alleged Russian botnet herders

TMI Tech: How to Stop Vulnerable Software from 'Oversharing'

Cyber Monday Will Be the Most Fraudulent Day of the Season, Says SEON

41 Transatlantic Business Coalition Calls on EU Policymakers to Finalize Agreement to Secure Transatlantic Data Flows

Revelstoke Upgrades SOAR Platform With Augmented Automation, Case Management, and User Interface Capabilities

Chinese Hackers Using 42,000 Imposter Domains in Massive Phishing Attack Campaign

Failures in Twitters Two-Factor Authentication System

FBI-Wanted Leader of the Notorious Zeus Botnet Gang Arrested in Geneva

Red Lion Crimson

Cradlepoint IBR600

100 Apps, Endless Security Checks

Notorious Emotet botnet returns after a few months off

High Severity Vulnerabilities Reported in F5 BIG-IP and BIG-IQ Devices

Iranian Hackers Compromised a U.S. Federal Agencys Network Using Log4Shell Exploit

North Korean Hackers Targeting Europe and Latin America with Updated DTrack Backdoor

~ 16 Nov 2022 ~

Iranian cyberspies exploited Log4j to break into a US govt network

China-Based Billbug APT Infiltrates Certificate Authority

MITRE Engenuity Launches Evaluations for Security Service Providers

The Future of Cybersecurity Recruiting: Lessons on What Employers Want and What Students Need

Are We Ready for AI-Generated Code?

Germany says nein to Qatari World Cup spyware, err, apps

BoostSecurity Emerges From Stealth With SaaS DevSecOps Platform

WASP malware stings Python developers

New Ransomware Data Is In: What's Happening and How to Fight Back

Microsoft contributes S2C2F to OpenSSF to improve supply chain security

Disneyland Malware Team: Its a Puny World After All

Ukraine's 'IT Army' Stops 1,300 Cyberattacks in 8 Months of War

Thousands of Amazon RDS Snapshots Are Leaking Corporate PII

Vectra Unveils Global Managed Detection and Response (MDR) Services With Game-Changing Attack Signal Intelligence

Token tactics: How to prevent, detect, and respond to cloud token theft