Port 22

~ 19 Dec 2022 ~

How to build a secure foundation for identity and access

Gatekeepers Achilles heel: Unearthing a macOS vulnerability

Fortnite Developer Epic Games Slapped With $275M Penalty

Malicious Python Trojan Impersonates SentinelOne Security Client

Forrester names Microsoft a Leader in Q4 2022 Security Analytics Platforms Wave report

CVE-2022-41040 and CVE-2022-41082 zero-days in MS Exchange

Security Skills Command Premiums in Tight Market

Bugcrowd Launches Bug Bounty Program for Australian-Based Navitas

Rethinking Risk After the FTX Debacle

Holiday Spam, Phishing Campaigns Challenge Retailers

Glupteba Botnet Continues to Thrive Despite Google's Attempts to Disrupt It

Cybercrime (and Security) Predictions for 2023

How to Surrender to a Drone

How to set up parental controls on your childs new smartphone

New Agenda Ransomware Variant, Written in Rust, Aiming at Critical Infrastructure

Facebook Cracks Down on Spyware Vendors from U.S., China, Russia, Israel, and India

~ 18 Dec 2022 ~

Google Takes Gmail Security to the Next Level with Client-Side Encryption

~ 17 Dec 2022 ~

Email hijackers scam food out of businesses, not just money

An Alleged Russian Smuggling Ring Was Uncovered in New Hampshire

Samba Issues Security Updates to Patch Multiple High-Severity Vulnerabilities

~ 16 Dec 2022 ~

GitHub Expands Secret Scanning, 2FA Across Platform

Let's spend $22m supporting survivors of tech-enabled abuse, lawmakers suggest

Friday Squid Blogging: Squid in Concert

Cyber Threats Loom as 5B People Prepare to Watch World Cup Final

Researcher Bypasses Akamai WAF

New Botnet Targeting Minecraft Servers Poses Potential Enterprise Threat

FBI: Criminals Using BEC Attacks to Scavenge Food Shipments

As Long as Were on the Subject of CAPTCHAs

Twitter staffer turned Saudi spy jailed for 3.5 years

Organizations Unprepared for Upcoming Data Privacy Regulations

With SASE Definition Still Cloudy, Forum Proposes Standard

Iran-Backed Charming Kitten APT Eyes Kinetic Ops, Kidnapping

Chinese APT Group MirrorFace Interferes in Japanese Elections

Zero Trust in the Era of Edge

Compliance Is Not Enough: How to Manage Your Customer Data

MirrorFace aims for highvalue targets in Japan Week in security with Tony Anscombe

Trojanized Windows 10 Installer Used in Cyberattacks Against Ukrainian Government Entities

Live From London: Next-Gen Cybersecurity Takes Stage at Black Hat Europe

Ex-Twitter employee Gets 3.5 Years Jail for Spying on Behalf of Saudi Arabia

Cyber Security Is Not a Losing Game If You Start Right Now

GitHub Announces Free Secret Scanning for All Public Repositories

Apple Patches iPhone Zero-Day

Help! My kid has asked Santa for a smartphone

Goodbye SHA-1: NIST Retires 27-Year-Old Widely Used Cryptographic Algorithm

Minecraft Servers Under Attack: Microsoft Warns About Cross-Platform DDoS Botnet

Microsoft Teams: A vector for child sexual abuse material with a two-day processing time for complaints

CISA Alert: Veeam Backup and Replication Vulnerabilities Being Exploited in Attacks

US adds 36 Chinese entities to naughty list, drops 25 after checking it twice

NIST says you better dump weak SHA-1 ... by 2030

~ 15 Dec 2022 ~

NIST Finally Retires SHA-1, Kind Of

Zero Trust Shouldnt Be The New Normal

Sting op takes down 50 DDoS-for-hire domains, seven people collared

Axonius Bolsters SaaS Management Offering With New Behavioral Analytics and SaaS User-Device Association Capabilities to Help Teams Address SaaS Application Risk

Stolen Data on 80K+ Members of FBI-Run InfraGard Reportedly for Sale on Dark Web Forum

Meta Ponies Up $300K Bounty for Zero-Click Mobile RCE Bugs in Facebook

WatchGuard Threat Lab Report Finds Top Threat Arriving Exclusively Over Encrypted Connections

DDoS Attack Platforms Shut Down in Global Law Enforcement Operation

MCCrash: Cross-platform DDoS botnet targets private Minecraft servers

Do more with less with Microsoft Security3 strategies to get you started

Blackmailing MoneyMonger Malware Hides in Flutter Mobile Apps

Microsoft to Europe: We're setting an EU 'data boundary' from 2023

Data Destruction Policies in the Age of Cloud Computing

API Flaws in Lego Marketplace Put User Accounts, Data at Risk

Researchers Uncover MirrorFace Cyber Attacks Targeting Japanese Political Entities

Microsoft Reclassifies SPNEGO Extended Negotiation Security Vulnerability as 'Critical'

SEC charges crew of social media influencers with $100m fraud

Prosys OPC UA Simulation Server

Siemens SCALANCE X-200RNA Switch Devices

Siemens Multiple Denial of Service Vulnerabilities in Industrial Products

Siemens Multiple Vulnerabilities in SCALANCE Products

Siemens PLM Help Server

Metas Tricky Quest to Protect Your Account

Siemens SIMATIC WinCC OA Ultralight Client

Siemens Simcenter STAR-CCM+

Siemens Polarion ALM

Siemens Products affected by OpenSSL 3.0

Siemens APOGEE/TALON Field Panels

A Security Vulnerability in the KmsdBot Botnet

GPS Signals Are Being Disrupted in Russian Cities

Traveling for the holidays? Stay cybersafe with these tips

Android Malware Campaign Leverages Money-Lending Apps to Blackmail Victims

Top 5 Web App Vulnerabilities and How to Find Them

Hackers Bombard Open Source Repositories with Over 144,000 Malicious Packages

FBI Charges 6, Seizes 48 Domains Linked to DDoS-for-Hire Service Platforms

Hacking Using SVG Files to Smuggle QBot Malware onto Windows Systems

Iran-linked Charming Kitten espionage gang bares claws to pollies, power orgs

Reimagining Democracy

~ 14 Dec 2022 ~

On the 12th day of the Rackspace email disaster, it did not give to me

Malicious Microsoft-signed Windows drivers wielded in cyberattacks

Seven smuggled US military tech for Moscow, say Feds

NSA Slices Up 5G Mobile Security Risks

AWS strains to make Simple Storage Service not so simple to screw up

Cybereason Warns Global Organizations Against Destructive Ransomware Attacks From Black Basta Gang

Keysight Announces 400GE Network Cybersecurity Test Platform

Six Charged in Mass Takedown of DDoS-for-Hire Sites

Epic Management Provides Notice of Data Security Incident

TikTok could be banned from America, thanks to proposed bipartisan bill

Microsoft-Signed Malicious Drivers Usher In EDR-Killers, Ransomware

CSAF Is the Future of Vulnerability Management

Patch Tuesday updates spark errors when creating Hyper-V VMs