Port 22

~ 8 Feb 2023 ~

How the US Can Stop Data Brokers' Worst PracticesRight Now

SolarWinds and Market Incentives

Russian Hackers Using Graphiron Malware to Steal Data from Ukraine

How to Think Like a Hacker and Stay Ahead of Threats

ESET Threat Report T3 2022

Russian Hacker Pleads Guilty to Money Laundering Linked to Ryuk Ransomware

Suspect in Finnish psychotherapy center blackmail hack arrested

CERT-UA Alerts Ukrainian State Authorities of Remcos Software-Fueled Cyber Attacks

Biden's SOTU: Data Privacy Is Now a Must-Hit US State of the Union Topic

~ 7 Feb 2023 ~

Cloud Apps Still Demand Way More Privileges Than They Use

'Money Lover' Finance App Exposes User Data

Fresh, Buggy Clop Ransomware Variant Targets Linux Systems

KrebsOnSecurity in Upcoming Hulu Series on Ashley Madison Breach

DPRK Using Unpatched Zimbra Devices to Spy on Researchers

New Banking Trojan Targeting 100M Pix Payment Platform Accounts

Industrial Cybersecurity Innovator Opscura Receives $9.4M in Series A Funding as Critical Operations Transform

Ongoing VMware ESXi Ransomware Attack Highlights Inherent Virtualization Risks

With TikTok Bans, the Time for Operational Governance Is Now

Backdoor in Dingo Cryptocurrency Allows Creator to Steal (Nearly) Everything

Encrypted Messaging App Exclu Used by Criminal Groups Cracked by Joint Law Enforcement

Coalfire Compliance Essentials Optimized for Automated Evidence Collection

ARMO Integrates ChatGPT to Help Users Secure Kubernetes

Intel 471 Announces Powerful and Scalable Attack Surface Protection Solution Suite

Infosec Launches New Office Comedy Themed Security Awareness Training Series

Financial Institutions Are Suffering From Increasingly Sophisticated Cyberattacks, According to Contrast Security

Valtix Survey: 95% of Organizations Say Multi-cloud Is a 'Strategic Priority' but Only 58% Have the Security Architecture to Support It

DataDome's Inaugural E-Commerce Holiday Bot & Online Fraud Report Reveals the U.S. as the Top Source of Bot Attacks

Optimizing Cybersecurity Investments in a Constrained Spending Environment

5 Ways to Survive Scam Season or Rather, Tax Season

Hackers Exploit Vulnerabilities in Sunlogin to Deploy Sliver C2 Framework

Tackling the New Cyber Insurance Requirements: Can Your Organization Comply?

Malware Delivered through Google Search

Linux Variant of Clop Ransomware Spotted, But Uses Faulty Encryption Algorithm

Into the void: Your tech and security in digital darkness

VMware Finds No Evidence of 0-Day in Ongoing ESXiArgs Ransomware Spree

EnOcean SmartServer

Web beacons on websites and in e-mail

A Fool With a Tool Is Still a Fool: A Cyber Take

Eurocops shut down Exclu encrypted messaging app, arrest dozens

Keeping KillNet at Bay: Use the IP Address Blocklist

~ 6 Feb 2023 ~

Embarrassment as US cyber ambassador's Twitter account is hacked

Consumer Watchdog Reports: CA Privacy Board OKs Landmark Personal Data Regulations, Some Key Protections Left Out

Crypto Drainers Are Ready to Ransack Investor Wallets

Global Ransomware Attack on VMware EXSi Hypervisors Continues to Spread

Cadien Cyber Response Launches to Deliver Incident Response & Complex Digital Forensics Services

Here's a list of proxy IPs to help block KillNet's DDoS bots

Cybercrime Shows No Signs of Slowing Down

Patching & Passwords Lead the Problem Pack for Cyber-Teams

Introducing Adaptive Protection in Microsoft PurviewPeople-centric data protection for a multiplatform world

Online safety laws: Whats in store for childrens digital playgrounds?

Name That Edge Toon: For the Birds

How Cybercriminals Are Operationalizing Money Laundering and What to Do About It

Keeping unstructured data safe and sound

GuLoader Malware Using Malicious NSIS Executable to Target E-Commerce Industry

Microsoft: Iranian Nation-State Group Sanctioned by U.S. Behind Charlie Hebdo Hack

Inside Safe City, Moscows AI Surveillance Dystopia

Attacking Machine Learning Systems

SaaS in the Real World: Who's Responsible to Secure this Data?

OpenSSH Releases Patch for New Pre-Auth Double Free Vulnerability

Trust, not tech, is holding back a safer internet

FormBook Malware Spreads via Malvertising Using MalVirt Loader to Evade Detection

School laptop auction devolves into extortion allegation

Ransomware scum launch wave of attacks on critical, but old, VMWare ESXi vuln

~ 5 Feb 2023 ~

Finlands Most-Wanted Hacker Nabbed in France

Have we learnt nothing from SolarWinds supply chain attacks? Not yet it appears

~ 4 Feb 2023 ~

Googling for Software Downloads Is Extra Risky Right Now

PixPirate: New Android Banking Trojan Targeting Brazilian Financial Institutions

Iran crew stole Charlie Hebdo database, says Microsoft

New Wave of Ransomware Attacks Exploiting VMware Bug to Target ESXi Servers

Warning: Hackers Actively Exploiting Zero-Day in Fortra's GoAnywhere MFT

The Chinese Spy Balloon Shows the Downsides of Spy Balloons

HeadCrab bots pinch 1,000+ Redis servers to mine coins

~ 3 Feb 2023 ~

What CISOs Can Do About Brand Impersonation Scam Sites

Friday Squid Blogging: Studying the Colossal Squid

Iran-Backed Actor Behind 'Holy Souls' Cyberattack on Charlie Hebdo, Microsoft Says

Fast-evolving Prilex POS malware can block contactless payments

A Hackers Mind News

Guy accused of wrecking crypto exchange now hauled into court

Is Your EV Charging Station Safe? New Security Vulnerabilities Uncovered

Post-Macro World Sees Rise in Microsoft OneNote Documents Delivering Malware

How the Cloud Is Shifting CISO Priorities

Key takeaways from ESETs new APT Activity Report Week in security with Tony Anscombe

Congress Has a Lo-Fi Plan to Fix the Classified Documents Mess

Iranian OilRig Hackers Using New Backdoor to Exfiltrate Data from Govt. Organizations

Manipulating Weights in Face-Recognition AI Systems

The Pivot: How MSPs can Turn a Challenge Into a Once-in-a-Decade Opportunity

Another RAC staffer nabbed for storing and sharing road accident data

Atlassian's Jira Software Found Vulnerable to Critical Authentication Vulnerability

LockBit claims responsibility for ION ransomware attack but US/UK hounds are sniffing

New High-Severity Vulnerabilities Discovered in Cisco IOx and F5 BIG-IP Products

Chinese surveillance balloon over US causes fearful gasbagging

CISA Alert: Oracle E-Business Suite and SugarCRM Vulnerabilities Under Attack

MITRE Releases Tool to Design Cyber Resilient Systems

Former Ubiquiti dev pleads guilty in data theft and extortion case

~ 2 Feb 2023 ~

Netflixs US Password-Sharing Crackdown Isnt HappeningYet

Hornetsecurity Combats QR Code Phishing With Launch of New Technology

Korelock Launches IOT Smart Lock Technology Company

Cyberattack on Fintech Firm Disrupts Derivatives Trading Globally

Malvertising attacks are distributing .NET malware loaders

6 Examples of the Evolution of a Scam Site