Port 22

~ 9 Dec 2022 ~

Iranian APT Targets US With Drokbk Spyware via GitHub

How Naming Can Change the Game in Software Supply Chain Security

Guess which Fortune 500 brands and govt agencies share data with Twitter?

Why is Robust API Security Crucial in eCommerce?

UK lawmakers look to enforce blocking tools for legal but harmful content

How to train your Ghidra

Google: Use SLSA Framework for Better Software Security

Security Vulnerabilities in Eufy Cameras

Lensa AI and Magic Avatars: What to Know Before Using the App

Researchers Uncover New Drokbk Malware that Uses GitHub as a Dead Drop Resolver

Xenomorph: What to know about this Android banking trojan

What Stricter Data Privacy Laws Mean for Your Cybersecurity Policies

MuddyWater Hackers Target Asian and Middle East Countries with Updated Tactics

Boss installed software from behind the Iron Curtain, techies ended up Putin things back together

North Korea using freelance techies to fund missiles and nukes

3 Ways Attackers Bypass Cloud Security

~ 8 Dec 2022 ~

CNAPP Shines a Light Into Evolving Cloud Environments

Agrius Iranian APT Group Cuts Into Diamond Industry

REvil-hit Medibank to pull plug on IT, shore up defenses

How Do I Use the Domain Score to Determine if a Domain Is a Threat?

Single Sign-on: It's Only as Good as Your Ability to Use It

Lack of Cybersecurity Expertise Poses Threat for Public-Safety Orgs

APT37 Uses Internet Explorer Zero-Day to Spread Malware

New Ransom Payment Schemes Target Executives, Telemedicine

Phishing in the Cloud: We're Gonna Need a Bigger Boat

Researchers Uncover Darknet Service Allowing Hackers to Trojonize Legit Android Apps

(ISC) Recruits 110,000 People Interested in a Cybersecurity Career in Three Months

Interpres Security Emerges from Stealth to Help Companies to Optimize Security Performance

Where to Find the Best Open Source Security Technology

Report: Air-Gapped Networks Vulnerable to DNS Attacks

Popular HR and Payroll Company Sequoia Discloses a Data Breach

Leaked Signing Keys Are Being Used to Sign Malware

Elon Musks Twitter Files Are a Feast for Conspiracy Theorists

Five British companies fined for making half a million nuisance calls

COVID-bit: New COVert Channel to Exfiltrate Data from Air-Gapped Computers

Apple Boosts Security With New iMessage, Apple ID, and iCloud Protections

Best Year-End Cybersecurity Deals from Uptycs, SANS Institute, and Bitdefender

Advantech iView

AVEVA InTouch Access Anywhere

DeathStalker targets legal entities with new Janicab variant

Rockwell Automation Logix controllers

Weep for the cybercriminals who fell for online scams and lost $2.5m last year

Google Warns of Internet Explorer Zero-Day Vulnerability Exploited by ScarCruft Hackers

Iranian Hackers Strike Diamond Industry with Data-Wiping Malware in Supply-Chain Attack

North Korea hits new low by using Seoul Halloween tragedy to exploit Internet Explorer zero-day

States label TikTok 'a malicious and menacing threat'

Hacker Fails for the Win

Egad, did Apple do something right? End-to-end encryption for (most) iCloud services

~ 7 Dec 2022 ~

Rackspace Incident Highlights How Disruptive Attacks on Cloud Providers Can Be

Fraudsters Siphon $360M From Retailers Using 50M Fake Shoppers

Android Serves Up a Slew of Security Updates, 4 Critical

Key Security Announcements From AWS re:Invent 2022

4 Arrested for Filing Fake Tax Returns With Stolen Data

San Francisco terminates explosive killer cop bots

Apple Kills Its Plan to Scan Your Photos for CSAM. Heres Whats Next

Will New CISA Guidelines Help Bolster Cyber Defenses?

Apple Expands End-to-End Encryption to iCloud Backups

Scammers Are Scamming Other Scammers Out of Millions of Dollars

Mitigate threats with the new threat matrix for Kubernetes

Piiano Equips Developers to Stop Sensitive Data Breaches

3 xIoT Attacks Companies Aren't Prepared For

San Francisco Rolls Back Its Plan for Killer Robots

Cybersecurity Resilience Emerges as Top Priority as 62% of Companies Say Security Incidents Impacted Business Operations

Vice Society Ransomware Attackers Targeted Dozens of Schools in 2022

How XDR Helps Protect Critical Infrastructure

Chinese Hackers Using Russo-Ukrainian War Decoys to Target APAC and European Entities

The Decoupling Principle

Russian Hackers Spotted Targeting U.S. Military Weapons and Hardware Supplier

Taiwan bans state-owned devices from running Chinese platform TikTok

Zerobot Weaponizes Numerous Flaws in Slew of IoT Devices

For Cyberattackers, Popular EDR Tools Can Turn into Destructive Data Wipers

Fantasy a new Agrius wiper deployed through a supplychain attack

Microsoft Alerts Cryptocurrency Industry of Targeted Cyber Attacks

Microsoft: (Cyber) winter is coming as DDoS attack disrupts Russian bank

Amnesty International Canada claims attack by China-backed forces

New Go-based Zerobot Botnet Exploiting Dozen of IoT Vulnerabilities to Expand its Network

South Pacific vacations may be wrecked by ransomware

Shift to Memory-Safe Languages Gains Momentum

~ 6 Dec 2022 ~

ASM Can Fill Gaps While Working to Implement SBOM

Rackspace confirms ransomware attack behind days-long email outage

Cambridge Centre for Risk Studies and Kivu Release Benchmark of Cost-Effective Responses to Cybercrime

Google Chrome Flaw Added to CISA Patch List

Russia Readies Winter Cyberattacks As Troops Retreat From Ukraine

What Will It Take to Secure Critical Infrastructure?

Name That Edge Toon: Not Your Average Bear

DEV-0139 launches targeted attacks against the cryptocurrency industry

Chinese Hackers Target Middle East Telecoms in Latest Cyber Attacks

Intellicene Brand Launches After Completion of Acquisition by Volaris Group

Iranian State Hackers Targeting Key Figures in Activism, Journalism, and Politics

Want to detect Cobalt Strike on the network? Look to process memory

Hardening Identities With Phish-Resistant MFA

Applying the OODA Loop to Cybersecurity and Secure Access Service Edge

Russian Actors Use Compromised Healthcare Networks Against Ukrainian Orgs

AlgoSec Acquires Prevasio To Disrupt Agentless Cloud Security Market

Machine Learning Models: A Dangerous New Attack Vector

KmsdBot botnet is down after operator sends typo in command

The Invasive Reach of 'Digital-by-Default' Immigration

Darknet's Largest Mobile Malware Marketplace Threatens Users Worldwide

Understanding NIST CSF to assess your organization's Ransomware readiness

CryWiper Data Wiper Targeting Russian Sites