Port 22

~ 22 Oct 2022 ~

Russia wages disinformation war. Ukraine's cyber chief calls for global anti-fake news fight

TikToks Security Threat Comes Into Focus

Critical Flaw Reported in Move Virtual Machine Powering the Aptos Blockchain Network

~ 21 Oct 2022 ~

Friday Squid Blogging: The Reproductive Habits of Giant Squid

FBI: Iranian Threat Group Likely to Target US Midterms

Google's GUAC Aims to Democratize Software Supply Chain Security Metadata

Exploit Attempts Underway for Apache Commons Text4Shell Vulnerability

Emotet Botnet Distributing Self-Unlocking Password-Protected RAR Files to Drop Malware

Hackers Started Exploiting Critical "Text4Shell" Apache Commons Text Vulnerability

Passkey Demos Hint at What's Ahead for Passwordless Authentication

A Quick Look at the "Strengthening America's Cybersecurity" Initiative

Katzcy Teams up with NIST on Cybersecurity Games

Securing IoT devices against attacks that target critical infrastructure

Multiple Campaigns Exploit VMware Vulnerability to Deploy Crypto Miners and Ransomware

Iron Man Started His Journey From Scratch & Your Security Awareness Program Can Too

APTC50 updates FurBall Android malware Week in security with Tony Anscombe

List of Common Passwords Accounts for Nearly All Cyberattacks

Adversarial ML Attack that Secretly Gives a Language Model a Point of View

Your Microsoft Exchange Server Is a Security Liability

Ukraine Enters a Dark New Era of Drone Warfare

Good news, URSNIF no longer a banking trojan. Bad news, it's now a backdoor

Microsoft Confirms Server Misconfiguration Led to 65,000+ Companies' Data Leak

~ 20 Oct 2022 ~

Oops, web trackers may have leaked 3 million patients' info

Hardware Makers Standardize Server Chip Security With Caliptra

Brazilian Police Nab Suspected Member of Lapsus$ Group

Microsoft Data-Exposure Incident Highlights Risk of Cloud Storage Misconfiguration

'FurBall' Spyware Being Used Against Iranian Citizens

Cloud migration and the cyber skills shortage

Battle with Bots Prompts Mass Purge of Amazon, Apple Employee Accounts on LinkedIn

Google Launches GUAC Open Source Project to Secure Software Supply Chain

Name That Toon: Witching Hour

OldGremlin Ransomware Targeted Over a Dozen Russian Entities in Multi-Million Scheme

Banco Santander and Forgepoint Capital Announce Strategic Alliance to Advance Cybersecurity Investment and Innovation Globally

BlueBleed: Microsoft customer data leak claimed to be 'one of the largest' in years

Anonos Secures $50 Million in IP-Backed Financing to Deliver Data Privacy Technology with 100% Accuracy and Utility to Data-Driven Enterprises

Datadog Launches Cloud Security Management to Provide Cloud Native Application Protection

Corsa Security Drives Forward with Additional $10 Million Funding

Only 4% of Security and IT Leaders Believe All of Their Cloud Data is Sufficiently Secured

CyCognito Launches Next Generation of Exploit Intelligence Threat Remediation Platform

SynSaber Adds New Dynamic Pipeline to OT Cybersecurity Platform

New Torii Report Finds 60% of IT Leaders Dont Know What Apps They Have

HP Launches Sure Access Enterprise to Protect High Value Data and Systems

Security Testing Improves Headaches & Compliance

Are You a CISO Building Your Risk Register for 2023? Read This First

Bolster Deepens Platform with Dark Web Threat Intelligence and 24/7 Support

8 Trends Driving Cybersecurity in the Public Sector

Interview with Signals New President

Hackers Using New Version of FurBall Android Malware to Spy on Iranian Citizens

Not All Sandboxes Are for Children: How to Secure Your SaaS Sandbox

The Vice Society Ransomware Gang Thrives in a Crucial Blind Spot

Bentley Systems MicroStation Connect

Biden administration wants standard cyber security labelling for smart devices

Domestic Kitten campaign spying on Iranian citizens with new FurBall malware

These 16 Clicker Malware Infected Android Apps Were Downloaded Over 20 Million Times

New Ursnif Variant Likely Shifting Focus to Ransomware and Data Theft

Confidentiality in the cloud: the delicate bargain of trust

Brazilian Police Arrest Suspected Member of Lapsus$ Hacking Group

Health insurer's infosec incident diagnosis goes from 'take a chill pill' to emergency ward

CISA warns of security holes in industrial Advantech, Hitachi kit

~ 19 Oct 2022 ~

Cost of a health insurance security breach? NY watchdogs say it's $4.5m

Microsoft Customer Data Exposed by Misconfigured Server

Emotional Toll From Cyberattacks Can Linger Among Staff for Years

Verizon prepaid accounts hijacked by SIM swap crooks

Security Awareness Urged to Grow Beyond Compliance

Scammers Targeting Those Seeking Student Loan Forgiveness

4 Ways To Achieve Comprehensive Security

Apache Commons Vulnerability: Patch but Don't Panic

SBOMs: An Overhyped Concept That Won't Secure Your Software Supply Chain

Millennials, Gen Z actually suck at workplace security

Zscaler Advances Enterprise Data Security With Zero-Configuration Data Protection

Do more with lessDiscover the latest Microsoft Entra innovations

Do more with lessDiscover the latest Microsoft Entra innovations

Kaspersky Launches New VPN to Amplify Speed and Convenience

GroupSense Delivers New Ransomware Negotiation Training Service

DigiCert Appoints Industry Veteran Amit Sinha as Chief Executive Officer

Revelstoke Teams Up With BreachRx, Offering Users Automated Incident Response and Compliance Solutions

So, the US, China, and Russia walk into an infosec conference

A New Solution to the Cybersecurity Skills Gap: Building Security into Operational Teams

RCS Secure Catches Its Next Big Wave

China-Linked Cyber Espionage Team Homes In on Hong Kong Government Orgs

Researchers Detail Azure SFX Flaw That Could've Allowed Attackers to Gain Admin Access

GitGuardian Extends Code Security Platform, Adding Infrastructure-as-Code Scanning for Security Misconfigurations

Tear in Microsoft Azure Service Fabric can give attackers full admin privileges

The infinite beauty of the hive mind

Chinese Hackers Targeting Online Casinos with GamePlayerFramework Malware

A Quick Guide for Small Cybersecurity Teams Looking to Invest in Cyber Insurance

Museum Security

Experts Warn of Stealthy PowerShell Backdoor Disguising as Windows Update

Dont get scammed when buying tickets online

CISA Warns of Critical Flaws Affecting Industrial Appliances from Advantech and Hitachi

Germany stands down cyber boss over Russian ties

How Card Skimming Disproportionally Affects Those Most In Need

FBI: Looking for Biden's student loan forgiveness? Watch out for these scams

~ 18 Oct 2022 ~

Patching-as-a-Service Offers Benefits, Challenges

Build some flexibility into your cyber learning

What Is the Difference Between Identity Verification and Authentication?

'Fully undetectable' Windows backdoor gets detected

Gen Z, Millennial Workers Are Bigger Cybersecurity Risks Than Older Employees

NSA urges enterprises to watch China, Taiwan tensions

Defenders beware: A case for post-ransomware investigations