Port 22

~ 18 Oct 2022 ~

Defenders beware: A case for post-ransomware investigations

German Cybersecurity Boss Sacked Over Kremlin Connection

Treat Essential Security Certificates as Valuable Assets

How Microsoft Purview and Priva help simplify data protection

How Microsoft Purview and Priva help simplify data protection

Phishing Mitigation Can Cost Businesses More Than $1M Annually

AutoRABIT Accelerates Release Management Processes with Automation and Key Integrations

CISA Offers Free RedEye Analytics Tool for Red Teams

Shared Responsibility or Shared Fate? Decentralized IT Means We Are All Cyber Defenders

Putting on the Red Hat

Mastercard To Bring Crypto Trading Capabilities To Banks

5 Best Password Managers (2022): Features, Pricing, and Tips

ryptocurrency and Ransomware The Ultimate Friendship

Qatar Spyware

Upstart Ransom Cartel linked to REvil veterans

Ransom Cartel linked to Colonial Pipeline attacker REvil, says infosec crew

How the World Will Know If Russia Is Preparing to Launch a Nuclear Attack

Chinese 'Spyder Loader' Malware Spotted Targeting Organizations in Hong Kong

Advantech R-SeeNet

European Police Arrest a Gang That Hacked Wireless Key Fobs to Steal Cars

Ever considered using Confidential Computing to beef up cloud data protection?

Cybersecurity Will Not Thrive in Darkness: A Critical Analysis of Proposed Amendments in Bill C-26 to the Telecommunications Act

Imagine surviving a wiper attack only for ransomware to scramble your restored files

Japanese giants to offer security-as-a-service for connected cars

Cops swoop after crooks use wireless keyfob hack to steal cars

Critical RCE Vulnerability Discovered in Popular Cobalt Strike Hacking Software

Ex-WSJ reporter says he was framed in elaborate 'hack-and-smear' operation

Explore the Value of GIAC Cloud Security and Penetration Testing Certifications

~ 17 Oct 2022 ~

Researchers Keep a Wary Eye on Critical New Vulnerability in Apache Commons Text

Cybersecurity's Hiring Spree Requires a Recruiting Rethink

DiceyF deploys GamePlayerFramework in online casino development studio

The Risk of Stateful Antipatterns in Enterprise Internet Architecture

Interpol busts global 'Black Axe' cyber-fraud suspects

Signal to Ditch SMS/MMS Messaging on Android

Tactics Tie Ransom Cartel Group to Defunct REvil Ransomware

New Research Report Predicts Blockchain and Quantum Threat Will Quickly Spread Beyond Cybercurrencies; Surge in New Product and Services Opportunities to Come

What Fast-Talkers Can Teach Us About Vetting Vendors

Hacking Automobile Keyless Entry Systems

Disinformation Attacks Threaten US Midterm Elections

4 Stakeholders Critical to Addressing the Cybersecurity Workforce Gap

China-linked Budworm burrows hole in US legislature systems

Imprivata Expands Its Integrated Digital Identity Platform to Defragment Identities Across Disparate Applications

Black Basta Ransomware Hackers Infiltrates Networks via Qakbot to Deploy Brute Ratel C4

Researchers Say Microsoft Office 365 Uses Broken Email Encryption to Secure Messages

Why Crypto Winter is No Excuse to Let Your Cyber Defenses Falter

New Prestige Ransomware Targeting Polish and Ukrainian Organizations

Zimbra Releases Patch for Actively Exploited Vulnerability in its Collaboration Suite

5 steps to protect your school from cyberattacks

The Hunt for Wikipedia's Disinformation Moles

Phishing works so well crims won't bother with deepfakes, says Sophos chap

INTERPOL-led Operation Takes Down 'Black Axe' Cyber Crime Organization

~ 16 Oct 2022 ~

Xi Jinping hails 'improved cyber ecology', says state to direct strategic tech research

How to Use Passkeys in Google Chrome and Android

~ 15 Oct 2022 ~

Infosec still (mostly) a boys club

Anti-Money Laundering Service AMLBot Cleans House

Elon Musks SpaceX Bails on Starlink Funding for Ukraine

Indian Energy Company Tata Power's IT Infrastructure Hit By Cyber Attack

'Baby Al Capone' to pay $22m to SIM-swap crypto-heist victim

~ 14 Oct 2022 ~

Friday Squid Blogging: On Squid Ink

Microsoft Secures Azure Enclaves With Hardware Guards

FYI: Microsoft Office 365 Message Encryption relies on insecure block cipher

Store credit card numbers in a debug log, lose millions of accounts. Cost? $1.9m

New Prestige ransomware impacts organizations in Ukraine and Poland

New Prestige ransomware impacts organizations in Ukraine and Poland

Apple's Constant Battles Against Zero-Day Exploits

Concerns Over Fortinet Flaw Mount; PoC Released, Exploit Activity Grows

Researchers Reveal Detail for Windows Zero-Day Vulnerability Patched Last Month

Upcoming Speaking Engagements

Fast Fashion Retailer Data Breach Draws $1.9M Fine

Microsoft 365 Message Encryption Can Leak Sensitive Info

Acuity Reports Increase in Cyber Liability Insurance Claims as Cybercrime Skyrockets

Regulating DAOs

Care and Feeding of the SOC's Most Powerful Tool: Your Brain

New Chinese Cyberespionage Group Targeting IT Service Providers and Telcos

New PHP Version of Ducktail Malware Hijacking Facebook Business Accounts

Just how critical is data sovereignty?

How To Build a Career as a Freelance Cybersecurity Analyst From Scratch

ESET research into POLONIUMs arsenal Week in security with Tony Anscombe

LockBit 3.0 malware forced NHS tech supplier to shut down hosted sites

Mirai Botnet Hits Wynncraft Minecraft Server with 2.5 Tbps DDoS Attack

PoC Exploit Released for Critical Fortinet Auth Bypass Bug Under Active Attacks

India set to extend deadline for absurd infosec reporting requirements

Mormon Church IT ransacked, data stolen by 'state-sponsored' cyber-thieves

GIAC Introduces Industry-First Cloud Forensic Responder (GCFR) Certification

Juice Technology Receives ISO Certification for Charging Station Cyber Security

ControlMap Announces the Launch of the Trust Portal, Creating Transparency in Cybersecurity Compliance

~ 13 Oct 2022 ~

Quarter of Healthcare Ransomware Victims Forced to Halt Operations

Armis Now Available on Google Cloud Marketplace

Google Cloud Advances Partnerships with 20-Plus Software Companies Focused on Digital Sovereignty and Cybersecurity

HSBC and Silent Eight Expand Machine Learning Partnership

Nexusguard Research Shows Total Number of DDoS Attacks Increased during First Half of 2022 While Maximum Attack Size Decreased Compared to Second Half of 2021

Banks face their 'darkest hour' as malware steps up, maker of antivirus says

Resistant AI and ComplyAdvantage Launch AI Transaction Monitoring Solution To Combat Fraud and Money Laundering

Newly Introduced HackerOne Assets Goes Beyond Attack Surface Management To Close Security Gaps

Comprehensive Network Visibility Is Imperative for Zero-Trust Maturity

Novel npm Timing Attack Allows Corporate Targeting

Feature-Rich 'Alchimist' Cyberattack Framework Targets Windows, Mac, Linux Environments

Tanium Benchmark Sets New Standard for Tracking and Improving Security and Operational Metrics

QAKBOT Attacks Spike Amid Concerning Cybercriminal Collaborations

DFIN DealMaker Meter: Surge in 'Dark Data' Represents Growing Danger for Corporations