Port 22

~ 5 Oct 2022 ~

Cyber-snoops broke into US military contractor, stole data, hid for months

CISA: Multiple APT Groups Infiltrate Defense Organization

October Is Cybersecurity Awareness Month

Secure Your Application Layer, Secure Your Business

NullMixer Dropper Delivers a Multimalware Code Bomb

Giving Away the Keys to Your Backups? Heres How to Keep Out Hackers

Detecting and preventing LSASS credential dumping attacks

Detecting and preventing LSASS credential dumping attacks

NetSPI Raises $410 Million in Growth Funding from KKR

Why Don't CISOs Trust Their Employees?

7 Practical Considerations for Effective Threat Intelligence

RatMilad Spyware Scurries onto Enterprise Android Phones

Dont let your employees become the weakest link

Experts Warn of New RatMilad Android Spyware Targeting Enterprise Devices

Telstra Telecom Suffers Data Breach Potentially Exposing Employee Information

Modified version of Tor Browser spies on Chinese users

ESET Threat Report T2 2022

Uncommon infection and malware propagation methods

Want More Secure Software? Start Recognizing Security-Skilled Developers

FBI, CISA, and NSA Reveal How Hackers Targeted a Defense Industrial Base Organization

Canadian Netwalker Ransomware Affiliate Sentenced to 20 Years in U.S. Prison

DoJ very disappointed with probation sentence for Capital One hacker Paige Thompson

Mitigation for Exchange Zero-Days Bypassed! Microsoft Issues New Workarounds

All your identity needs fulfilled

No Shangri-La for you: Top hotel chain confirms data leak

Make Security a Lifestyle, Not Just a Job

Introducing the SANS Cloud Ace Podcast

Cracked Brute Ratel C4 framework proliferates across the cybercriminal underground

~ 4 Oct 2022 ~

The Insecurities of Cybersecurity Success

Uncle Sam orders federal agencies to step up scans for govt IT security holes

Exposure Management? Understanding the Attacker Takes Center Stage

Microsoft Updates Mitigation for Exchange Server Zero-Days

5 Attack Elements Every Organizations Should Be Monitoring

Russian Hacker Arrested in India for Reportedly Helping Students Cheat in JEE-Main Exam

Aussie Telco Telstra Breached, Reportedly Exposing 30,000 Employees' Data

Former NSA Employee Faces Death Penalty for Selling Secrets

Workforce Data Privacy in the Modern Work Era

Microsoft: Watch out for password spray attacks especially you, Basic Auth

Cybersecurity awareness tips from Microsoft to empower your team to #BeCyberSmart

Cybersecurity awareness tips from Microsoft to empower your team to #BeCyberSmart

Popular YouTube Channel Caught Distributing Malicious Tor Browser Installer

Researchers Report Supply Chain Vulnerability in Packagist PHP Repository

Steam Gaming Phish Showcases Browser-in-Browser Threat

More Than 30% of All Malicious Attacks Target Shadow APIs

Eclypsium Raises Series B to Protect Digital Supply Chain As Attacks Grow

Aryaka Delivers Zero-Trust WAN Based on Unified SASE Architecture

Ransomware 3.0: The Next Frontier

Tidal Cyber Closes $4M Funding Round To Expand Threat-Informed Defense Tech

Expert Insights: How to Protect Sensitive Machine-Learning Training Data Without Borking It

Back to Basics: Cybersecurity's Weakest Link

BEC Scammer Gets 25-Year Jail Sentence for Stealing Over $9.5 Million

NSA Employee Charged with Espionage

BD Totalys MultiProcessor

CISA Orders Federal Agencies to Regularly Track Network Assets and Vulnerabilities

Johnson Controls Metasys ADX Server

Hitachi Energy Modular Switchgear Monitoring (MSM)

Horner Automation Cscape

OnionPoison: infected Tor Browser installer distributed through popular YouTube channel

OMRON CX-Programmer

ProxyNotShell the New Proxy Hell?

Optus Hack Exposes Data of Nearly 2.1 Million Australian Telecom Customers

Japanese sushi chain boss resigns amid accusation of improper data access

Giveaways for every security professional

Growing Reliance on Cloud Brings New Security Challenges

Atlassian, Microsoft bugs on CISAs must-patch list after exploitation spree

~ 3 Oct 2022 ~

Online romance scamlord who netted $9.5m jailed for 25 years

Bumblebee Malware Loader's Payloads Significantly Vary by Victim System

First 72 Hours of Incident Response Critical to Taming Cyberattack Chaos

Vice Society Publishes LA Public School Student Data, Psych Evals

From today, America and UK follow new rules on how they can demand your data from each other

It's 2058. A quantum computer is just another decade away. Still, you curse Cloudflare

National Cybersecurity Awareness program 18 years on: Don't click that

FBI: We tracked who was printing secret documents to unmask ex-NSA suspect

Name That Edge Toon: Mumbo Dumbo

Comm100 Chat Provider Hijacked to Spread Malware in Supply Chain Attack

How AWS, Cisco, Netflix & SAP Are Approaching Cybersecurity Awareness Month

Cyber-proofing data in the cloud

Researchers Link Cheerscrypt Linux-Based Ransomware to Chinese Hackers

Detecting Deepfake Audio by Modeling the Human Acoustic Tract

The High Cost of Living Your Life Online

Hackers Exploiting Dell Driver Vulnerability to Deploy Rootkit on Targeted Computers

Founder of cybersecurity firm Acronis is afraid of his own vacuum cleaner

Between ransomware and month-long engagements, IR teams need a hug and a nap

Ex-NSA Employee Arrested for Trying to Sell U.S. Secrets to a Foreign Government

8 questions to ask yourself before getting a home security camera

DeftTorero: tactics, techniques and procedures of intrusions revealed

Moody's turns up the heat on 'riskiest' sectors for cyberattacks

~ 2 Oct 2022 ~

New Pegasus Spyware Abuses Identified in Mexico

Stenography alert: Backdoor spyware stashed in Microsoft logo

Steganography alert: Backdoor spyware stashed in Microsoft logo

BlackCat malware lashes out at US defense IT contractor

A Visual Summary of SANS Blue Team Summit 2022

~ 1 Oct 2022 ~

Microsoft Exchange Server Has a Zero-Day Problem

Gone in a day: Ethical hackers say it would take mere hours to empty your network

Pay What You Want for This Collection of White Hat Hacking Courses

State-Sponsored Hackers Likely Exploited MS Exchange 0-Days Against ~10 Organizations

CISA Warns of Hackers Exploiting Critical Atlassian Bitbucket Server Vulnerability

Analyzing attacks using the Exchange vulnerabilities CVE-2022-41040 and CVE-2022-41082

~ 30 Sep 2022 ~

Worried About the Exchange Zero-Day? Here's What to Do

Friday Squid Blogging: Breeding the Oval Squid