Port 22

~ 3 Mar 2023 ~

Crappy insecure software in Biden's crosshairs

Why Certify with GIAC? (Korean)

Top 5 Reasons to Earn GIAC Certifications & Keep Them Active (Korean)

~ 2 Mar 2023 ~

Axis Security Acquisition Strengthens Aruba's SASE Solutions With Integrated Cloud Security and SD-WAN

CI/CD: Necessary for modern software development, yet it carries a lot of risk

CISA, MITRE Look to Take ATT&CK Framework Out of the Weeds

Biden's Cybersecurity Strategy Calls for Software Liability, Tighter Critical Infrastructure Security

BlackLotus Bookit Found Targeting Windows 11

What GoDaddy's Years-Long Breach Means for Millions of Clients

Sale of Stolen Credentials and Initial Access Dominate Dark Web Markets

Everybody Wants Least Privilege, So Why Isn't Anyone Achieving It?

New Report: Inside the High Risk of Third-Party SaaS Apps

Microsoft is named a Leader in the 2022 Gartner Magic Quadrant for Endpoint Protection Platforms

Booking.com's OAuth Implementation Allows Full Account Takeover

Hackers Target Young Gamers: How Your Child Can Cause Business Compromise

New research, tooling, and partnerships for more secure AI and machine learning

On Shaky Ground: Why Dependencies Will Be Your Downfall

Hackers Exploit Containerized Environments to Steals Proprietary Data and Software

Intruder alert: UK retailer WH Smith hit by another data leak

Dumb Password Rules

This Hacker Tool Can Pinpoint a DJI Drone Operator's Exact Location

New Cryptojacking Campaign Leverages Misconfigured Redis Database Servers

2023 Browser Security Report Uncovers Major Browsing Risks and Blind Spots

Experts Identify Fully-Featured Info Stealer and Trojan in Python Package on PyPI

MQsTTang: Mustang Pandas latest backdoor treads new ground with Qt and MQTT

Forget ChatGPT, the most overhyped security tool is technology itself, Wiz warns

SysUpdate Malware Strikes Again with Linux Version and New Evasion Tactics

Critical Flaw in Cisco IP Phone Series Exposes Users to Command Injection Attack

How to Automate in Azure Using PowerShell - Part 2

~ 1 Mar 2023 ~

Ermetic Adds Kubernetes Security to CNAPP

Octillo Launches Women's Cybersecurity Scholarship in Partnership With the Center for Cyber Safety and Education

DoControl's 2023 SaaS Security Threat Landscape Report Finds Enterprises and Mid-Market Organizations Have Exposed Public SaaS Assets

Visibility Is as Vital as Zero Trust for Low-Code/No-Code Security

Forescout Addresses Modern SecOps Challenges With Launch of Forescout XDR

Fastly Launches Managed Security Service to Protect Enterprises From Rising Web Application Attacks

Dish Blames Ransomware Attack for Disruptions of Internal Systems, Call Center Services

It's official: BlackLotus malware can bypass Secure Boot on Windows machines

Offensive Security Is Now OffSec - Refresh Reflects Future of Cybersecurity Learning and Skills Development

Linux Support Expands Cyber Spy Group's Arsenal

What Happened in That Cyberattack? With Some Cloud Services, You May Never Know

The Importance of Recession-Proofing Security Operations

SEC cyber risk management rulea security and compliance opportunity

The Microsoft Intune Suite fuels cyber safety and IT efficiency

CISA: ZK Java Framework RCE Flaw Under Active Exploit

Without FIDO2, MFA Falls Short

Cyberattackers Double Down on Bypassing MFA

Cybercriminals Targeting Law Firms with GootLoader and FakeUpdates Malware

Fooling a Voice Authentication System with an AI-Generated Voice

BlackLotus Becomes First UEFI Bootkit Malware to Bypass Secure Boot on Windows 11

CISOs Are Stressed Out and It's Putting Companies at Risk

BlackLotus UEFI bootkit: Myth confirmed

Gmail and Google Calendar Now Support Client-Side Encryption (CSE) to Boost Data Privacy

PlugX RAT masquerades as legit Windows debugger to slip past security

Parallax RAT Targeting Cryptocurrency Firms with Sophisticated Injection Techniques

Google: You get crypto, you get crypto, almost everyone gets email crypto!

CISOs Share Their 3 Top Challenges for Cybersecurity Management

Google Adds Client-Side Encryption to Gmail, Calendar

US government sets a 30-day deadline for wiping TikTok from feds' phones

~ 28 Feb 2023 ~

Hoxhunt Launches Human Risk Management Platform

Two of The Worst Healthcare Data Breaches in US History Happened Last Year

US cybersecurity chief: Software makers shouldn't lawyer their way out of security responsibilities

LastPass DevOps Engineer Targeted for Cloud Decryption Keys in Latest Breach Revelation

Exfiltrator-22: The Newest Post-Exploitation Toolkit Nipping at Cobalt Strike's Heels

US Marshals Ransomware Hit Is 'Major' Incident

Dish: Someone snatched our data, if you're wondering why our IT systems went down