Port 22

~ 24 Dec 2022 ~

W4SP Stealer Discovered in Multiple PyPI Packages Under Various Names

Back to work, Linux admins: You have a CVSS 10 kernel bug to address

~ 23 Dec 2022 ~

Friday Squid Blogging: Injured Giant Squid and Paddleboarder

Container Verification Bug Allows Malicious Images to Cloud Up Kubernetes

LastPass Cops to Massive Breach Including Customer Vault Data

Videoconferencing Worries Grow, With SMBs in Cyberattack Crosshairs

Google: With Cloud Comes APIs & Security Headaches

Fool Me Thrice? How to Avoid Double and Triple Ransomware Extortion

FrodoPIR: New Privacy-Focused Database Querying System

Hacking the JFK Airport Taxi Dispatch System

Researchers Warn of Kavach 2FA Phishing Attacks Targeting Indian Govt. Officials

Accelerate Your Incident Response

Vice Society Ransomware Attackers Adopt Robust Encryption Methods

France Fines Microsoft 60 Million for Using Advertising Cookies Without User Consent

LastPass admits attackers have a copy of customers password vaults

LastPass Admits to Severe Data Breach, Encrypted Password Vaults Compromised

CatalanGate Report: Correcting a Case

Crooks copy source code from Oktas GitHub repository

Security Is a Second-Class Citizen in High-Performance Computing

What Kind of Data Gets Stolen When a Developer is Compromised?

~ 22 Dec 2022 ~

New Brand of Security Threats Surface in the Cloud

Inside The Next-Level Fraud Ring Scamming Billions Off Holiday Retailers

Biden Signs Post-Quantum Cybersecurity Guidelines Into Law

FCC calls for mega $300 million fine for massive US robocall campaign

Zerobot malware now shooting for Apache systems

Passwordless Authentication Market to Be Worth $55.7 Billion by 2030: Grand View Research, Inc.

Security on a Shoestring? Cloud, Consolidation Best Bets for Businesses

Google WordPress Plug-in Bug Allows AWS Metadata Theft

Threat Modeling in the Age of OpenAI's Chatbot

'Sextortion,' Business Disruption, and a Massive Attack: What Could Be in Store for 2023

Zerobot Adds Brute Force, DDoS to Its IoT Attack Arsenal

FIN7 Cybercrime Syndicate Emerges as Major Player in Ransomware Landscape

Its time to fill those cloud security gaps

The Era of Cyber Threat Intelligence Sharing

Critical Security Flaw Reported in Passwordstate Enterprise Password Manager

Critical Microsoft Code-Execution Vulnerability

What Is Flipper Zero? The Hacker Tool Going Viral on TikTok, Explained

Priva TopControl Suite

Rockwell Automation Studio 5000 Logix Emulate

Mitsubishi Electric MELSEC iQ-R, iQ-L Series and MELIPC Series

Omron CX-Programmer

Two New Security Flaws Reported in Ghost CMS Blogging Software

Zerobot Botnet Emerges as a Growing Threat with New Exploits and Capabilities

Ransomware and wiper signed with stolen certificates

Fraudulent popunder Google Ad campaign generated millions of dollars

Apple accused of censoring apps in Hong Kong and Russia to maintain market access

Hackers Breach Okta's GitHub Repositories, Steal Source Code

Godfather malware makes banking apps an offer they cant refuse

Being one of the 1% sucks if you're a Rackspace user

~ 21 Dec 2022 ~

Supply Chain Risks Got You Down? Keep Calm and Get Strategic!

Ransomware Attackers Bypass Microsoft's ProxyNotShell Mitigations With Fresh Exploit

Heartland Alliance Provides Notice of Data Security Incident

Microsoft research uncovers new Zerobot capabilities

Best Practices for Securing and Governing Your Multicloud Deployment

Microsoft fixes Hyper-V VM problem caused by Patch Tuesday

Name That Toon: Kiss and Tell

Trend Micro Joins Googles App Defense Alliance

Two Indicted for Hijacking JFK Airport Taxi Dispatch

Kaspersky Research Finds Reverse Engineering Is the Most On-Demand Skill Among InfoSec Specialists

Understanding the 3 Classes of Kubernetes Risk

How to Run Kubernetes More Securely

UK's Guardian newspaper breaks news of ransomware attack on itself

Godfather Banking Trojan Masquerades as Legitimate Google Play App

Why Security Teams Shouldn't Snooze on MFA Fatigue

NASA infosec again falls short of required US government standard

Irans Internet Blackouts Are Sabotaging Its Own Economy

Raspberry Robin Worm Strikes Again, Targeting Telecom and Government Systems

Ukraine Intercepting Russian Soldiers Cell Phone Calls

The Rise of the Rookie Hacker - A New Trend to Reckon With

Tis the season for gaming: Keeping children safe (and parents sane)

Malicious PyPI package found posing as a SentinelOne SDK

GodFather Android Banking Trojan Targeting Users of Over 400 Banking and Crypto Apps

Ransomware Hackers Using New Way to Bypass MS Exchange ProxyNotShell Mitigations

Ukraine's DELTA Military System Users Under Attack from Info Stealing Malware

Parental control apps prove easy to beat by kids and crims

Ciscos Talos security bods predict new wave of Excel Hell

Q&A From SANS Special Broadcast: What You Need to Know About OpenAI's New ChatGPT Bot - and How it Affects Your Security

Celebrate Those Making a Difference in Cybersecurity

~ 20 Dec 2022 ~

Give Yourself the Gift of Secure Holiday Ecommerce

Paying Ransom: Why Manufacturers Shell Out to Cybercriminals

Swatting suspects charged with subverting Ring doorbell cams and calling cops

Bfore.Ai Releases 'The King, The Knight & The Snowball' - Cybersecurity Book for Children

Local criminals hire Russians to game New York's taxi system

Microsoft Warns on 'Achilles' macOS Gatekeeper Bypass

Raspberry Robin Worm Targets Telcos & Governments

The Equifax Breach Settlement Offer is Real, For Now

NATO-Member Oil Refinery Targeted in Russian APT Blitz Against Ukraine

Microsoft reports macOS Gatekeeper has an 'Achilles' heel

Searchlight Security Changes Name to Searchlight Cyber and Launches New Brand

How AI/ML Can Thwart DDoS Attacks

Coming to a SOC Near You: New Browsers, 'Posture' Management, Virtual Assistants

Cybersecurity VMRay Extends Series B Investment to a Total of $34 million USD to Drive Growth Into New Markets

Microsoft Intune: 5 endpoint management predictions for 2023

'Blindside' Attack Subverts EDR Platforms from Windows Kernel

Protecting Hospital Networks From 'Code Dark' Scenarios

AWS Elastic IP Transfer Feature Gives Cyberattackers Free Range

Beware: Cybercriminals Launch New BrasDex Android Trojan Targeting Brazilian Banking Users

Russian Hackers Targeted Petroleum Refinery in NATO Country During Ukraine War

A Guide to Efficient Patch Management with Action1

Trojaned Windows Installer Targets Ukraine