Port 22

~ 7 Nov 2022 ~

China is likely stockpiling and deploying vulnerabilities, says Microsoft

Robin Banks Phishing Service for Cybercriminals Returns with Russian Server

Red Cross seeks digital equivalent of its emblems to mark some tech as off-limits in war

Breached health insurer won't pay ransom to protect customers, warns of more attacks

~ 5 Nov 2022 ~

TikTok Admits Staff in China Can Access Europeans Data

Researchers Uncover 29 Malicious PyPI Packages Targeted Developers with W4SP Stealer

Microsoft Warns of Uptick in Hackers Leveraging Publicly-Disclosed 0-Day Vulnerabilities

Human Security Tackles Malvertising With Clean.io Buy

~ 4 Nov 2022 ~

SolarWinds reaches $26m settlement with shareholders, expects SEC action

Microsoft Warns on Zero-Day Spike as Nation-State Groups Shift Tactics

RomCom Malware Woos Victims With 'Wrapped' SolarWinds, KeePass Software

LinkedIn Adds Verified Emails, Profile Creation Dates

Cyberattackers Focus In on State-of-the-Art ALMA Observatory

Friday Squid Blogging: Newfoundland Giant Squid Sculpture

Detecting Malicious User Behavior Within and Across Applications

Double-check demand payment emails from law firms: Convincing fakes surface

W4SP Stealer Stings Python Developers in Supply Chain Attack

Microsoft named a Leader in 2022 Gartner Magic Quadrant for Access Management for the 6th year

Calamu Partners With Wasabi Technologies to Deliver Cloud Storage Vaults

Simplilearn and the University of California, Irvine Division of Continuing Education Partner for a Cybersecurity Boot Camp

NSA on Supply Chain Security

Build Security Around Users: A Human-First Approach to Cyber Resilience

Researchers Detail New Malware Campaign Targeting Indian Government Employees

Ransomware rages on Week in security with Tony Anscombe

Your OT Is No Longer Isolated: Act Fast to Protect It

Reducing the risk of cloud attack

CISA Warns of Critical Vulnerabilities in 3 Industrial Control System Software

French-speaking voleurs stole $30m in 15-country bank, telecoms cyber-heist spree

~ 3 Nov 2022 ~

Oreo Giant Mondelez Settles NotPetya 'Act of War' Insurance Suit

NCSC Implements Vulnerability Scanning Program Across UK

FIN7 Cybercrime Group Likely Behind Black Basta Ransomware Campaign

Multi-factor auth fatigue is real and it's why you may be in the headlines next

Why Third-Party Risk Should Be Manufacturing's Top Priority

DDoS Cyberscore: US Treasury: 1, Killnet: 0

Researchers Find Links b/w Black Basta Ransomware and FIN7 Hackers

International summit agrees crack down on crypto to combat ransomware

Senhasegura Introduces MySafe for Managing Personal Passwords

Stopping C2 communications in human-operated ransomware through network protection

Identifying cyberthreats quickly with proactive security testing

Apiiro Raises $100M Series B Funding Round to Solidify Position as the Cloud-Native Application Security Leader

FS-ISAC and Cyberbit Announce Winner of the First Financial Cyber League

Optiv Helps Safeguard Critical Industries with Cyber Advisory and Protection Offerings

Hacker Charged With Extorting Online Psychotherapy Service

Supply Chain Attack Pushes Out Malware to More than 250 Media Websites

Security Leaders Share 5 Steps to Strengthen Cyber Resilience

Economic Uncertainty Isn't Stopping Cybercrime Recruitment It's Fueling It

1Password Acquires Passage Identity to Power a Passwordless Future

Iris Powered by Generali Reports Four in Five Americans Less Willing to Shop at Stores With Data Breaches in 2022 Holiday Survey

Alethea Closes $10M Series A Financing Led by Ballistic Ventures

Mimecast Unveils Email Security, Cloud Integrated for Optimized Flexibility and Speed

Qualys Announces Third Quarter 2022 Financial Results

Certificate-Based Authentication With YubiKeys for Microsoft, Third-Party, and Web Applications Now Available on iOS and Android

Soccer Fans, You're Being Watched

Why Identity & Access Management Governance is a Core Part of Your SaaS Security

The future starts now: 10major challenges facing cybersecurity

OPERA1ER APT Hackers Targeted Dozens of Financial Organizations in Africa

ETIC Telecom Remote Access Server (RAS)

Nokia ASIK AirScale System Module

Delta Industrial Automation DIALink

Hackers Using Rogue Versions of KeePass and SolarWinds Software to Distribute RomCom RAT

Royal Mail customer data leak shutters online Click and Drop

New TikTok Privacy Policy Confirms Chinese Staff Can Access European Users' Data

~ 2 Nov 2022 ~

US Treasury thwarts DDoS attack from Russian Killnet group

Cyber-Threat Actor Uses Booby-Trapped VPN App to Deploy Android Spyware

Dropbox Code Repositories Stolen in Cyberattack on GitHub-Based Developers

Chinese Mob Has 100K Slaves Working in Cambodian Cybercrime Mills

The Rise of Rust, the 'Viral' Secure Programming Language That's Taking Over Tech

Vitali Kremez Found Dead After Apparent Scuba Diving Accident

How to Narrow the Talent Gap in Cybersecurity

Ransomware cost US banks $1.2 billion last year

Microsoft Security tips for mitigating risk in mergers and acquisitions

SMEs Must Plan for Recovery from Cybersecurity Attacks Amid Shifting Threats, Says MIT Technology Review Insights

LastPass Research Finds False Sense of Cybersecurity Running Rampant

The Art of Calculating the Cost of Risk

Netskope Threat Research: Next Generation of Phishing Attacks Uses Unexpected Delivery Methods to Steal Data

Musk's Twitter-Verification Payment Tease Spurs Cyberattackers

Global Automotive Cybersecurity Market Report 2022: Expected Mandate for Cybersecurity Protocols to Significantly Boost Sector

Everything You Need to Know About LockBit

Aravo Integration With Black Kite Helps Improve Cybersecurity Defenses

PQShield and Riscure Collaborate on Post-Quantum Cryptography SCA Validation

Multiple Vulnerabilities Reported in Checkmk IT Infrastructure Monitoring Software

Critical Vulnerability in Microsoft Azure Cosmos DB Opens Up Jupyter Notebooks

Former Apple worker pleads guilty to $17m mail and wire fraud charges

These Android Apps with a Million Play Store Installations Redirect Users to Malicious Sites

Inside Raccoon Stealer V2

The Most Vulnerable Place on the Internet

Experts Warn of SandStrike Android Spyware Infecting Devices via Malicious VPN App

Server-side attacks, C&C in public clouds and other MDR cases we observed

Ritz cracker giant settles bust-up with insurer over $100m+ NotPetya cleanup

Dropbox Breach: Hackers Unauthorizedly Accessed 130 GitHub Source Code Repositories

How AI Can Deliver the Next Phase of Scalability

~ 1 Nov 2022 ~

Dropbox admits 130 of its private GitHub repos were copied after phishing attack

OpenSSL downgrades horror bug after week of panic, hype

The Sky Is Not Falling: Disclosed OpenSSL Bugs Are Serious but Not Critical

Bed Bath & Beyond Discloses Data Breach to SEC

Now That EDR Is Obvious, What Comes Next?

Layoffs Mount as Cybersecurity Vendors Hunker Down

How Retailers Can Stay Protected During the Most Wonderful Time of the Year

FTC Gives Chegg an 'F' for Careless Cybersecurity Impacting 40M Students

OpenSSL Releases Patch for 2 New High-Severity Vulnerabilities