Port 22

~ 20 Jan 2023 ~

The Small but Mighty Danger of Echo Chamber Extremism

The Evolution of Account Takeover Attacks: Initial Access Brokers for IoT

Ransomware payments down 40% in 2022 Week in security with Tony Anscombe

Welcome to the Era of Internet Blackouts

Gamaredon Group Launches Cyberattacks Against Ukraine Using Telegram

WhatsApp Hit with 5.5 Million Fine for Violating Data Protection Laws

Real-World Steganography

New Chinese Malware Spotted Exploiting Recent Fortinet Firewall Vulnerability

Miscreants sure do love ransacking cloud networks, more so than before

Happy Lunar New Year: Beijing warns of enhanced surveillance during celebrations

New T-Mobile Breach Affects 37 Million Accounts

Crims steal data on 40 million T-Mobile US customers

PayPal Breach Exposed PII of Nearly 35K Accounts

~ 19 Jan 2023 ~

PayPal says crooks accessed 35,000 customers' info in credential stuffing attack

EmojiDeploy Attack Chain Targets Misconfigured Azure Service

Finally, ransomware victims are refusing to pay up

Massive Adware Campaign Shuttered

Attackers Crafted Custom Malware for Fortinet Zero-Day

Information Controls Fellowship Program 2023

Roaming Mantis Uses DNS Changers to Target Users via Compromised Public Routers

Shift Identity Left: Preventing Identity-Based Breaches

Name That Toon: Poker Hand

The Media Industry Is the Most Vulnerable to Cyber Attacks, Report Shows

University of Texas becomes latest US school to ban TikTok

SynSaber Releases ICS Vulnerabilities & CVEs Report Covering Second Half of 2022

SecurityGen Identifies the Cybersecurity Priorities for Mobile Operators in 2023

KnowBe4 to Offer $10,000 Women in Cybersecurity Scholarship and (ISC) 2 Certification Education Package

International Council of E-Commerce Consultants Launches Cybersecurity Essentials Professional Certificate Program on edX

Ethically Exploiting Vulnerabilities: A Play-by-Play

Mendix and Software Improvement Group Launch a New Software Application Quality and Security Scanning Solution

New Research From EMA Reveals How Organizations Are Struggling to Develop Secure Software Applications

A Sneaky Ad Scam Tore Through 11 Million Phones

New Microsoft Azure Vulnerability Uncovered Experts Warn of RCE Attacks

Mailchimp 'fesses up to second digital burglary in five months

Cybercriminals Target Telecom Provider Networks

Android Users Beware: New Hook Malware with RAT Capabilities Emerges

New Research Delves into the World of Malicious LNK Files and Hackers Behind Them

Security Analysis of Threema

6 Types of Risk Assessment Methodologies + How to Choose

Ransomware attack severs 1,000 ships from their on-shore servers

Bitzlato Crypto Exchange Founder Arrested for Aiding Cybercriminals

Tech support scammers are still at it: Heres what to look out for in 2023

Roaming Mantis implements new DNS changer in its malicious mobile app in 2022

Hitachi Energy PCU400

As Social Engineering Tactics Change, So Must Your Security Training

Mailchimp Suffers Another Security Breach Compromising Some Customers' Information

Data Security in Multicloud: Limit Access, Increase Visibility

~ 18 Jan 2023 ~

How Would the FTC Rule on Noncompetes Affect Data Security?

Thousands of Sophos firewalls still vulnerable out there to hijacking

Vulnerable Historian Servers Imperil OT Networks

Vulnerable Historian Servers Imperil OT Networks

Founder and Majority Owner of Cryptocurrency Exchange Charged With Processing Over $700 Million of Illicit Funds

Sophos Cuts Jobs to Focus on Cybersecurity Services

ChatGPT Could Create Polymorphic Malware Wave, Researchers Warn

Proposed Washington law puts period-tracking apps and search engines on notice

DoControl Announces SaaS Security Platform Expansion With Shadow Apps Module Launch

KnowBe4 2022 Phishing Test Report Confirms Business-Related Emails Trend

ChatGPT Opens New Opportunities for Cybercriminals: 5 Ways for Organizations to Get Ready

Earth Bogle Campaign Unleashes NjRAT Trojan on Middle East and North Africa

ICS Confronted by Attackers Armed With New Motives, Tactics, and Malware

Spy Cams Reveal the Grim Reality of Slaughterhouse Gas Chambers

Abacus Group Acquires Gotham Security and GoVanguard to Expand Cybersecurity Service Offerings

Perception Point Launches Advanced Threat Protection and Rapid Remediation for Zendesk Customers

New Coalfire Report Reveals CISOs Rising Influence

Cybersecurity and the Myth of Quiet Quitting

Lares Research Highlights Top 5 Penetration Test Findings From 2022

AI and Political Lobbying

Iranian Government Entities Under Attack by New Wave of BackdoorDiplomacy Attacks

Guide: How MSSPs and vCISOs can extend their services into compliance readiness without increasing cost

Critical Security Vulnerabilities Discovered in Netcomm and TP-Link Routers

Git Users Urged to Update Software to Prevent Remote Code Execution Attacks

What threatens corporations in 2023: media blackmail, fake leaks and cloud attacks

CISA Warns of Flaws in Siemens, GE Digital, and Contec Industrial Control Systems

Been hit by BianLian ransomware? Here's your get-out-of-jail-free card

Thinking of Hiring or Running a Booter Service? Think Again.

Okta Expands No-Code Offerings for Identity Cloud

Russian criminals can't wait to hop over OpenAI fence, use ChatGPT for evil

~ 17 Jan 2023 ~

Initial Access Broker Market Booms, Posing Growing Threat to Enterprises

Secrets Rotation Recommended After CircleCI Security Incident

Nearly 300 MSI motherboards will run any code in Secure Boot, no questions asked

VIPRE Security Group Launches New Endpoint Detection and Response (EDR) Technology Built for SMEs

Unpatched Zoho MangeEngine Products Under Active Cyberattack

Why Businesses Need to Think Like Hackers This Year

A New Era Is Dawning in Cybersecurity, but Only the Best Algorithms Will Win

Microsoft locks door to default guest authentication in Windows Pro

Secure your business like you secure your home: 5 steps to protect against cybercrime

Cygna Labs Introduces Entitlement and Security for Active Directory

Microsoft Patches 4 SSRF Flaws in Separate Azure Cloud Services

5 Cybersecurity Tips for Higher Education Institutions

3 Lessons Learned in Vulnerability Management

Microsoft Azure Services Flaws Could've Exposed Cloud Resources to Unauthorized Access

Hackers Can Abuse Legitimate GitHub Codespaces Feature to Deliver Malware

The FBI Identified a Tor User

4 Places to Supercharge Your SOC with Automation

Zoho ManageEngine PoC Exploit to be Released Soon - Patch Before It's Too Late!

Top 10 Venmo scams and how to stay safe

GE Digital Proficy Historian

Mitsubishi Electric MELSEC iQ-F, iQ-R Series

Siemens SINEC INS

Researchers Uncover 3 PyPI Packages Spreading Malware to Developer Systems