Port 22

~ 3 Apr 2023 ~

Massive 3CX Supply Chain Hack Targeted Cryptocurrency Firms

"It's The Service Accounts, Stupid": Why Do PAM Deployments Take (almost) Forever To Complete

A Serial Tech Investment Scammer Takes Up Coding?

Capita confirms security attack caused pre-weekend outages

How Good Is Your Advanced Threat Management?

Name That Edge Toon: Tower of Babble

4 Steps for Shifting Left & Winning the Cybersecurity Battle

Keeping secrets safe

Not just an infostealer: Gopuram backdoor deployed through 3CX supply chain attack

Western Digital confirms digital burglary, calls in law enforcement

Western Digital Hit by Network Security Breach - Critical Services Disrupted!

Italian Watchdog Bans OpenAI's ChatGPT Over Data Protection Concerns

UK Runs Fake DDoS-for-Hire Sites

ICE Is Grabbing Data From Schools and Abortion Clinics

Mullvad VPN and Tor Project Create New Privacy-Focused Mullvad Browser

Crypto-Stealing OpcJacker Malware Targets Users with Fake VPN Service

3CX decided supply chain attack indicator was a false positive after VirusTotal tests

Vietnam threatens to cut off two million mobile subscribers

School principal resigns after paying $100,000 to Elon Musk impersonator

~ 1 Apr 2023 ~

Vulkan Leak Offers a Peek at Russias Cyberwar Playbook

Microsoft Fixes New Azure AD Vulnerability Impacting Bing Search and Major Apps

Ukrainian cops nab suspects accused of stealing $4.3m from victims across Europe

Cacti, Realtek, and IBM Aspera Faspex Vulnerabilities Under Active Exploitation

Hackers Exploiting WordPress Elementor Pro Vulnerability: Millions of Sites at Risk!

~ 31 Mar 2023 ~

Elastic Expands Cloud Security Capabilities for AWS

The FDA's Medical Device Cybersecurity Overhaul Has Real Teeth, Experts Say

Mimecast Report Reveals Nearly 60% of Companies in UAE and Saudi Arabia Need to Increase Cybersecurity Spending

Pro-Islam 'Anonymous Sudan' Hacktivists Likely a Front for Russia's Killnet Operation

Friday Squid Blogging: Giant Squid vs. Blue Marlin

NYPD blues: Cops ignored 93 percent of surveillance law rules

Adaptive Access Technologies Gaining Traction for Security, Agility

How to Solve IoT's Identity Problem

German Police Raid DDoS-Friendly Host FlyHosting

Is Decentralized Identity About to Reach an Inflection Point?

Vulkan Playbook Leak Exposes Russia's Plans for Worldwide Cyberwar

Avoiding data backup failures Week in security with Tony Anscombe

US Space Force Requests $700M for Cybersecurity Blast Off

Winter Vivern APT Targets European Government Entities with Zimbra Vulnerability

What CISOs Can Do to Build Trust & Fight Fraud in the Metaverse

Post-Quantum Satellite Protection Rockets Towards Reality

Privacy Implications of Web 3.0 and Darknets

Avoiding data backup failures Week in security with Tony Anscombe

Cyber Police of Ukraine Busted Phishing Gang Responsible for $4.33 Million Scam

Deep Dive Into 6 Key Steps to Accelerate Your Incident Response

Psst! Infosec bigwigs: Wanna be head of security at HM Treasury for 50k?

3CX Supply Chain Attack Here's What We Know So Far

NHS Highland 'reprimanded' by data watchdog for BCC blunder with HIV patients

World Backup Day: Avoiding a data disaster is a forever topic

Pro-Russia cyber gang Winter Vivern puts US, Euro lawmakers in line of fire

Apple's iOS 16.4: Security Updates Are Better Than a Goose Emoji

Leaked IT contractor files detail Kremlin's stockpile of cyber-weapons

Cybersecurity Jobs: Purple Teamer (Japanese)

~ 30 Mar 2023 ~

Azure flaw left Bing results editable and MS 365 accounts exposed

Researchers Detail Severe "Super FabriXss" Vulnerability in Microsoft Azure SFX

Russian Cyberwarfare Documents Leaked

Trumps Indictment Marks a Historic Reckoning

Automatic Updates Deliver Malicious 3CX 'Upgrades' to Enterprises

AlienFox malware caught in the cloud hen house

BEC Fraudsters Expand to Snatch Real-World Goods in Commodities Twist

Microsoft Patches 'Dangerous' RCE Flaw in Azure Cloud Service

Organizations Reassess Cyber Insurance as Self-Insurance Strategies Emerge

DataDome Closes $42M in Series C Funding to Advance the Fight Against Bot-Driven Cyberattacks and Fraud

Socura Launches Managed SASE (MSASE) Service

Do you use comms software from 3CX? What to do next after biz hit in supply chain attack

Latest Microsoft Entra advancements strengthen identity security

Chinese RedGolf Group Targeting Windows and Linux Systems with KEYPLUG Backdoor

Microsoft uses carrot and stick with Exchange Online admins

Stop Blaming the End User for Security Risk

New Wi-Fi Protocol Security Flaw Affecting Linux, Android and iOS Devices

Hitachi Energy IEC 61850 MMS-Server

Cyberstorage: Leveraging the Multi-Cloud to Combat Data Exfiltration

AlienFox Malware Targets API Keys and Secrets from AWS, Google, and Microsoft Cloud Services

Selecting the right MSSP: Guidelines for making an objective decision

ESET Research Podcast: A year of fighting rockets, soldiers, and wipers in Ukraine

ESET Research Podcast: A year of fighting rockets, soldiers, and wipers in Ukraine

The most important email conversation you will ever have

3CX Desktop App Supply Chain Attack Leaves Millions at Risk - Urgent Update on the Way!

Warning: Your wireless networks may leak data thanks to Wi-Fi spec ambiguity

Porn ID Laws: Your State or Country May Soon Require Age Verification

Another year, another North Korean malware-spreading, crypto-stealing gang named

Smugglers busted sneaking tech into China

Malware disguised as Tor browser steals $400k in cryptocash

Digital Forensics Salary, Skills, and Career Path

A Visual Summary of SANS Neurodiversity in Cybersecurity Summit 2023

The US Is Sending Money to Countries Devastated by Cyberattacks

Spira Takes Aim at Identity Security Posture Management

~ 29 Mar 2023 ~

Top Tech Talent Warns on AI's Threat to Human Existence in Open Letter

Trojan-Rigged Tor Browser Bundle Drops Malware

Patch Now: Cybercriminals Set Sights on Critical IBM File Transfer Bug

Phishing Emails Up a Whopping 569% in 2022

Cybersecurity Investment Outlook Remains Grim as Funding Activity Sharply Declines

Microsoft Defender shoots down legit URLs as malicious

Using Observability to Power a Smarter Cybersecurity Strategy

Google: Commercial Spyware Used by Governments Laden With Zero-Day Exploits

EU mandated messaging platform love-in is easier said than done: Cambridge boffins

How Good Smile, a Major Toy Company, Kept 4chan Online

The CISO Mantra: Get Ready to Do More With Less

Spyware Vendors Caught Exploiting Zero-Day Vulnerabilities on Android and iOS Devices

Mlofe: Researchers Uncover New Linux Malware Linked to Chinese APT Groups

How to Build a Research Lab for Reverse Engineering 4 Ways