Port 22

~ 7 Sep 2022 ~

US school year opens with reading, writing, and ransomware

4 Key Takeaways from "XDR is the Perfect Solution for SMEs" webinar

Fighting Ransomware Takes an Army: Our Public & Private Sector Soldiers Join Forces

How Can I Protect My SaaS Apps Amid Employee Turnover?

One Microsoft managers entrepreneurial vision for multicloud identity and access

Next-Gen Linux Malware Takes Over Devices With Unique Toolset

Some Members of Conti Group Targeting Ukraine in Financially Motivated Attacks

Iran-Linked APT Cozies Up to 'Enemies' in Trust-Based Spy Game

The Lockbit Ransomware Gang is Surprisingly Professional

Mandiant links APT42 to Iranian 'terrorist org'

Some Employees Aren't Just Leaving Companies They're Defrauding Them

Authorities Shut Down WT1SHOP Site for Selling Stolen Credentials and Credit Cards

New Stealthy Shikitega Malware Targeting Linux Systems and IoT Devices

Cybercriminals target games popular with kids to distribute malware

North Korean Hackers Deploying New MagicRAT Malware in Targeted Campaigns

RDP on the radar: Anupclose view of evolving remote access threats

Everything You Need To Know About BlackCat (AlphaV)

Mirai Variant MooBot Botnet Exploiting D-Link Router Vulnerabilities

Critical RCE Vulnerability Affects Zyxel NAS Devices Firmware Patch Released

As Chinas Cybersecurity Week begins, Beijing claims US attacked Uni that does military research

Pakistan government labels its own cybersecurity team 'incompetent'

ICS Security Management VS. ICS Attack Targeting

~ 6 Sep 2022 ~

Go programming language arrives at security warnings that are useful

Mysterious 'Worok' Group Launches Spy Effort With Obfuscated Code, Private Tools

Cyberattack brings down InterContinental Hotels' booking systems

TeslaGun Primed to Blast a New Wave of Backdoor Cyberattacks

As LA Unified Battles Ransomware, CISA Warns About Back-to-School Attacks

Name That Edge Toon: Mime's the Word

Internet Security & Encryption Pioneer Peter Eckersley Passes at 43

Critical QNAP NAS Zero-Day Bug Exploited to Deliver DeadBolt Ransomware

Ransomware gang hits second-largest US school district

The 3 Fundamentals of Building an Effective IoMT Security Strategy

Newly discovered cyberspy crew targets Asian governments and corporations

Cymulate Raises $70M Series D Funding for Continuous Security Posture Testing

Botnets in the Age of Remote Work

EvilProxy Commodifies Reverse-Proxy Tactic for Phishing, Bypassing 2FA

Unhappy about excluding nation-state attacks from cyberinsurance? Get ready to pay

Defenders Be Prepared: Cyberattacks Surge Against Linux Amid Cloud Migration

Worok Hackers Target High-Profile Asian Companies and Governments

Its Time to Get Real About TikToks Risks

Triangle Microworks Libraries

AVEVA Edge 2020 R2 SP1 and all prior versions

Cognex 3D-A1000 Dimensioning System

Hitachi Energy TXpert Hub CoreTec 4

TA505 Hackers Using TeslaGun Panel to Manage ServHelper Backdoor Attacks

Worok: The big picture

Integrating Live Patching in SecDevOps Workflows

Good game, well played: an overview of gaming-related cyberthreats in 2022

New EvilProxy Phishing Service Allowing Cybercriminals to Bypass 2-Factor Security

Researchers Find New Android Spyware Campaign Targeting Uyghur Community

QNAP Warns of New DeadBolt Ransomware Attacks Exploiting Photo Station Flaw

~ 5 Sep 2022 ~

TikTok Denies Data Breach Reportedly Exposing Over 2 Billion Users' Information

What Is Your Security Team Profile? Prevention, Detection, or Risk Management

3 Critical Steps for Reducing Cloud Risk

Maximum protection against hostile incursions

NATO investigates after criminals claim to be selling its stolen missile plans

Ransomware Attackers Abuse Genshin Impact Anti-Cheat System to Disable Antivirus

Nadine Dorries promotes 'Brexit rewards' of proposed UK data protection law

The nature of cyber incidents

Fake Antivirus and Cleaner Apps Caught Installing SharkBot Android Banking Trojan

Microsoft mistakenly rated Chromium, Electron, as malware

China orders tech companies to 'improve traceability' of users to control 'rumours and false information'

~ 4 Sep 2022 ~

Violence-as-a-Service: Brickings, Firebombings & Shootings for Hire

~ 3 Sep 2022 ~

Police Across US Bypass Warrants With Mass Location-Tracking Tool

Samsung Admits Data Breach that Exposed Details of Some U.S. Customers

Google Release Urgent Chrome Update to Patch New Zero-Day Vulnerability

~ 2 Sep 2022 ~

Google, YouTube ban election trolls ahead of US midterms

Friday Squid Blogging: Squid Images

Crook busted for 3D printing gun parts

Feds, npm Issue Supply Chain Security Guidance to Avert Another SolarWinds

Researchers Spot Snowballing BianLian Ransomware Gang Activity

4 Scenarios for the Digital World of 2040

4 Scenarios for the Digital World of 2040

Revealed: US telcos admit to storing, handing over location data

Raspberry Robin Malware Connected to Russian Evil Corp Gang

AWS Tokens Lurking in Android, iOS Apps Crack Open Corporate Cloud Data

Prynt Stealer Contains a Backdoor to Steal Victims' Data Stolen by Other Cybercriminals

Indian court directs chat app Telegram to disclose details of copyright infringers

The Makings of a Successful Threat-Hunting Program

Will cyberinsurance pay out? Week in security with Tony Anscombe

Ragnar Locker Brags About TAP Air Portugal Breach

Montenegro is the Victim of a Cyberattack

TikTok Users Were Vulnerable to a Single-Click Attack

A Windows 11 Automation Tool Can Easily Be Hijacked

JuiceLedger Hackers Behind the Recent Phishing Attacks Against PyPI Users

The Ultimate Security Blind Spot You Don't Know You Have

Warning: PyPI Feature Executes Code Automatically After Python Package Download

New Evidence Links Raspberry Robin Malware to Dridex and Russian Evil Corp Hackers

Google Chrome Bug Lets Sites Silently Overwrite System Clipboard Content

Ex-NSA trio who spied on Americans for UAE now banned from arms exports

Ghost Data Increases Enterprise Business Risk

~ 1 Sep 2022 ~

Neopets Hackers Had Network Access for 18 Months

Threat Actor Phishing PyPI Users Identified

Skyrocketing IoT Bug Disclosures Put Pressure on Security Teams

New Guidelines Spell Out How to Test IoT Security Products

Code-Injection Bugs Bite Google, Apache Open Source GitHub Projects

Apple Quietly Releases Another Patch for Zero-Day RCE Bug

(ISC)(2) Launches 'Certified in Cybersecurity' Entry-Level Certification to Address Global Workforce Gap

Stop Worrying About Passwords Forever

Real-World Cloud Attacks: The True Tasks of Cloud Ransomware Mitigation