Port 22

~ 19 Jan 2023 ~

Hitachi Energy PCU400

As Social Engineering Tactics Change, So Must Your Security Training

Mailchimp Suffers Another Security Breach Compromising Some Customers' Information

Data Security in Multicloud: Limit Access, Increase Visibility

~ 18 Jan 2023 ~

How Would the FTC Rule on Noncompetes Affect Data Security?

Thousands of Sophos firewalls still vulnerable out there to hijacking

Vulnerable Historian Servers Imperil OT Networks

Vulnerable Historian Servers Imperil OT Networks

Founder and Majority Owner of Cryptocurrency Exchange Charged With Processing Over $700 Million of Illicit Funds

Sophos Cuts Jobs to Focus on Cybersecurity Services

ChatGPT Could Create Polymorphic Malware Wave, Researchers Warn

Proposed Washington law puts period-tracking apps and search engines on notice

DoControl Announces SaaS Security Platform Expansion With Shadow Apps Module Launch

KnowBe4 2022 Phishing Test Report Confirms Business-Related Emails Trend

ChatGPT Opens New Opportunities for Cybercriminals: 5 Ways for Organizations to Get Ready

Earth Bogle Campaign Unleashes NjRAT Trojan on Middle East and North Africa

ICS Confronted by Attackers Armed With New Motives, Tactics, and Malware

Spy Cams Reveal the Grim Reality of Slaughterhouse Gas Chambers

Abacus Group Acquires Gotham Security and GoVanguard to Expand Cybersecurity Service Offerings

Perception Point Launches Advanced Threat Protection and Rapid Remediation for Zendesk Customers

New Coalfire Report Reveals CISOs Rising Influence

Cybersecurity and the Myth of Quiet Quitting

Lares Research Highlights Top 5 Penetration Test Findings From 2022

AI and Political Lobbying

Iranian Government Entities Under Attack by New Wave of BackdoorDiplomacy Attacks

Guide: How MSSPs and vCISOs can extend their services into compliance readiness without increasing cost

Critical Security Vulnerabilities Discovered in Netcomm and TP-Link Routers

Git Users Urged to Update Software to Prevent Remote Code Execution Attacks

What threatens corporations in 2023: media blackmail, fake leaks and cloud attacks

CISA Warns of Flaws in Siemens, GE Digital, and Contec Industrial Control Systems

Been hit by BianLian ransomware? Here's your get-out-of-jail-free card

Thinking of Hiring or Running a Booter Service? Think Again.

Okta Expands No-Code Offerings for Identity Cloud

Russian criminals can't wait to hop over OpenAI fence, use ChatGPT for evil

~ 17 Jan 2023 ~

Initial Access Broker Market Booms, Posing Growing Threat to Enterprises

Secrets Rotation Recommended After CircleCI Security Incident

Nearly 300 MSI motherboards will run any code in Secure Boot, no questions asked

VIPRE Security Group Launches New Endpoint Detection and Response (EDR) Technology Built for SMEs

Unpatched Zoho MangeEngine Products Under Active Cyberattack

Why Businesses Need to Think Like Hackers This Year

A New Era Is Dawning in Cybersecurity, but Only the Best Algorithms Will Win

Microsoft locks door to default guest authentication in Windows Pro

Secure your business like you secure your home: 5 steps to protect against cybercrime

Cygna Labs Introduces Entitlement and Security for Active Directory

Microsoft Patches 4 SSRF Flaws in Separate Azure Cloud Services

5 Cybersecurity Tips for Higher Education Institutions

3 Lessons Learned in Vulnerability Management

Microsoft Azure Services Flaws Could've Exposed Cloud Resources to Unauthorized Access

Hackers Can Abuse Legitimate GitHub Codespaces Feature to Deliver Malware

The FBI Identified a Tor User

4 Places to Supercharge Your SOC with Automation

Zoho ManageEngine PoC Exploit to be Released Soon - Patch Before It's Too Late!

Top 10 Venmo scams and how to stay safe

GE Digital Proficy Historian

Mitsubishi Electric MELSEC iQ-F, iQ-R Series

Siemens SINEC INS

Researchers Uncover 3 PyPI Packages Spreading Malware to Developer Systems

Crypto exchanges freeze accounts tied to North Koreas notorious Lazarus Group

Tencent fired 100 people for corruption during 2022

~ 16 Jan 2023 ~

The Dangers of Default Cloud Configurations

Java, .NET Developers Prone to More Frequent Vulnerabilities

Raccoon and Vidar Stealers Spreading via Massive Network of Fake Cracked Software

A Secure User Authentication Method Planning is More Important than Ever

Hacked Cellebrite and MSAB Software Released

You Move, They Follow: Uncovering Irans Mobile Legal Intercept System

All the Data Apple Collects About Youand How to Limit It

For password protection, dump LastPass for open source Bitwarden

CISA Warns for Flaws Affecting Industrial Control Systems from Major Manufacturers

Hybrid commerce: Blurring the lines between business and pleasure

New Backdoor Created Using Leaked CIA's Hive Malware Discovered in the Wild

China aims to grow local infosec industry by 30 percent a year, to $22 billion by 2025

~ 14 Jan 2023 ~

NSA asks Congress to let it get on with that warrantless data harvesting, again

Upcoming Speaking Engagements

Booklist Review of A Hackers Mind

Russian Ransomware Gang Attack Destabilizes UK Royal Mail

Malware Attack on CircleCI Engineer's Laptop Leads to Recent Security Incident

Cacti Servers Under Attack as Majority Fail to Patch Critical Vulnerability

Russians say they can grab software from Intel again

TikTok Fined $5.4 Million by French Regulator for Violating Cookie Laws

Cisco Issues Warning for Unpatched Vulnerabilities in EoL Business Routers

~ 13 Jan 2023 ~

Why Mean Time to Repair Is Not Always A Useful Security Metric

Friday Squid Blogging: How to Buy Fresh or Frozen Squid

Norton LifeLock Warns on Password Manager Account Compromises

Malware Comes Standard With This Android TV Box on Amazon

Canadian must pay employer for 'time theft' based on tracking software data

Sneaky New Stealer Woos Corporate Workers Through Fake Zoom Downloads

CircleCI, LastPass, Okta, and Slack: Cyberattackers Pivot to Target Core Enterprise Tools

Cloudflare Wins CISA Contract for Registry and Authoritative Domain Name System (DNS) Services

Beware: Tainted VPNs Being Used to Spread EyeSpy Surveillanceware

Fast-Track Secure Development Using Lite Threat Modeling

APT group trojanizes Telegram app Week in security with Tony Anscombe

Microsoft Defender ASR rules remove icons and apps shortcuts from Taskbar

Threats of Machine-Generated Text

In the Fight Against Scams, Cyber Ambassadors Enter the Chat

Long data privacy notices aren't foolproof, Euro watchdog tells Meta

Cybercriminals Using Polyglot Files in Malware Distribution to Fly Under the Radar

WEF's Global Risks Report 2023 Keeps Cybersecurity on the Agenda

Get Unified Cloud and Endpoint Security: Only $1 for 1,000 Assets for all of 2023!

FortiOS Flaw Exploited as Zero-Day in Attacks on Government and Organizations

This cant be a real bomb threat: you've called a modem, not a phone