Port 22

~ 11 Nov 2022 ~

Uyghurs Targeted With Spyware, Courtesy of PRC

A Good Start: ETHI Report on Facial Recognition Technology Informed by Citizen Lab Research and Recommendations But Has Room for Improvement

Security challenges facing SMBs Week in security with Tony Anscombe

Why CVE Management as a Primary Strategy Doesn't Work

Cynthia Khoo Delivers Testimony to the Standing Committee on Access to Information, Privacy and Ethics

Experts Uncover Two Long-Running Android Spyware Campaigns Targeting Uyghurs

These Two Google Play Store Apps Spotted Distributing Xenomorph Banking Trojan

VPN vs. DNS Security

NSA Over-surveillance

Dark Ships Emerge From the Shadows of the Nord Stream Mystery

NSA urges orgs to use memory-safe programming languages

FIFA World Cup 2022 scams: Beware of fake lotteries, ticket fraud and other cons

Multiple High-Severity Flaw Affect Widely Used OpenLiteSpeed Web Server Software

Russian-Canadian National Charged Over Involvement in LockBit Ransomware Attacks

ESET Antivirus: Advanced Protection Solutions for Home Users and Businesses

Europe calls for joint cyber defense to ward off Russia

Microsoft Blames Russian Hackers for Prestige Ransomware Attacks on Ukraine and Poland

Australia blames Russia for harboring health insurance hackers

Okta Launches New Workforce Identity Cloud

Cyberwar and Cybercrime Go Hand in Hand

~ 10 Nov 2022 ~

Siemens SINEC Network Management System Logback Component

5 Easy Steps to Bypass Google Pixel Lock Screens

Veterans Day Salute: 6 Reasons Why You Want Vets in Your Cyber Platoon

Instagram star gets 11 years for $300m email scam plot

Twitter's CISO Takes Off, Leaving Security an Open Question

Russia's Sway Over Criminal Ransomware Gangs Is Coming Into Focus

LockBit Bigwig Arrested for Ransomware Crimes

Lawsuit Seeks Food Benefits Stolen By Skimmers

Husband and wife nuclear warship 'spy' team get 20 years each

Simplify privacy protection with Microsoft Priva Subject Rights Requests

Microsoft threat intelligence presented at CyberWarCon 2022

Managing and Mitigating Risk From Unknown Unknowns

Twitter Chief Information Security Officer flies the coop

Elon Musk's Twitter Blue Verification Is a Scammer's Paradise

Evasive KmsdBot Cryptominer/DDoS Bot Targets Gaming, Enterprises

Warning: New Massive Malicious Campaigns Targeting Top Indian Banks' Customers

Amazon, Microsoft Cloud Leaks Highlight Lingering Misconfiguration Issues

An Untrustworthy TLS Certificate in Browsers

Russias New Cyberwarfare in Ukraine Is Fast, Dirty, and Relentless

Hacker Rewarded $70,000 for Finding Way to Bypass Google Pixel Phones' Lock Screens

How to Close Kubernetes' Network Security Gap

Flashpoint Releases Ransomware Prediction Model for Vulnerabilities

Rezilion Expands Dynamic SBOM Capability to Support Windows Environments

Lacework Extends CNAPP Capabilities With Attack Path Analysis and Agentless Workload Scanning

Researchers Uncover PyPI Package Hiding Malicious Code Behind Image File

Is Cybersecurity Awareness Month Anything More Than PR?

Siemens Parasolid

Siemens Web Server Login Page of Industrial Controllers

Siemens SINUMERIK ONE and SINUMERIK MC

Siemens RUGGEDCOM ROS

Siemens QMS Automotive

Omron NJ/NX-series Machine Automation Controllers

Omron NJNX-series

Siemens Teamcenter Visualization and JT2Go

Siemens SCALANCE W1750D

Siemens SCALANCE X-200 and X-200IRT Families (Update A)

Toward the cutting edge: SMBs contemplating enterprise security

Citrix Issues Patches for Critical Flaw Affecting ADC and Gateway Products

LS ELECTRIC PLC and XG5000 (Update A)

A roadmap to better cyber security training

The state of cryptojacking in the first three quarters of 2022

High-Severity Flaw Reported in Critical System Used in Oil and Gas Companies

Re-Focusing Cyber Insurance with Security Validation

New UEFI Firmware Flaws Reported in Several Lenovo Notebook Models

Understanding the Rise of Risk-Based Vulnerability Management

Windows breaks under upgraded IceXLoader malware

~ 9 Nov 2022 ~

Malicious Python Package Relies on Steganography to Download Malware

Patch ASAP: Critical Citrix, VMware Bugs Threaten Remote Workspaces With Takeover

InterPlanetary File System Increasingly Weaponized for Phishing, Malware Delivery

How US Businesses Suffer From the Lack of Personal Data Privacy Laws

Wells Fargo, Zelle slammed by Liz Warren over rampant online banking fraud

Long Island Midterm Votes Delayed Due to Cyberattack Aftereffects

Experian, T-Mobile Pay Up in Multimillion-Dollar Data Breach Settlements

A Better Way to Resist Identity-Based Cyber Threats

Cloud9 Malware Offers a Paradise of Cyberattack Methods

Compliancy Group Urges Healthcare Organizations to Complete Their HIPAA Security Risk Assessments

What We Really Mean When We Talk About Cybersecurity

Microsoft Defender Experts for Hunting demonstrates industry-leading protection in the 2022 MITRE Engenuity ATT&CK Evaluations for Managed Services

Research Finds Less Than a Quarter of Organizations Fully Confident Ex-Employees No Longer Have Access to Company Infrastructure

Industrial Control Systems (ICS) Security Market Worth $23.7B by 2027, Report Says

APT29 Exploited a Windows Feature to Compromise European Diplomatic Entity Network

Several Cyber Attacks Observed Leveraging IPFS Decentralized Network

Defeating Phishing-Resistant Multifactor Authentication

Experts Warn of Browser Extensions Spying On Users via Cloud9 Chrome Botnet Network

10 common security mistakes and how to avoid them

Top 5 API Security Myths That Are Crushing Your Business

New IceXLoader Malware Loader Variant Infected Thousands of Victims Worldwide

Cybersecurity threats: what awaits us in 2023?

VMware Warns of 3 New Critical Flaws Affecting Workspace ONE Assist Software

Install Latest Windows Update ASAP! Patches Issued for 6 Actively Exploited Zero-Days

Confidence in Data Recovery Tools Low

Patch Tuesday, November 2022 Election Edition

VMware warns of three critical holes in remote-control tool

How to Use Apple Pay or Google Pay Instead of Plastic Cards

Microsoft squashes six security bugs already exploited in the wild

~ 8 Nov 2022 ~

The CIS Benchmarks Community Consensus Process

Microsoft Quashes Bevy of Actively Exploited Zero-Days for November Patch Tuesday

Extortion Economics: Ransomware's New Business Model

Instagram Star Gets 11 Years for Cybercrimes Used to Fund His Lavish Lifestyle

Swiss Re wants government bail out as cybercrime insurance costs spike