Port 22

~ 13 Dec 2022 ~

Accelerating Vulnerability Identification and Remediation

Security Flaw in Atlassian Products Affecting Multiple Companies

4 things to look for in a multicloud data protection solution

Niels Provos Joins Lacework as Head of Security Efficacy

Google Cloud and Palo Alto Networks Team to Protect the Modern Workforce

KnowBe4 Supports Metaverse Safety Week

Report: 79% of Employees Are Distracted at Work Amid a Year of Permacrisis

Hackers Score Nearly $1M at Device-Focused Pwn2Own Contest

The Cybersecurity Industry Doesn't Have a Stress Problem It Has a Leadership Problem

Improve Confidence and Context to Sell the SOC on Automating

Hackers Planted Files to Frame Indian Priest Who Died in Custody

Third Annual Global CISO Report Identifies Significant Shifts in Hiring and Retaining Security Talent

Uber Breached, Again, After Attackers Compromise Third-Party Cloud

Serious Attacks Could Have Been Staged Through This Amazon ECR Public Gallery Vulnerability

Apple should pay 6m to French data watchdog for tracking users without consent, says official

Obligatory ChatGPT Post

Top tips for security and privacyenhancing holiday gifts

ICONICS and Mitsubishi Electric Products

Schneider Electric APC Easy UPS Online

Contec CONPROSSYS HMI System (CHS)

Cybersecurity Experts Uncover Inner Workings of Destructive Azov Ransomware

Researchers smell a cryptomining Chaos RAT targeting Linux systems

Malware Strains Targeting Python and JavaScript Developers Through Official Repositories

Fortinet Warns of Active Exploitation of New SSL-VPN Pre-auth RCE Vulnerability

Pwn2Own contest concludes with nearly $1m paid out to ethical hackers

SANS MGT433 Managing Human Risk Now Expanded to Three Days

~ 12 Dec 2022 ~

Rash of New Ransomware Variants Springs Up in the Wild

Metaparasites & the Dark Web: Scammers Turn on Their Own

Amid Outrage, Rackspace Sends Users Email Touting Its Incident Response

Shopify Plus Stores Can Easily Add Passwordless Login With Passkeys Support

Researchers Demonstrate How EDR and Antivirus Can Be Weaponized Against Users

Using threat modeling to get your priorities right

IIS modules: The evolution of web shells and how to detect them

What We Can't See Can Hurt Us

Top 4 SaaS Security Threats for 2023

Popular WAFs Subverted by JSON Bypass

When Companies Compensate the Hackers, We All Foot the Bill

Palo Alto Networks Xpanse Active Attack Surface Management Automatically Remediates Cyber Risks Before They Lead to Cyberattacks

Cybersecurity Trends 2023: Securing our hybrid lives

Google Adds Passkey Support to Chrome for Windows, macOS and Android

Cryptocurrency Mining Campaign Hits Linux Users with Go-based CHAOS Malware

Apple Is Finally Encrypting iCloud Backups

Why Are People in the US Becoming Radicalized?

Keep Your Grinch at Bay: Here's How to Stay Safe Online this Holiday Season

Royal Ransomware Threat Takes Aim at U.S. Healthcare System

IT security teams, business execs still not on same page

Nearly 4,500 Pulse Connect Secure VPNs Left Unpatched and Vulnerable

Trilio Raises $17M, Appoints Massood Zarrabian as CEO

UK arrests five for selling 'dodgy' point of sale software

Top 5 Blueprint Podcast Episodes of 2022

~ 11 Dec 2022 ~

Japan, Australia, to bolster cyber-defenses, maybe offensive capacity too

~ 10 Dec 2022 ~

Attackers Keep Targeting the US Electric Grid

Log4js Log4Shell Vulnerability: One Year Later, Its Still Lurking

Hack-for-Hire Group Targets Travel and Financial Entities with New Janicab Malware Variant

Researchers Detail New Attack Method to Bypass Popular Web Application Firewalls

Cisco Warns of High-Severity Unpatched Flaw Affecting IP Phones Firmware

~ 9 Dec 2022 ~

This ransomware gang is a right Royal pain in the AES for healthcare orgs

Friday Squid Blogging: China Bans Taiwanese Squid Imports

TikTok Banned on Govt. Devices; Will Private Sector Follow Suit?

Legit Android apps poisoned by sticky 'Zombinder' malware

Hacking Trespass Law

Iran-Backed MuddyWater's Latest Campaign Abuses Syncro Admin Tool

7 Ways Gaming Companies Can Battle Cybercrime on Their Platforms

Using XDR to Consolidate and Optimize Cybersecurity Technology

Italy, Japan, UK to jointly launch sixth-gen fighter jet by 2035

New Truebot Malware Variant Leveraging Netwrix Auditor Bug and Raspberry Robin Worm

43 Trillion Security Data Points Illuminate Our Most Pressing Threats

Diamond industry under attack Week in security with Tony Anscombe

Iranian APT Targets US With Drokbk Spyware via GitHub

How Naming Can Change the Game in Software Supply Chain Security

Guess which Fortune 500 brands and govt agencies share data with Twitter?

Why is Robust API Security Crucial in eCommerce?

UK lawmakers look to enforce blocking tools for legal but harmful content

How to train your Ghidra

Google: Use SLSA Framework for Better Software Security

Security Vulnerabilities in Eufy Cameras

Lensa AI and Magic Avatars: What to Know Before Using the App

Researchers Uncover New Drokbk Malware that Uses GitHub as a Dead Drop Resolver

Xenomorph: What to know about this Android banking trojan

What Stricter Data Privacy Laws Mean for Your Cybersecurity Policies

MuddyWater Hackers Target Asian and Middle East Countries with Updated Tactics

Boss installed software from behind the Iron Curtain, techies ended up Putin things back together

North Korea using freelance techies to fund missiles and nukes

3 Ways Attackers Bypass Cloud Security

~ 8 Dec 2022 ~

CNAPP Shines a Light Into Evolving Cloud Environments

Agrius Iranian APT Group Cuts Into Diamond Industry

REvil-hit Medibank to pull plug on IT, shore up defenses

How Do I Use the Domain Score to Determine if a Domain Is a Threat?

Single Sign-on: It's Only as Good as Your Ability to Use It

Lack of Cybersecurity Expertise Poses Threat for Public-Safety Orgs

APT37 Uses Internet Explorer Zero-Day to Spread Malware

New Ransom Payment Schemes Target Executives, Telemedicine

Phishing in the Cloud: We're Gonna Need a Bigger Boat

Researchers Uncover Darknet Service Allowing Hackers to Trojonize Legit Android Apps

(ISC) Recruits 110,000 People Interested in a Cybersecurity Career in Three Months

Interpres Security Emerges from Stealth to Help Companies to Optimize Security Performance

Where to Find the Best Open Source Security Technology

Report: Air-Gapped Networks Vulnerable to DNS Attacks

Popular HR and Payroll Company Sequoia Discloses a Data Breach

Leaked Signing Keys Are Being Used to Sign Malware