Port 22

~ 3 Oct 2022 ~

It's 2058. A quantum computer is just another decade away. Still, you curse Cloudflare

National Cybersecurity Awareness program 18 years on: Don't click that

FBI: We tracked who was printing secret documents to unmask ex-NSA suspect

Name That Edge Toon: Mumbo Dumbo

Comm100 Chat Provider Hijacked to Spread Malware in Supply Chain Attack

How AWS, Cisco, Netflix & SAP Are Approaching Cybersecurity Awareness Month

Cyber-proofing data in the cloud

Researchers Link Cheerscrypt Linux-Based Ransomware to Chinese Hackers

Detecting Deepfake Audio by Modeling the Human Acoustic Tract

The High Cost of Living Your Life Online

Hackers Exploiting Dell Driver Vulnerability to Deploy Rootkit on Targeted Computers

Founder of cybersecurity firm Acronis is afraid of his own vacuum cleaner

Between ransomware and month-long engagements, IR teams need a hug and a nap

Ex-NSA Employee Arrested for Trying to Sell U.S. Secrets to a Foreign Government

8 questions to ask yourself before getting a home security camera

DeftTorero: tactics, techniques and procedures of intrusions revealed

Moody's turns up the heat on 'riskiest' sectors for cyberattacks

~ 2 Oct 2022 ~

New Pegasus Spyware Abuses Identified in Mexico

Stenography alert: Backdoor spyware stashed in Microsoft logo

Steganography alert: Backdoor spyware stashed in Microsoft logo

BlackCat malware lashes out at US defense IT contractor

A Visual Summary of SANS Blue Team Summit 2022

~ 1 Oct 2022 ~

Microsoft Exchange Server Has a Zero-Day Problem

Gone in a day: Ethical hackers say it would take mere hours to empty your network

Pay What You Want for This Collection of White Hat Hacking Courses

State-Sponsored Hackers Likely Exploited MS Exchange 0-Days Against ~10 Organizations

CISA Warns of Hackers Exploiting Critical Atlassian Bitbucket Server Vulnerability

Analyzing attacks using the Exchange vulnerabilities CVE-2022-41040 and CVE-2022-41082

~ 30 Sep 2022 ~

Worried About the Exchange Zero-Day? Here's What to Do

Friday Squid Blogging: Breeding the Oval Squid

The Challenge of Cracking Irans Internet Blockade

LA School District Ransomware Attackers Now Threaten to Leak Stolen Data

The Top 4 Mistakes in Security Programs to Avoid

Reshaping the Threat Landscape: Deepfake Cyberattacks Are Here

Cybercriminals See Allure in BEC Attacks Over Ransomware

Trojanized, Signed Comm100 Chat Installer Anchors Supply Chain Attack

Microsoft: Two New 0-Day Flaws in Exchange Server

Microsoft Confirms Pair of Blindsiding Exchange Zero-Days, No Patch Yet

SolarMarker Attack Leverages Weak WordPress Sites, Fake Chrome Browser Updates

New Malware Families Found Targeting VMware ESXi Hypervisors

Security Vulnerabilities in Covert CIA Websites

ESET Research into new attacks by Lazarus Week in security with Tony Anscombe

With the Software Supply Chain, You Can't Secure What You Don't Measure

Onyxia Raises $5M to Help Companies Proactively Manage Cybersecurity Risks Using AI

Cyber Attacks Against Middle East Governments Hide Malware in Windows logo

Go Update iOS, Chrome, and HP Computers to Fix Serious Flaws

New Malware Campaign Targeting Job Seekers with Cobalt Strike Beacons

Why Organisations Need Both EDR and NDR for Complete Network Protection

North Korean Hackers Weaponizing Open-Source Software in Latest Cyber Attacks

Amazonthemed campaigns of Lazarus in the Netherlands and Belgium

Microsoft Confirms 2 New Exchange Zero-Day Flaws Being Used in the Wild

Microsoft warns of North Korean crew posing as LinkedIn recruiters

WARNING: New Unpatched Microsoft Exchange Zero-Day Under Active Exploitation

Stop us if you've heard this one before: Exchange Server zero-day being actively exploited

Emulate Shellcode with Radare2

Ex-eBay execs jailed for cyberstalking web critics

Cyera Survey Finds One in Three Respondents Want to Minimize Cloud Data Risk

Safous Adds Browser Isolation to Its Zero-Trust Network Access Service

Israel Cybersecurity Enterprise (ICE) Teams with CybeReady to Deliver World-Class Security Training

~ 29 Sep 2022 ~

Aunalytics Launches Security Patching Platform as a Service

Veristor Partners with SANS Security Awareness to Deliver Employee Security Awareness Training

YouMail, Inc. and WMC Global Partner to Deliver Voice and SMS Phishing Disruption Services

Organizations Finding the Need for New Approaches on the Cybersecurity Front, CompTIA research reveals

Intel Hardens Confidential Computing With Project Amber Updates

Latest Delinea Update Streamlines DevOps Security

KnowBe4 Simplifies Compliance Requirements for Healthcare Privacy

Pathlock Expands SAP Capabilities with Acquisition of Grey Monarch

Ransomware Attacks Continue Increasing: 20% of All Reported Attacks Occurred in the Last 12 Months - New Survey

How CIA betrayed informants with shoddy front websites built for covert comms

Why the US Should Help Secure Mexican Infrastructure and What It Gets in Return

Pentagon is far too tight with its security bug bounties

Fake CISO Profiles on LinkedIn Target Fortune 500s

The Country Where You Live Impacts Password Choices

Dangerous New Attack Technique Compromising VMware ESXi Hypervisors

3 Reasons Why BEC Scams Work in Real Estate

How one product manager builds community at Microsoft Security

ZINC weaponizing open-source software

CSO perspective:Why a strong IAM strategy is key to an organizations cybersecurity approach

A Matrix Update Will Patch Serious End-to-End Encryption Flaws

(ISC) Recruits More Than 55,000 Cybersecurity Candidates in First 30 Days of New Programs to Address Workforce Gap

Capital One Phish Showcases Growing Bank-Brand Targeting Trend

Espionage Group Wields Steganographic Backdoor Against Govs, Stock Exchange

Brazilian Prilex Hackers Resurfaced With Sophisticated Point-of-Sale Malware

XSS Flaw in Prevalent Media Imaging Tool Exposes Trove of Patient Data

Covert malware targets VMware for hypervisor-level espionage

What Lurks in the Shadows of Cloud Security?

Mystery Hackers Are Hyperjacking Targets for Insidious Spying

Researchers Uncover Covert Attack Campaign Targeting Military Contractors

Five Steps to Mitigate the Risk of Credential Exposure

Statement on the fatal flaws found in a defunct CIA covert communications system

Differences in App Security/Privacy Based on Country

Swachh City Platform Suffers Data Breach Leaking 16 Million User Records

Hitachi Energy MicroSCADA Pro X SYS600_8DBD000107

Hitachi Energy MicroSCADA Pro X SYS600_8DBD000106

Hackers Aid Protests Against Iranian Government with Proxies, Leaks and Hacks

The secrets of Schneider Electrics UMAS protocol

~ 28 Sep 2022 ~

Microsoft to kill off old access rules in Exchange Online

Fake Accounts Are Not Your Friends!

Plug Your Data Leaks: Integrating Data Loss Prevention into Your Security Stack

Google Quashes 5 High-Severity Bugs With Chrome 106 Update