Port 22

~ 6 Mar 2023 ~

Threat landscape for industrial automation systems for H2 2022

Experts Discover Flaw in U.S. Govt's Chosen Quantum-Resistant Encryption Algorithm

Where are the women in cyber security? On the dark side, study suggests

~ 5 Mar 2023 ~

A Privacy Hero's Final Wish: An Institute to Redirect AI's Future

~ 4 Mar 2023 ~

The LastPass Hack Somehow Gets Worse

What to Do When Your Boss Is Spying on You

The High-Stakes Blame Game in the White House Cybersecurity Plan

Security and IT Teams No Longer Need To Pay For SaaS-Shadow IT Discovery

New FiXS ATM Malware Targeting Mexican Banks

Secret Service, ICE break the law over and over with fake cell tower spying

Rapid7 Brings Threat Intel Data to USF Cybersecurity Lab

Snap CISO: I rate software supply chain risk 9.9 out of 10

~ 3 Mar 2023 ~

Friday Squid Blogging: Were Almost at Flying Squid Drones

FTC: BetterHelp pushed users to share mental health info then gave it to Facebook

EV Charging Infrastructure Offers an Electric Cyberattack Opportunity

Indigo Books Refuses LockBit Ransomware Demand

Polish Politician's Phone Patrolled by Pegasus

Frankenstein malware stitched together from code of others disguised as PyPI package

3 Ways Security Teams Can Use IP Data Context

Chick-fil-A Gives Customers a Bone to Pick After Data Breach

Nick Weaver on Regulating Cryptocurrency

It's Time to Assess the Potential Dangers of an Increasingly Connected World

What does $5,000 buy you on a hacking forum? Week in security with Tony Anscombe

The Sketchy Plan to Build a Russian Android Phone

Warning on SolarWinds-like supply-chain attacks: 'They're just getting bigger'

German Digital Affairs Committee hearing heaps scorn on Chat Control

New Flaws in TPM 2.0 Library Pose Threat to Billions of IoT and Enterprise Devices

Smart security

Chinese Hackers Targeting European Entities with New MQsTTang Backdoor

U.S. Cybersecurity Agency Raises Alarm Over Royal Ransomware's Deadly Capabilities

IBM Contributes Supply Chain Security Tools to OWASP

Highlights from the New U.S. Cybersecurity Strategy

Crappy insecure software in Biden's crosshairs

Why Certify with GIAC? (Korean)

Top 5 Reasons to Earn GIAC Certifications & Keep Them Active (Korean)

~ 2 Mar 2023 ~

Axis Security Acquisition Strengthens Aruba's SASE Solutions With Integrated Cloud Security and SD-WAN

CI/CD: Necessary for modern software development, yet it carries a lot of risk

CISA, MITRE Look to Take ATT&CK Framework Out of the Weeds

Biden's Cybersecurity Strategy Calls for Software Liability, Tighter Critical Infrastructure Security

BlackLotus Bookit Found Targeting Windows 11

What GoDaddy's Years-Long Breach Means for Millions of Clients

Sale of Stolen Credentials and Initial Access Dominate Dark Web Markets

Everybody Wants Least Privilege, So Why Isn't Anyone Achieving It?

New Report: Inside the High Risk of Third-Party SaaS Apps

Microsoft is named a Leader in the 2022 Gartner Magic Quadrant for Endpoint Protection Platforms

Booking.com's OAuth Implementation Allows Full Account Takeover

Hackers Target Young Gamers: How Your Child Can Cause Business Compromise

New research, tooling, and partnerships for more secure AI and machine learning

On Shaky Ground: Why Dependencies Will Be Your Downfall

Hackers Exploit Containerized Environments to Steals Proprietary Data and Software

Intruder alert: UK retailer WH Smith hit by another data leak

Dumb Password Rules

This Hacker Tool Can Pinpoint a DJI Drone Operator's Exact Location

New Cryptojacking Campaign Leverages Misconfigured Redis Database Servers

2023 Browser Security Report Uncovers Major Browsing Risks and Blind Spots

Experts Identify Fully-Featured Info Stealer and Trojan in Python Package on PyPI

MQsTTang: Mustang Pandas latest backdoor treads new ground with Qt and MQTT

Forget ChatGPT, the most overhyped security tool is technology itself, Wiz warns

SysUpdate Malware Strikes Again with Linux Version and New Evasion Tactics

Critical Flaw in Cisco IP Phone Series Exposes Users to Command Injection Attack

How to Automate in Azure Using PowerShell - Part 2

~ 1 Mar 2023 ~

Ermetic Adds Kubernetes Security to CNAPP

Octillo Launches Women's Cybersecurity Scholarship in Partnership With the Center for Cyber Safety and Education

DoControl's 2023 SaaS Security Threat Landscape Report Finds Enterprises and Mid-Market Organizations Have Exposed Public SaaS Assets

Forescout Addresses Modern SecOps Challenges With Launch of Forescout XDR