Port 22

~ 21 Feb 2023 ~

Locking down the remote printer

Researchers Warn of ReverseRAT Backdoor Targeting Indian Government Agencies

~ 20 Feb 2023 ~

DNA testing biz vows to improve infosec after criminals break into database it forgot it had

How to Protect Yourself from Twitters 2FA Crackdown

Modern Software: What's Really Inside?

Despite Breach, LastPass Demonstrates the Power of Password Management

Researchers Create an AI Cyber Defender That Reacts to Attackers

Majority of Ransomware Attacks Last Year Exploited Old Bugs

Fines as a Security System

Norway Seizes $5.84 Million in Cryptocurrency Stolen by Lazarus Hackers

How to Detect New Threats via Suspicious Activities

Google Reveals Alarming Surge in Russian Cyber Attacks Against Ukraine

Will ChatGPT start writing killer malware?

Cyber Espionage Group Earth Kitsune Deploys WhiskerSpy Backdoor in Latest Attacks

What Mary, Queen of Scots, can teach todays cybersec royalty

Samsung Introduces New Feature to Protect Users from Zero-Click Malware Attacks

GoDaddy joins the dots and realizes it's been under attack for three years

~ 19 Feb 2023 ~

How to Unlock Your iPhone With a Security Key

If you're struggling to secure email forwarding, it's not you, it's ... the protocols

Fortinet Issues Patches for 40 Flaws Affecting FortiWeb, FortiOS, FortiOS, and FortiProxy

~ 18 Feb 2023 ~

Twitter's Two-Factor Authentication Change 'Doesn't Make Sense'

Hackers Ran Amok Inside GoDaddy for Nearly 3 Years

Twitter Limits SMS-Based 2-Factor Authentication to Blue Subscribers Only

GoDaddy Discloses Multi-Year Security Breach Causing Malware Installations and Source Code Theft

~ 17 Feb 2023 ~

Is OWASP at Risk of Irrelevance?

Intruder alert: FBI tackles 'isolated' IT security breach

FBI says its contained an 'isolated cyber incident' on its network

Friday Squid Blogging: Thermal Batteries from Squid Proteins

Check Point Boosts AppSec Focus With CNAPP Enhancements

Novel Spy Group Targets Telecoms in 'Precision-Targeted' Cyberattacks

New Protections for Food Benefits Stolen by Skimmers

Google Translate Helps BEC Groups Scam Companies in Any Language

Data Breaches: The Complete WIRED Guide

Inglis Retires as National Cyber Director Ahead of Biden's Cybersecurity EO

'Russian hacktivists' claim responsibility for DDoSing German airport websites

Not Stoked: Burton Snowboards' Online Orders Disrupted After Cyberattack

Massive GoAnywhere RCE Exploit: Everything You Need to Know

Experts Warn of RambleOn Android Malware Targeting South Korean Journalists

AppSec Threats Deserve Their Own Incident Response Plan

Top Cybersecurity News Stories This Week Cybersecurity Newsletter

Search ads abused to spread malware Week in security with Tony Anscombe

Armenian Entities Hit by New Version of OxtaRAT Spying Tool

Defending against AI Lobbyists

Cry Havoc and let slip dogs of war ... there's an upgraded malware server in town

EU lawmakers advise against signing US data pact

New Mirai Botnet Variant 'V3G4' Exploiting 13 Flaws to Target Linux and IoT Devices

Antivirus apps are there to protect you Cisco's ClamAV has a heckuva flaw

Critical RCE Vulnerability Discovered in ClamAV Open-Source Antivirus Software

Norway finds a way to recover crypto North Korea pinched in Axie heist

~ 16 Feb 2023 ~

ESXi Ransomware Update Outfoxes CISA Recovery Script

Google's big security cert log overhaul broke Android apps. Now it's hit undo

Atlassian: Leaked Data Stolen via Third-Party App

SASE Market to Exceed Over $60B Between 2022 and 2027, According to Dell'Oro Group

MVP Vibe Fest Bridges Gap Between Athletics and Cybersecurity

VMware, Windows 11 shafted by Windows Server 2022

WatchGuard Launches New Line of Firewall Products to Enhance Unified Security for Remote and Distributed Businesses

Cybersecurity Jobs Remain Secure Despite Recession Fears

More victims of fake crypto investor scam speak to The Register

~ 17 Feb 2023 ~

Researchers Hijack Popular NPM Package with Millions of Downloads

~ 16 Feb 2023 ~

Researchers Link SideWinder Group to Dozens of Targeted Attacks in Multiple Countries

Cybersecurity health and how to stay ahead of attackers with Linda Grasso

Breaking the Security "Black Box" in DBs, Data Warehouses and Data Lakes

SideWinder APT Spotted Stealing Crypto

Security amidst a global frost

Window Snyder's Start-up Launches Security Platform for IoT Device Makers

Simplify to Survive: How Organizations Can Navigate Cyber-Risk

Hackers Using Google Ads to Spread FatalRAT Malware Disguised as Popular Apps

Researchers Warn of Critical Security Bugs in Schneider Electric Modicon PLCs

Crypto Buyers Beware: 1 in 4 New Tokens of Any Value Is a Scam

ChatGPT Is Ingesting Corporate Secrets

<a href="https://www.cisa.gov/news-events/ics-advisories/icsa-23-047-13" hreflang="en">Sub-IoT DASH 7 Alliance Protocol stack implementation</a>

<a href="https://www.cisa.gov/news-events/ics-advisories/icsa-23-047-12" hreflang="en">Siemens JT Open, JT Utilities, and Parasolid</a>

<a href="https://www.cisa.gov/news-events/ics-advisories/icsa-23-047-11" hreflang="en">Siemens Mendix</a>

<a href="https://www.cisa.gov/news-events/ics-advisories/icsa-23-047-09" hreflang="en">Siemens SIMATIC Industrial Products</a>

<a href="https://www.cisa.gov/news-events/ics-advisories/icsa-23-047-08" hreflang="en">Siemens RUGGEDCOM APE1808</a>

<a href="https://www.cisa.gov/news-events/ics-advisories/icsa-23-047-06" hreflang="en">Siemens Simcenter Femap before V2023.1</a>

<a href="https://www.cisa.gov/news-events/ics-advisories/icsa-23-047-05" hreflang="en">Siemens SiPass integrated AC5102 / ACC-G2 and ACC-AP</a>

<a href="https://www.cisa.gov/news-events/ics-advisories/icsa-23-047-04" hreflang="en">Siemens Brownfield Connectivity Gateway</a>

<a href="https://www.cisa.gov/news-events/ics-advisories/icsa-23-047-02" hreflang="en">Siemens SCALANCE X200 IRT</a>

<a href="https://www.cisa.gov/news-events/ics-advisories/icsa-23-047-01" hreflang="en">Siemens Solid Edge</a>

Siemens Solid Edge

Siemens SCALANCE X200 IRT

Siemens Brownfield Connectivity Client

New Threat Actor WIP26 Targeting Telecom Service Providers in the Middle East

Siemens Brownfield Connectivity Gateway

Siemens SiPass integrated AC5102 / ACC-G2 and ACC-AP

Siemens Simcenter Femap before V2023.1

Siemens TIA Project-Server formerly known as TIA Multiuser Server

Siemens RUGGEDCOM APE1808

These arent the apps youre looking for: fake installers targeting Southeast and East Asia

Siemens SIMATIC Industrial Products

Siemens COMOS

Siemens Mendix

ESXiArgs Ransomware Hits Over 500 New Targets in European Countries

Spam and phishing in 2022

Encrypted Traffic, Once Thought Safe, Now Responsible For Most Cyberthreats

Descope Handles Authentication So Developers Don't Have To

ESXiArgs ransomware fights off Team America's data recovery script

Oligo Security Takes Aim at Open Source Vulnerabilities

SANS Security Awareness Professional: A New Look for the SSAP Digital Badge