Port 22

~ 23 Sep 2022 ~

App Developers Increasingly Targeted via Slack, DevOps Tools

Malicious Apps With Millions of Downloads Found in Apple App Store, Google Play

Open up, it's the IRS. We're here about the crypto tax you dodged

What to consider before disposing of personal data Week in security with Tony Anscombe

Accused Russian RSOCKS Botmaster Arrested, Requests Extradition to U.S.

CISA: Zoho ManageEngine RCE Bug Is Under Active Exploit

Significant customer data exposed in attack on Australian telco

Slack and Teams Lax App Security Raises Alarms

Iran blocks Whatsapp, Instagram as citizens protest death of Mahsa Amini

Iran's Internet Shutdown Sparks Fear of a Deadly Cover-Up

Cyberattackers Compromise Microsoft Exchange Servers via Malicious OAuth Apps

How Europe Is Using Regulations to Harden Medical Devices Against Attack

Hackers Using Fake CircleCI Notifications to Hack GitHub Accounts

Neglecting Open Source Developers Puts the Internet at Risk

Researchers Uncover New Metador APT Targeting Telcos, ISPs, and Universities

Microsoft Looks to Enable Practical Zero-Trust Security With Windows 11

Mitigating Risk and Communicating Value in Multicloud Environments

Leaking Screen Information on Zoom Calls through Reflections in Eyeglasses

CISA Warns of Hackers Exploiting Recent Zoho ManageEngine Vulnerability

Firing Your Entire Cybersecurity Team? Are You Sure?

Void Balaur Hackers-for-Hire Targeting Russian Businesses and Politics Entities

5 tips to help children navigate the internet safely

Keeping secrets safe off prem

Mass email campaign with a pinch of targeted spam

Fake Indian Banking Rewards Apps Targeting Android Users with Info-stealing Malware

Privacy watchdog steps up fight against Europol's hoarding of personal data

Hackers Using Malicious OAuth Apps to Take Over Email Servers

Researchers Uncover Mysterious 'Metador' Cyber-Espionage Group

~ 22 Sep 2022 ~

Developer Leaks LockBit 3.0 Ransomware-Builder Code

CircleCI, GitHub Users Targeted in Phishing Campaign

Check out this Android spyware, says Microsoft, the home of a gazillion Windows flaws

Time to Quell the Alarm Bells Around Post-Quantum Crypto-Cracking

Feds Sound Alarm on Rising OT/ICS Threats From APT Groups

Malicious npm Package Poses as Tailwind Tool

Researchers Uncover Years-Long Mobile Spyware Campaign Targeting Uyghurs

The Ungodly Surveillance of Anti-Porn Shameware Apps

Malicious OAuth applications used to compromise email servers and spread spam

Cambodian authorities crack down on cyber slavery amid international pressure

Malicious NPM Package Caught Mimicking Material Tailwind CSS Package

A New Linux Tool Aims to Guard Against Supply Chain Attacks

Allurity Acquires Spanish Multinational Aiuken Cybersecurity

Twitter's Whistleblower Allegations Are a Cautionary Tale for All Businesses

StackHawk Launches Deeper API Security Test Coverage to Improve the Security of APIs

Fake sites fool Zoom users into downloading deadly code

Palo Alto Networks 5G-Native Security Now Available on Microsoft Azure Private Multi-Access Edge Compute

IT Security Takeaways from the Wiseasy Hack

Prompt Injection/Extraction Attacks against AI Systems

Researchers Disclose Critical Vulnerability in Oracle Cloud Infrastructure

Measuresoft ScadaPro Server

Hey WeLiveSecurity, how does biometric authentication work?

15-Year-Old Unpatched Python Vulnerability Potentially Affects Over 350,000 Projects

Hackers Targeting Unpatched Atlassian Confluence Servers to Deploy Crypto Miners

Alert: 15-year-old Python tarfile flaw lurks in 'over 350,000' code projects

NEW SANS DFIR COURSE | FOR577: LINUX Incident Response & Analysis

~ 21 Sep 2022 ~

San Francisco cops can use private cameras to live-monitor 'significant events'

Wintermute DeFi Platform Offers Hacker a Cut in $160M Crypto-Heist

Quantify Risk, Calculate ROI

Threat Actor Abuses LinkedIn's Smart Links Feature to Harvest Credit Cards

Sophisticated Hermit Mobile Spyware Heralds Wave of Government Surveillance

Hackers Paralyze 911 Operations in Suffolk County, NY

Data Scientists Dial Back Use of Open Source Code Due to Security Worries

Rewards plus: Fake mobile banking rewards apps lure users to install info-stealing RAT on Android devices

Don't Wait for a Mobile WannaCry

Cyber Insurers Clamp Down on Clients' Self-Attestation of Security Controls

Cyber Insurers Clamp Down on Clients' Self-Attestation of Security Controls

SIM Swapper Abducted, Beaten, Held for $200k Ransom

The art and science behind Microsoft threat hunting: Part 2

Malwarebytes blocks Google, YouTube as malware

15-Year-Old Python Flaw Slithers into Software Worldwide

'I Don't Care About Cookies' extension sold to Avast

Ransomware: The Latest Chapter

Over 39,000 Unauthenticated Redis Instances Found Exposed on the Internet

Crypto Trading Firm Wintermute Loses $160 Million in Hacking Incident

Why Zero Trust Should be the Foundation of Your Cybersecurity Ecosystem

Automatic Cheating Detection in Human Racing

Shadowy Russian Cell Phone Companies Are Cropping Up in Ukraine

U.S. Adds 2 More Chinese Telecom Firms to National Security Threat List

WAAP it out for application security

ChromeLoader, what took you so long? Malvertising irritant now slings ransomware

Look who's fallen foul of Europe's data retention rules. France and Germany

Record DDoS Attack with 25.3 Billion Requests Abused HTTP/2 Multiplexing

Critical Remote Hack Flaws Found in Dataprobe's Power Distribution Units

Product Review: Stellar Cyber Open XDR Platform

USA adds two more Chinese carriers on 'probably a threat to national security' list

Microsoft Brings Zero Trust to Hardware in Windows 11

~ 20 Sep 2022 ~

Crypto biz Wintermute loses $160m in cyber-heist, tells us not to stress out

ChromeLoader Malware Evolves into Prevalent, More Dangerous Cyber Threat

Meta, Twitter, Apple, Google urged to up encryption game in post-Roe America

2-Step Email Attack Uses Powtoon Video to Execute Payload

Beware of Phish: American Airlines, Revolut Data Breaches Expose Customer Info

Cast AI Introduces Cloud Security Insights for Kubernetes

Spell-Checking in Google Chrome, Microsoft Edge Browsers Leaks Passwords

Survey Shows CISOs Losing Confidence in Ability to Stop Ransomware Attacks

New Windows 11 security features are designed for hybrid work

How to Dodge New Ransomware Tactics

No Enterprise Push for Quantum Without Regulatory Push

New Kaspersky EDR Optimum Further Simplifies Protection Against Evasive Threats

ThreatQuotient Enhances Data-Driven Automation Capabilities With New ThreatQ TDR Orchestrator Features

SASE Bucks Economic Uncertainty With Over 30% Growth in 2Q 2022, According to Dell'Oro Group

Invicti Security and ESG Report on How Companies are Shifting for Higher Quality, Secure Application Code