Port 22

~ 4 Mar 2023 ~

New FiXS ATM Malware Targeting Mexican Banks

Secret Service, ICE break the law over and over with fake cell tower spying

Rapid7 Brings Threat Intel Data to USF Cybersecurity Lab

Snap CISO: I rate software supply chain risk 9.9 out of 10

~ 3 Mar 2023 ~

Friday Squid Blogging: Were Almost at Flying Squid Drones

FTC: BetterHelp pushed users to share mental health info then gave it to Facebook

EV Charging Infrastructure Offers an Electric Cyberattack Opportunity

Indigo Books Refuses LockBit Ransomware Demand

Polish Politician's Phone Patrolled by Pegasus

Frankenstein malware stitched together from code of others disguised as PyPI package

3 Ways Security Teams Can Use IP Data Context

Chick-fil-A Gives Customers a Bone to Pick After Data Breach

Nick Weaver on Regulating Cryptocurrency

It's Time to Assess the Potential Dangers of an Increasingly Connected World

What does $5,000 buy you on a hacking forum? Week in security with Tony Anscombe

The Sketchy Plan to Build a Russian Android Phone

Warning on SolarWinds-like supply-chain attacks: 'They're just getting bigger'

German Digital Affairs Committee hearing heaps scorn on Chat Control

New Flaws in TPM 2.0 Library Pose Threat to Billions of IoT and Enterprise Devices

Smart security

Chinese Hackers Targeting European Entities with New MQsTTang Backdoor

U.S. Cybersecurity Agency Raises Alarm Over Royal Ransomware's Deadly Capabilities

IBM Contributes Supply Chain Security Tools to OWASP

Highlights from the New U.S. Cybersecurity Strategy

Crappy insecure software in Biden's crosshairs

Why Certify with GIAC? (Korean)

Top 5 Reasons to Earn GIAC Certifications & Keep Them Active (Korean)

~ 2 Mar 2023 ~

Axis Security Acquisition Strengthens Aruba's SASE Solutions With Integrated Cloud Security and SD-WAN

CI/CD: Necessary for modern software development, yet it carries a lot of risk

CISA, MITRE Look to Take ATT&CK Framework Out of the Weeds

Biden's Cybersecurity Strategy Calls for Software Liability, Tighter Critical Infrastructure Security

BlackLotus Bookit Found Targeting Windows 11

What GoDaddy's Years-Long Breach Means for Millions of Clients

Sale of Stolen Credentials and Initial Access Dominate Dark Web Markets

Everybody Wants Least Privilege, So Why Isn't Anyone Achieving It?

New Report: Inside the High Risk of Third-Party SaaS Apps

Microsoft is named a Leader in the 2022 Gartner Magic Quadrant for Endpoint Protection Platforms

Booking.com's OAuth Implementation Allows Full Account Takeover

Hackers Target Young Gamers: How Your Child Can Cause Business Compromise

New research, tooling, and partnerships for more secure AI and machine learning

On Shaky Ground: Why Dependencies Will Be Your Downfall

Hackers Exploit Containerized Environments to Steals Proprietary Data and Software

Intruder alert: UK retailer WH Smith hit by another data leak

Dumb Password Rules

This Hacker Tool Can Pinpoint a DJI Drone Operator's Exact Location

<a href="https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-03" hreflang="en">Rittal CMC III Access systems</a>

<a href="https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-02" hreflang="en">Baicells Nova</a>

<a href="https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-01" hreflang="en">Mitsubishi Electric MELSEC iQ-F Series</a>

New Cryptojacking Campaign Leverages Misconfigured Redis Database Servers

2023 Browser Security Report Uncovers Major Browsing Risks and Blind Spots

Experts Identify Fully-Featured Info Stealer and Trojan in Python Package on PyPI

MQsTTang: Mustang Pandas latest backdoor treads new ground with Qt and MQTT

Forget ChatGPT, the most overhyped security tool is technology itself, Wiz warns

SysUpdate Malware Strikes Again with Linux Version and New Evasion Tactics

Critical Flaw in Cisco IP Phone Series Exposes Users to Command Injection Attack

How to Automate in Azure Using PowerShell - Part 2

~ 1 Mar 2023 ~

Ermetic Adds Kubernetes Security to CNAPP

Octillo Launches Women's Cybersecurity Scholarship in Partnership With the Center for Cyber Safety and Education

DoControl's 2023 SaaS Security Threat Landscape Report Finds Enterprises and Mid-Market Organizations Have Exposed Public SaaS Assets

Visibility Is as Vital as Zero Trust for Low-Code/No-Code Security

Forescout Addresses Modern SecOps Challenges With Launch of Forescout XDR

Fastly Launches Managed Security Service to Protect Enterprises From Rising Web Application Attacks

Dish Blames Ransomware Attack for Disruptions of Internal Systems, Call Center Services

It's official: BlackLotus malware can bypass Secure Boot on Windows machines

Offensive Security Is Now OffSec - Refresh Reflects Future of Cybersecurity Learning and Skills Development

Linux Support Expands Cyber Spy Group's Arsenal

What Happened in That Cyberattack? With Some Cloud Services, You May Never Know

The Importance of Recession-Proofing Security Operations

SEC cyber risk management rulea security and compliance opportunity

The Microsoft Intune Suite fuels cyber safety and IT efficiency

CISA: ZK Java Framework RCE Flaw Under Active Exploit

Without FIDO2, MFA Falls Short

Cyberattackers Double Down on Bypassing MFA

Cybercriminals Targeting Law Firms with GootLoader and FakeUpdates Malware

Fooling a Voice Authentication System with an AI-Generated Voice

BlackLotus Becomes First UEFI Bootkit Malware to Bypass Secure Boot on Windows 11

CISOs Are Stressed Out and It's Putting Companies at Risk

BlackLotus UEFI bootkit: Myth confirmed

Gmail and Google Calendar Now Support Client-Side Encryption (CSE) to Boost Data Privacy

PlugX RAT masquerades as legit Windows debugger to slip past security

Parallax RAT Targeting Cryptocurrency Firms with Sophisticated Injection Techniques

Google: You get crypto, you get crypto, almost everyone gets email crypto!

CISOs Share Their 3 Top Challenges for Cybersecurity Management

Google Adds Client-Side Encryption to Gmail, Calendar

US government sets a 30-day deadline for wiping TikTok from feds' phones

~ 28 Feb 2023 ~

Hoxhunt Launches Human Risk Management Platform

Two of The Worst Healthcare Data Breaches in US History Happened Last Year

US cybersecurity chief: Software makers shouldn't lawyer their way out of security responsibilities

LastPass DevOps Engineer Targeted for Cloud Decryption Keys in Latest Breach Revelation

Exfiltrator-22: The Newest Post-Exploitation Toolkit Nipping at Cobalt Strike's Heels

US Marshals Ransomware Hit Is 'Major' Incident

Dish: Someone snatched our data, if you're wondering why our IT systems went down

WannaCry Hero & Kronos Malware Author Named Cybrary Fellow

Pernicious Permissions: How Kubernetes Cryptomining Became an AWS Cloud Data Heist

Microsoft Security Experts discuss evolving threats in roundtable chat

Hackers Claim They Breached T-Mobile More Than 100 Times in 2022

China's BlackFly Targets Materials Sector in 'Relentless' Quest for IP

The DoJ Disruption of the Hive Ransomware Group Is a Short-Lived Win

New EX-22 Tool Empowers Hackers with Stealthy Ransomware Attacks on Enterprises

Bitdefender Releases Free Decryptor for MortalKombat Ransomware Strain