Port 22

~ 23 Feb 2023 ~

Batteries Are Ukraines Secret Weapon Against Russia

Experts Sound Alarm Over Growing Attacks Exploiting Zoho ManageEngine Products

This Will Be the Year of the SBOM, for Better or for Worse

The Secret Vulnerability Finance Execs are Missing

Cyberwar Lessons from the War in Ukraine

New Hacking Cluster 'Clasiopa' Targeting Materials Research Organizations in Asia

Why the US Congress Wants to Ban TikTok

Lazarus Group Using New WinorDLL64 Backdoor to Exfiltrate Sensitive Data

New S1deload Malware Hijacking Users' Social Media Accounts and Mining Cryptocurrency

WinorDLL64: A backdoor from the vast Lazarus arsenal?

PTC ThingWorx Edge

BD Alaris Infusion Central (Update A)

Russian authorities claim Ukraine hackers are behind fake missile strike alerts

Python Developers Warned of Trojanized PyPI Packages Mimicking Popular Libraries

Datacenters in China, Singapore, cracked by crims who then targeted tenants

Lawyers join forces to fight common enemy: The SEC and its probes into cyber-victims

What is Open-Source Intelligence?

~ 22 Feb 2023 ~

UL Solutions Advances Automotive Safety and Security

Scammers Mimic ChatGPT to Steal Business Credentials

Half of Apps Have High-Risk Vulnerabilities Due to Open Source

Entitle Brings Fine-Grained Cloud Permissions Management Out of Stealth

1 in 4 CISOs Wants to Say Sayonara to Security

US Military Emails Exposed via Cloud Account

Headwinds Don't Have to Be a Drag on Your Security Effectiveness

Phishing Fears Ramp Up on Email, Collaboration Platforms

Google Delivers Record-Breaking $12M in Bug Bounties

Xcitium Brings 'Zero Dwell' Capability to Legacy EDR Platforms

Trend Micro Acquires SOC Technology Expert Anlyz

Exploit Code Released for Critical Fortinet RCE Bug

7 Tips for Mitigating Cyber-Risks to Your Corporate Social Media

4 Tips to Guard Against DDoS Attacks

Apple Warns of 3 New Vulnerabilities Affecting iPhone, iPad, and Mac Devices

Open source software has its perks, but supply chain risks can't be ignored

A Device to Turn Traffic Lights Green

Ukraine Suffered More Wiper Malware in 2022 Than Anywhere, Ever

Attackers Flood NPM Repository with Over 15,000 Spam Packages Containing Phishing Links

3 Steps to Automate Your Third-Party Risk Management Program

Hydrochasma: New Threat Actor Targets Shipping Companies and Medical Labs in Asia

Writing like a boss with ChatGPT and how to get better at spotting phishing scams

Global threats fuel cyber defence training

Threat Actors Adopt Havoc Framework for Post-Exploitation in Targeted Attacks

Gcore Thwarts Massive 650 Gbps DDoS Attack on Free Plan Client

U.S. Cybersecurity Agency CISA Adds Three New Vulnerabilities in KEV Catalog

VMware Patches Critical Vulnerability in Carbon Black App Control Product

How to Stop Attackers That Target Healthcare Imaging Data

Scrut Automation Raises Funding of $7.5M, Led by MassMutual Ventures, Lightspeed, and Endiya Partners

~ 21 Feb 2023 ~

Black Hat to Launch Official Certification Program

CREST Calls for Greater Equity, Inclusion and Diversity As Part of National Cyber Security Strategy

Malwarebytes Expands Platform With New Application Block Capabilities

Analysts Slam Twitter's Decision to Disable SMS-Based 2FA

Cyberthreats, Regulations Mount for Financial Industry

Name That Toon: Join the Club

Coinbase Crypto Exchange Ensnared in 'Oktapus'-Related Smishing Attack

Third-Party Providers Create Identity and Access Control Challenges for Fintech Apps

Israel's Top Tech University Targeted by DarkBit Ransomware

2022 in review: DDoS attack trends and insights

Microsoft Defender for Office 365 named Best Email Security Service of 2023 by SE Labs

Insider Threats Don't Mean Insiders Are Threatening

MyloBot Botnet Spreading Rapidly Worldwide: Infecting Over 50,000 Devices Daily

A New Kind of Bug Spells Trouble for iOS and macOS Security

The Future of Network Security: Predictive Analytics and ML-Driven Solutions

The Insecurity of Photo Cropping

Accidental WhatsApp account takeovers? It's a thing

Researchers Discover Dozens Samples of Information Stealer 'Stealc' in the Wild

ESET SMB Digital Security Sentiment Report: The damaging effects of a breach