Port 22

~ 15 Sep 2022 ~

WordPress-powered sites backdoored after FishPig suffers supply chain attack

~ 14 Sep 2022 ~

Say Hello to Crazy Thin Deep Insert ATM Skimmers

White House to tech world: Promise you'll write secure code or Feds won't use it

White House Guidance Recommends SBOMs for Federal Agencies

Nearly one in two industry pros scaled back open source use over security fears

The Twitter Whistleblowers Testimony Has Senators Out for Blood

How to Use SSH Keys and 1Password to Sign Git Commits

Upcoming Speaking Engagements

SparklingGoblin Updates Linux Version of SideWalk Backdoor in Ongoing Cyber Campaign

Implementing a Zero Trust strategy after compromise recovery

Lorenz Ransomware Exploit Mitel VoIP Systems to Breach Business Networks

To Ease the Cybersecurity Worker Shortage, Broaden the Candidate Pipeline

Cyberattacks Are Now Increasingly Hands-On, Break Out More Quickly

TeamTNT Hits 150K Docker Containers via Malicious Cloud Images

Weird Fallout from Peiter Zatkos Twitter Whistleblowing

Ukraines Cyberwar Chief Sounds Like Hes Winning

Google and Meta fined over $70m for privacy violations in Korea

SparklingGoblin APT Hackers Using New Linux Variant of SideWalk Backdoor

How to Do Malware Analysis?

You never walk alone: The SideWalk backdoor gets a Linux variant

Researchers Detail OriginLogger RAT Successor to Agent Tesla Malware

Microsoft's Latest Security Update Fixes 64 New Flaws, Including a Zero-Day

Over 280,000 WordPress Sites Attacked Using WPGateway Plugin Zero-Day Vulnerability

Key Takeaways From the Twitter Whistleblower's Testimony

Ransomware gang threatens 1m-plus medical record leak

Wormable Flaw, 0days Lead Sept. 2022 Patch Tuesday

Twitter whistleblower Zatko disses bird site as dysfunctional data dump

~ 13 Sep 2022 ~

Microsoft fixes Windows security hole likely widely exploited by miscreants

Bishop Fox Releases Cloud Enumeration Tool CloudFox

Microsoft Quashes Actively Exploited Zero-Day, Wormable Critical Bugs

U-Haul Customer Contract Search Tool Compromised

ShadowPad Threat Actors Return With Fresh Government Strikes, Updated Tools

Cyberattackers Abuse Facebook Ad Manager in Savvy Credential-Harvesting Campaign

Patch your Mitel VoIP systems, Lorenz ransomware gang is back on the prowl

Name That Toon: Shiver Me Timbers!

Opus Security Emerges from Stealth with $10M in Funding for Cloud SecOps and Remediation Processes

Arcserve Independent Global Study Finds Businesses Still Losing Mission-Critical Company Data

Secure your endpoints with Transparity and Microsoft

How to get inside the mind of hackers

Lorenz Ransomware Goes After SMBs via Mitel VoIP Phone Systems

Business Security Starts With Identity

Gartner Survey Shows 75% of Organizations Are Pursuing Security Vendor Consolidation in 2022

How GRC protects the value of organizations A simple guide to data quality and integrity

Mass DNA Collection in the Tibet Autonomous Region from 20162022

Attackers Can Compromise Most Cloud Data in Just 3 Steps

FBI Seizes Stolen Cryptocurrencies

How Whistleblowers Navigate a Security Minefield

Asian Governments and Organizations Targeted in Latest Cyber Espionage Attacks

Delta Industrial Automation DIAEnergie

Kingspan TMS300 CS

Honeywell SoftMaster

Hitachi Energy TXpert Hub CoreTec 4 Sudo Vulnerability

Why is my WiFi slow and how do I make it faster?

Iranian Hackers Target High-Value Targets in Nuclear Security and Genomic Research

One month after Black Hat exposure HP enterprise kit still unpatched

Cisco: Yes, Yanluowang leaked our data. No, it's not serious

Chinese-linked cyber crims nab $529 million from Indian nationals

Apple Releases iOS and macOS Updates to Patch Actively Exploited Zero-Day Flaw

Top 5 Reasons to Attend Cyber Solutions Fest 2022

Musk seeks yet another excuse to get out of Twitter buyout: This time it's Mudge's severance check

~ 12 Sep 2022 ~

Apple patches iPhone and macOS flaws under active attack

How Machine Learning Can Boost Network Visibility for OT Teams

Google Releases Pixel Patches for Critical Bugs

Federal Privacy Bill That Would Preempt State Privacy Laws Faces Uncertain Future

Cisco Data Breach Attributed to Lapsus$ Ransomware Group

Google Cloud closes $5.4b Mandiant acquisition

Cybersecurity Awareness Campaigns: How Effective Are They in Changing Behavior?

Security pros get ability to manually add incidents to Microsoft Sentinel

Reducing the risk of ransomware

New Linux Cryptomining Malware

Google Completes Acquisition of Mandiant

Security Awareness Training Must Evolve to Align With Growing E-Commerce Security Threats

China Accuses NSA's TAO Unit of Hacking its Military Research University

Report Highlights Prevalence of Software Supply Chain Risks

Palestinian Hacktivist Group GhostSec Compromises 55 Berghof PLCs Across Israel

Why Vulnerability Scanning is Critical for SOC 2

iOS 16 Has Two New Security Features for Worst-Case Scenarios

Boffins build microphone safety kit to detect eavesdroppers

High-Severity Firmware Security Flaws Left Unpatched in HP Enterprise Devices

Retbleed fix slugs Linux VM performance by up to 70 percent

~ 11 Sep 2022 ~

Iranian APT42 Launched Over 30 Espionage Attacks Against Activists and Dissidents

~ 10 Sep 2022 ~

Uncle Sam sanctions Iran's intel agency over Albanian cyberattack

Hackers Target Los Angeles School District With Ransomware

Shape-shifting cryptominer savaging Linux endpoints and IoT

U.S. Imposes New Sanctions on Iran Over Cyberattack on Albania

~ 9 Sep 2022 ~

Data tracking poses a 'national security risk' FTC told

Feds freeze $30m in cryptocurrency stolen from Axie Infinity

Friday Squid Blogging: Colossal Squid in New Zealand Museum

Zane Lackey: 'Technology Is the Easy Bit'

Monti, the New Conti: Ransomware Gang Uses Recycled Code

Attackers Exploit Zero-Day WordPress Plug-in Vulnerability in BackupBuddy

Meta disbands Responsible Innovation team, spreads it out over Facebook and co

US Sanctions Iran Over APT Cyberattack Activity

Microsoft, Cloud Providers Move to Ban Basic Authentication

LockBit, ALPHV, and Other Ransomware Gang Leak Sites Hit by DDoS Attacks

Why Ports Are at Risk of Cyberattacks

Responsible Disclosure for Cryptocurrency Security

ESET Research uncovers new APT group Worok Week in security with Tony Anscombe

6 Top API Security Risks! Favored Targets for Attackers If Left Unmanaged

Transacting in Person with Strangers from the Internet