Port 22

~ 23 Jun 2022 ~

Palo Alto Networks Bolsters Its Cloud Native Security Offerings With Out-of-Band WAAS

How APTs Are Achieving Persistence Through IoT, OT, and Network Devices

80% of Legacy MSSP Users Planning MDR Upgrade

MetaMask Crypto-Wallet Theft Skates Past Microsoft 365 Security

On the Subversion of NIST by the NSA

Parents Need to Know Whats Going On Inside Their Day Care Apps

OFFIS DCMTK

Yokogawa STARDOM

Yokogawa CAMS for HIS

Secheron SEPCOS Control and Protection Relay

Pyramid Solutions EtherNet/IP Adapter Development Kit

The hateful eight: Kasperskys guide to modern ransomware groups TTPs

Elcomplus SmartICS

Virtual private networks: 5 common questions about VPNs answered

Halfords suffers a puncture in the customer details department

Don't ditch PowerShell to improve security, say infosec agencies from UK, US, and NZ

Europol arrests nine suspected of stealing 'several million' euros via phishing

NSO Confirms Pegasus Spyware Used by at least 5 European Countries

Manual vs. SSPM: Research on What Streamlines SaaS Security Detection & Remediation

Organizations Battling Phishing Malware, Viruses the Most

Chinese Hackers Distributing SMS Bomber Tool with Malware Hidden Inside

~ 22 Jun 2022 ~

Critical PHP Vulnerability Exposes QNAP NAS Devices to Remote Attacks

Mega's unbreakable encryption proves to be anything but

Microsoft 365 Users in US Face Raging Spate of Attacks

Synopsys Completes Acquisition of WhiteHat Security

Cisco warns of security holes in its security appliances

Aqua Security Collaborates With Center for Internet Security to Create Guide for Software Supply Chain Security

Neustar Security Services Launches Public UltraDNS Health Check Site

Russia's APT28 Launches Nuke-Themed Follina Exploit Campaign

Fresh Magecart Skimmer Attack Infrastructure Flagged by Analysts

Israeli air raid sirens triggered in possible cyberattack

Getting a Better Handle on Identity Management in the Cloud

Tanium Partners With ScreenMeet to Enable Employees to Securely Connect to Their Remote Desktops

Microsoft Defender for Office 365 receives highest award in SE Labs Enterprise Email Security Services test

Brave Now Lets You Customize Search Resultsfor Better or Worse

Zscaler and AWS Expand Relationship

Zscaler Launches Posture Control Solution

Zscaler Adds New AI/ML Capabilities for the Zscaler Zero Trust Exchange

Evolving Beyond the Password: Vanquishing the Password

The Risk of Multichannel Phishing Is on the Horizon

GitHub's MFA Plans Should Spur Rest of Industry to Raise the Bar

80% of Firms Suffered Identity-Related Breaches in Last 12 Months

DARPA study challenges assumptions about distributed ledger (and Bitcoin) security

Meet the Administrators of the RSOCKS Proxy Botnet

Risk Disconnect in the Cloud

Symbiote Backdoor in Linux

Yodel becomes the latest victim of a cyber 'incident'

Researchers Uncover Ways to Break the Encryption of 'MEGA' Cloud Storage Service

Okta says Lapsus$ incident was actually a brilliant zero trust demonstration

Russian Hackers Exploiting Microsoft Follina Vulnerability Against Ukraine

Newly Discovered Magecart Infrastructure Reveals the Scale of Ongoing Campaign

Europol Busts Phishing Gang Responsible for Millions in Losses

~ 21 Jun 2022 ~

Linux Foundation Announces Open Programmable Infrastructure Project to Drive Open Standards for New Class of Cloud Native Infrastructure

RIG Exploit Kit Now Infects Victims' PCs With Dridex Instead of Raccoon Stealer

Mitsubishi Electric MELSEC Q and L Series

7 Ways to Avoid Worst-Case Cyber Scenarios

VPNs Persist Despite Zero-Trust Fervor

China-Linked ToddyCat APT Pioneers Novel Spyware

Info on 1.5m people stolen from US bank in cyberattack

RIG Exploit Kit Replaces Raccoon Stealer Trojan With Dridex

The Power and Pitfalls of AI for US Intelligence

Gartner: Regulation, Human Costs Will Create Stormy Cybersecurity Weather Ahead

Why Financial Institutions Must Double Down on Open Source Investments

Dont react, prevent

Improving AI-based defenses to disrupt human-operated ransomware

Evolving Beyond the Password: It's Time to Up the Ante

BRATA Android Malware Evolves Into an APT

Reducing Risk With Zero Trust

56 Vulnerabilities Discovered in OT Products From 10 Different Vendors

AI Is Not a Security Silver Bullet

1Password's Insights tool to help admins monitor users' security practices

Open Source Software Security Begins to Mature

A great day for non-robots: iOS 16 will bypass CAPTCHAs

Hidden Anti-Cryptography Provisions in Internet Anti-Trust Bills

JTEKT TOYOPUC

Phoenix Contact Classic Line Controllers

Phoenix Contact ProConOS and MULTIPROG

Phoenix Contact Classic Line Industrial Controllers

APT ToddyCat

Siemens WinCC OA

Phishing awareness training: Help your employees avoid the hook

How refactoring code in Safari's WebKit resurrected 'zombie' security bug

New ToddyCat Hacker Group on Experts' Radar After Targeting MS Exchange Servers

Securing your IoT with Edge Secured-core devices

Mitigate Ransomware in a Remote-First World

Researchers Disclose 56 Vulnerabilities Impacting OT Devices from 10 Vendors

Former Amazon Employee Found Guilty in 2019 Capital One Data Breach

CISA and friends raise alarm on critical flaws in industrial equipment, infrastructure

New NTLM Relay Attack Lets Attackers Take Control Over Windows Domain

Thats a Wrap! Looking Back on SANS at RSAC 2022

Voicemail phishing emails steal Microsoft credentials

~ 20 Jun 2022 ~

Capital One Attacker Exploited Misconfigured AWS Databases

Feds Take Down Russian 'RSOCKS' Botnet

Why Paper Receipts are Money at the Drive-Thru

Name That Toon: Cuter Than a June Bug

DDoS Attacks Delay Putin Speech at Russian Economic Forum

Credential Sharing as a Service: The Hidden Risk of Low-Code/No-Code

How one Microsoft software engineer works to improve access management

Security Lessons From Protecting Live Events

The Cybersecurity Diversity Gap: Advice for Organizations Looking to Thrive