Port 22

~ 2 Dec 2022 ~

The Value of Old Systems

LastPass Security Breach

Researchers Disclose Supply-Chain Flaw Affecting IBM Cloud Databases for PostgreSQL

Hackers Exploiting Redis Vulnerability to Deploy New Redigo Malware on Servers

Domain aging gang CashRewindo picks vintage sites to push malvertising

What the CISA Reporting Rule Means for Your IT Security Protocol

Mozilla, Microsoft drop TrustCor as root certificate authority

Indicators of compromise (IOCs): how we collect and use them

Watch Out! These Android Keyboard Apps With 2 Million Installs Can be Hacked Remotely

Two signs in the comms cabinet said 'Do not unplug'. Guess what happened

Cuba Ransomware Extorted Over $60 Million in Ransom Fees from More than 100 Entities

AWS Unveils Amazon Security Lake at re:Invent 2022

~ 1 Dec 2022 ~

Nvidia patches 29 GPU driver bugs that could lead to code execution, device takeover

LastPass Discloses Second Breach in Three Months

Artifact Poisoning in GitHub Actions Imports Malware via Software Pipelines

One Year After Log4Shell, Most Firms Are Still Exposed to Attack

Google warns about commercial Heliconia spyware hitting Chrome, Firefox and and Microsoft Defender

ConnectWise Quietly Patches Flaw That Helps Phishers

IBM Cloud Supply Chain Vulnerability Showcases New Threat Class

Sirius XM Software Vulnerability

Of Exploits and Experts: The Professionalization of Cybercrime

Data Security Concerns Are Driving Changes in US Consumer Behavior and Demands

Google Accuses Spanish Spyware Vendor of Exploiting Chrome, Firefox, and Windows Zero-Days

Guidehouse Insights Anticipates Market for Automotive Cybersecurity Solutions Will Grow to More Than $445 Billion by 2031

CyberRatings.org Announces Results from First-of-its-Kind Comparative Test on Cloud Network Firewall

Phylum Expands Its Software Supply Chain Security Capabilities, Introduces Automated Vulnerability Reachability

Intruders gain access to user data in LastPass incident

Hackers Leak Another Set of Medibank Customer Data on the Dark Web

Irans Protests Reveal Whats Lost If Twitter Crumbles

Researchers Disclose Critical RCE Vulnerability Affecting Quarkus Java Framework

What Developers Need to Fight the Battle Against Common Vulnerabilities

Kaspersky Security Bulletin 2022. Statistics

Twenty years on, command-line virus scanner ClamAV puts out version 1

Top tips to save energy used by your electronic devices

BD BodyGuard Pumps

Schoolyard Bully Trojan Apps Stole Facebook Credentials from Over 300,000 Android Users

Mitsubishi Electric MELSEC iQ-R Series

Horner Automation Remote Compact Controller

Researchers 'Accidentally Crash KmsdBot Cryptocurrency Mining Botnet Network

LastPass Suffers Another Security Breach; Exposed Some Customers Information

Keeping customers happy means the big IAM just got bigger

Almost 300 predatory loan apps found in Google and Apple stores

CI Fuzz CLI Brings Fuzz Testing to Java Applications

Top 10 SANS Summits Talks of 2022

~ 30 Nov 2022 ~

Sirius XM flaw unlocks so-called smart cars thanks to code flaw

Nvidia GPU Driver Bugs Threaten Device Takeover & More

San Francisco lawmakers approve lethal robots, but they can't carry guns

Google Moves to Block Invasive Spanish Spyware Framework

Google TAG Warns on Emerging Heliconia Exploit Framework for RCE

How Banks Can Upgrade Security Without Affecting Client Service

New Exploit Broker on the Scene Pays Premium for Signal App Zero-Days

Implementing Zero Trust access to business data on BYOD with Trustd MTD and Microsoft Entra

SPHERE Receives $31M for Series B Funding From Edison Partners, Forgepoint Capital

The Evolution of Business Email Compromise

API Secrets: Where the Bearer Model Breaks Down

Critical Quarkus Flaw Threatens Cloud Developers With Easy RCE

Identity Digital Releases Its First DNS Anti-Abuse Report

Delinea Introduces Granular Privileged Access Controls on Servers

CyberRatings.org Revives NSS Labs Research

Researchers Find a Way Malicious NPM Libraries Can Evade Vulnerability Detection

Researchers Find a Way Malicious NPM Libraries Can Evade Vulnerability Detection

This Malicious App Abused Hacked Devices to Create Fake Accounts on Multiple Platforms

This Malicious App Abused Hacked Devices to Create Fake Accounts on Multiple Platforms

Facebook Fined $276M under GDPR

Drop What You're Doing and Update iOS, Android, and Windows