Port 22

~ 21 Nov 2022 ~

A Leak Details Apple's Secret Dirt on Corellium, a Trusted Security Startup

Google Wins Lawsuit Against Russians Linked to Blockchain-based Glupteba Botnet

Google Identifies 34 Cracked Versions of Popular Cobalt Strike Hacking Toolkit in the Wild

~ 20 Nov 2022 ~

Google looking outside the usual channels to fix security skills gap

Serendipitous discovery nets security researcher $70k bounty

~ 19 Nov 2022 ~

A Destabilizing Hack-and-Leak Operation Hits Moldova

Indian Government Publishes Draft of Digital Personal Data Protection Bill 2022

Microsoft Warns of Hackers Using Google Ads to Distribute Royal Ransomware

Chinese 'Mustang Panda' Hackers Actively Targeting Governments Worldwide

Atlassian Releases Patches for Critical Flaws Affecting Crowd and Bitbucket Products

New Startup OpsHelm Tackles Cloud Misconfigurations

~ 18 Nov 2022 ~

Charting the Path to Zero Trust: Where to Begin

Friday Squid Blogging: Squid Brains

DEV-0569 Ransomware Group Remarkably Innovative, Microsoft Cautions

Australia's Hack-Back Plan Against Cyberattackers Raises Familiar Concerns

Hive ransomware crooks extort $100m from 1,300 global victims

Amid Legal Fallout, Cyber Insurers Redefine State-Sponsored Attacks as Act of War

First Review of A Hackers Mind

Palo Alto Networks Focuses on Secure Coding with $195M Cider Deal

Secure Offboarding in the Spotlight as Tech Layoffs Mount

Latest insights on APT activity Week in security with Tony Anscombe

Successful Hack of Time-Triggered Ethernet

The Next Generation of Supply Chain Attacks Is Here to Stay

County of Tehama, Calif., Identifies and Addresses Data Security Incident

Meta Reportedly Fires Dozens of Employees for Hijacking Users' Facebook and Instagram Accounts

LodaRAT Malware Resurfaces with New Variants Employing Updated Functionalities

Threat hunting with MITRE ATT&CK and Wazuh

Hardware-assisted encryption of data in use gets confidential

Tor vs. VPN: Which should you choose?

Z-Library operators arrested, charged with criminal copyright infringement

IT threat evolution in Q3 2022. Non-mobile statistics

IT threat evolution in Q3 2022. Mobile statistics

IT threat evolution Q3 2022

Hive Ransomware Attackers Extorted $100 Million from Over 1,300 Companies Worldwide

Israel sets robotic target-tracking turrets in the West Bank

W4SP Stealer Constantly Targeting Python Developers in Ongoing Supply Chain Attack

Researchers Quietly Cracked Zeppelin Ransomware Keys

Heres How Bad a Twitter Mega-Breach Would Be

~ 17 Nov 2022 ~

Analysts Welcome NSA's Advice for Developers to Adopt Memory-Safe Languages

Security firms hijack New York trees to monitor private workforce

Iranian APT Actors Breached a US Government Network

DEV-0569 finds new ways to deliver Royal ransomware, various payloads

Zero-Trust Initiatives Stall, as Cyberattack Costs Rocket to $1M per Incident

Instagram Impersonators Target Thousands, Slipping by Microsoft's Cybersecurity

Spacecraft Vulnerable to Failure, Thanks to Aerospace Networking Bug

Google wins lawsuit against alleged Russian botnet herders

TMI Tech: How to Stop Vulnerable Software from 'Oversharing'

Cyber Monday Will Be the Most Fraudulent Day of the Season, Says SEON

41 Transatlantic Business Coalition Calls on EU Policymakers to Finalize Agreement to Secure Transatlantic Data Flows

Revelstoke Upgrades SOAR Platform With Augmented Automation, Case Management, and User Interface Capabilities

Chinese Hackers Using 42,000 Imposter Domains in Massive Phishing Attack Campaign

Failures in Twitters Two-Factor Authentication System

FBI-Wanted Leader of the Notorious Zeus Botnet Gang Arrested in Geneva

Red Lion Crimson

Cradlepoint IBR600

100 Apps, Endless Security Checks

Notorious Emotet botnet returns after a few months off

High Severity Vulnerabilities Reported in F5 BIG-IP and BIG-IQ Devices

Iranian Hackers Compromised a U.S. Federal Agencys Network Using Log4Shell Exploit

North Korean Hackers Targeting Europe and Latin America with Updated DTrack Backdoor

~ 16 Nov 2022 ~

Iranian cyberspies exploited Log4j to break into a US govt network

China-Based Billbug APT Infiltrates Certificate Authority

MITRE Engenuity Launches Evaluations for Security Service Providers

The Future of Cybersecurity Recruiting: Lessons on What Employers Want and What Students Need

Are We Ready for AI-Generated Code?

Germany says nein to Qatari World Cup spyware, err, apps

BoostSecurity Emerges From Stealth With SaaS DevSecOps Platform

WASP malware stings Python developers

New Ransomware Data Is In: What's Happening and How to Fight Back

Microsoft contributes S2C2F to OpenSSF to improve supply chain security

Disneyland Malware Team: Its a Puny World After All

Ukraine's 'IT Army' Stops 1,300 Cyberattacks in 8 Months of War

Thousands of Amazon RDS Snapshots Are Leaking Corporate PII

Vectra Unveils Global Managed Detection and Response (MDR) Services With Game-Changing Attack Signal Intelligence

Token tactics: How to prevent, detect, and respond to cloud token theft

BitSight Enhances Its Third-Party Risk Management Platform to Help Organizations Respond to Major Vulnerabilities

Palo Alto Networks Announces PAN-OS 11.0 Nova to Help Keep Organizations One Step Ahead of Zero-Day Threats

Cymulate Survey Finds Consolidation Is Happening, but Only 20% Cite Cost As the Reason

Telehealth Sites Put Addiction Patient Data at Risk

Cybersecurity Best Practice Is Critical for Winning the New Space Race

What Is Top of Mind for CISOs Right Now?

Cloud vendors should take some responsibility for stolen compute, says Canalys CEO

Viakoo Announces Strategic Alliance With Nozomi Networks to Deliver Agentless, End-to-End IoT Security at Scale

More Than 1,000 New Cybersecurity Apprentices Joined Workforce in Past 12 Months

Researchers Discover Hundreds of Amazon RDS Instances Leaking Users' Personal Data

7 Reasons to Choose an MDR Provider

Russian Software Company Pretending to Be American

Open banking: Tell me what you buy, and Ill tell you who you are

Swiss bankers warn: Three quarters of retail Bitcoin investors lose money

Warning: New RapperBot Campaign Aims to Launch DDoS Attacks at Game Servers

Google to Roll Out Privacy Sandbox Beta on Android 13 by Early 2023

Boosting telcos 5G cyber resilience

Get Ahead of the Five Most Dangerous New Attack Techniques

~ 15 Nov 2022 ~

Time-Triggered Ethernet flaw could have crippled Orion spacecraft

Eggheads show how network flaw could lead to NASA crew pod loss. Key word: Could

Wipermania: Malware Remains a Potent Threat, 10 Years Since 'Shamoon'

Shocker: EV charging infrastructure is seriously insecure

Modern CISO: More Than a Security Officer

Where Can Third-Party Governance and Risk Management Take Us?

Misconfigurations, Vulnerabilities Found in 95% of Applications