Port 22

~ 19 Oct 2022 ~

GitGuardian Extends Code Security Platform, Adding Infrastructure-as-Code Scanning for Security Misconfigurations

Tear in Microsoft Azure Service Fabric can give attackers full admin privileges

The infinite beauty of the hive mind

Chinese Hackers Targeting Online Casinos with GamePlayerFramework Malware

A Quick Guide for Small Cybersecurity Teams Looking to Invest in Cyber Insurance

Museum Security

Experts Warn of Stealthy PowerShell Backdoor Disguising as Windows Update

Dont get scammed when buying tickets online

CISA Warns of Critical Flaws Affecting Industrial Appliances from Advantech and Hitachi

Germany stands down cyber boss over Russian ties

How Card Skimming Disproportionally Affects Those Most In Need

FBI: Looking for Biden's student loan forgiveness? Watch out for these scams

~ 18 Oct 2022 ~

Patching-as-a-Service Offers Benefits, Challenges

Build some flexibility into your cyber learning

What Is the Difference Between Identity Verification and Authentication?

'Fully undetectable' Windows backdoor gets detected

Gen Z, Millennial Workers Are Bigger Cybersecurity Risks Than Older Employees

NSA urges enterprises to watch China, Taiwan tensions

Defenders beware: A case for post-ransomware investigations

Defenders beware: A case for post-ransomware investigations

German Cybersecurity Boss Sacked Over Kremlin Connection

Treat Essential Security Certificates as Valuable Assets

How Microsoft Purview and Priva help simplify data protection

How Microsoft Purview and Priva help simplify data protection

Phishing Mitigation Can Cost Businesses More Than $1M Annually

AutoRABIT Accelerates Release Management Processes with Automation and Key Integrations

CISA Offers Free RedEye Analytics Tool for Red Teams

Shared Responsibility or Shared Fate? Decentralized IT Means We Are All Cyber Defenders

Putting on the Red Hat

Mastercard To Bring Crypto Trading Capabilities To Banks

5 Best Password Managers (2022): Features, Pricing, and Tips

ryptocurrency and Ransomware The Ultimate Friendship

Qatar Spyware

Upstart Ransom Cartel linked to REvil veterans

Ransom Cartel linked to Colonial Pipeline attacker REvil, says infosec crew

How the World Will Know If Russia Is Preparing to Launch a Nuclear Attack

Chinese 'Spyder Loader' Malware Spotted Targeting Organizations in Hong Kong

Advantech R-SeeNet

European Police Arrest a Gang That Hacked Wireless Key Fobs to Steal Cars

Ever considered using Confidential Computing to beef up cloud data protection?

Cybersecurity Will Not Thrive in Darkness: A Critical Analysis of Proposed Amendments in Bill C-26 to the Telecommunications Act

Imagine surviving a wiper attack only for ransomware to scramble your restored files

Japanese giants to offer security-as-a-service for connected cars

Cops swoop after crooks use wireless keyfob hack to steal cars

Critical RCE Vulnerability Discovered in Popular Cobalt Strike Hacking Software

Ex-WSJ reporter says he was framed in elaborate 'hack-and-smear' operation

Explore the Value of GIAC Cloud Security and Penetration Testing Certifications

~ 17 Oct 2022 ~

Researchers Keep a Wary Eye on Critical New Vulnerability in Apache Commons Text

Cybersecurity's Hiring Spree Requires a Recruiting Rethink

DiceyF deploys GamePlayerFramework in online casino development studio

The Risk of Stateful Antipatterns in Enterprise Internet Architecture

Interpol busts global 'Black Axe' cyber-fraud suspects

Signal to Ditch SMS/MMS Messaging on Android

Tactics Tie Ransom Cartel Group to Defunct REvil Ransomware

New Research Report Predicts Blockchain and Quantum Threat Will Quickly Spread Beyond Cybercurrencies; Surge in New Product and Services Opportunities to Come

What Fast-Talkers Can Teach Us About Vetting Vendors

Hacking Automobile Keyless Entry Systems

Disinformation Attacks Threaten US Midterm Elections

4 Stakeholders Critical to Addressing the Cybersecurity Workforce Gap

China-linked Budworm burrows hole in US legislature systems

Imprivata Expands Its Integrated Digital Identity Platform to Defragment Identities Across Disparate Applications

Black Basta Ransomware Hackers Infiltrates Networks via Qakbot to Deploy Brute Ratel C4

Researchers Say Microsoft Office 365 Uses Broken Email Encryption to Secure Messages

Why Crypto Winter is No Excuse to Let Your Cyber Defenses Falter

New Prestige Ransomware Targeting Polish and Ukrainian Organizations

Zimbra Releases Patch for Actively Exploited Vulnerability in its Collaboration Suite

5 steps to protect your school from cyberattacks

The Hunt for Wikipedia's Disinformation Moles

Phishing works so well crims won't bother with deepfakes, says Sophos chap

INTERPOL-led Operation Takes Down 'Black Axe' Cyber Crime Organization

~ 16 Oct 2022 ~

Xi Jinping hails 'improved cyber ecology', says state to direct strategic tech research

How to Use Passkeys in Google Chrome and Android

~ 15 Oct 2022 ~

Infosec still (mostly) a boys club

Anti-Money Laundering Service AMLBot Cleans House

Elon Musks SpaceX Bails on Starlink Funding for Ukraine

Indian Energy Company Tata Power's IT Infrastructure Hit By Cyber Attack

'Baby Al Capone' to pay $22m to SIM-swap crypto-heist victim

~ 14 Oct 2022 ~

Friday Squid Blogging: On Squid Ink

Microsoft Secures Azure Enclaves With Hardware Guards

FYI: Microsoft Office 365 Message Encryption relies on insecure block cipher

Store credit card numbers in a debug log, lose millions of accounts. Cost? $1.9m

New Prestige ransomware impacts organizations in Ukraine and Poland

New Prestige ransomware impacts organizations in Ukraine and Poland

Apple's Constant Battles Against Zero-Day Exploits

Concerns Over Fortinet Flaw Mount; PoC Released, Exploit Activity Grows

Researchers Reveal Detail for Windows Zero-Day Vulnerability Patched Last Month

Upcoming Speaking Engagements

Fast Fashion Retailer Data Breach Draws $1.9M Fine

Microsoft 365 Message Encryption Can Leak Sensitive Info

Acuity Reports Increase in Cyber Liability Insurance Claims as Cybercrime Skyrockets

Regulating DAOs

Care and Feeding of the SOC's Most Powerful Tool: Your Brain

New Chinese Cyberespionage Group Targeting IT Service Providers and Telcos

New PHP Version of Ducktail Malware Hijacking Facebook Business Accounts

Just how critical is data sovereignty?

How To Build a Career as a Freelance Cybersecurity Analyst From Scratch

ESET research into POLONIUMs arsenal Week in security with Tony Anscombe

LockBit 3.0 malware forced NHS tech supplier to shut down hosted sites

Mirai Botnet Hits Wynncraft Minecraft Server with 2.5 Tbps DDoS Attack

PoC Exploit Released for Critical Fortinet Auth Bypass Bug Under Active Attacks