Port 22

~ 28 Jun 2022 ~

A WAF Is Not a Free Lunch: Teaching the Shift-Left Security Mindset

Supercookies Have Privacy Experts Sounding the Alarm

How security leaders can help their teams avoid burnout

Ransomware Volume Nearly Doubles 2021 Totals in a Single Quarter

Customized malware coded to target OT systems

AMD targeted by RansomHouse, cybercrims claim to have '450Gb' in stolen data

How to Find New Attack Primitives in Microsoft Azure

Have you modelled the attack paths into your organization? Because an attacker already has

New Vulnerability Database Catalogs Cloud Security Issues

When Security Locks You Out of Everything

ABB e-Design

Omron SYSMAC CS/CJ/CP Series and NJ/NX Series

Advantech iView

Motorola Solutions MOSCAD IP and ACE IP Gateways

Motorola Solutions MDLC

Motorola Solutions ACE1000

ZuoRAT Malware Hijacking Home-Office Routers to Spy on Targeted Networks

Overview of Top Mobile Security Threats in 2022

Tencent admits to poisoned QR code attack on QQ chat platform

APT Hackers Targeting Industrial Control Systems with ShadowPad Backdoor

Carnival Cruises torpedoed by US states, agrees to pay $6m after waves of cyber attacks

OpenSSL to Release Security Patch for Remote Memory Corruption Vulnerability

India extends deadline for compliance with infosec logging rules by 90 days

SANS 2022 Security Awareness Report

New Android Banking Trojan 'Revive' Targeting Users of Spanish Financial Services

NIST Finalizes macOS Security Guidance

~ 27 Jun 2022 ~

OpenSSL 3.0.5 awaits release to fix potential worse-than-Heartbleed flaw

LGBTQ+ folks warned of dating app extortion scams

Federal, State Agencies' Aid Programs Face Synthetic Identity Fraud

LockBit 3.0 Debuts with Ransomware Bug Bounty Program

Shadow IT Spurs 1 in 3 Cyberattacks

4 breakthrough ideas for compliance and data security

Thrive Acquires DSM

It's a Race to Secure the Software Supply Chain Have You Already Stumbled?

2022 Workshop on Economics and Information Security (WEIS)

How to Use Microsoft Defender on All Your Devices

Contractor loses entire Japanese city's personal data in USB fail

5 ways cybercriminals steal credit card details

Cybersecurity Experts Warn of Emerging Threat of "Black Basta" Ransomware

Beijing probes security at academic journal database

What Are Shadow IDs, and How Are They Crucial in 2022?

Critical Security Flaws Identified in CODESYS ICS Automation Software

Italy Data Protection Authority Warns Websites Against Use of Google Analytics

Researchers Warn of 'Matanbuchus' Malware Campaign Dropping Cobalt Strike Beacons

Singapore promises 'brutal and unrelentingly hard' action on dodgy crypto players

~ 25 Jun 2022 ~

The Post-Roe Privacy Nightmare Has Arrived

How to Move Your WhatsApp Chats Across Devices and Apps

We're now truly in the era of ransomware as pure extortion without the encryption

Learn NIST Inside Out With 21 Hours of Training @ 86% OFF

~ 24 Jun 2022 ~

Threat Intelligence Services Are Universally Valued by IT Staff

More than $100m in cryptocurrency stolen from blockchain biz

Why We're Getting Vulnerability Management Wrong

Friday Squid Blogging: Squid Cubes

APT Groups Swarming on VMware Servers with Log4Shell

Only 3% of Open Source Software Bugs Are Actually Attackable, Researchers Say

7 Steps to Stronger SaaS Security

Instagrams new age verification tool Week in security with Tony Anscombe

The Cybersecurity Talent Shortage Is a Myth

Without Conti On The Scene, LockBit 2.0 Leads Ransomware Attacks

On the Dangers of Cryptocurrencies and the Uselessness of Blockchain

Google: How we tackled this iPhone, Android spyware

Beijing-backed attackers use ransomware as a decoy while they conduct espionage

NSO claims 'more than 5' EU states use Pegasus spyware

Hackers Exploit Mitel VoIP Zero-Day Bug to Deploy Ransomware

Google Says ISPs Helped Attackers Infect Targeted Smartphones with Hermit Spyware

Multiple Backdoored Python Libraries Caught Stealing AWS Secrets and Keys

State-Backed Hackers Using Ransomware as a Decoy for Cyber Espionage Attacks

~ 23 Jun 2022 ~

New 'Quantum' Builder Lets Attackers Easily Create Malicious Windows Shortcuts

Log4Shell Still Being Exploited to Hack VMWare Servers to Exfiltrate Sensitive Data

Chinese APT Group Likely Using Ransomware Attacks as Cover for IP Theft

Johnson Controls Acquires Tempered Networks to Bring Zero Trust Cybersecurity to Connected Buildings

ShiftLeft: Focus On 'Attackability' To Better Prioritize Vulnerabilities

Pair of Brand-New Cybersecurity Bills Become Law

Google Warns of New Spyware Targeting iOS and Android Users

The Rise, Fall, and Rebirth of the Presumption of Compromise

Reinventing How Farming Equipment Is Remotely Controlled and Tracked

Cyberattackers Abuse QuickBooks Cloud Service in 'Double-Spear' Campaign

Detecting malicious key extractions by compromised identities for Azure Cosmos DB

$6b mega contract electronics vendor Sanmina jumps into zero trust

Palo Alto Networks Bolsters Its Cloud Native Security Offerings With Out-of-Band WAAS

How APTs Are Achieving Persistence Through IoT, OT, and Network Devices

80% of Legacy MSSP Users Planning MDR Upgrade

MetaMask Crypto-Wallet Theft Skates Past Microsoft 365 Security

On the Subversion of NIST by the NSA

Parents Need to Know Whats Going On Inside Their Day Care Apps

OFFIS DCMTK

Yokogawa STARDOM

Yokogawa CAMS for HIS

Secheron SEPCOS Control and Protection Relay

Pyramid Solutions EtherNet/IP Adapter Development Kit

The hateful eight: Kasperskys guide to modern ransomware groups TTPs

Elcomplus SmartICS

Virtual private networks: 5 common questions about VPNs answered

Halfords suffers a puncture in the customer details department

Don't ditch PowerShell to improve security, say infosec agencies from UK, US, and NZ

Europol arrests nine suspected of stealing 'several million' euros via phishing

NSO Confirms Pegasus Spyware Used by at least 5 European Countries

Manual vs. SSPM: Research on What Streamlines SaaS Security Detection & Remediation

Organizations Battling Phishing Malware, Viruses the Most

Chinese Hackers Distributing SMS Bomber Tool with Malware Hidden Inside