Port 22

~ 16 Dec 2022 ~

GitHub Announces Free Secret Scanning for All Public Repositories

Apple Patches iPhone Zero-Day

Help! My kid has asked Santa for a smartphone

Goodbye SHA-1: NIST Retires 27-Year-Old Widely Used Cryptographic Algorithm

Minecraft Servers Under Attack: Microsoft Warns About Cross-Platform DDoS Botnet

Microsoft Teams: A vector for child sexual abuse material with a two-day processing time for complaints

CISA Alert: Veeam Backup and Replication Vulnerabilities Being Exploited in Attacks

US adds 36 Chinese entities to naughty list, drops 25 after checking it twice

NIST says you better dump weak SHA-1 ... by 2030

~ 15 Dec 2022 ~

NIST Finally Retires SHA-1, Kind Of

Zero Trust Shouldnt Be The New Normal

Sting op takes down 50 DDoS-for-hire domains, seven people collared

Axonius Bolsters SaaS Management Offering With New Behavioral Analytics and SaaS User-Device Association Capabilities to Help Teams Address SaaS Application Risk

Stolen Data on 80K+ Members of FBI-Run InfraGard Reportedly for Sale on Dark Web Forum

Meta Ponies Up $300K Bounty for Zero-Click Mobile RCE Bugs in Facebook

WatchGuard Threat Lab Report Finds Top Threat Arriving Exclusively Over Encrypted Connections

DDoS Attack Platforms Shut Down in Global Law Enforcement Operation

MCCrash: Cross-platform DDoS botnet targets private Minecraft servers

Do more with less with Microsoft Security3 strategies to get you started

Blackmailing MoneyMonger Malware Hides in Flutter Mobile Apps

Microsoft to Europe: We're setting an EU 'data boundary' from 2023

Data Destruction Policies in the Age of Cloud Computing

API Flaws in Lego Marketplace Put User Accounts, Data at Risk

Researchers Uncover MirrorFace Cyber Attacks Targeting Japanese Political Entities

Microsoft Reclassifies SPNEGO Extended Negotiation Security Vulnerability as 'Critical'

SEC charges crew of social media influencers with $100m fraud

Prosys OPC UA Simulation Server

Siemens SCALANCE X-200RNA Switch Devices

Siemens Multiple Denial of Service Vulnerabilities in Industrial Products

Siemens Multiple Vulnerabilities in SCALANCE Products

Siemens PLM Help Server

Metas Tricky Quest to Protect Your Account

Siemens SIMATIC WinCC OA Ultralight Client

Siemens Simcenter STAR-CCM+

Siemens Polarion ALM

Siemens Products affected by OpenSSL 3.0

Siemens APOGEE/TALON Field Panels

A Security Vulnerability in the KmsdBot Botnet

GPS Signals Are Being Disrupted in Russian Cities

Traveling for the holidays? Stay cybersafe with these tips

Android Malware Campaign Leverages Money-Lending Apps to Blackmail Victims

Top 5 Web App Vulnerabilities and How to Find Them

Hackers Bombard Open Source Repositories with Over 144,000 Malicious Packages

FBI Charges 6, Seizes 48 Domains Linked to DDoS-for-Hire Service Platforms

Hacking Using SVG Files to Smuggle QBot Malware onto Windows Systems

Iran-linked Charming Kitten espionage gang bares claws to pollies, power orgs

Reimagining Democracy

~ 14 Dec 2022 ~

On the 12th day of the Rackspace email disaster, it did not give to me

Malicious Microsoft-signed Windows drivers wielded in cyberattacks

Seven smuggled US military tech for Moscow, say Feds

NSA Slices Up 5G Mobile Security Risks

AWS strains to make Simple Storage Service not so simple to screw up

Cybereason Warns Global Organizations Against Destructive Ransomware Attacks From Black Basta Gang

Keysight Announces 400GE Network Cybersecurity Test Platform

Six Charged in Mass Takedown of DDoS-for-Hire Sites

Epic Management Provides Notice of Data Security Incident

TikTok could be banned from America, thanks to proposed bipartisan bill

Microsoft-Signed Malicious Drivers Usher In EDR-Killers, Ransomware

CSAF Is the Future of Vulnerability Management

Patch Tuesday updates spark errors when creating Hyper-V VMs

Apple Zero-Day Actively Exploited on iPhone 15

Microsoft Patch Tuesday, December 2022 Edition

The EU takes another step towards US data-sharing agreement

Proofpoint Nabs Illusive, Signaling a Sunset for Deception Tech

Automated Cybercampaign Creates Masses of Bogus Software Building Blocks