Port 22

~ 9 May 2022 ~

Critical Gems Takeover Bug Reported in RubyGems Package Manager

Joker, Other Fleeceware Surges Back Into Google Play

Biden signs cybercrime tracking bill into law

Costa Rica Declares State of Emergency Under Sustained Conti Cyberattacks

5 Tips to Protect Your Career Against a Narcissist

It costs just $7 to rent DCRat to backdoor your network

NFTs Emerge as the Next Enterprise Attack Vector

Deloitte Launches Expanded Cloud Security Management Platform

US offers $15m reward for information about Conti ransomware gang

Apple Mail Now Blocks Email Trackers

Ransomware plows through farm machinery giant AGCO

Security Stuff Happens: Where Do You Go From Here?

Microsoft Security Experts: Humans and automation to fight off cyber threats

Ransomware-as-a-service: Understanding the cybercrime gig economy and how to protect yourself

Building a safer world together with our partnersintroducing Microsoft Security Experts

Colonial Pipeline faces nearly $1m fine one year after ransomware attack

What to Do If You Can't Log In to Your Google Account

China wants its youth to stop giving livestreamers money

Common LinkedIn scams: Beware of phishing attacks and fake job offers

SHIELDS UP in bite sized chunks

Experts Sound Alarm on DCRat Backdoor Being Sold on Russian Hacking Forums

Another Set of Joker Trojan-Laced Android Apps Resurfaces on Google Play Store

Ukrainian CERT Warns Citizens of a New Wave of Attacks Distributing Jester Malware

~ 8 May 2022 ~

India's ongoing outrage over Pegasus malware tells a bigger story about privacy law problems

U.S. Offering $10 Million Reward for Information on Conti Ransomware Hackers

Researchers Develop RCE Exploit for the Latest F5 BIG-IP Vulnerability

~ 7 May 2022 ~

Your Phone May Soon Replace Many of Your Passwords

Data Brokers Track Abortion Clinic Visits for Anyone to Buy

Apple Mail Now Blocks Email Tracking. Heres What That Means

False-flag cyberattacks a red line for nation-states, says Mandiant boss

~ 6 May 2022 ~

U.S. Sanctions Cryptocurrency Mixer Blender for Helping North Korea Launder Millions

Friday Squid Blogging: Squid Filmed Changing Color for Camouflage Purposes

Post-Quantum Cryptography Set to Replace RSA, AES, ECC

This New Fileless Malware Hides Shellcode in Windows Event Logs

QNAP Releases Firmware Patches for 9 New Flaws Affecting NAS Devices

Cryptocurrency laundromat Blender shredded by US Treasury in sanctions first

Ikea Canada Breach Exposes 95K Customer Records

What We've Learned in the 12 Months Since the Colonial Pipeline Attack

Scammer Infects His Own Machine with Spyware, Reveals True Identity

White House Moves to Shore Up US Post-Quantum Cryptography Posture

AT&T Expands Access to Advanced Secure Edge and Remote Workforce Capabilities

Passwords: Do Actions Speak Louder Than Words?

Defending against APT attacks Week in security with Tony Anscombe

Colonial Pipeline 1 Year Later: What Has Yet to Change?

Corporate Involvement in International Cybersecurity Treaties

Small Drones Are Giving Ukraine an Unprecedented Edge

Mobile subscription Trojans and their little tricks

Walking away from ransomware unscathed. Can you? Really?

Bank for International Settlements calls for reform of data governance

Researchers Warn of 'Raspberry Robin' Malware Spreading via External Drives

Hackers Using PrivateLoader PPI Service to Distribute New NetDooka Malware

F5, Cisco admins: Stop what you're doing and check if you need to install these patches

Experts Uncover New Espionage Attacks by Chinese 'Mustang Panda' Hackers

~ 5 May 2022 ~

Google Releases Android Update to Patch Actively Exploited Vulnerability

FBI: Cyber-scams cost victims $6.9b-plus worldwide in 2021

Microsoft, Apple, and Google Promise to Expand Passwordless Features

How to Protect Your Digital Privacy if Roe v. Wade Falls

Heroku: Cyberattacker Used Stolen OAuth Tokens to Steal Customer Account Credentials

NIST Issues Guidance for Addressing Software Supply-Chain Risk

A Third of Americans Use Easy-to-Guess Pet Passwords

Microsoft, Apple, Google accelerate push to eliminate passwords

FBI: Bank Losses From BEC Attacks Top $43B

Magnet Forensics Acquires Cybersecurity Software Firm Comae Technologies

Critical Cisco VM-Escape Bug Threatens Host Takeover

Cisco Announces Cloud Controls Framework Is Now Available to Public

Multichannel Phishing Concerns Cybersecurity Leaders in 2022

VPN Providers Threaten to Quit India Over New Data Law

1,000+ Attacks in 2 Years: How the SideWinder APT Sheds Its Skin

Docker Under Siege: Cybercriminals Compromise Honeypots to Ramp Up Attacks

Why Security Matters Even More in Online Gaming

Google chases sovereignty market with EU Workspace Data product

This World Password Day consider ditching passwords altogether

Every ISP in the US Must Block These 3 Pirate Streaming Services

15.3 Million Request-Per-Second DDoS Attack

Johnson Controls Metasys

Theres no sugarcoating it: That online sugar daddy may be a scammer

Phishing operation hits NHS email accounts to harvest Microsoft credentials

Google to Add Passwordless Authentication Support to Android and Chrome

NIST Releases Updated Cybersecurity Guidance for Managing Supply Chain Risks

Biden orders new quantum push to ensure encryption isn't cracked by rivals

Beijing-backed gang looted IP around the world for years, claims Cybereason

The Importance of Defining Secure Code

Researchers Disclose 10-Year-Old Vulnerabilities in Avast and AVG Antivirus

GitHub to require two factor authentication for code contributors by late 2023

Heroku Forces User Password Resets Following GitHub OAuth Token Theft

Thousands of Borrowers' Data Exposed from ENCollect Debt Collection Service

World Password Day Readying Your Workforce for MFA

8 Reasons You Dont Want to Miss SANS ICS Security Summit & Training 2022

~ 4 May 2022 ~

US Cyber Command shored up nine nations' defenses last year

GitHub to Developers: Turn on 2FA, or Lose Access

Cisco Issues Patches for 3 New Flaws Affecting Enterprise NFVIS Software

China-Backed Winnti APT Siphons Reams of US Trade Secrets in Sprawling Cyber-Espionage Attack

Microsoft Releases Defender for SMBs

F5 Warns of a New Critical BIG-IP Remote Code Execution Vulnerability

Q&A: How China Is Exporting Tech-Based Authoritarianism Across the World

New Ransomware Variant Linked to North Korean Cyber Army

Security Stuff Happens: What Will the Public Hear When You Say You've Been Breached?

How a senior product manager is leading the passwordless movement at Microsoft

Communication around Heroku security incident dubbed 'train wreck'

AI for Cybersecurity Shimmers With Promise, But Challenges Abound