Port 22

~ 15 Dec 2022 ~

Meta Ponies Up $300K Bounty for Zero-Click Mobile RCE Bugs in Facebook

WatchGuard Threat Lab Report Finds Top Threat Arriving Exclusively Over Encrypted Connections

DDoS Attack Platforms Shut Down in Global Law Enforcement Operation

MCCrash: Cross-platform DDoS botnet targets private Minecraft servers

Do more with less with Microsoft Security3 strategies to get you started

Blackmailing MoneyMonger Malware Hides in Flutter Mobile Apps

Microsoft to Europe: We're setting an EU 'data boundary' from 2023

Data Destruction Policies in the Age of Cloud Computing

API Flaws in Lego Marketplace Put User Accounts, Data at Risk

Researchers Uncover MirrorFace Cyber Attacks Targeting Japanese Political Entities

Microsoft Reclassifies SPNEGO Extended Negotiation Security Vulnerability as 'Critical'

SEC charges crew of social media influencers with $100m fraud

Prosys OPC UA Simulation Server

Siemens SCALANCE X-200RNA Switch Devices

Siemens Multiple Denial of Service Vulnerabilities in Industrial Products

Siemens Multiple Vulnerabilities in SCALANCE Products

Siemens PLM Help Server

Metas Tricky Quest to Protect Your Account

Siemens SIMATIC WinCC OA Ultralight Client

Siemens Simcenter STAR-CCM+

Siemens Polarion ALM

Siemens Products affected by OpenSSL 3.0

Siemens APOGEE/TALON Field Panels

A Security Vulnerability in the KmsdBot Botnet

GPS Signals Are Being Disrupted in Russian Cities

Traveling for the holidays? Stay cybersafe with these tips

Android Malware Campaign Leverages Money-Lending Apps to Blackmail Victims

Top 5 Web App Vulnerabilities and How to Find Them

Hackers Bombard Open Source Repositories with Over 144,000 Malicious Packages

FBI Charges 6, Seizes 48 Domains Linked to DDoS-for-Hire Service Platforms

Hacking Using SVG Files to Smuggle QBot Malware onto Windows Systems

Iran-linked Charming Kitten espionage gang bares claws to pollies, power orgs

Reimagining Democracy

~ 14 Dec 2022 ~

On the 12th day of the Rackspace email disaster, it did not give to me

Malicious Microsoft-signed Windows drivers wielded in cyberattacks

Seven smuggled US military tech for Moscow, say Feds

NSA Slices Up 5G Mobile Security Risks

AWS strains to make Simple Storage Service not so simple to screw up

Cybereason Warns Global Organizations Against Destructive Ransomware Attacks From Black Basta Gang

Keysight Announces 400GE Network Cybersecurity Test Platform

Six Charged in Mass Takedown of DDoS-for-Hire Sites

Epic Management Provides Notice of Data Security Incident

TikTok could be banned from America, thanks to proposed bipartisan bill

Microsoft-Signed Malicious Drivers Usher In EDR-Killers, Ransomware

CSAF Is the Future of Vulnerability Management

Patch Tuesday updates spark errors when creating Hyper-V VMs

Apple Zero-Day Actively Exploited on iPhone 15

Microsoft Patch Tuesday, December 2022 Edition

The EU takes another step towards US data-sharing agreement

Proofpoint Nabs Illusive, Signaling a Sunset for Deception Tech

Automated Cybercampaign Creates Masses of Bogus Software Building Blocks

Mass Iris Scan Collection in Qinghai: 20192022

How Our Behavioral Bad Habits Are a Community Trait and Security Problem

Royal Ransomware Puts Novel Spin on Encryption Tactics

New GoTrim Botnet Attempting to Break into WordPress Sites' Admin Accounts

Ransomware Attackers Use Microsoft-Signed Drivers to Gain Access to Systems

Analysis Shows Attackers Favor PowerShell, File Obfuscation

Why PCI DSS 4.0 Should Be on Your Radar in 2023

Cyber Signals: Risks to critical infrastructure on the rise

Hacking Bostons CharlieCard

Unmasking MirrorFace: Operation LiberalFace targeting Japanese political entities

Reassessing cyberwarfare. Lessons learned in 2022

December 2022 Patch Tuesday: Get Latest Security Updates from Microsoft and More

Citrix patches critical ADC flaw the NSA says is already under attack from China

Hackers Actively Exploiting Citrix ADC and Gateway Zero-Day Vulnerability

New Actively Exploited Zero-Day Vulnerability Discovered in Apple Products

A New Lawsuit Accuses Meta of Inflaming Civil War in Ethiopia

Microsoft isn't the only one fixing a bug that's being exploited this Patch Tuesday

~ 13 Dec 2022 ~

FBIs Vetted Info Sharing Network InfraGard Hacked

LockBit threatens to leak confidential info stolen from California's beancounters

Cybersecurity Drives Improvements in Business Goals

Uber staff info leaks after IT supply chain attack

Microsoft Squashes Zero-Day, Actively Exploited Bugs in Dec. Update

Google Launches Scanner to Uncover Open Source Vulnerabilities

Cuba Ransomware Gang Abused Microsoft Certificates to Sign Malware

Citrix ADC, Gateway Users Race Against Hackers to Patch Critical Flaw

Google Launches Largest Distributed Database of Open Source Vulnerabilities

Accelerating Vulnerability Identification and Remediation

Security Flaw in Atlassian Products Affecting Multiple Companies

4 things to look for in a multicloud data protection solution

Niels Provos Joins Lacework as Head of Security Efficacy

Google Cloud and Palo Alto Networks Team to Protect the Modern Workforce

KnowBe4 Supports Metaverse Safety Week

Report: 79% of Employees Are Distracted at Work Amid a Year of Permacrisis

Hackers Score Nearly $1M at Device-Focused Pwn2Own Contest

The Cybersecurity Industry Doesn't Have a Stress Problem It Has a Leadership Problem

Improve Confidence and Context to Sell the SOC on Automating

Hackers Planted Files to Frame Indian Priest Who Died in Custody

Third Annual Global CISO Report Identifies Significant Shifts in Hiring and Retaining Security Talent

Uber Breached, Again, After Attackers Compromise Third-Party Cloud

Serious Attacks Could Have Been Staged Through This Amazon ECR Public Gallery Vulnerability

Apple should pay 6m to French data watchdog for tracking users without consent, says official

Obligatory ChatGPT Post

Top tips for security and privacyenhancing holiday gifts

ICONICS and Mitsubishi Electric Products

Schneider Electric APC Easy UPS Online

Contec CONPROSSYS HMI System (CHS)

Cybersecurity Experts Uncover Inner Workings of Destructive Azov Ransomware

Researchers smell a cryptomining Chaos RAT targeting Linux systems

Malware Strains Targeting Python and JavaScript Developers Through Official Repositories