Port 22

~ 15 Nov 2022 ~

How Routine Pen Testing Can Reveal the Unseen Flaws in Your Cybersecurity Posture

2022 holiday DDoS protection guide

Critical RCE Flaw Reported in Spotify's Backstage Software Catalog and Developer Platform

Google Forks Over $391.5M in Record-Setting US Consumer Privacy Settlement

PCSpoof: New Vulnerability Affects Networking Tech Used by Spacecraft and Aircraft

Yakima Neighborhood Health Services Notice of Data Security Incident

Red Canary Provides First-Ever MITRE Engenuity ATT&CK Evaluations for Managed Services

Top Zeus Botnet Suspect Tank Arrested in Geneva

Nasty SQL Injection Bug in Zendesk Endangers Sensitive Customer Data

Evolving Security for Government Multiclouds

44% of Financial Institutions Believe Their Own IT Teams Are the Main Risk to Cloud Security

Authomize Launches Identity Threat Detection and Response Platform to Protect Against Identity-Based Attacks

Neosec Introduces Automated Tokenization to Enable Full API Visibility Without Exposure of Sensitive Data

Balbix Announces Cybersecurity Posture Automation Support for Google Cloud Platform

Bugcrowd Earns CREST Accreditation for Pen Testing

Researchers Reported Critical SQLi and Access Flaws in Zendesk Analytics Service

Securing the mail

Deep Packet Inspection vs. Metadata Analysis of Network Detection & Response (NDR) Solutions

Another Event-Related Spyware App

Researchers Say China State-backed Hackers Breached a Digital Certificate Authority

The Hunt for the Dark Webs Biggest Kingpin, Part 4: Face to Face

Mitsubishi Electric GT SoftGOT2000

DTrack activity targeting Europe and Latin America

Country that still uses fax machines wants to lead the world on data standards at G7

Data sovereignty and compliance need help

Google to Pay $391 Million Privacy Fine for Secretly Tracking Users' Location

Russia-based Pushwoosh tricks US Army and others into running its code for a while

Twitters SMS Two-Factor Authentication Is Melting Down

~ 14 Nov 2022 ~

Swimlane Introduces Low-Code, Automation Approach to OT Security

GitHub sets up private vulnerability reports for public repos to avoid 'naming and shaming'

Researchers Sound Alarm on Dangerous BatLoader Malware Dropper

Australia Declares War on Cybercrime Syndicates

New "Earth Longzhi" APT Targets Ukraine and Asian Countries with Custom Cobalt Strike Loaders

Upcoming Speaking Engagements

Unpatched Zimbra Platforms Are Probably Compromised, CISA Says

Privacy4Cars Secures Fourth Patent to Remove Privacy Information From Vehicles and Create Compliance Logs

Avatier Achieves ISO 27001 Certification for its Information Security Management System

Quantum Cryptography Apocalypse: A Timeline and Action Plan

How APIs and Applications Can Live Happily Ever After

A Digital Red Cross

Another crypto shocker: Major player actually corrects $400m mistake instead of cratering

Over 15,000 WordPress Sites Compromised in Malicious SEO Campaign

ESET APT Activity Report T2 2022

What is an External Penetration Test?

Advanced threat predictions for 2023

New KmsdBot Malware Hijacking Systems for Mining Crypto and Launch DDoS Attacks

Worok Hackers Abuse Dropbox API to Exfiltrate Data via Backdoor Hidden in Images

Australia to 'stand up and punch back' against cyber crims

A Visual Summary of SANS Pen Test HackFest Summit 2022

~ 13 Nov 2022 ~

The Hunt for the FTX Thieves Has Begun

~ 12 Nov 2022 ~

Elon Musk Introduces Twitter Mayhem Mode

LockBit suspect cuffed after ransomware forces emergency services to use pen and paper

~ 11 Nov 2022 ~

Friday Squid Blogging: Squid Purse

Why Cybersecurity Should Highlight Veteran-Hiring Programs

New Book: A Hackers Mind

World Cup apps pose a data security, privacy nightmare

Cybersecurity 'Nutrition' Labels Still a Work in Progress

Cookies for MFA Bypass Gain Traction Among Cyberattackers

Knock, Knock: Aiphone Bug Allows Cyberattackers to Literally Open (Physical) Doors

Uyghurs Targeted With Spyware, Courtesy of PRC

A Good Start: ETHI Report on Facial Recognition Technology Informed by Citizen Lab Research and Recommendations But Has Room for Improvement

Security challenges facing SMBs Week in security with Tony Anscombe

Why CVE Management as a Primary Strategy Doesn't Work

Cynthia Khoo Delivers Testimony to the Standing Committee on Access to Information, Privacy and Ethics

Experts Uncover Two Long-Running Android Spyware Campaigns Targeting Uyghurs

These Two Google Play Store Apps Spotted Distributing Xenomorph Banking Trojan

VPN vs. DNS Security

NSA Over-surveillance

Dark Ships Emerge From the Shadows of the Nord Stream Mystery

NSA urges orgs to use memory-safe programming languages

FIFA World Cup 2022 scams: Beware of fake lotteries, ticket fraud and other cons

Multiple High-Severity Flaw Affect Widely Used OpenLiteSpeed Web Server Software

Russian-Canadian National Charged Over Involvement in LockBit Ransomware Attacks

ESET Antivirus: Advanced Protection Solutions for Home Users and Businesses

Europe calls for joint cyber defense to ward off Russia

Microsoft Blames Russian Hackers for Prestige Ransomware Attacks on Ukraine and Poland

Australia blames Russia for harboring health insurance hackers

Okta Launches New Workforce Identity Cloud

Cyberwar and Cybercrime Go Hand in Hand

~ 10 Nov 2022 ~

Siemens SINEC Network Management System Logback Component

5 Easy Steps to Bypass Google Pixel Lock Screens

Veterans Day Salute: 6 Reasons Why You Want Vets in Your Cyber Platoon

Instagram star gets 11 years for $300m email scam plot

Twitter's CISO Takes Off, Leaving Security an Open Question

Russia's Sway Over Criminal Ransomware Gangs Is Coming Into Focus

LockBit Bigwig Arrested for Ransomware Crimes

Lawsuit Seeks Food Benefits Stolen By Skimmers

Husband and wife nuclear warship 'spy' team get 20 years each

Simplify privacy protection with Microsoft Priva Subject Rights Requests

Microsoft threat intelligence presented at CyberWarCon 2022

Managing and Mitigating Risk From Unknown Unknowns

Twitter Chief Information Security Officer flies the coop

Elon Musk's Twitter Blue Verification Is a Scammer's Paradise

Evasive KmsdBot Cryptominer/DDoS Bot Targets Gaming, Enterprises

Warning: New Massive Malicious Campaigns Targeting Top Indian Banks' Customers

Amazon, Microsoft Cloud Leaks Highlight Lingering Misconfiguration Issues

An Untrustworthy TLS Certificate in Browsers

Russias New Cyberwarfare in Ukraine Is Fast, Dirty, and Relentless

Hacker Rewarded $70,000 for Finding Way to Bypass Google Pixel Phones' Lock Screens

How to Close Kubernetes' Network Security Gap