Port 22

~ 12 May 2022 ~

The Case for War Crimes Charges Against Russias Sandworm Hackers

Delta Electronics CNCSoft

Mitsubishi Electric MELSOFT iQ AppPortal

Inkscape in Industrial Products

Cambium Networks cnMaestro

Siemens Industrial PCs and CNC devices

Siemens SIMATIC WinCC

Siemens SICAM P850 and SICAM P855

Siemens Industrial Products with OPC UA

Siemens JT2GO and Teamcenter Visualization

Siemens Desigo PXC and DXR Devices

Siemens SIMATIC CP 44x-1 RNA

Siemens Industrial Products

Siemens Industrial Devices using libcurl

Siemens Simcenter Femap

Siemens OpenV2G

Siemens Teamcenter

10 reasons why we fall for scams

APT gang 'Sidewinder' goes on two-year attack spree across Asia

It's time to kick China off social media, says tech governance expert

Iranian Hackers Leveraging BitLocker and DiskCryptor in Ransomware Attacks

Europe proposes tackling child abuse by killing privacy, strong encryption

EU Proposes New Rules for Tech Companies to Combat Online Child Sexual Abuse

Ukraine war a sorting hat for cyber-governance loyalties: Black Hat founder Jeff Moss

Thousands of WordPress Sites Hacked to Redirect Visitors to Scam Sites

Android and Chrome Users Can Soon Generate Virtual Credit Cards to Protect Real Ones

A Visual Summary of SANS Neurodiversity Summit 2022

Everything We Learned From the LAPSUS$ Attacks

~ 11 May 2022 ~

Government Agencies Warn of Increase in Cyberattacks Targeting MSPs

Hackers Deploy IceApple Exploitation Framework on Hacked MS Exchange Servers

Five Eyes turn spotlight on MSPs: Potential weak links in IT supply-chain security

CISA Urges Organizations to Patch Actively Exploited F5 BIG-IP Vulnerability

PlainID Debuts Authorization-as-a-Service Platform

Threat Actors Are Stealing Data Now to Decrypt When Quantum Computing Comes

Ready, IAM, Fire: How Weak IAM Makes You a Target

Android 13 Tries to Make Privacy and Security a No-Brainer

Cloud Firm Appian Awarded $2B in Trade Secret Cyber-Theft Lawsuit

Microsoft Simplifies Security Patching Process for Exchange Server

Orca Security Unveils Context-Aware Shift Left Security to Identify and Prevent Cloud Application Security Issues Earlier

Man Sentenced for Stealing from PayPal Accounts in Wire Fraud Scheme

Fraudulent 'Bot-driven' College Enrollment up 50%, New Study Finds

NSA Warns Managed Service Providers Are Now Prime Targets for Cyberattacks

Keeper Security Partners with SHI International for New Fully Managed IT Service (SHI Complete)

Concentric AI Raises Series A Funding Led by Ballistic Ventures to Autonomously Secure Business-Critical Data

Breaking Down the Strengthening American Cybersecurity Act

Quantum Ransomware Strikes Quickly, How to Prepare and Recover

Material Security Reaches $1.1 Billion Valuation for Zero Trust Security on Microsoft and Google Email

Center for Threat-Informed Defense, Microsoft, and industry partners streamline MITRE ATT&CK matrix evaluation for defenders

The EU Wants Big Tech to Scan Your Private Chats for Child Abuse

SpyCloud Report: Fortune 1000 Employees Pose Elevated Cyber Risk to Companies

Fresh ransomware samples indicate REvil is back

Cyber-Espionage Attack Drops Post-Exploit Malware Framework on Microsoft Exchange Servers

ICE Is a Domestic Surveillance Agency

The Danger of Online Data Brokers

Vanity URLs Could be Spoofed for Social Engineering Attacks

New ransomware trends in 2022

Thousands of Top Websites See What You TypeBefore You Hit Submit

Novel Nerbian RAT Lurks Behind Faked COVID Safety Emails

Opportunity out of crisis: Tapping the Great Resignation to close the cybersecurity skills gap

Yahoo Japan strives for universal passwordless authentication

[White Paper] Social Engineering: What You Need to Know to Stay Resilient

Bitter APT Hackers Add Bangladesh to Their List of Targets in South Asia

Researchers Warn of Nerbian RAT Targeting Entities in Italy, Spain, and the U.K

Microsoft Patch Tuesday, May 2022 Edition

Malicious NPM Packages Target German Companies in Supply Chain Attack

Microsoft closes Windows LSA hole under active attack

Cloud Instance Metadata Services (IMDS)

E.U. Blames Russia for Cyberattack on KA-SAT Satellite Network Operated by Viasat

~ 10 May 2022 ~

Email domain for NPM lib with 6m downloads a week grabbed by expert to make a point

What to Patch Now: Actively Exploited Windows Zero-Day Threatens Domain Controllers

Microsoft Releases Fix for New Zero-Day with May 2022 Patch Tuesday Updates

US Pledges to Help Ukraine Keep the Internet and Lights On

US, Europe formally blame Russia for data wiper attacks against Ukraine, Viasat

AMD Gave Google Cloud Rare Access to Its Tech to Hunt Chip Flaws

Lincoln College Set to Close After Crippling Cyberattack

Cybercriminals Are Increasingly Exploiting Vulnerabilities in Windows Print Spooler

Microsoft security experts outline next steps after compromise recovery

Arctic Wolf Launches Arctic Wolf Labs Focused on Security Operations Research and Intelligence Reporting

5-Buck DCRat Malware Foretells a Worrying Cyber Future

Onapsis Announces New Offering to Jumpstart Security for SAP Customers

Malware goes regional as attackers change tactics

Mastering the New CISO Playbook

Adminer in Industrial Products

Eaton Intelligent Power Protector

Eaton Intelligent Power Manager Infrastructure

Eaton Intelligent Power Manager

AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere

Mitsubishi Electric MELSOFT GT OPC UA

5 Benefits of Detection-as-Code

New REvil Samples Indicate Ransomware Gang is Back After Months of Inactivity

Experts Detail Saintstealer and Prynt Stealer Info-Stealing Malware Families

Microsoft Mitigates RCE Vulnerability Affecting Azure Synapse and Data Factory

Industry pushes back against India's data security breach reporting requirements

U.S. Proposes $1 Million Fine on Colonial Pipeline for Safety Violations After Cyberattack

~ 9 May 2022 ~

How to Check if Your F5 BIG-IP Device Is Vulnerable

Critical Gems Takeover Bug Reported in RubyGems Package Manager

Joker, Other Fleeceware Surges Back Into Google Play

Biden signs cybercrime tracking bill into law

Costa Rica Declares State of Emergency Under Sustained Conti Cyberattacks

5 Tips to Protect Your Career Against a Narcissist