Port 22

~ 30 May 2022 ~

Indian authorities issue conflicting advice about biometric ID card security

Is 3rd Party App Access the New Executable File?

EnemyBot Linux Botnet Now Exploits Web Server, Android and CMS Vulnerabilities

Watch Out! Researchers Spot New Microsoft Office Zero-Day Exploit in the Wild

~ 29 May 2022 ~

Global tech industry objects to Indias new infosec reporting regime

Ransomware attack sends US county back to 1977

New 'GoodWill' Ransomware Forces Victims to Donate Money and Clothes to the Poor

FBI Warns About Hackers Selling VPN Credentials for U.S. College Networks

~ 28 May 2022 ~

Critical OAS Bugs Open Industrial Systems to Takeover

DuckDuckGo Isnt as Private as You Think

DuckDuckGo Isnt as Private as You Think

New York Man Sentenced to 4 Years in Transnational Cybercrime Scheme

Microsoft Finds Critical Bugs in Pre-Installed Apps on Millions of Android Devices

~ 27 May 2022 ~

Stolen university credentials up for sale by Russian crooks, FBI warns

Friday Squid Blogging: Squid Bites Diver

Exposed Kubernetes Clusters, Kubelet Ports Can Be Abused in Cyberattacks

Space Force Expands Cyber Defense Operations

Cloud security unicorn cuts 20% of staff after raising $1.3b

Talos names eight deadly sins in widely used industrial software

Scammer Behind $568M International Cybercrime Syndicate Gets 4 Years

New Chaos Malware Variant Ditches Wiper for Encryption

Android apps with millions of downloads exposed to high-severity vulnerabilities

ChromeLoader Malware Hijacks Browsers With ISO Files

Physical Security Teams' Impact Is Far-Reaching

Scams targeting NFT investors Week in security with Tony Anscombe

GitHub saved plaintext passwords of npm users in log files, post mortem reveals

What Do Those Pesky 'Cookie Preferences' Pop-Ups Really Mean?

What Do Those Pesky 'Cookie Preferences' Pop-Ups Really Mean?

This Windows malware uses PowerShell to inject malicious extension into Chrome

Taking the Danger Out of IT/OT Convergence

Cybersecurity: A global problem that requires a global answer

Experts Detail New RCE Vulnerability Affecting Google Chrome Dev Channel

Nearly 100,000 NPM Users' Credentials Stolen in GitHub OAuth Breach

IT threat evolution in Q1 2022. Mobile statistics

IT threat evolution Q1 2022

IT threat evolution in Q1 2022. Non-mobile statistics

Let's play everyone's favorite game: REvil? Or Not REvil?

The Myths of Ransomware Attacks and How To Mitigate Risk

Attackers Can Use Electromagnetic Signals to Control Touchscreens Remotely

China offering ten nations help to run their cyber-defenses and networks

How to reprogram Apple AirTags, play custom sounds

Zyxel Issues Patches for 4 New Flaws Affecting AP, API Controller and Firewall Devices

~ 26 May 2022 ~

Ransomware encrypts files, demands three good deeds to restore data

Broadcom Snaps Up VMware in $61B Deal

Microsoft Unveils Dev Box, a Workstation-as-a-Service

Cheers ransomware hits VMware ESXi systems

Lacework Announces Layoffs, Restructuring

Third-Party Scripts on Websites Present a 'Broad & Open' Attack Vector

Twitter Fined $150M for Security Data Misuse

Google Urged to Stop Tracking Location Data Ahead of Roe Reversal

Google Urged to Stop Tracking Location Data Ahead of Roe Reversal

The FDA's New Cybersecurity Guidance for Medical Devices Reminds Us That Safety & Security Go Hand in Hand

VMware, Airline Targeted as Ransomware Chaos Reigns

Big Cyber Hits on GM, Chicago Public Schools, & Zola Showcase the Password Problem

Campaigners warn of legal challenge against Privacy Shield enhancements

Act Now: Leveraging PCI Compliance to Improve Security

Quanta Servers Caught With Pantsdown BMC Vulnerability

ESET Research Podcast: UEFI in crosshairs of ESPecter bootkit

Malware-Infested Smart Card Reader

Managed detection and response in 2021

The Mystery of Chinas Sudden Warnings About US Hackers

The Mystery of Chinas Sudden Warnings About US Hackers

How Are They Weapons? Thats Only a Flashlight!

Keysight N6854A Geolocation server and N6841A RF Sensor software

Verizon: Ransomware sees biggest jump in five years

Horner Automation Cscape Csfont

How Are They Weapons? Thats Only a Flashlight!

Suspected phishing email crime boss cuffed in Nigeria

Ex-spymaster and fellow Brexiteers' emails leaked by suspected Russian op

Critical 'Pantsdown' BMC Vulnerability Affects QCT Servers Used in Data Centers

Ransomware grounds some flights at Indian budget airline SpiceJet

Experts Warn of Rise in ChromeLoader Malware Hijacking Users' Browsers

Hackers Increasingly Using Browser Automation Frameworks for Malicious Activities

The Added Dangers Privileged Accounts Pose to Your Active Directory

Tails OS Users Advised Not to Use Tor Browser Until Critical Firefox Bugs are Patched

Twitter Fined $150 Million for Misusing Users' Data for Advertising Without Consent

How to Use Phishing Benchmarks Effectively to Assess Your Program - Part 3

How to Use Phishing Benchmarks Effectively to Assess Your Program - Part 3

FOR509 Course Update - Introducing Google Workspace, the Multi-Cloud Intrusion Challenge, and more

~ 25 May 2022 ~

Millions of people's info stolen from MGM Resorts dumped on Telegram for free

Most Common Threats in DBIR

Detecting and preventing privilege escalation attacks leveraging Kerberos relaying (KrbRelayUp)

Forescout Launches Forescout Frontline to Help Organizations Tackle Ransomware and Real Time Threats

Is Your Data Security Living on the Edge?

Interpol's Massive 'Operation Delilah' Nabs BEC Bigwig

JFrog Launches Project Pyrsia to Help Prevent Software Supply Chain Attacks

Mastercard Launches Cybersecurity Experience Centre

Qualys to Unveil VMDR 2.0 at Qualys Security Conference in San Francisco

Corelight Announces New SaaS Platform for Threat Hunting

Cybersecurity-Focused SYN Ventures Closes $300 Million Fund II

Vishing Attacks Reach All Time High, According to Latest Agari and PhishLabs Report

Zero-Click Zoom Bug Allows Code Execution Just by Sending a Message

Meet the 10 Finalists in the RSA Conference Innovation Sandbox

Brexit Leak Site Linked to Russian Hackers

Spring Cleaning Checklist for Keeping Your Devices Safe at Work

CLOP Ransomware Activity Spiked in April

In record year for vulnerabilities, Microsoft actually had fewer

The Verizon 2022 DBIR

Vehicle owner data exposed in GM credential stuffing attack

Manipulating Machine-Learning Systems through the Order of the Training Data