Port 22

~ 7 Apr 2022 ~

Blumira Unveils Cloud SIEM With Integrated Detection and Response for SMBs

The Blurring Line, and Growing Risk, Between Physical and Digital Supply Chains

BeyondTrust Announces CEO Transition

How secure is your cloud storage? Mitigating data security risks in the cloud

The Senate Bill That Has Big Tech Scared

Pepperl+Fuchs WirelessHART-Gateway

ABB SPIET800 and PNI800

A Bad Luck BlackCat

Inside the Takedown that Shredded the Myth of Cryptos Anonymity

How do China's cyber-spies snoop on governments, NGOs? Probably like this

First Malware Targeting AWS Lambda Serverless Platform Discovered

When MFA fails, defense in depth is key

Cryptocurrency-mining AWS Lambda-specific malware spotted

Hamas-linked Hackers Targeting High-Ranking Israelis Using 'Catfish' Lures

Into the Breach: Breaking Down 3 SaaS App Cyber Attacks in 2022

SharkBot Banking Trojan Resurfaces On Google Play Store Hidden Behind 7 New Apps

Researchers Uncover How Colibri Malware Stays Persistent on Hacked Systems

SANS SOC 2 Resources

A Visual Summary of SANS OSINT Summit 2022

FBI Shut Down Russia-linked "Cyclops Blink" Botnet That Infected Thousands of Devices

~ 6 Apr 2022 ~

Nearly Two-Thirds of Ransomware Victims Paid Ransoms Last Year, Finds "2022 Cyberthreat Defense Report"

VMware Releases Critical Patches for New Vulnerabilities Affecting Multiple Products

Zoom's Bug Bounty Programs Soar to $1.8M

Nearly 40% of Macs Left Exposed to Two Zero-Day Exploits

Eliminating Passwords: One Way Forward

Hamas-linked cyber-spies target high-ranking Israelis

How DevOps Automation Solves Low-Code Security Issues

Feds take down Kremlin-backed Cyclops Blink botnet

The Original APT: Advanced Persistent Teenagers

FBI-Led Operation Disrupts Russian GRU Botnet

Linux Systems Are Becoming Bigger Targets

Forrester names Microsoft a Leader in 2022 Enterprise Detection and Response Wave report

Block claims ex-employee downloaded customer data after leaving firm

Cyberweapons Arms Manufacturer FinFisher Shuts Down

Why XDR As We Know It Will Fail

Meta Tries to Break the End-to-End Encryption Deadlock

Europe Is Building a Huge International Facial Recognition System

Fake eshops on the prowl for banking credentials using Android malware

UK spy agencies sharing bulk personal data with foreign allies was legal

Cyber Security WEBINAR How to Ace Your InfoSec Board Deck

Apple patched critical flaws in macOS Monterey but not in Big Sur nor Catalina

Hackers Distributing Fake Shopping Apps to Steal Banking Data of Malaysian Users

Ukraine Warns of Cyber attack Aiming to Hack Users' Telegram Messenger Accounts

Block Admits Data Breach Involving Cash App Data Accessed by Former Employee

Microsoft 365 Defender demonstrates industry-leading protection in the 2022 MITRE Engenuity ATT&CK Evaluations

SOC for Supply Chain

U.S. Treasury Department Sanctions Russia-based Hydra Darknet Marketplace

~ 5 Apr 2022 ~

Feds slay dark-web souk Hydra: Servers and $25m in crypto-coins seized

Microsoft Details New Security Features for Windows 11

Developers Increasingly Prioritize Secure Coding

New WatchGuard Threat Lab Report Shows Network Attacks at Highest Point Over Last Three Years

US State Department opens cyberspace policy bureau

'Human Behavior' Security Startup Nets $7M in Seed

Shutdown of Russia's Hydra Market Disrupts a Crypto-Crime ATM

The Record: The rise of high-tech despotism

How IP Data Can Help Security Professionals Protect Their Networks

Name That Edge Toon: In Deep Water

What We Can Learn From Lapsus$ Techniques

GitHub prevents leaks by scanning for secrets in pushed code

New security features for Windows 11 will help protect hybrid work

Cooler heads needed in heated E2EE debate, says think tank

FIN7 Morphs into a Broader, More Dangerous Cybercrime Group

How to Prepare for Cyber Threats During the Russian Invasion of Ukraine

Hackers Using Fake Police Data Requests against Tech Companies

NFTs Are a Privacy and Security Nightmare

LifePoint Informatics Patient Portal

Rockwell Automation ISaGRAF

Johnson Controls Metasys

:

PEACE THROUGH PEGASUS: Jordanian Human Rights Defenders and Journalists Hacked with Pegasus Spyware

Were going on Tor

Battling Cybersecurity Risk: How to Start Somewhere, Right Now

FIN7 Hackers Leveraging Password Reuse and Software Supply Chain Attacks

Testing, testing, testing: Why Red Teaming is a must for every CISO

Bank had no firewall license, intrusion or phishing protection guess the rest

Germany Shuts Down Russian Hydra DarkNet Market; Seize $25 Million in Bitcoin

Is API Security on Your Radar?

Researchers Trace Widespread Espionage Attacks Back to Chinese 'Cicada' Hackers

Hackers Breach Mailchimp Email Marketing Firm to Launch Crypto Phishing Scams

Mailchimp: Crook stole cryptocurrency clients' mailing-list subscriber info

SpringShell RCE vulnerability: Guidance for protecting against and detecting CVE-2022-22965

CISA Warns of Active Exploitation of Critical Spring4Shell Vulnerability

~ 4 Apr 2022 ~

State Department Announces Bureau of Cyberspace and Digital Policy

Qualys Delivers Multi-Vector EDR 2.0 with Enhanced Prioritization to Quickly Surface the Most Critical Incidents

Citrix Modernizes Security to Accommodate Hybrid Work

Apple Gift Card Scammers Sentenced for Role in $1.5M Fraud

Millions of Installations Potentially Vulnerable to Spring Framework Flaw

Mandiant shareholder sues to block $5.4b Google deal

How Do I Decide Whether to Buy or Build in Security?

Beware of These 5 Tax Scams

Welcome to the Age of Zero Trust

Microsoft CRSP shares the ways human behavior affects compromise recovery

Borat RAT: Multiple threat of ransomware, DDoS and spyware

Spring4Shell (CVE-2022-22965): details and mitigations

Cybersecurity Mesh: IT's Answer to Cloud Security

Wyze Camera Vulnerability

How Explosions Actually Kill

Emma Sleep Company admits checkout cyber attack

Researchers Uncover New Android Spyware With C2 Server Linked to Turla Hackers

Multiple Hacker Groups Capitalizing on Ukraine Conflict for Distributing Malware