Port 22

~ 1 Sep 2022 ~

Apple Quietly Releases Another Patch for Zero-Day RCE Bug

(ISC)(2) Launches 'Certified in Cybersecurity' Entry-Level Certification to Address Global Workforce Gap

Stop Worrying About Passwords Forever

Real-World Cloud Attacks: The True Tasks of Cloud Ransomware Mitigation

Researchers Detail Emerging Cross-Platform BianLian Ransomware Attacks

Clever Phishing Scam Uses Legitimate PayPal Messages

The US May Soon Learn What a Kid-Friendly Internet Looks Like

Over 1,800 Android and iOS Apps Found Leaking Hard-Coded AWS Credentials

Contec Health CMS8000

Here's how 5 mobile banking apps put 300,000 users' digital fingerprints at risk

Infra Used in Cisco Hack Also Targeted Workforce Management Solution

Delta Electronics DOPSoft

Careless Errors in Hundreds of Apps Could Expose Troves of Data

Microsoft Discover Severe One-Click Exploit for TikTok Android App

Oh no, that James Webb Space Telescope snap might actually contain malware

LabMD gets another shot at defamation claim against 'extortionate' infosec biz

Apple Releases iOS Update for Older iPhones to Fix Actively Exploited Vulnerability

FBI: Look out, crooks stole $1.3b in cryptocurrency in just three months this year

~ 31 Aug 2022 ~

Closing the Security Gap Opened by the Rise of No-Code Tools

Google Fixes 24 Vulnerabilities with New Chrome Update

Crypto-Crooks Spread Trojanized Google Translate App in Watering-Hole Attack

The Pros and Cons of Managed Firewalls

James Webb Telescope Images Loaded With Malware Are Evading EDR

OpenText Goes All-in on Cybersecurity Size and Scale With Micro Focus Purchase

(ISC) Opens Global Enrollment for '1 Million Certified in Cybersecurity' Initiative

Vulnerability in TikTok Android app could lead to one-click account hijacking

TikTok for Android Bug Allows Single-Click Account Hijack

Final Thoughts on Ubiquiti

High-School Graduation Prank Hack

The Inevitability of Cloud Breaches: Tales of Real-World Cloud Attacks

SecureAuth Announces General Availability of Arculix, Its Next-Gen Passwordless, Continuous-Authentication Platform

Youre Not Stringer Bell, but You May Still Need a Burner Phone

Stop Ransomware with Microsoft Security digital event presents threat intelligence in action

Decisions on health data sharing should not be taken by politicians, citizen juries find

Apple Fixed a Serious iOS Security FlawHave You Updated Yet?

Experts Find Malicious Cookie Stuffing Chrome Extensions Used by 1.4 Million Users

How to take control over your digital legacy

Hackers Hide Malware in Stunning Images Taken by James Webb Space Telescope

Interested in Reducing Your Risk Profile? Jamf Has a Solution for That

Google Launches New Open Source Bug Bounty to Tackle Supply Chain Attacks

China-linked APT40 gang targets wind farms, Australian government

Chinese Hackers Used ScanBox Framework in Recent Cyber Espionage Attacks

~ 30 Aug 2022 ~

Find a security hole in Google's open source and you could bag a $31,337 reward

New ODGen Tool Unearths 180 Zero-Days in Node.js Libraries

Don't Let 'Perfect' Be the Enemy of a Good AppSec Program

Malicious Chrome Extensions Plague 1.4M Users

Chinese Hackers Target Energy Sector in Australia, South China Sea

Security Culture: An OT Survival Story

Cohesity Research Reveals that Reliance on Legacy Technology Is Undermining How Organizations Respond to Ransomware

Cyber Signals: 3 strategies for protection against ransomware

How 1-Time Passcodes Became a Corporate Liability

Phishing Campaign Targets PyPI Users to Distribute Malicious Code

Building a Strong SOC Starts With People

Google Expands Bug Bounties to Its Open Source Projects

Cerberus Sentinel Announces Acquisition of CUATROi

Hackers Use ModernLoader to Infect Systems with Stealers and Cryptominers

Hands-on Review: Stellar Cyber Security Operations Platform for MSSPs

FTC Sues Data Broker

Hitachi Energy FACTS Control Platform (FCP) Product

Hitachi Energy Gateway Station (GWS) Product

Hitachi Energy MSM Product

Hitachi Energy RTU500 series

Honeywell ControlEdge

Fuji Electric D300win

That 'clean' Google Translate app is actually Windows crypto-mining malware

Honeywell Experion LX

Honeywell Trend Controls Inter-Controller Protocol

Omron CX-Programmer

PTC Kepware KEPServerEX

Inside the Shadow Evacuation of Kabul

TikShock: Dont get caught out by these 5 TikTok scams

India's Newest Airline Akasa Air Found Leaking Passengers' Personal Information

FBI Warns Investors to Take Precautions with Decentralized Financial Platforms

FTC Sues Data Broker Over Selling Location Data for Hundreds of Millions of Phones

Google Play to ban Android VPN apps from interfering with ads

A Peek Into CISA's Post-Quantum Cryptography Roadmap

~ 29 Aug 2022 ~

Receipt for 8M iOS Zero-Day Sale Pops Up on Dark Web

Critical hole in Atlassian Bitbucket allows any miscreant to hijack servers

New Golang-based 'Agenda Ransomware' Can Be Customized For Each Victim

3 Ways No-Code Developers Can Shoot Themselves in the Foot

Cyber-Insurance Firms Limit Payouts, Risk Obsolescence

Levels of Assurance for DoD Microelectronics

NATO Investigates Dark Web Leak of Data Stolen From Missile Vendor

The 3 Questions CISOs Must Ask to Protect Their Sensitive Data

The Telegram-Powered News Outlet Waging Guerrilla War on Russia

Nitrokod Crypto Miner Infected Over 111,000 Users with Copies of Popular Software

A CISO's Ultimate Security Validation Checklist

Twilio Breach Also Compromised Authy Two-Factor Accounts of Some Users

CISA Adds 10 New Known Actively Exploited Vulnerabilities to its Catalog

~ 27 Aug 2022 ~

A US Propaganda Operation Hit Russia and China With Memes

77% of security leaders fear were in perpetual cyberwar from now on

Iranian Hackers Exploiting Unpatched Log4j 2 Bugs to Target Israeli Organizations

~ 26 Aug 2022 ~

Friday Squid Blogging: 14-foot Giant Squid Washes Ashore in Cape Town

Why the Twilio Breach Cuts So Deep

~ 27 Aug 2022 ~

Critical Vulnerability Discovered in Atlassian Bitbucket Server and Data Center

~ 26 Aug 2022 ~

PyPI warns of first-ever phishing campaign against its users

LastPass Suffers Data Breach, Source Code Stolen

Now Oktapus gets access to some DoorDash customer info via phishing attack

'Sliver' Emerges as Cobalt Strike Alternative for Malicious C2

French hospital crippled by cyberattack Week in security with Tony Anscombe