Port 22

~ 9 Mar 2022 ~

The Incident Response Plan - Preparing for a Rainy Day

FBI says Ragnar ransomware hit 52 critical American orgs

Chinese APT41 Hackers Broke into at Least 6 U.S. State Governments: Mandiant

Critical RCE Bugs Found in Pascom Cloud Phone System Used by Businesses

Microsoft patches critical remote-code-exec hole in Exchange Server and others

Cow-counting app 'abused by China to spy on US states'

~ 8 Mar 2022 ~

Internet Backbone Giant Lumen Shuns .RU

Microsoft Patches Critical Exchange Server Flaw

Critical Security Patches Issued by Microsoft, Adobe and Other Major Software Firms

Even 'Perfect' APIs Can Be Abused

TAC Security Launches ESOF Phish Infielder Tool to Help Organizations Prevent Phishing Attacks

Dark Reading Reflects on International Women's Day

Dark Reading Reflects on Breaking the Bias for International Women's Day

Medical and IoT Devices From More Than 100 Vendors Vulnerable to Attack

Security Industry Association Reveals the 2022 Women in Security Forum Power 100 List

Cybersleuths probe what makes a cyber risk 'systemic'

Google to Buy Mandiant, Aims to Automate Security Response

IT security is at crisis point so what are you going to do about it?

2.5 million-plus cybersecurity jobs are openwomen can fill them

Chinese Spies Hacked a Livestock App to Breach US State Networks

7 Essentials for More Security-Aware Design Automation

Google buys threat intel firm Mandiant for $5.4bn

Using Radar to Read Body Language

War Is Calling Cryptos Neutrality Into Question

PTC Axeda agent and Axeda Desktop Server

New 16 High-Severity UEFI Firmware Flaws Discovered in Millions of HP Devices

AVEVA System Platform

Breaking the Bias for International Womens Day 2022

8 More Women in Security You May Not Know But Should

China's annual parliament gives tech industry much to ponder

Google: Russian Hackers Target Ukrainians, European Allies via Phishing Attacks

Azure flaw allowed users to control others' accounts

Critical Bugs Expose Hundreds of Thousands of Medical Devices

Linux distros patch 'DirtyPipe' make-me-root kernel bug

Google Buys Cybersecurity Firm Mandiant for $5.4 Billion

Samsung Confirms Data Breach After Hackers Leak Galaxy Source Code

Critical "Access:7" Supply Chain Vulnerabilities Impact ATMs, Medical and IoT Devices

Conti Ransomware Group Diaries, Part IV: Cryptocrime

How to Use Phishing Benchmarks Effectively to Assess Your Program - Episode 2

~ 7 Mar 2022 ~

The Continuing Threat of Unpatched Security Vulnerabilities

Researchers Warn of Linux Kernel Dirty Pipe Arbitrary File Overwrite Vulnerability

Trio of Vendors Offer Free Services to Organizations at Risk of Russian Cyberattacks

Google in Talks to Acquire Mandiant

Microsoft Azure 'AutoWarp' Bug Could Have Let Attackers Access Customers' Accounts

Name That Edge Toon: Animal Instincts

Roqos Gets Patent For Game-changing VPN Technology, OmniVPN

Coalfire Launches Application Security Solutions Powered by ThreadFix Program

CardinalOps Raises $17.5M Series A for Threat Coverage Optimization

ConnectWise Expands Collaboration with Intel to Further Strengthen Cybersecurity for SMBs

Samsung Source Code Compromised in Hack

AppSec Startup Cider Security Emerges from Stealth to Tackle SDLC Challenges

UN debates Russia's own pitch for new cybercrime treaty

Lapsus$ extortionists dump data online as Samsung admits breach

Industrial Systems See More Vulnerabilities, Greater Threat

Cyberreadiness in the face of an escalated gray zone conflict

Why the World Needs a Global Collective Cyber Defense

How Police Abuse Phone Data to Persecute LGBTQ People

Hacking Alexa through Alexas Speech

Critical Bugs in TerraMaster TOS Could Open NAS Devices to Remote Hacking

Stop hackers getting into your systems by getting into their heads. Heres how

Global consultancies quit Russia

Understanding How Hackers Recon

Ukrainian CERT Warns Citizens of Phishing Attacks Using Compromised Accounts

~ 6 Mar 2022 ~

SharkBot Banking Malware Spreading via Fake Android Antivirus App on Google Play Store

2 New Mozilla Firefox 0-Day Bugs Under Active Attack Patch Your Browser ASAP!

~ 5 Mar 2022 ~

A Major Internet Backbone Company Cuts Off Russia

Leaked stolen Nvidia cert can sign Windows malware

New Linux Kernel Cgroups Vulnerability Could Let Attackers Escape Container

Russias invasion kicks Senate into cybersecurity law mode

~ 4 Mar 2022 ~

Imperva Thwarts 2.5 Million RPS Ransom DDoS Extortion Attacks

CISA Adds Another 95 Flaws to its Actively Exploited Vulnerabilities Catalog

After a Busy December, Attacks on Log4J Vulnerability Dropped

More Than 70% of SOC Analysts Experiencing Burnout

Friday Squid Blogging: Far Side Cartoon

Companies Can't Just Train Their Way to More Secure Endpoints

Most Cybersecurity Vendors at Risk Due to Internet-Exposed IT Assets

Diversified Search Group Acquires Alta Associates

Vade Releases 2021 Phishers' Favorites Report

Conti Ransomware Group Diaries, Part III: Weaponry

Week in security with Tony Anscombe

BBC points Russians to the Tor version of itself

DORA's Global Reach and Why Enterprises Need to Prepare

Samsung Encryption Flaw

NHS Digital's demise bad for 55 million patients' privacy ex-chairman

TikTok under investigation in US over harms to children

Emergency preparedness: How to disasterproof your tech

Trailer Power Line Communications (PLC) J2497

Both Sides in Russia-Ukraine War Heavily Using Telegram for Disinformation and Hacktivism

High-Value CFP Submissions | An Example of a Successful Proposal

~ 3 Mar 2022 ~

Hacktivists Stoke Pandemonium Amid Russias War in Ukraine

New Security Vulnerability Affects Thousands of GitLab Instances

Russia Releases List of IPs, Domains Attacking Its Infrastructure with DDoS Attacks

Accelerated Ransomware Attacks Pressure Targeted Companies to Speed Response

Accelerated Ransomware Attacks Pressure Targeted Companies to Speed Response

Cybersecurity Mesh Architecture: Hope or Hype?

Amazon Alexa can be hijacked via commands from own speaker

Switzerland's SWIFT data centre under guard after Russian banks excluded

8-Character Passwords Can Be Cracked in Less than 60 Minutes

Cybersecurity Platform CrowdSec Expands Into the United States

Palo Alto Networks Introduces PAN-OS 10.2 Nebula