Port 22

~ 10 Oct 2022 ~

6 Things Every CISO Should Do the First 90 Days on the Job

New Report Uncovers Emotet's Delivery and Evasion Techniques Used in Recent Attacks

Windows 11 Now Offers Automatic Phishing Protection

Its 2022 and consumers are only now getting serious about cybersecurity

Complex Impersonation Story

How to Protect Yourself If Your School Uses Surveillance Tech

Singtel confirms digital burglary at Dialog subsidiary

Steam account stolen? Heres how to get it back

Criminal multitool LilithBot arrives on malware-as-a-service scene

Intel Confirms Leak of Alder Lake BIOS Source Code

Hackers Steal $100 Million Cryptocurrency from Binance Bridge

How do you protect your online systems? Cultivate an insider threat

Mastercard moves to protect 'risky and frisky' crypto transactions

~ 9 Oct 2022 ~

That thing to help protect internet traffic from hijacking? It's broken

When are we gonna stop calling it ransomware? It's just data kidnapping now

~ 8 Oct 2022 ~

Email Defenses Under Siege: Phishing Attacks Dramatically Improve

Binance Hackers Minted $569M in CryptoThen It Got Complicated

Biden's Privacy Shield 2.0 order may not satisfy Europe

Make your neighbor think their house is haunted by blinking their Ikea smart bulbs

Hackers Exploiting Unpatched RCE Flaw in Zimbra Collaboration Suite

Microsoft Issues Improved Mitigations for Unpatched Exchange Server Vulnerabilities

~ 7 Oct 2022 ~

Credential Harvesting Is Retail Industry's Top Threat

Friday Squid Blogging: Emotional Support Squid

Cybersecurity Will Account for Nearly One-Quarter of AI Software Market Through 2025

Binance robbed of $600 million in crypto-tokens

The Uber Data Breach Conviction Shows Security Execs What Not to Do

Bidens Privacy Order Slaps a Band-Aid on the EU-US Data Crisis

Meta Flags Malicious Android, iOS Apps Affecting 1M Facebook Users

Report: Big U.S. Banks Are Stiffing Account Takeover Victims

State Bar of Georgia Notifies Members and Employees of Cybersecurity Incident

Fortinet Warns of New Auth Bypass Flaw Affecting FortiGate and FortiProxy

Patch Now: Fortinet FortiGate & FortiProxy Contain Critical Vuln

Utility security is so bad, US DoE offers rate cuts to improve it

LofyGang Uses 100s of Malicious NPM Packages to Poison Open Source Software

Key takeaways from ESET Threat Report T2 2022 Week in security with Tony Anscombe

We Can Save Security Teams From Crushing Workloads. Will We?

Facebook Detects 400 Android and iOS Apps Stealing Users Log-in Credentials

CyberRatings.org Invites Industry Participation in Forthcoming Enterprise Firewall and Data Center Firewall Tests

The essentials of GRC and cybersecurity How they empower each other

LofyGang Distributed ~200 Malicious NPM Packages to Steal Credit Card Data

Meta Says It Has Busted More Than 400 Login-Stealing Apps This Year

Spyware Maker Intellexa Sued by Journalist

The Fight to Cut Off the Crypto Fueling Russia's Ukraine Invasion

Loads of PostgreSQL systems are sitting on the internet without SSL encryption

TOP 10 unattributed APT mysteries

Hackers Can Use 'App Mode' in Chromium Browsers' for Stealth Phishing Attacks

Hardening data security in the cloud

BlackByte Ransomware Abuses Vulnerable Windows Driver to Disable Security Solutions

Top of the Pops: US authorities list the 20 hottest vulns that China's hackers love to hit

Lloyd's of London reboots after dodgy network activity detected

Sharing Knowledge at 44CON

~ 6 Oct 2022 ~

Huge nonprofit hospital network suffers IT meltdown after 'security incident'

macOS Archive Utility Bug Lets Malicious Apps Bypass Security Checks

Papa John's sued for 'wiretap' spying on website mouse clicks, keystrokes

Russian Hackers Shut Down US State Government Websites

US Consumers Are Finally Becoming More Security & Privacy Conscious

Foreign spies hijacking US mid-terms? FBI, CISA are cool as cucumbers about it

Foreign spies hijacking US mid-terms? FBI, CISA are cool as cucumbers about it

South Korea cancels passport of Terraform Lab's Do Kwon

Microsoft publishes new report on holistic insider risk management

Microsoft publishes new report on holistic insider risk management

Hackers Have It Out for Microsoft Email Defenses

Russia-Linked Cybercrime Group Hawks Combo of Malicious Services With LilithBot

School Is in Session: 5 Lessons for Future Cybersecurity Pros

7 IoT Devices That Make Security Pros Cringe

New SonicWall Survey Data Reveals 91% of Organizations Fear Ransomware Attacks in 2022

Research Reveals Microsoft Teams Security and Backup Flaws, With Over Half of Users Sharing Business-Critical Information on the Platform

Contrast Security Launches Expanded Security Testing Tools for JavaScript and Popular Angular, React, and jQuery Frameworks

Eternity Group Hackers Offering New LilithBot Malware as a Service to Cybercriminals

Australian Federal Police arrest man suspected of exploiting Optus cyberattack

Details Released for Recently Patched new macOS Archive Utility Vulnerability

The Ultimate SaaS Security Posture Management Checklist, 2023 Edition

A Coordinated Swatting Spree Is Targeting US Schools

Rockwell Automation FactoryTalk VantagePoint

HIWIN Robot System Software (HRSS)

The need to change cybersecurity for the next generation

Learning from real life situations

19-Year-Old Teen Arrested for Using Leaked Optus Breach Data in SMS Scam

A look at the 20202022 ATM/PoS malware landscape

Former Uber Security Chief Found Guilty of Data Breach Coverup

China upgrades Great Firewall to defeat censor-beating TLS tools

What is Phishing Resistant MFA?

5 Reasons to Head to Charlotte for SANS DFIRCON 2022

Former Uber CSO convicted of covering up massive 2016 data theft

~ 5 Oct 2022 ~

NetWalker ransomware scumbag jailed for 20 years

Relentless Russian Cyberattacks on Ukraine Raise Important Policy Questions

Glut of Fake LinkedIn Profiles Pits HR Against the Bots

Ikea Smart Light System Flaw Lets Attackers Turn Bulbs on Full Blast

Cyber-snoops broke into US military contractor, stole data, hid for months

CISA: Multiple APT Groups Infiltrate Defense Organization

October Is Cybersecurity Awareness Month

Secure Your Application Layer, Secure Your Business

NullMixer Dropper Delivers a Multimalware Code Bomb

Giving Away the Keys to Your Backups? Heres How to Keep Out Hackers

Detecting and preventing LSASS credential dumping attacks

Detecting and preventing LSASS credential dumping attacks

NetSPI Raises $410 Million in Growth Funding from KKR

Why Don't CISOs Trust Their Employees?

7 Practical Considerations for Effective Threat Intelligence

RatMilad Spyware Scurries onto Enterprise Android Phones