Port 22

~ 4 Feb 2022 ~

Friday Squid Blogging: Are Squid from Another Planet?

Suspected Chinese spies break into cloud accounts of News Corp journalists

The 3 Most Common Causes of Data Breaches in 2021

Expert Insights: Training the Data Elephant in the AI Room

ACTINIUM targets Ukrainian organizations

China-Linked Group Attacked Taiwanese Financial Firms for 18 Months

Week in security with Tony Anscombe

The EARN IT Act Is Back

Open-source Kubernetes tool Argo CD has a high-severity path traversal flaw: Patch now

Want to Be an Ethical Hacker? Here's Where to Begin

Think before you scan: How fraudsters can exploit QR codes to steal money

Another Israeli Firm, QuaDream, Caught Weaponizing iPhone Bug for Spyware

US Authorities Charge 6 Indian Call Centers Scamming Thousands of Americans

Russian Gamaredon Hackers Targeted 'Western Government Entity' in Ukraine

That's a signature move: How $320m in Ether was stolen from crypto biz Wormhole

Cynet Log4Shell Webinar: A Thorough - And Clear - Explanation

~ 3 Feb 2022 ~

Mac Malware-Dropping Adware Gets More Dangerous

Mandiant Bolsters SaaS Platform With Integration of New Attack Surface Management Module

Several India-Based Call Centers Indicted by US DoJ

CISA Warns of Critical Vulnerabilities Discovered in Airspan Networks Mimosa

The Future of Cybersecurity: Our Predictions for 2022

Tenable Launches Suite of New Features to Cloud-Native Application Security Platform

Research From Quantum and ESG Reveals Top Challenges in Data Management

Hackers Exploited 0-Day Vulnerability in Zimbra Email Platform to Spy on Users

DHS Launches Cyber Safety Review Board to Analyze Major Vulnerability Events

Menlo Security Finds Cloud Migration and Remote Work Gives Rise to New Era of Malware, Highly Evasive Adaptive Threats (HEAT)

Privacy Shield: EU citizens might get right to challenge US access to their data

Microsoft: Multifactor Adoption Remains Low

Keeper Security Acquires Glyptodon

HackNotice Releases Combined Security and Threat Awareness Service for Free

BreachQuest Welcomes Sandy Dunn as Chief Information Security Officer

BIO-key to Expand Customer Reach and Talent in EMEA Region

Phishing kits' use of man-in-the-middle reverse proxies is growing, warns Proofpoint

Simplifying Zero Trust Security in Healthcare Organizations

JumpCloud joins the patch management crowd, starting with Windows and Mac updates

Big Pharma Finds Patch Management a Bitter Pill

How Phishers Are Slinking Their Links Into LinkedIn

Ransomware is terrifying but never underestimate the damage an employee with unmonitored access can do

Nothing to scoff at: Crisps and nuts biz KP Snacks smacked in ransomware hack attack

KP Snacks hit by ransomware: Crisps and nuts firm KO'd by modern scourge

Hackers Went Wild in 2021 Every Company Should Do These 5 Things in 2022

Cyber Signals: Defending against cyber threats with the latest research, insights, and trends

Execs keep flinging money at us instead of understanding security, moan infosec pros

Interview with the Head of the NSAs Research Directorate

They Were 'Calling to Help.' Then They Stole Thousands

Welsh home improvement biz fined 200,000 over campaign of 675,478 nuisance calls

Sensormatic PowerManage

Airspan Networks Mimosa

Critical Flaws Discovered in Cisco Small Business RV Series Routers

FBI says more cyber attacks come from China than everywhere else combined

New SEO Poisoning Campaign Distributing Trojanized Versions of Popular Software

How SSPM Simplifies Your SOC2 SaaS Security Posture Audit

New Variant of UpdateAgent Malware Infects Mac Computers with Adware

Worried about occasional npm malware scares? They're more common than you may think

New Wave of Cyber Attacks Target Palestine with Political Bait and Malware

Cybersecurity Leadership Roadmap

~ 2 Feb 2022 ~

If My Organization Is Mostly in the Cloud, Do I Need a Firewall?

Cato Networks Delivers Instant Visibility and Control of Cloud Application Data Risk

INKY Completes Email Security Offering With Launch of Outbound Mail Protection

Welcome to the Burner Phone Olympics

WhiteSource Threat Report Reveals Massive Uptick In Cyberattacks Related To JavaScript npm

Why Security Pros Are Frustrated With Cloud Security

Foresite Cybersecurity Acquires Cyber Lantern

Managing Detections is Not the Same as Stopping Breaches

The Real-World Impact of the Global Cybersecurity Workforce Gap on Cyber Defenders

Remote code execution vulnerability in Samba due to macOS interop module

The evolution of a Mac trojan: UpdateAgents progression

North Korea Hacked Him. So He Took Down Its Internet

UK think tank proposes Online Safety Bill reviewer to keep tabs on Ofcom decisions

Finding Vulnerabilities in Open Source Projects

Olympic Athletes Advised by FBI to Bring 'Burner' Phones to Beijing

8 Security Dinosaurs and What Filled Their Footprints

TikTok's Roland Cloutier: How CISOs Can Foster a Culture of Security & Transparency

Tens of Thousands of Websites Vulnerable to RCE Flaw in WordPress Plug-in

Out-of-Control Cybercrime Will Cause More Real-World Harm

Shoulder surfing: Watch out for eagleeyed snoopers peeking at your phone

DMCA-dot-com XSS vuln reported in 2020 still live today and firm has shrugged it off

What are real organisations doing with zero trust?

New Malware Used by SolarWinds Attackers Went Undetected for Years

Cynet's Keys to Extend Threat Visibility

~ 1 Feb 2022 ~

Secure Web Browsers Tackle Ransomware, Insider Threat in Enterprises

Dozens of Security Flaws Discovered in UEFI Firmware Used by Several Vendors

ThycoticCentrify Renamed Delinea

Nucleus Security Forms Strategic Partnership with Mandiant

Vectra Acquires Siriux Security Technologies to Extend Leadership in Identity and SaaS Threat Management

Ping Identity Launches PingOne DaVinci

Forescout Acquires CyberMDX to Expand Healthcare Cybersecurity Focus

Hacker Group 'Moses Staff' Using New StrifeWater RAT in Ransomware Attacks

Digital Shadows Launches New Vulnerability Intelligence Module

Disclosure, Panic, Patch: Can We Do Better?

Critical Bug Found in WordPress Plugin for Elementor with Over a Million Installations

Me on App Store Monopolies and Security

ShiftLeft CORE 'Velocity Update' Streamlines Triage, Automates Build Security Controls

7 Red Flags That Can Stop Your Company From Becoming a Unicorn

Ransomware means your database IS the front line. How are you defending it?

Complexity vs. Capability: How to Bridge the Security Effectiveness Gap

Cyberattacker hits German service station petrol terminal provider

Qualys Adds Advanced Remediation Capabilities to Minimize Vulnerability Risk

Mastercard Launches Global Cybersecurity Alliance Program to Further Secure The Digital Ecosystem

Critical Log4j Vulnerabilities Are the Ultimate Gift for Cybercriminals