Port 22

~ 24 May 2022 ~

Crypto Hacks Arent a Niche Concern; They Impact Wider Society

The Justice Department Will No Longer Charge Security Researchers with Criminal Hacking

Open Source Intelligence May Be Changing Old-School War

Rockwell Automation Logix Controllers

Matrikon OPC Server

It's 2022 and there are still malware-laden PDFs in emails exploiting bugs from 2017

The Surveillance State Is Primed for Criminalized Abortion

Popular PyPI Package 'ctx' and PHP Library 'phpass' Hijacked to Steal AWS Keys

SIM-based Authentication Aims to Transform Device Binding Security to End Phishing

New Chaos Ransomware Builder Variant "Yashma" Discovered in the Wild

Malware Analysis: Trickbot

Conti Ransomware Gang Shut Down After Splitting into Smaller Groups

Microsoft Warns of Web Skimmers Mimicking Google Analytics and Meta Pixel Code

Purple Teaming Threat-Informed Detection Engineering

Instructor Spotlight: Nico Dekens

Screencastify fixes bug that would have let rogue websites spy on webcams

~ 23 May 2022 ~

Multiple Governments Buying Android Zero-Days for Spying: Google

QuSecure Carves Out Space in Quantum Cryptography With Its Vision of a Post-RSA World

Malicious Python Repository Package Drops Cobalt Strike on Windows, macOS & Linux Systems

Linux Trojan XorDdos Attacks Surge, Targeting Cloud, IoT

Anatomy of a DDoS amplification attack

Why the Employee Experience Is Cyber Resilience

How to improve risk management using Zero Trust architecture

Beneath the surface: Uncovering the shift in web skimming

Valeo Networks Acquires Next I.T.

Kingston Digital Releases Touch-Screen Hardware-Encrypted External SSD for Data Protection

After the Okta Breach, Diversify Your Sources of Truth

Forging Australian Drivers Licenses

How GDPR Is Failing

ISaPWN research on the security of ISaGRAF Runtime

Common NFT scams and how to avoid them

Yes, Containers Are Terrific, But Watch the Security Risks

How to find NPM dependencies vulnerable to account hijacking

Microsoft sounds the alarm on wait for it a Linux botnet

South Korean and US presidents gang up on North Korea's cyber-offensives

Fronton: Russian IoT Botnet Designed to Run Social Media Disinformation Campaigns

PayPal Pays a Hacker $200,000 for Discovering 'One-Click-Hack' Vulnerability

Instructor Spotlight: Nick Mitropoulos

~ 22 May 2022 ~

Chinese "Twisted Panda" Hackers Caught Spying on Russian Defense Institutes

How to Limit Who Can Contact You on Facebook

~ 21 May 2022 ~

North Korean IT Workers Are Infiltrating Tech Companies

Conti: Russian-backed rulers of Costa Rican hacktocracy?

~ 20 May 2022 ~

Researchers Find Backdoor in School Management Plugin for WordPress

Cisco Issues Patch for New IOS XR Zero-Day Vulnerability Exploited in the Wild

Friday Squid Blogging: Squid Street Art

China-linked Twisted Panda caught spying on Russian defense R&D

Chatbot Army Deployed in Latest DHL Shipping Phish

Partial Patching Still Provides Strong Protection Against APTs

The Onion on Google Map Surveillance

Quantum Key Distribution for a Post-Quantum World

Cryptocurrency: secure or not? Week in security with Tony Anscombe

Sandworm uses a new version of ArguePatch to attack targets in Ukraine

Microsoft Rushes a Fix After May Patch Tuesday Breaks Authentication

University of Toronto Magazine: The Extremism Machine

Authentication Is Static, Yet Attackers Are Dynamic: Filling the Critical Gap

Microsoft patches the patch that broke Windows authentication

New Open Source Project Brings Consistent Identity Access to Multicloud

Bluetooth Flaw Allows Remote Unlocking of Digital Locks

Microsoft Bing censors politically sensitive Chinese terms internationally, reports Citizen Lab

Protecting data now as the quantum era approaches

Canada bans Huawei and ZTE from 5G networks, citing national security risks

India slightly softens infosec incident reporting and data retention rules

Microsoft Warns Rise in XorDdos Malware Targeting Linux Devices

Cytrox's Predator Spyware Target Android Users with Zero-Day Exploits

Researchers Uncover Rust Supply-Chain Attack Targeting Cloud CI Pipelines

Hackers Exploiting VMware Horizon to Target South Korea with NukeSped Backdoor

US wont prosecute good faith security researchers under CFAA

~ 19 May 2022 ~

Hackers Trick Users with Fake Windows 11 Downloads to Distribute Vidar Malware

More Than 1,000 Cybersecurity Career Pursuers Complete the (ISC) Entry-Level Cybersecurity Certification Pilot Exam

Deadbolt Ransomware Targeting QNAP NAS Devices

US recovers a record $15m from the 3ve ad-fraud crew

QNAP Urges Users to Update NAS Devices to Prevent Deadbolt Ransomware Attacks

Pro-Russian Information Operations Escalate in Ukraine War

DoJ Won't Charge 'Good Faith' Security Researchers

Majority of Kubernetes API Servers Exposed to the Public Internet

Dig Exits Stealth With $11M for Cloud Data Detection and Response Solution

Spyware Vendors Target Android With Zero-Day Exploits

Rise in XorDdos: A deeper look at the stealthy DDoS malware targeting Linux devices

Iran, China-linked gangs join Putin's disinformation war online

6 Scary Tactics Used in Mobile App Attacks

Phishing Attacks for Initial Access Surged 54% in Q1

Bada Bing, Bada Boom: Microsoft Bings Chinese Political Censorship of Autosuggestions in North America

Websites that Collect Your Data as You Type

Mitsubishi Electric MELSEC iQ-F Series

Hot glare of the spotlight doesnt slow BlackByte ransomware gang

The flip side of the coin: Why crypto is catnip for criminals

New Bluetooth Hack Could Let Attackers Remotely Unlock Smart Locks and Cars

The cyber threat isnt going anywhere, but the fight back starts in London

7 Key Findings from the 2022 SaaS Security Survey Report

Your snoozing iOS 15 iPhone may actually be sleeping with one antenna open

High-Severity Bug Reported in Google's OAuth Client Library for Java

Patch your VMware gear now or yank it out, Uncle Sam tells federal agencies

~ 18 May 2022 ~

Web Trackers Caught Intercepting Online Forms Even Before Users Hit Submit

VMware Releases Patches for New Vulnerabilities Affecting Multiple Products

MITRE Creates Framework for Supply Chain Security

CISA to Federal Agencies: Patch VMWare Products Now or Take Them Offline

Meet Wizard Spider, the multimillion-dollar gang behind Conti, Ryuk malware

How Pwn2Own Made Bug Hunting a Real Sport