Port 22

~ 3 Oct 2022 ~

Moody's turns up the heat on 'riskiest' sectors for cyberattacks

~ 2 Oct 2022 ~

New Pegasus Spyware Abuses Identified in Mexico

Stenography alert: Backdoor spyware stashed in Microsoft logo

Steganography alert: Backdoor spyware stashed in Microsoft logo

BlackCat malware lashes out at US defense IT contractor

A Visual Summary of SANS Blue Team Summit 2022

~ 1 Oct 2022 ~

Microsoft Exchange Server Has a Zero-Day Problem

Gone in a day: Ethical hackers say it would take mere hours to empty your network

Analyzing attacks using the Exchange vulnerabilities CVE-2022-41040 and CVE-2022-41082

~ 30 Sep 2022 ~

Worried About the Exchange Zero-Day? Here's What to Do

Friday Squid Blogging: Breeding the Oval Squid

The Challenge of Cracking Irans Internet Blockade

LA School District Ransomware Attackers Now Threaten to Leak Stolen Data

The Top 4 Mistakes in Security Programs to Avoid

Reshaping the Threat Landscape: Deepfake Cyberattacks Are Here

Cybercriminals See Allure in BEC Attacks Over Ransomware

Trojanized, Signed Comm100 Chat Installer Anchors Supply Chain Attack

Microsoft: Two New 0-Day Flaws in Exchange Server

Microsoft Confirms Pair of Blindsiding Exchange Zero-Days, No Patch Yet

SolarMarker Attack Leverages Weak WordPress Sites, Fake Chrome Browser Updates

New Malware Families Found Targeting VMware ESXi Hypervisors

Security Vulnerabilities in Covert CIA Websites

ESET Research into new attacks by Lazarus Week in security with Tony Anscombe

With the Software Supply Chain, You Can't Secure What You Don't Measure

Onyxia Raises $5M to Help Companies Proactively Manage Cybersecurity Risks Using AI

Cyber Attacks Against Middle East Governments Hide Malware in Windows logo

Go Update iOS, Chrome, and HP Computers to Fix Serious Flaws

New Malware Campaign Targeting Job Seekers with Cobalt Strike Beacons

Why Organisations Need Both EDR and NDR for Complete Network Protection

North Korean Hackers Weaponizing Open-Source Software in Latest Cyber Attacks

Amazonthemed campaigns of Lazarus in the Netherlands and Belgium

Microsoft Confirms 2 New Exchange Zero-Day Flaws Being Used in the Wild

Microsoft warns of North Korean crew posing as LinkedIn recruiters

WARNING: New Unpatched Microsoft Exchange Zero-Day Under Active Exploitation

Stop us if you've heard this one before: Exchange Server zero-day being actively exploited

Emulate Shellcode with Radare2

Ex-eBay execs jailed for cyberstalking web critics

Cyera Survey Finds One in Three Respondents Want to Minimize Cloud Data Risk

Safous Adds Browser Isolation to Its Zero-Trust Network Access Service

Israel Cybersecurity Enterprise (ICE) Teams with CybeReady to Deliver World-Class Security Training

~ 29 Sep 2022 ~

Aunalytics Launches Security Patching Platform as a Service

Veristor Partners with SANS Security Awareness to Deliver Employee Security Awareness Training

YouMail, Inc. and WMC Global Partner to Deliver Voice and SMS Phishing Disruption Services

Organizations Finding the Need for New Approaches on the Cybersecurity Front, CompTIA research reveals

Intel Hardens Confidential Computing With Project Amber Updates

Latest Delinea Update Streamlines DevOps Security

KnowBe4 Simplifies Compliance Requirements for Healthcare Privacy

Pathlock Expands SAP Capabilities with Acquisition of Grey Monarch

Ransomware Attacks Continue Increasing: 20% of All Reported Attacks Occurred in the Last 12 Months - New Survey

How CIA betrayed informants with shoddy front websites built for covert comms

Why the US Should Help Secure Mexican Infrastructure and What It Gets in Return

Pentagon is far too tight with its security bug bounties

Fake CISO Profiles on LinkedIn Target Fortune 500s

The Country Where You Live Impacts Password Choices

Dangerous New Attack Technique Compromising VMware ESXi Hypervisors

3 Reasons Why BEC Scams Work in Real Estate

How one product manager builds community at Microsoft Security

ZINC weaponizing open-source software

CSO perspective:Why a strong IAM strategy is key to an organizations cybersecurity approach

A Matrix Update Will Patch Serious End-to-End Encryption Flaws

(ISC) Recruits More Than 55,000 Cybersecurity Candidates in First 30 Days of New Programs to Address Workforce Gap

Capital One Phish Showcases Growing Bank-Brand Targeting Trend

Espionage Group Wields Steganographic Backdoor Against Govs, Stock Exchange

Brazilian Prilex Hackers Resurfaced With Sophisticated Point-of-Sale Malware

XSS Flaw in Prevalent Media Imaging Tool Exposes Trove of Patient Data