Port 22

~ 7 Jul 2020 ~

Hundreds of forgotten corners of mega-corp websites fall into the hands of spammers and malware slingers

Want to kill all the weak passwords? This may be the tool for you

Microsoft Launches Free Linux Forensics and Rootkit Malware Detection Service

NewsBites Drilldown for the Week Ending 3 July 2020

~ 6 Jul 2020 ~

Your 2.3m Instagram followers won't stop the FBI... Web star accused of laundering $100m+ pocketed from cyber-crime

Your 2.3m Instagram fans won't stop the FBI... Web star accused of plotting to launder millions from cyber-crime

You may be distracted by the pandemic but FYI: US Senate panel OK's backdoors-by-the-backdoor EARN IT Act

Axiom Pen-Testing Server For Collecting Bug Bounties

BEC Busts Take Down Multimillion-Dollar Operations

Hackers Are Exploiting a 5-Alarm Bug in Networking Equipment

Credit-Card Skimmer Seeks Websites Running Microsoft's ASP.NET

Think of a number: A tale of iffy discount codes, supermarket loyalty cards and Hotels.com

The Fed shares insight on how to combat synthetic identity fraud

ThiefQuest Ransomware for the Mac

Three UK: We're sending you this SMS to warn you not to pay attention to unsolicited texts

Pig in a poke: smartphone adware

Make sure you've patched your F5 BIG-IP gear. Exploit code for scary bug pair is so trivial, it fits in a tweet

Cato MDR: Managed Threat Detection and Response Made Easy

Vulnerability Management Maturity Model

Before you join us at the DFIR Summit read this

~ 5 Jul 2020 ~

How to Passcode Lock Any App on Your Phone

~ 4 Jul 2020 ~

E-Verifys SSN Lock is Nothing of the Sort

Encryption-Busting EARN IT Act Advances in Senate

Critical RCE Flaw (CVSS 10) Affects F5 BIG-IP Application Security Servers

~ 3 Jul 2020 ~

Friday Squid Blogging: Strawberry Squid

Barclays Bank appeared to be using the Wayback Machine as a 'CDN' for some Javascript

Hacked by Police

Week in security with Tony Anscombe

Hundreds arrested after police crack encrypted chat network

The Worst Hacks and Breaches of 2020 So Far

Fighting BEC and EAC: Why whack-a-mole wont work

Police Arrested Hundreds of Criminals After Hacking Into Encrypted Chat Network

F5 emits fixes for critical flaws in BIG-IP gear: Hopefully yours aren't internet-facing while you ready a patch

~ 2 Jul 2020 ~

Holy Guacamole! Researchers find Apache remote desktop software was silently pwnable for snooping on sessions

Euro police forces infiltrated encrypted phone biz and now 'criminal' EncroChat users are being rounded up

Hold off that rush into the July 4 weekend you may need this: Microsoft patches pwn-by-picture pitfalls in Win 10

Users who don't understand how to encrypt their emails won't do it

Thousands of MongoDB databases ransacked, held for ransom

The Security Value of Inefficiency

22,900 MongoDB Databases Affected in Ransomware Attack

Cisco SMB kit harbors cross-site scripting bug: One wrong link click... and that's your router pwned remotely

OpenClinic GA

OpenClinic GA

Nortek Linear eMerge 50P/5000P

Nortek Linear eMerge 50P/5000P

ABB System 800xA Information Manager

ABB System 800xA Information Manager

Critical Apache Guacamole Flaws Put Remote Desktops at Risk of Hacking

Ransomware Gangs Dont Need PR Help

~ 1 Jul 2020 ~

New Mac Ransomware Is Even More Sinister Than It Appears

Chinese Software Company Aisino Uninstalls GoldenSpy Malware

DHS Shares Data on Top Cyberthreats to Federal Agencies

DHS Shares Data on Top Cyber Threats to Federal Agencies

Microsoft Issues Out-of-Band Patches for RCE Flaws

Securing the International IoT Supply Chain

Microsoft releases emergency update to fix two serious Windows flaws

Details of Beijing's new Hong Kong security law revealed: Signals end to more than two decades of autonomy

Schools Already Struggled With Cybersecurity. Then Came Covid-19

Another COVID-19 Side Effect: Rising Nation-State Cyber Activity

Tune in and watch live right here this week it's your email encryption wake-up call

Microsoft Releases Urgent Windows Update to Patch Two Critical Flaws

Things that happen every four years: Olympic Games, Presidential elections, and now new Mac ransomware

Use This Definitive RFP Template to Effectively Evaluate XDR solutions

After six months of stonewalling by Apple, app maker goes public on macOS privacy protection bypass

A New Ransomware Targeting Apple macOS Users Through Pirated Apps