Port 22

~ 13 May 2022 ~

Data Transformation: 3 Sessions to Attend at RSA 2022

How to spot and avoid a phishing attack Week in security with Tony Anscombe

How to Avoid Falling Victim to PayOrGrief's Next Rebrand

'Peacetime in cyberspace is a chaotic environment' says senior US advisor

Iran-linked Cobalt Mirage extracts money, info from US orgs report

How One Company Helps Keep Russias TV Propaganda Machine Online

Researchers find 134 flaws in the way Word, PDFs, handle scripts

Google Created 'Open-Source Maintenance Crew' to Help Secure Critical Projects

To predict the target of new Chinese malware, look at the target of new Chinese laws

Anatomy of a campaign to inject JavaScript into compromised WordPress sites

New Saitama backdoor Targeted Official from Jordan's Foreign Ministry

~ 12 May 2022 ~

Zyxel Releases Patch for Critical Firewall OS Command Injection Vulnerability

Transforming SQL Queries Bypasses WAF Security

Black Hat Asia: Firmware Supply-Chain Woes Plague Device Security

If you've got Intel inside, you probably need to get these security patches inside, too

3 Predictors of Cybersecurity Startup Success

Egnyte Enhances Program for Managed Service Providers

StackHawk Raises $20.7 Million in Series B Funding for Developer-First Application and API Security Testing

Surveillance by Driverless Car

Top 6 Security Threats Targeting Remote Workers

Needs Improvement: Scoring Biden's Cyber Executive Order

Ransomware the final nail in coffin for small university

How Can Your Business Defend Itself Against Fraud-as-a-Service?

Known macOS Vulnerabilities Led Researcher to Root Out New Flaws

5 Years That Altered the Ransomware Landscape

Nokia Opens Cybersecurity Testing Lab

The Hidden Race to Protect the US Bioeconomy From Hacker Threats

Google Will Use Mobile Devices to Thwart Phishing Attacks

On Air With Dark Reading News Desk at Black Hat Asia 2022

DEA Investigating Breach of Law Enforcement Data Portal

The Case for War Crimes Charges Against Russias Sandworm Hackers

Delta Electronics CNCSoft

Mitsubishi Electric MELSOFT iQ AppPortal

Inkscape in Industrial Products

Cambium Networks cnMaestro

Siemens Industrial PCs and CNC devices

Siemens SIMATIC WinCC

Siemens SICAM P850 and SICAM P855

Siemens Industrial Products with OPC UA

Siemens JT2GO and Teamcenter Visualization

Siemens Desigo PXC and DXR Devices

Siemens SIMATIC CP 44x-1 RNA

Siemens Industrial Products

Siemens Industrial Devices using libcurl

Siemens Simcenter Femap

Siemens OpenV2G

Siemens Teamcenter

10 reasons why we fall for scams

APT gang 'Sidewinder' goes on two-year attack spree across Asia

It's time to kick China off social media, says tech governance expert

Iranian Hackers Leveraging BitLocker and DiskCryptor in Ransomware Attacks

Europe proposes tackling child abuse by killing privacy, strong encryption

EU Proposes New Rules for Tech Companies to Combat Online Child Sexual Abuse

Ukraine war a sorting hat for cyber-governance loyalties: Black Hat founder Jeff Moss

Thousands of WordPress Sites Hacked to Redirect Visitors to Scam Sites

Android and Chrome Users Can Soon Generate Virtual Credit Cards to Protect Real Ones

A Visual Summary of SANS Neurodiversity Summit 2022

Everything We Learned From the LAPSUS$ Attacks

~ 11 May 2022 ~

Government Agencies Warn of Increase in Cyberattacks Targeting MSPs

Hackers Deploy IceApple Exploitation Framework on Hacked MS Exchange Servers

Five Eyes turn spotlight on MSPs: Potential weak links in IT supply-chain security

CISA Urges Organizations to Patch Actively Exploited F5 BIG-IP Vulnerability

PlainID Debuts Authorization-as-a-Service Platform

Threat Actors Are Stealing Data Now to Decrypt When Quantum Computing Comes

Ready, IAM, Fire: How Weak IAM Makes You a Target

Android 13 Tries to Make Privacy and Security a No-Brainer

Cloud Firm Appian Awarded $2B in Trade Secret Cyber-Theft Lawsuit

Microsoft Simplifies Security Patching Process for Exchange Server

Orca Security Unveils Context-Aware Shift Left Security to Identify and Prevent Cloud Application Security Issues Earlier

Man Sentenced for Stealing from PayPal Accounts in Wire Fraud Scheme

Fraudulent 'Bot-driven' College Enrollment up 50%, New Study Finds

NSA Warns Managed Service Providers Are Now Prime Targets for Cyberattacks

Keeper Security Partners with SHI International for New Fully Managed IT Service (SHI Complete)

Concentric AI Raises Series A Funding Led by Ballistic Ventures to Autonomously Secure Business-Critical Data

Breaking Down the Strengthening American Cybersecurity Act

Quantum Ransomware Strikes Quickly, How to Prepare and Recover

Material Security Reaches $1.1 Billion Valuation for Zero Trust Security on Microsoft and Google Email

Center for Threat-Informed Defense, Microsoft, and industry partners streamline MITRE ATT&CK matrix evaluation for defenders

The EU Wants Big Tech to Scan Your Private Chats for Child Abuse

SpyCloud Report: Fortune 1000 Employees Pose Elevated Cyber Risk to Companies

Fresh ransomware samples indicate REvil is back

Cyber-Espionage Attack Drops Post-Exploit Malware Framework on Microsoft Exchange Servers

ICE Is a Domestic Surveillance Agency

The Danger of Online Data Brokers

Vanity URLs Could be Spoofed for Social Engineering Attacks

New ransomware trends in 2022

Thousands of Top Websites See What You TypeBefore You Hit Submit

Novel Nerbian RAT Lurks Behind Faked COVID Safety Emails

Opportunity out of crisis: Tapping the Great Resignation to close the cybersecurity skills gap

Yahoo Japan strives for universal passwordless authentication

[White Paper] Social Engineering: What You Need to Know to Stay Resilient

Bitter APT Hackers Add Bangladesh to Their List of Targets in South Asia

Researchers Warn of Nerbian RAT Targeting Entities in Italy, Spain, and the U.K

Microsoft Patch Tuesday, May 2022 Edition

Malicious NPM Packages Target German Companies in Supply Chain Attack

Microsoft closes Windows LSA hole under active attack

Cloud Instance Metadata Services (IMDS)

E.U. Blames Russia for Cyberattack on KA-SAT Satellite Network Operated by Viasat

~ 10 May 2022 ~

Email domain for NPM lib with 6m downloads a week grabbed by expert to make a point

What to Patch Now: Actively Exploited Windows Zero-Day Threatens Domain Controllers