Port 22

~ 17 Aug 2022 ~

Mozilla finds 18 of 25 popular reproductive health apps share your data

Russian military uses Chinese drones and bots in combat, over manufacturers' protests

Developing ICS/OT Engineering Cyber Defense Teams

Microsoft Rolls Out Tamper Protection for Macs

~ 16 Aug 2022 ~

RubyGems now requires multi-factor auth for top package maintainers

SEC says brokerage accounts hijacked for $1.3m pump-and-dump scam

Microsoft Disrupts Russian Group's Multiyear Cyber-Espionage Campaign

DEF CON: A Woman's First Experience

Clop Ransomware Gang Breaches Water Utility, Just Not the Right One

Whack-a-Mole: More Malicious PyPI Packages Spring Up Targeting Discord, Roblox

When Efforts to Contain a Data Breach Backfire

Name That Toon: Vicious Circle

PC store told it can't claim full cyber-crime insurance after social-engineering attack

With Plunge in Value, Cryptocurrency Crimes Decline in 2022

Windows Vulnerability Could Crack DC Server Credentials Open

Do you know whats happening on your users devices?

Microsoft's macOS Tamper Protection hits general availability

Lessons From the Cybersecurity Trenches

SEPT. 7-9: Ukraine, Election, AI, Cybercrime, 5G Among Topics Explored by 125+ Speakers at 13th Billington Cybersecurity Summit

1,900 Signal users exposed: Twilio attacker 'explicitly' looked for certain numbers

DEF CON dont worry, the elections are safe edition

Two more malicious Python packages in the PyPI

Remotely Controlling Touchscreens

Reckon Russian spies are lurking in your inbox? Check for these IOCs, Microsoft says

How a spoofed email passed the SPF check and landed in my inbox

Threat in your browser: what dangers innocent-looking extensions hold for users

Digital Ocean dumps Mailchimp after attack leaked customer email addresses

It's 2022 and there are still thousands of public systems using password-less VNC

Oh Deere: Farm hardware jailbroken to run Doom

~ 15 Aug 2022 ~

DEF CON 30: Hackers Come Home to Vibrant Community

CIA accused of illegally spying on Americans visiting Assange in embassy

Most Q2 Attacks Targeted Old Microsoft Vulnerabilities

Transitioning From VPNs to Zero-Trust Access Requires Shoring Up Third-Party Risk Management

Dutch authorities arrest 29-year-old dev with suspected ties to Tornado Cash

$23 Million YouTube Royalties Scam

How and Why to Apply OSINT to Protect the Enterprise

IT threat evolution in Q2 2022. Mobile statistics

IT threat evolution in Q2 2022. Non-mobile statistics

IT threat evolution Q2 2022

Black Hat USA 2022: Burnout, a significant issue

Black Hat Windows isnt the only mass casualty platform anymore

Indian military ready to put long-range quantum key distribution on the line

Black Hat and DEF CON visitors differ on physical risk management

~ 14 Aug 2022 ~

Upcoming Speaking Engagements

How to Create a Secure Folder on Your Phone

A New Tractor Jailbreak Rides the Right-to-Repair Wave

~ 13 Aug 2022 ~

Flaw in the VA Medical Records Platform May Put Patients at Risk

The Feds Gear Up for a Privacy Crackdown

~ 12 Aug 2022 ~

A Single Flaw Broke Every Layer of Security in MacOS

Cybercriminals Weaponizing Ransomware Data for BEC Attacks

Zooms Auto-Update Feature Came With Hidden Risks on Mac

Patch Madness: Vendor Bug Advisories Are Broken, So Broken

Director Ron Deibert delivers testimony to the Standing Committee on Access to Information, Privacy, and Ethics

Heres What Trumps Nuclear Documents Could Be

Software Supply Chain Chalks Up a Security Win With New Crypto Effort

The potential consequences of a data breach, plus romance scams Week in security with Tony Anscombe

Sounding the Alarm on Emergency Alert System Flaws

Novel Ransomware Comes to the Sophisticated SOVA Android Banking Trojan

How to Clear Security Obstacles and Achieve Cloud Nirvana

Black Hat 2022 Cyberdefense in a global threats era

Safety first: how to tweak the settings on your dating apps

NEW DFIR COURSE DEVELPOMENT SURVEY | FOR478

~ 11 Aug 2022 ~

Microsoft: We Don't Want to Zero-Day Our Customers

Krebs: Taiwan, Geopolitical Headwinds Loom Large

After Colonial Pipeline, Critical Infrastructure Operators Remain Blind to Cyber-Risks