Port 22

~ 20 Dec 2021 ~

How to see if cybersecurity of your organization is in check for the New Year

Experts Discover Backdoor Deployed on the U.S. Federal Agency's Network

~ 19 Dec 2021 ~

Over 500,000 Android Users Downloaded a New Joker Malware App from Play Store

Bad things come in threes: Apache reveals <i>another</i> Log4J bug

~ 18 Dec 2021 ~

Buckle Up for More Log4j Madness

US distrust of Huawei linked in part to malicious software update in 2012

New Local Attack Vector Expands the Attack Surface of Log4j Vulnerability

Apache Issues 3rd Patch to Fix New High-Severity Log4j Vulnerability

~ 17 Dec 2021 ~

Friday Squid Blogging: UK Recognizes Squid as Sentient Beings

CISA issues emergency directive to fix Log4j vulnerability

How Risky Is the Log4J Vulnerability?

Meta Acts Against 7 Entities Found Spying on 50,000 Users

Executive Partnerships Are Critical for Cybersecurity Success

Week in security with Tony Anscombe

Timely Questions for Log4j Response Now And for the Future

PseudoManuscrypt Malware Targeted Government & ICS Systems in 2021

Time to Reset the Idea of Zero Trust

CISA Issues Emergency Directive on Log4j

RAF shoots down 'terrorist drone' over US-owned special ops base in Syria

Is Data Security Worthless if the Data Life Cycle Lacks Clarity?

Facebook Bans 7 'Cyber Mercenary' Companies for Spying on 50,000 Users

Over Log4j? VMware has another critical flaw for you to patch

New PseudoManuscrypt Malware Infected Over 35,000 Computers in 2021

How to Prevent Customer Support Help Desk Fraud Using VPN and Other Tools

Facebook locks out 1,500 fake accounts used by cyber-spy firms to snoop on people, alerts 50k potential targets

Mobile App Developers Keep Fraudulent Traffic at Bay with Anti-Fraud API

~ 16 Dec 2021 ~

New Phorpiex Botnet Variant Steals Half a Million Dollars in Cryptocurrency

Why Log4j Mitigation Is Fraught With Challenges

Siemens SINUMERIK Edge

Meta Ousts 7 Surveillance-for-Hire Operations From Its Platforms

Phorpiex Botnet Variant Spread Across 96 Countries

The Next Wave of Log4J Attacks Will Be Brutal

PEGASUS PREDATOR: Cytrox

Pegasus vs. Predator: Dissidents Doubly-Infected iPhone Reveals Cytrox Mercenary Spyware

Why ransomware attacks happen out of hours or during the holidays

Log4Shell: The Big Picture

NY Man Pleads Guilty in $20 Million SIM Swap Theft

East Londoners nicked under Computer Misuse Act after NHS vaccine passport app sprouted clump of fake entries

More Log4j News

Dear Congress: It's Complicated. Please Consider This When Crafting New Cybersecurity Legislation

Xylem AquaView

Delta Electronics CNCSoft

Wibu-Systems CodeMeter Runtime

Mitsubishi Electric GX Works2

Mitsubishi Electric FA Engineering Software

Siemens Capital VSTAR

Siemens POWER METER SICAM Q100

Siemens JTTK and JT Utilities

Siemens JT2Go and Teamcenter Visualization

Siemens Siveillance Identity

Siemens Simcenter STAR-CCM+ Viewer

Siemens Healthineers syngo fastView

Siemens JT Utilities and JT Open Toolkit

Siemens Teamcenter Active Workspace

Siemens SiPass Integrated

Siemens JTTK and JT Utilities

PseudoManuscrypt: a mass-scale spyware attack campaign

Move fast, break security: Why CISOs must push back against Agile IT

National Cyber Strategy will lead to BritChip for mobile devices by 2025, claims UK.gov

Japan draws a LINE: web giants must reveal where they store user data

Researchers Uncover New Coexistence Attacks On Wi-Fi and Bluetooth Chips

The Guide to Automating Security Training for Lean Security Teams

New Fileless Malware Uses Windows Registry as Storage to Evade Detection

Facebook expands bug bounty program to include scraping attacks, two years after it was scraped hard

Rise in API-Based Attacks Underscore Investments in New Tools

~ 15 Dec 2021 ~

As CISA tells US govt agencies to squash Log4j bug by Dec 24, fingers start pointing at China, Iran, others

Original Fix for Log4j Flaw Fails to Fully Protect Against DoS Attacks, Data Theft

Companies Must Assess Threats to AI & ML Systems in 2022: Microsoft

Hackers Begin Exploiting Second Log4j Vulnerability as a Third Flaw Emerges

Dept. of Homeland Security Launches 'Hack DHS' Program

US lawmakers want to put NSO Group, 3 other spyware makers out of business with fresh severe sanctions

Analysis: Log4j Vulnerability Highlights the Value of Defense-in-Depth, Accurate Inventory

Meta Expands Bug-Bounty Program to Include Data Scraping

Cybereason Announces Availability of AI-Driven Cybereason XDR and EDR on Google Cloud Marketplace

Kroll Acquires Security Compass Advisory

What every business leader needs to know about Log4Shell

Privacy and Safety Issues With Facebook's New 'Metaventure'

Google Warns That NSO Hacking Is On Par With Elite Spy Groups

What Are the Pros and Cons of a SASE Architecture?

The final report on NOBELIUMs unprecedented nation-state attack

Why We Need "Developer-First" Application Security

Pen Test Partners: Anyone could view Gumtree users' GPS location by pressing F12

Why Cloud Storage Isn't Immune to Ransomware

Kryptowire Collaborates With Orange and Finds Vulnerabilities in Mobile Devices

The Biggest Deepfake Abuse Site Is Growing in Disturbing Ways

The dirty dozen of Latin America: From Amavaldo to Zumanek

Kaspersky Managed Detection and Response: interesting cases

Kaspersky Security Bulletin 2021. Statistics

Facebook to Pay Hackers for Reporting Data Scraping Bugs and Scraped Datasets

Cynet's MDR Offers Organizations Continuous Security Oversight

Hackers Using Malicious IIS Server Module to Steal Microsoft Exchange Credentials

Microsoft closes installer hole abused by Emotet malware, Google splats Chrome bug exploited in the wild

Cisco's Ash Devata on Securing the Hybrid Workforce With Zero Trust

How to Use Phishing Benchmarks Effectively to Assess Your Program

expert-guide-reviewing-SOC2-reports

cloud-security-monitoring-threat-detection-5-day

cloud-security-monitoring-threat-detection-5-day

A Look Into ICS612: ICS Cybersecurity In-Depth: Part 1

~ 14 Dec 2021 ~

Tufin Introduces Security Policy Builder (SPB) App to Marketplace

Ground Labs Research Reveals 71% of American Consumers are Unaware of Data Protection Laws