Port 22

~ 23 Sep 2022 ~

Microsoft Looks to Enable Practical Zero-Trust Security With Windows 11

Mitigating Risk and Communicating Value in Multicloud Environments

Leaking Screen Information on Zoom Calls through Reflections in Eyeglasses

CISA Warns of Hackers Exploiting Recent Zoho ManageEngine Vulnerability

Firing Your Entire Cybersecurity Team? Are You Sure?

Void Balaur Hackers-for-Hire Targeting Russian Businesses and Politics Entities

5 tips to help children navigate the internet safely

Keeping secrets safe off prem

Mass email campaign with a pinch of targeted spam

Fake Indian Banking Rewards Apps Targeting Android Users with Info-stealing Malware

Privacy watchdog steps up fight against Europol's hoarding of personal data

Hackers Using Malicious OAuth Apps to Take Over Email Servers

Researchers Uncover Mysterious 'Metador' Cyber-Espionage Group

~ 22 Sep 2022 ~

Developer Leaks LockBit 3.0 Ransomware-Builder Code

CircleCI, GitHub Users Targeted in Phishing Campaign

Check out this Android spyware, says Microsoft, the home of a gazillion Windows flaws

Time to Quell the Alarm Bells Around Post-Quantum Crypto-Cracking

Feds Sound Alarm on Rising OT/ICS Threats From APT Groups

Malicious npm Package Poses as Tailwind Tool

Researchers Uncover Years-Long Mobile Spyware Campaign Targeting Uyghurs

The Ungodly Surveillance of Anti-Porn Shameware Apps

Malicious OAuth applications used to compromise email servers and spread spam

Cambodian authorities crack down on cyber slavery amid international pressure

Malicious NPM Package Caught Mimicking Material Tailwind CSS Package

A New Linux Tool Aims to Guard Against Supply Chain Attacks

Allurity Acquires Spanish Multinational Aiuken Cybersecurity

Twitter's Whistleblower Allegations Are a Cautionary Tale for All Businesses

StackHawk Launches Deeper API Security Test Coverage to Improve the Security of APIs

Fake sites fool Zoom users into downloading deadly code

Palo Alto Networks 5G-Native Security Now Available on Microsoft Azure Private Multi-Access Edge Compute

IT Security Takeaways from the Wiseasy Hack

Prompt Injection/Extraction Attacks against AI Systems

Researchers Disclose Critical Vulnerability in Oracle Cloud Infrastructure

Measuresoft ScadaPro Server

Hey WeLiveSecurity, how does biometric authentication work?

15-Year-Old Unpatched Python Vulnerability Potentially Affects Over 350,000 Projects

Hackers Targeting Unpatched Atlassian Confluence Servers to Deploy Crypto Miners

Alert: 15-year-old Python tarfile flaw lurks in 'over 350,000' code projects

NEW SANS DFIR COURSE | FOR577: LINUX Incident Response & Analysis

~ 21 Sep 2022 ~

San Francisco cops can use private cameras to live-monitor 'significant events'

Wintermute DeFi Platform Offers Hacker a Cut in $160M Crypto-Heist

Quantify Risk, Calculate ROI

Threat Actor Abuses LinkedIn's Smart Links Feature to Harvest Credit Cards

Sophisticated Hermit Mobile Spyware Heralds Wave of Government Surveillance

Hackers Paralyze 911 Operations in Suffolk County, NY

Data Scientists Dial Back Use of Open Source Code Due to Security Worries

Rewards plus: Fake mobile banking rewards apps lure users to install info-stealing RAT on Android devices

Don't Wait for a Mobile WannaCry

Cyber Insurers Clamp Down on Clients' Self-Attestation of Security Controls

Cyber Insurers Clamp Down on Clients' Self-Attestation of Security Controls

SIM Swapper Abducted, Beaten, Held for $200k Ransom

The art and science behind Microsoft threat hunting: Part 2

Malwarebytes blocks Google, YouTube as malware

15-Year-Old Python Flaw Slithers into Software Worldwide

'I Don't Care About Cookies' extension sold to Avast

Ransomware: The Latest Chapter

Over 39,000 Unauthenticated Redis Instances Found Exposed on the Internet

Crypto Trading Firm Wintermute Loses $160 Million in Hacking Incident

Why Zero Trust Should be the Foundation of Your Cybersecurity Ecosystem

Automatic Cheating Detection in Human Racing

Shadowy Russian Cell Phone Companies Are Cropping Up in Ukraine

U.S. Adds 2 More Chinese Telecom Firms to National Security Threat List

WAAP it out for application security

ChromeLoader, what took you so long? Malvertising irritant now slings ransomware

Look who's fallen foul of Europe's data retention rules. France and Germany