Port 22

~ 5 May 2022 ~

Biden orders new quantum push to ensure encryption isn't cracked by rivals

Beijing-backed gang looted IP around the world for years, claims Cybereason

The Importance of Defining Secure Code

Researchers Disclose 10-Year-Old Vulnerabilities in Avast and AVG Antivirus

GitHub to require two factor authentication for code contributors by late 2023

Heroku Forces User Password Resets Following GitHub OAuth Token Theft

Thousands of Borrowers' Data Exposed from ENCollect Debt Collection Service

World Password Day Readying Your Workforce for MFA

8 Reasons You Dont Want to Miss SANS ICS Security Summit & Training 2022

~ 4 May 2022 ~

US Cyber Command shored up nine nations' defenses last year

GitHub to Developers: Turn on 2FA, or Lose Access

Cisco Issues Patches for 3 New Flaws Affecting Enterprise NFVIS Software

China-Backed Winnti APT Siphons Reams of US Trade Secrets in Sprawling Cyber-Espionage Attack

Microsoft Releases Defender for SMBs

F5 Warns of a New Critical BIG-IP Remote Code Execution Vulnerability

Q&A: How China Is Exporting Tech-Based Authoritarianism Across the World

New Ransomware Variant Linked to North Korean Cyber Army

Security Stuff Happens: What Will the Public Hear When You Say You've Been Breached?

How a senior product manager is leading the passwordless movement at Microsoft

Communication around Heroku security incident dubbed 'train wreck'

AI for Cybersecurity Shimmers With Promise, But Challenges Abound

What Stars Wars Teaches Us About Threats

AutoRABIT Secures $26M in Series B Investment from Full In Partners to Expand DevSecOps Platform

Uptycs Announces New Cloud Identity and Entitlement Management (CIEM) Capabilities

SAC Health System Impacted By Security Incident

3 most dangerous types of Android malware

New Sophisticated Malware

Indias New Super App Has a Privacy Problem

A new secret stash for fileless malware

SEC Plans to Hire More Staff in Crypto Enforcement Unit to Fight Frauds

Chinese Hackers Caught Stealing Intellectual Property from Multinational Companies

Putin threatens supply chains with counter-sanction order

Critical RCE Bug Reported in dotCMS Content Management Software

Ukraine War Themed Files Become the Lure of Choice for a Wide Range of Hackers

Cyber-spies target Microsoft Exchange to steal M&A info

~ 3 May 2022 ~

Aryaka, Carnegie Mellons CyLab to Research New Threat Mitigation Techniques

What Should I Know About Defending IoT Attack Surfaces?

Syxsense Enterprise Unifies Endpoint Security and IT Management for Real-Time Vulnerability Monitoring and Remediation

API Security Company Traceable AI Lands $60 Million Series B

SolarWinds Attackers Gear Up for Typosquatting Attacks

Unpatched DNS-Poisoning Bug Affects Millions of Devices, Stumps Researchers

REvil Revival: Are Ransomware Gangs Ever Really Gone?

Syxsense Launches Unified Endpoint Security and Management Platform

SEC nearly doubles cryptocurrency cop roles in special cyber unit

Is Leaking a SCOTUS Opinion a Crime? The Law Is Far From Clear

Third-Party App Access Is the New Executable File

Using Pupil Reflection in Smartphone Camera Selfies

How to Create a Cybersecurity Mentorship Program

Zero trust is more than just vendors and products it requires process

Automating your Microsoft security suite with D3 XGEN SOAR

Radware Launches SkyHawk Security, a Spinoff of Its Cloud Native Protector Business

Teleport Raises $110 Million Series C at $1.1 Billion Valuation Led by Bessemer Venture Partners

OccamSec Unveils New Cybersecurity Platform

Microsoft's standalone Defender for Business hits GA

Developing Software? Get Accountability Right First

Yokogawa CENTUM and ProSafe-RS

Critical vulnerabilities found in 'millions of Aruba and Avaya switches'

TLS Flaws Leave Avaya, Aruba Switches Open to Complete Takeover

Whats behind the recordhigh number of zero days?

Privacy pathology: It's time for the users to gather a little data. Evidence

Google starts testing fenced frames to guard its Privacy Sandbox

Critical TLStorm 2.0 Bugs Affect Widely-Used Aruba and Avaya Network Switches

Experts Analyze Conti and Hive Ransomware Gangs Chats With Their Victims

A Visual Summary of SANS CloudSecNext Summit 2022

6 Reasons SANS 2022 Security Awareness Summit is a Must-Attend

~ 2 May 2022 ~

AvosLocker Ransomware Variant Using New Trick to Disable Antivirus Protection

Chinese Hackers Caught Exploiting Popular Antivirus Products to Target Telecom Sector

Unpatched DNS Related Vulnerability Affects a Wide Range of IoT Devices

Russia to Rent Tech-Savvy Prisoners to Corporate IT?

New Hacker Group Pursuing Corporate Employees Focused on Mergers and Acquisitions

GitHub Says Recent Attack Involving Stolen OAuth Tokens Was "Highly Targeted"

Google Offers $1.5M Bug Bounty for Android 13 Beta

Security is a pain for American Dental Association: Ransomware infection feared

SSE kicks the A out of SASE

Microsoft launches Defender for Business to help protect small and medium businesses

New Regulations in India Require Orgs to Report Cyber Incidents Within 6 Hours

DoD Scammed Out of $23M in Phishing Attack on Jet-Fuel Vendors

Dell brings data recovery tools to Apex and the cloud

6 Best Practices to Ensure Kubernetes Security Meets Compliance Regulations

Name That Edge Toon: Flower Power

Spanish PM, defense minister latest Pegasus spyware victims

Security Stuff Happens: What Do You Do When It Hits the Fan?

Which Hole to Plug First? Solving Chronic Vulnerability Patching Overload

Chinese "Override Panda" Hackers Resurface With New Espionage Attacks

Russian Hackers Targeting Diplomatic Entities in Europe, Americas, and Asia

~ 1 May 2022 ~

Google Releases First Developer Preview of Privacy Sandbox on Android 13

Here's a New Tool That Scans Open-Source Repositories for Malicious Packages

How to Use Windows Security to Keep Your PC Protected

How to Remove Your Personal Info From Google's Search Results

~ 30 Apr 2022 ~

One of the Most Powerful DDoS Attacks Ever Hits a Crypto Platform

FBI Conducted 3.4 Million Warrantless Searches of Americans' Data

Facebook's Meta, tracking code, and the student financial aid website

2022 Security Priorities: Staffing and Remote Work

~ 29 Apr 2022 ~

Good News! IAM Is Near-Universal With SaaS

Data-wiper malware strains surge as Ukraine battles ongoing invasion

Critical Vulnerabilities Leave Some Network-Attached Storage Devices Open to Attack

Friday Squid Blogging: Ten-Foot Long Squid Washed onto Japanese Shore ALIVE

Cloudflare Flags Largest HTTPS DDoS Attack It's Ever Recorded

You Can Now Ask Google to Remove Your Phone Number, Email or Address from Search Results

Socialscan Command-Line Tool To Check For Email And Social Media Username Usage