Port 22

~ 29 Apr 2022 ~

Microsoft Edge's 'Secure Network' sounds a lot like a built-in VPN

Dont expect to get your data back from the Onyx ransomware group

TA410 under the microscope Week in security with Tony Anscombe

Video Conferencing Apps Sometimes Ignore the Mute Button

Take a Diversified Approach to Encryption

Interpol: We can't arrest our way out of cybercrime

You Need to Update iOS, Android, and Chrome Right Now

Ukraines Digital Battle With Russia Isnt Going as Expected

India gives local techies 60 days to hit 6-hour deadline for infosec incident reporting

Sina Weibo, China's Twitter analogue, reveals users' locations and IP addresses

Microsoft Documents Over 200 Cyberattacks by Russia Against Ukraine

Bumblebee malware loader emerges as Conti's BazarLoader fades

A Primer on Neurodiversity in Cybersecurity

Ambient.ai Expands Computer Vision Capabilities for Better Building Security

~ 28 Apr 2022 ~

Microsoft Azure Vulnerability Exposes PostgreSQL Databases to Other Customers

Indian Govt Orders Organizations to Report Security Breaches Within 6 Hours to CERT-In

Microsoft Patches Pair of Dangerous Vulnerabilities in Azure PostgreSQL

IT Teams Worry Staff Lack Cloud-Specific Skills

Capital One Ventures, Snowflake Ventures, Verizon Ventures, and Wipro Ventures Join Securonix $1B+ Growth Investment as Strategic Investors

The Ransomware Crisis Deepens, While Data Recovery Stalls

Bumblebee Malware Buzzes Into Cyberattack Fray

Microsoft: Russia Using Cyberattacks in Coordination With Military Invasion of Ukraine

Hollywoods Fight Against VPNs Turns Ugly

Cloudflare stomps huge DDoS attack on crypto platform

Microsoft Issues Report of Russian Cyberattacks against Ukraine

Explainable AI for Fraud Prevention

Johnson Controls Metasys

Money or your business: Ensure your ransomware defense strategy beats off disruptions, extortions

Experts Detail 3 Hacking Teams Working Under the Umbrella of TA410 Group

Everything you need to know to create a Vulnerability Assessment Report

Cybercriminals Using New Malware Loader 'Bumblebee' in the Wild

Twitter's New Owner Elon Musk Wants DMs to be End-to-End Encrypted like Signal

Five Eyes nations reveal 2021's fifteen most-exploited flaws

New RIG Exploit Kit Campaign Infecting Victims' PCs with RedLine Stealer

A Peek into Visa's AI Tools Against Fraud

~ 27 Apr 2022 ~

Doppler Takes on Secrets Management

U.S Cybersecurity Agency Lists 2021's Top 15 Most Exploited Software Vulnerabilities

Chinese APT Bronze President Mounts Spy Campaign on Russian Military

Microsoft points at Linux and shouts: Look, look! Privilege-escalation flaws here, too!

CloudFlare Thwarts Record DDoS Attack Peaking at 15 Million Requests Per Second

QNAP Advises to Mitigate Remote Hacking Flaws Until Patches are Available

Synopsys to Acquire WhiteHat Security from NTT

CISA: Log4Shell Was the Most-Exploited Vulnerability in 2021

Looking for the latest insight to ensure cyber security in the long term? Its right here

Tenable's Bit Discovery Buy Underscores Demand for Deeper Visibility of IT Assets

Zero-Day Vulnerabilities Are on the Rise

Coca-Cola Investigates Data-Theft Claims After Ransomware Attack

Feds offer big rewards for info on suspected Russian Sandworm intel officers

How one senior developer brings the startup spirit to Microsoft

Fighting Fake EDRs With Credit Ratings for Police

China turns cyber-espionage eyes to Russia as Ukraine invasion grinds on

How Industry Leaders Should Approach Open Source Security

5-Year Vulnerability Trends Are Both Surprising and Sadly Predictable

A lookback under the TA410 umbrella: Its cyberespionage TTPs and activity

Russia Is Being Hacked at an Unprecedented Scale

North Koreans Are Jailbreaking Phones to Access Forbidden Media

APT trends report Q1 2022

[eBook] Your First 90 Days as MSSP: 10 Steps to Success

Chinese drone-maker DJI suspends ops in Russia, Ukraine

Should security teams be giving service with a smile?

Study: How Amazon uses Echo smart speaker conversations to target ads

Chinese Hackers Targeting Russian Military Personnel with Updated PlugX Malware

Google's New Safety Section Shows What Data Android Apps Collect About Users

U.S. Offers $10 Million Bounty for Information on 6 Russian Military Hackers

4 Tips to Successfully Prepare for the SSAP Exam

4 Tips to Successfully Prepare for the SSAP Exam

~ 26 Apr 2022 ~

Log4j Attack Surface Remains Massive

How Do I Report My Security Program's ROI?

Tenable Acquires External Attack Surface Management Vendor for $44.5M

NPM Bug Allowed Attackers to Distribute Malware as Legitimate Packages

Who is exploiting VMware right now? Probably Iran's Rocket Kitten, to name one

Microsoft Discovers New Privilege Escalation Flaws in Linux Operating System

The Ins and Outs of Secure Infrastructure as Code

Elon Musks Twitter Buy Exposes a Privacy Minefield

Coca-Cola probes pro-Kremlin gang's claims of 161GB data theft

CISA Taps Veteran CISO Bob Lord for Technical Adviser Role

API Attacks Soar Amid the Growing Application Surface Area

USA's plan to decouple its tech with China lacks a strategy report

Microsoft finds new elevation of privilege Linux vulnerability, Nimbuspwn

DDoS attacks at an all-time-high in Q1 2022, says Kaspersky

Cyber Conflict Overshadowed a Major Government Ransomware Alert

Introducing Apostro: A Risk Management Platform for Web3 Security

SecurityScorecard Launches Cyber Risk Quantification Portfolio

Microsoft fixes Point of Sale bug that delayed Windows 11 startup for 40 minutes

Hitachi Energy System Data Manager

The trouble with BEC: How to stop the costliest internet scam

India inks tech pact with EU only the US has the same deal

Emotet Testing New Delivery Ideas After Microsoft Disables VBA Macros by Default

Gold Ulrick Hackers Still in Action Despite Massive Conti Ransomware Leak

North Korean Hackers Target Journalists with GOLDBACKDOOR Malware

Crooks steal NFTs worth '$3m' in Bored Ape Yacht Club heist

~ 25 Apr 2022 ~

What the ECDSA Flaw in Java Means for Enterprises

Iranian Hacking Group Among Those Exploiting Recently Disclosed VMWare RCE Flaw

Iranian Hackers Exploiting VMware RCE Bug to Deploy 'Code Impact' Backdoor

North Korean State Actors Deploying Novel Malware to Spy on Journalists

Intuit sued over alleged cryptocurrency thefts via Mailchimp intrusion

When Security Meets Development: The DevSecOps Conundrum

Homeland Security bug bounty program uncovers 122 holes in its systems

Mastercard Launches Next-Generation Identity Technology with Microsoft

Ukraine Invasion Driving DDoS Attacks to All-Time Highs