Port 22

~ 22 Jun 2022 ~

The Risk of Multichannel Phishing Is on the Horizon

GitHub's MFA Plans Should Spur Rest of Industry to Raise the Bar

80% of Firms Suffered Identity-Related Breaches in Last 12 Months

DARPA study challenges assumptions about distributed ledger (and Bitcoin) security

Meet the Administrators of the RSOCKS Proxy Botnet

Risk Disconnect in the Cloud

Symbiote Backdoor in Linux

Yodel becomes the latest victim of a cyber 'incident'

Researchers Uncover Ways to Break the Encryption of 'MEGA' Cloud Storage Service

Okta says Lapsus$ incident was actually a brilliant zero trust demonstration

Russian Hackers Exploiting Microsoft Follina Vulnerability Against Ukraine

Newly Discovered Magecart Infrastructure Reveals the Scale of Ongoing Campaign

Europol Busts Phishing Gang Responsible for Millions in Losses

~ 21 Jun 2022 ~

Linux Foundation Announces Open Programmable Infrastructure Project to Drive Open Standards for New Class of Cloud Native Infrastructure

RIG Exploit Kit Now Infects Victims' PCs With Dridex Instead of Raccoon Stealer

Mitsubishi Electric MELSEC Q and L Series

7 Ways to Avoid Worst-Case Cyber Scenarios

VPNs Persist Despite Zero-Trust Fervor

China-Linked ToddyCat APT Pioneers Novel Spyware

Info on 1.5m people stolen from US bank in cyberattack

RIG Exploit Kit Replaces Raccoon Stealer Trojan With Dridex

The Power and Pitfalls of AI for US Intelligence

Gartner: Regulation, Human Costs Will Create Stormy Cybersecurity Weather Ahead

Why Financial Institutions Must Double Down on Open Source Investments

Dont react, prevent

Improving AI-based defenses to disrupt human-operated ransomware

Evolving Beyond the Password: It's Time to Up the Ante

BRATA Android Malware Evolves Into an APT

Reducing Risk With Zero Trust

56 Vulnerabilities Discovered in OT Products From 10 Different Vendors

AI Is Not a Security Silver Bullet

1Password's Insights tool to help admins monitor users' security practices

Open Source Software Security Begins to Mature

A great day for non-robots: iOS 16 will bypass CAPTCHAs

Hidden Anti-Cryptography Provisions in Internet Anti-Trust Bills

JTEKT TOYOPUC

Phoenix Contact Classic Line Controllers

Phoenix Contact ProConOS and MULTIPROG

Phoenix Contact Classic Line Industrial Controllers

APT ToddyCat

Siemens WinCC OA

Phishing awareness training: Help your employees avoid the hook

How refactoring code in Safari's WebKit resurrected 'zombie' security bug

New ToddyCat Hacker Group on Experts' Radar After Targeting MS Exchange Servers

Securing your IoT with Edge Secured-core devices

Mitigate Ransomware in a Remote-First World

Researchers Disclose 56 Vulnerabilities Impacting OT Devices from 10 Vendors

Former Amazon Employee Found Guilty in 2019 Capital One Data Breach

CISA and friends raise alarm on critical flaws in industrial equipment, infrastructure

New NTLM Relay Attack Lets Attackers Take Control Over Windows Domain

Thats a Wrap! Looking Back on SANS at RSAC 2022

Voicemail phishing emails steal Microsoft credentials

~ 20 Jun 2022 ~

Capital One Attacker Exploited Misconfigured AWS Databases

Feds Take Down Russian 'RSOCKS' Botnet

Why Paper Receipts are Money at the Drive-Thru

Name That Toon: Cuter Than a June Bug

DDoS Attacks Delay Putin Speech at Russian Economic Forum

Credential Sharing as a Service: The Hidden Risk of Low-Code/No-Code

How one Microsoft software engineer works to improve access management

Security Lessons From Protecting Live Events

The Cybersecurity Diversity Gap: Advice for Organizations Looking to Thrive

Credential Sharing as a Service: The Hidden Risk of Low-Code/No-Code

Capital One: Convicted techie got in via 'misconfigured' AWS buckets

There are 24.6 billion sets of credentials up for sale on the dark web

Hertzbleed: A New Side-Channel Attack

Hartzbleed: A New Side-Channel Attack

The Ghost of Internet Explorer Will Haunt the Web for Years

Unpacking technical attribution and challenges for ensuring stability in cyberspace

Crypto mixers: What are they and how are they used?

You dont need another heroyou need an automated incident response process

Do You Have Ransomware Insurance? Look at the Fine Print

Indian government issues confidential infosec guidance to staff who leak it

Google Researchers Detail 5-Year-Old Apple Safari Vulnerability Exploited in the Wild

~ 19 Jun 2022 ~

BRATA Android Malware Gains Advanced Mobile Threat Capabilities

How to Password Protect Any File

~ 18 Jun 2022 ~

Submission to the United Nations Working Group on Enforced or Involuntary Disappearances

An Alleged Russian Spy Was Busted Trying to Intern at The Hague

DeadBolt ransomware takes another shot at QNAP storage

~ 17 Jun 2022 ~

Learn Cybersecurity with Palo Alto Networks Through this PCCSA Course @ 93% OFF

Over a Dozen Flaws Found in Siemens' Industrial Network Management System

Authorities Shut Down Russian RSOCKS Botnet That Hacked Millions of Devices

Inverse Finance stung for $1.2 million via flash loan attack

Atlassian Confluence Flaw Being Used to Deploy Ransomware and Crypto Miners

Friday Squid Blogging: Signature Steamed Giant Squid with Thai Lime Sauce

Ransomware and Phishing Remain IT's Biggest Concerns

Abortion rights: US senators seek ban on sale of health location data

Vuyo Kwakweni Recipient of the 2022 Reset Scholarship in Social Media and Democracy

International operation takes down Russian RSOCKS botnet

UK Approves WikiLeaks Chief Julian Assange's Extradition to the US

WordPress Plug-in Ninja Forms Issues Update for Critical Bug

DeadBolt Ransomware Actively Targets QNAP NAS Devices Again

Atlassian Confluence Server Bug Under Active Attack to Distribute Ransomware

How to spot malicious spam Week in security with Tony Anscombe

Microsoft Defender goes cross-platform for the masses

Can We Make a Global Agreement to Halt Attacks on Our Energy Infrastructure?

Tackling 5 Challenges Facing Critical National Infrastructure Today

Cookie consent crumbles under fresh UK data law proposals

Tracking People via Bluetooth on Their Phones

Heres Why Youre Still Stuck in Robocall Hell

Cops Will Be Able to Scan Your Fingerprints With a Phone