Port 22

~ 17 Jun 2022 ~

Password recovery from beyond the grave

Reimagine Hybrid Work: Same CyberSec in Office and at Home

Researchers Uncover 'Hermit' Android Spyware Used in Kazakhstan, Syria, and Italy

Interpol anti-fraud operation busts call centers behind business email scams

Chinese Hackers Exploited Sophos Firewall Zero-Day Flaw to Target South Asian Entity

Over a Million WordPress Sites Forcibly Updated to Patch a Critical Plugin Vulnerability

~ 16 Jun 2022 ~

Hillrom Medical Device Management

AutomationDirect C-More EA9 HMI

Internet Explorer Now Retired but Still an Attacker Target

RSAC branded a 'super spreader event' as attendees share COVID-19 test results

BlastWave Announces Enhancements to Its Zero-Trust Security Software Solution, BlastShield

Microsoft 365 Function Leaves SharePoint, OneDrive Files Open to Ransomware Attacks

What We Mean When We Talk About Cyber Insurance

Android Spyware 'Hermit' Discovered in Targeted Attacks

Unlocking the Cybersecurity Benefits of Digital Twins

EU & US Unite to Fight Ransomware

RSAC Startup Competition Focuses on Post-Cloud IT Infrastructure

Making the world a safer place with Microsoft Defender for individuals

CISOs Gain False Confidence in the Calm After the Storm of the Pandemic

Are You Hiring Enough Entry-Level Security Pros?

AutomationDirect DirectLOGIC with Serial Communication

AutomationDirect DirectLOGIC with Ethernet

Attacking the Performance of Machine Learning Systems

Siemens Mendix SAML Module

Police Linked to Hacking Campaign to Frame Indian Activists

Siemens EN100 Ethernet Module

Siemens Apache HTTP Server

Siemens SINEMA Remote Connect Server

Siemens SICAM GridEdge

Siemens SCALANCE LPE9403 Third-Party Vulnerabilities

Siemens SCALANCE XM-400 and XR-500

Siemens Xpedition Designer

Siemens Spectrum Power Systems

Siemens Teamcenter

Siemens OpenSSL Affected Industrial Products

How Emotet is changing tactics in response to Microsofts tightening of Office macro security

Elasticsearch server with no password or encryption leaks a million records

BlackCat Ransomware Gang Targeting Unpatched Microsoft Exchange Servers

Difference Between Agent-Based and Network-Based Internal Vulnerability Scanning

A Microsoft Office 365 Feature Could Help Ransomware Hackers Hold Cloud Files Hostage

High-Severity RCE Vulnerability Reported in Popular Fastjson Library

Selling the SANS #SecAwareSummit to Your Boss

SEC540-new-tag

Instructor Spotlight: Josh Johnson

How Should I Think About Security When Considering Digital Transformation Projects?

FOR589: Dark Web Threat Hunting & Blockchain Forensics - NEW SANS DFIR Course

~ 15 Jun 2022 ~

Ciscos Ash Devata on the Future of Secure Access

7 Ways to Bring AI to Cybersecurity

MaliBot: A New Android Banking Trojan Spotted in the Wild

'Hertzbleed' Side-Channel Attack Threatens Cryptographic Keys for Servers

Veterans Explain How Military Service Prepared Them for Cybersecurity Careers

Critical Flaw in Cisco Secure Email and Web Manager Lets Attackers Bypass Authentication

Critical Citrix Bugs Impact All ADM Servers, Agents

Heineken says theres no free beer, warns of phishing scam

Two Platforms to Rule Them All: CNAPP and SASE

Thousands Arrested in Global Raids on Social-Engineering Scammers

How Information Security Teams Can Help Reduce Stress and Burnout

Cybercriminals Capitalizing on Resurgence in Travel

Why strong security solutions are critical to privacy protection

Microsoft continues cyber security spending spree with Miburo buy

Wormable Panchan Peer-to-Peer Botnet Harvests Linux Server Keys

Why We Need Security Knowledge and Not Just Threat Intel

24+ Billion Credentials Circulating on the Dark Web in 2022 -- So Far

M1 Chip Vulnerability

Russia Is Taking Over Ukraines Internet

How much does access to corporate infrastructure cost?

Panchan: A New Golang-based Peer-To-Peer Botnet Targeting Linux Servers

Microsoft Patch Tuesday, June 2022 Edition

Malaysia-linked DragonForce hacktivists attack Indian targets

Unpatched Exchange server, stolen RDP logins... How miscreants get BlackCat ransomware on your network

Microsoft fixes under-attack Windows zero-day Follina

New Hertzbleed Side-Channel Attack Affects All Modern AMD and Intel CPUs

Comprehensive, Easy Cybersecurity for Lean IT Security Teams Starts with XDR

Power Up Memory Forensics with Memory Baseliner

Former US state agency CIO, IT exec plead guilty to bribery and extortion scheme

~ 14 Jun 2022 ~

Cloudflare says it thwarted record-breaking HTTPS DDoS flood

Cloudflare Saw Record-Breaking DDoS Attack Peaking at 26 Million Request Per Second

In Case You Missed RSA Conference 2022: A News Digest

Microsoft Patches 'Follina' Zero-Day Flaw in Monthly Security Update

Patch Tuesday: Microsoft Issues Fix for Actively Exploited 'Follina' Vulnerability

DDoS Subscription Service Operator Gets 2 Years in Prison

Ransomware Group Debuts Searchable Victim Data

Man gets two years in prison for selling 200,000 DDoS hits

Quantifying the SaaS Supply Chain and Its Risks

Incognia Introduces Location-Based Liveness Spoofing Detection Solution

Google: SBOMs Effective Only If They Map to Known Vulns

Chinese Threat Actor Employs Fake Removable Devices as Lures in Cyber Espionage Campaign

Upcoming Speaking Engagements

How Can Security Partnerships Help to Mitigate the Increasing Cyber Threat?

Optiv MXDR Enhances Detection Coverage With Expanded Cloud Integration

Beware the 'Secret Agent' Cloud Middleware

Understanding and Mitigating Single Sign-on Risk

Azure issues not adequately fixed for months, complain bug hunters

Hacking Teslas Remote Key Cards

UK health privacy watchdog still in talks over who is accessing country's COVID data store

Johnson Controls Metasys ADS ADX OAS Servers

Meridian Cooperative Meridian

Mitsubishi Electric MELSEC-Q/L and MELSEC iQ-R

New Zimbra Email Vulnerability Could Let Attackers Steal Your Login Credentials

What is the Essential Eight (And Why Non-Aussies Should Care)