Port 22

~ 29 Nov 2021 ~

Paving the Road to Zero Trust With Adaptive Authentication

Wind turbine maker Vestas confirms recent security incident <i>was</i> ransomware

ScarCruft surveilling North Korean defectors and human rights activists

WIRTEs campaign in the Middle East living off the land since at least 2019

4 Android Banking Trojan Campaigns Targeted Over 300,000 Devices in 2021

New Chinotto Spyware Targets North Korean Defectors, Human Rights Activists

CleanMyMac X: Performance and Security Software for Macbook

Hackers Using Compromised Google Cloud Accounts to Mine Cryptocurrency

Australia will force social networks to identify trolls, so they can be sued for defamation

~ 28 Nov 2021 ~

Interpol Arrests Over 1,000 Cyber Criminals From 20 Countries; Seizes $27 Million

What Is a Watering Hole Attack?

The Android 12 Privacy Settings You Should Update Now

~ 27 Nov 2021 ~

The Pentagon Set Up a UFO Office

~ 26 Nov 2021 ~

Italy's Antitrust Regulator Fines Google and Apple for "Aggressive" Data Practices

Friday Squid Blogging: Bobtail Squid and Vibrio Bacteria

The Internet is Held Together With Spit & Baling Wire

EU needs more cybersecurity graduates, says ENISA infosec agency pointing at growing list of master's degree courses

Week in security with Tony Anscombe

Proposed UK Law Bans Default Passwords

The Privacy Sandbox saga continues: UK watchdog extracts more commitments from Google over advertising tech

Government-favoured child safety app warned it could violate the UK's Investigatory Powers Act with message-scanning tech

IT threat evolution in Q3 2021. Mobile statistics

IT threat evolution Q3 2021

IT threat evolution in Q3 2021. PC statistics

If you want to see off next years cyber-threats, the time to prepare is now

Hackers Targeting Biomanufacturing Facilities With Tardigrade Malware

Crypto Hackers Using Babadeda Crypter to Make Their Malware Undetectable

CronRAT: A New Linux Malware Thats Scheduled to Run on February 31st

~ 25 Nov 2021 ~

Israel Bans Sales of Hacking and Surveillance Tools to 65 Countries

Microsoft Defender for Endpoint laid low. Not by malware, but by another buggy Windows patch

Its about the survival of the fittest CISOs must be brave enough to throw away their security playbook, or suffer the consequences

The triangle of holiday shopping: Scams, social media and supply chain woes

Product Releases Should Not Be Scary

UK.gov emits draft IoT and smartphone security law for Parliamentary scrutiny

Google advises passwords are good, spear phishing is bad, and free clouds get attacked

Huawei's AppGallery riddled with malware-infected games

This New Stealthy JavaScript Loader Infecting Computers with Malware

Hackers Using Microsoft MSHTML Flaw to Spy on Targeted PCs with Malware

If You're Not Using Antivirus Software, You're Not Paying Attention

US bans Chinese firms including one linked to HPEs China JV for feeding tech to Beijing's military

Warning Hackers Exploiting New Windows Installer Zero-Day Exploit in the Wild

~ 24 Nov 2021 ~

VMware Warns of Newly Discovered Vulnerabilities in vSphere Web Client

How Threat Actors Get into OT Systems

In Appreciation: Dark Reading's Tim Wilson

MediaTek Chip Flaw Could Have Let Attackers Spy on Android Phones

OpenText Acquires Bricata

Apple Sues NSO Group

Max Schrems hits Irish Data Protection Commissioner with corruption complaint

When Will Security Frameworks Catch Up With the New Cybersecurity Normal?

Apple's Pegasus lawsuit a 'declaration of war' against offensive software developers, says Kaspersky director

How a malicious Android app could covertly turn the DSP in your MediaTek-powered phone into an eavesdropping bug

Avoiding the shopping blues: How to shop online safely this holiday season

Yes, ransomware is your number one security nightmare. But heres how to sleep easy

Eavesdropping Bugs in MediaTek Chips Affect 37% of All Smartphones and IoT Globally

China trying to export its Great Firewall and governance model

APT C-23 Hackers Using New Android Spyware Variant to Target Middle East Users

~ 23 Nov 2021 ~

Webinar and eBook: The Dark Side of EDR. Are You Prepared?

Over 9 Million Android Phones Running Malware Apps from Huawei's AppGallery

Baffle's Data Privacy Cloud Protects Data for Amazon Redshift Customers

New Android Spyware Variants Linked to Middle Eastern APT

Why Should I Adopt a Zero Trust Security Strategy?

Apple Sues Israel's NSO Group for Spying on iPhone Users With Pegasus Spyware

Apple Sues NSO Group for Spyware Use

Apple sues 'amoral 21st century mercenaries' NSO for infecting iPhones with Pegasus spyware

Zero-day proof-of-concept exploit lands for Windows make-me-admin vulnerability

The McDonald's Ice Cream Machine Hacking Saga Has a New Twist

FBI, CISA urge organizations to be on guard for attacks during holidays

Stay safe online this holiday shopping season with tips from Microsoft

Crypto for cryptographers! Infosec types revolt against use of ancient abbreviation by Bitcoin and NFT devotees

Holiday Scams Drive SMS Phishing Attacks

MVP Health Care secures member portal access with Microsoft Azure Active Directory B2C

Alleged Brit SIM-swapper will kill himself if extradited to US for trial, London court told

How Sun Tzu's Wisdom Can Rewrite the Rules of Cybersecurity

UK Ministry of Justice secures HVAC systems 'protected' by passwordless Wi-Fi after Register tipoff

Threats to ICS and industrial enterprises in 2022

The dangers of connected healthcare: predictions for 2022

Privacy predictions 2022

Cyberthreats to financial organizations in 2022

Infosec bods: After more than a year, Sky gets round to squashing hijacking bug in 6m home broadband routers

Don't Help Cybercriminals Dash With Your Customers' Cash This Black Friday

What Avengers Movies Can Teach Us About Cybersecurity

Researchers Detail Privilege Escalation Bugs Reported in Oracle VirtualBox

More Stealthier Version of BrazKing Android Malware Spotted in the Wild

The Importance of IT Security in Your Merger Acquisition

Indian bank smacks down allegation it exposed 180 million customers' accounts

Pentagon Partners With GreyNoise to Investigate Internet Scans

Security Awareness Metrics What to Measure and How

SANS Addresses ICS/OT Cyber Defence

~ 22 Nov 2021 ~

GoDaddy Breach Exposes SSL Keys of Managed WordPress Hosting Customers

GoDaddy Data Breach Exposes Over 1 Million WordPress Customers' Data

CISA Urges Critical Infrastructure to Be Alert for Holiday Threats

Arrest in Ransom Your Employer Email Scheme

Bug Bounties Surge as Firms Compete for Talent

SSL keys, sFTP passwords and more exposed after someone broke into GoDaddy Managed WordPress using 'compromised password'

10 Stocking Stuffers for Security Geeks

Is it OK to Take Your CEO Offline to Protect the Network?

How to investigate service provider trust chains in the cloud

Ecommerce platforms (cough, Magento) need patching before Black Friday, warns UK's National Cyber Security Centre

Devious Tardigrade Malware Hits Biomanufacturing Facilities

Why the 'Basement Hacker' Stereotype Is Wrong and Dangerous