Port 22

~ 24 Jun 2022 ~

Friday Squid Blogging: Squid Cubes

APT Groups Swarming on VMware Servers with Log4Shell

Only 3% of Open Source Software Bugs Are Actually Attackable, Researchers Say

7 Steps to Stronger SaaS Security

Instagrams new age verification tool Week in security with Tony Anscombe

The Cybersecurity Talent Shortage Is a Myth

Without Conti On The Scene, LockBit 2.0 Leads Ransomware Attacks

On the Dangers of Cryptocurrencies and the Uselessness of Blockchain

Google: How we tackled this iPhone, Android spyware

Beijing-backed attackers use ransomware as a decoy while they conduct espionage

NSO claims 'more than 5' EU states use Pegasus spyware

Hackers Exploit Mitel VoIP Zero-Day Bug to Deploy Ransomware

Google Says ISPs Helped Attackers Infect Targeted Smartphones with Hermit Spyware

Multiple Backdoored Python Libraries Caught Stealing AWS Secrets and Keys

State-Backed Hackers Using Ransomware as a Decoy for Cyber Espionage Attacks

~ 23 Jun 2022 ~

New 'Quantum' Builder Lets Attackers Easily Create Malicious Windows Shortcuts

Log4Shell Still Being Exploited to Hack VMWare Servers to Exfiltrate Sensitive Data

Chinese APT Group Likely Using Ransomware Attacks as Cover for IP Theft

Johnson Controls Acquires Tempered Networks to Bring Zero Trust Cybersecurity to Connected Buildings

ShiftLeft: Focus On 'Attackability' To Better Prioritize Vulnerabilities

Pair of Brand-New Cybersecurity Bills Become Law

Google Warns of New Spyware Targeting iOS and Android Users

The Rise, Fall, and Rebirth of the Presumption of Compromise

Reinventing How Farming Equipment Is Remotely Controlled and Tracked

Cyberattackers Abuse QuickBooks Cloud Service in 'Double-Spear' Campaign

Detecting malicious key extractions by compromised identities for Azure Cosmos DB

$6b mega contract electronics vendor Sanmina jumps into zero trust

Palo Alto Networks Bolsters Its Cloud Native Security Offerings With Out-of-Band WAAS

How APTs Are Achieving Persistence Through IoT, OT, and Network Devices

80% of Legacy MSSP Users Planning MDR Upgrade

MetaMask Crypto-Wallet Theft Skates Past Microsoft 365 Security

On the Subversion of NIST by the NSA

Parents Need to Know Whats Going On Inside Their Day Care Apps

OFFIS DCMTK

Yokogawa STARDOM

Yokogawa CAMS for HIS

Secheron SEPCOS Control and Protection Relay

Pyramid Solutions EtherNet/IP Adapter Development Kit

The hateful eight: Kasperskys guide to modern ransomware groups TTPs

Elcomplus SmartICS

Virtual private networks: 5 common questions about VPNs answered

Halfords suffers a puncture in the customer details department

Don't ditch PowerShell to improve security, say infosec agencies from UK, US, and NZ

Europol arrests nine suspected of stealing 'several million' euros via phishing

NSO Confirms Pegasus Spyware Used by at least 5 European Countries

Manual vs. SSPM: Research on What Streamlines SaaS Security Detection & Remediation

Organizations Battling Phishing Malware, Viruses the Most

Chinese Hackers Distributing SMS Bomber Tool with Malware Hidden Inside

~ 22 Jun 2022 ~

Critical PHP Vulnerability Exposes QNAP NAS Devices to Remote Attacks

Mega's unbreakable encryption proves to be anything but

Microsoft 365 Users in US Face Raging Spate of Attacks

Synopsys Completes Acquisition of WhiteHat Security

Cisco warns of security holes in its security appliances

Aqua Security Collaborates With Center for Internet Security to Create Guide for Software Supply Chain Security

Neustar Security Services Launches Public UltraDNS Health Check Site

Russia's APT28 Launches Nuke-Themed Follina Exploit Campaign

Fresh Magecart Skimmer Attack Infrastructure Flagged by Analysts

Israeli air raid sirens triggered in possible cyberattack

Getting a Better Handle on Identity Management in the Cloud

Tanium Partners With ScreenMeet to Enable Employees to Securely Connect to Their Remote Desktops

Microsoft Defender for Office 365 receives highest award in SE Labs Enterprise Email Security Services test

Brave Now Lets You Customize Search Resultsfor Better or Worse

Zscaler and AWS Expand Relationship

Zscaler Launches Posture Control Solution

Zscaler Adds New AI/ML Capabilities for the Zscaler Zero Trust Exchange