Port 22

~ 29 Aug 2022 ~

The 3 Questions CISOs Must Ask to Protect Their Sensitive Data

The Telegram-Powered News Outlet Waging Guerrilla War on Russia

Nitrokod Crypto Miner Infected Over 111,000 Users with Copies of Popular Software

A CISO's Ultimate Security Validation Checklist

Twilio Breach Also Compromised Authy Two-Factor Accounts of Some Users

CISA Adds 10 New Known Actively Exploited Vulnerabilities to its Catalog

~ 27 Aug 2022 ~

A US Propaganda Operation Hit Russia and China With Memes

77% of security leaders fear were in perpetual cyberwar from now on

Iranian Hackers Exploiting Unpatched Log4j 2 Bugs to Target Israeli Organizations

~ 26 Aug 2022 ~

Friday Squid Blogging: 14-foot Giant Squid Washes Ashore in Cape Town

Why the Twilio Breach Cuts So Deep

~ 27 Aug 2022 ~

Critical Vulnerability Discovered in Atlassian Bitbucket Server and Data Center

~ 26 Aug 2022 ~

PyPI warns of first-ever phishing campaign against its users

LastPass Suffers Data Breach, Source Code Stolen

Now Oktapus gets access to some DoorDash customer info via phishing attack

'Sliver' Emerges as Cobalt Strike Alternative for Malicious C2

French hospital crippled by cyberattack Week in security with Tony Anscombe

'No-Party' Data Architectures Promise More Control, Better Security

How DevSecOps Empowers Citizen Developers

Endpoint Protection / Antivirus Products Tested for Malware Protection

Capital One Joins Open Source Security Foundation

Security and Cheap Complexity

Their Photos Were Posted Online. Then They Were Bombed

Hackers Breach LastPass Developer System to Steal Source Code

Cybercrime Groups Increasingly Adopting Sliver Command-and-Control Framework

~ 25 Aug 2022 ~

Twilio, Cloudflare just two of 135 orgs targeted by Oktapus phishing campaign

LastPass source code, blueprints stolen by intruder

Twilio Hackers Scarf 10K Okta Credentials in Sprawling Supply Chain Attack

Crooks target top execs on Office 365 with MFA-bypass scheme

ReasonLabs Launches Free Online Security Tool to Power Secure Web Experience for Millions of Global Users

Microsoft Security highlights from Black Hat USA 2022

MERCURY leveraging Log4j 2 vulnerabilities in unpatched systems to target Israeli organizations

More Bang for the Buck: Cross-Platform Ransomware Is the Next Problem

Wyden Renews Call to Encrypt Twitter DMs, Secure Americans' Data From Unfriendly Foreign Governments

Twitter, Meta kill hundreds of pro-Western troll accounts

Senior-Level Women Leaders in Cybersecurity Form New Nonprofit

Okta Hackers Behind Twilio and Cloudflare Breach Hit Over 130 Organizations

Cyberstarts Closes $60M in Seed Fund III

The (Nation) State of Cyber: 64% of Businesses Suspect They've Been Targeted or Impacted by Nation-State Attacks

What You Need to Know About the Psychology Behind Cyber Resilience

Penetration Testing Market Worth $2.7B By 2027: MarketsandMarkets(TM) Report

Ever present danger

U.S. Government Spending Billions on Cybersecurity

Microsoft Uncovers New Post-Compromise Malware Used by Nobelium Hackers

Optiv's Annual $40K Scholarship for Black, African-American-Identifying STEM Students Now Open for Applicants

Thousands of Organizations Remain at Risk From Critical Zero-Click IP Camera Bug

Scans of Students Homes During Tests Are Deemed Unconstitutional

New Exterro FTK Update Accelerates Mobile Digital Forensics

Man-in-the-Middle Phishing Attack

Researchers Uncover Kimusky Infra Targeting South Korean Politicians and Diplomats

FATEK Automation FvDesigner

What is doxing and how to protect yourself

Shout-out to whoever went to Black Hat and had North Korean malware on their PC

PyPI Repository Warns Python Project Maintainers About Ongoing Phishing Attacks

Kimsukys GoldDragon cluster and its C2 operations

Cyber Security Expertise - Where Should You Begin?

~ 24 Aug 2022 ~

Block sued after ex-staffer siphons customer data

80,000 internet-connected cameras still vulnerable after critical patch offered

CISA: Just-Disclosed Palo Alto Networks Firewall Bug Under Active Exploit

Efficient 'MagicWeb' Malware Subverts AD FS Authentication, Microsoft Warns

Ransomware Gang Demands $10M in Attack on French Hospital

Crypto Miners Using Tox P2P Messenger as Command and Control Server

VMware LPE Bug Allows Cyberattackers to Feast on Virtual Machine Data

New Zero-Trust Maturity Data: Charting Your Own Organization

MagicWeb: NOBELIUMs post-compromise trick to authenticate as anyone