Port 22

~ 21 Mar 2022 ~

'Unique Attack Chain' Drops Backdoor in New Phishing Campaign

ForAllSecure Raises $21M to Secure the Worlds Software

Microsoft investigates after Lapsus$ gang brags of Bing, Cortana code heist

White House Warns of New Intel on Russia Mulling Cyberattack 'Options' Against US

Name That Toon: Sleep Like a Baby

Embracing Security by Design: Constructing a More Secure Framework

Western Digital tells EdgeRover users to patch app again

Developer Sabotages Open-Source Software Package

FIDO Alliance says it has finally killed the password

Satellite comms networks on alert after US govt warning

Ransomware Attack Led Bridgestone to Halt US Tire Production for a Week

AvosLocker group is targeting US critical infrastructure, FBI says

Will the Biggest Clouds Win? Lessons From Google's Mandiant Buy

Crowdsourced Efforts Get Leveraged in Ukraine Conflict

Zoom agrees privacy conditions, gets low-risk rating from Netherlands

Sandworm: A tale of disruption told anew

New Browser-in-the Browser (BITB) Attack Makes Phishing Nearly Undetectable

'CryptoRom' Crypto Scam Abusing iPhone Features to Target Mobile Users

New Backdoor Targets French Entities via Open-Source Package Installer

South Korean DarkHotel Hackers Targeted Luxury Hotels in Macau

What's New in SEC488: Cloud Security Essentials

~ 20 Mar 2022 ~

The Enduring Danger of Russias Cluster Bombs in Ukraine

How to Limit Who Can Contact You on Twitter

~ 19 Mar 2022 ~

TSAs First Crack at Guarding Pipelines From Hackers Falls Short

A Developer Altered Open Source Software to Wipe Files in Russia

~ 18 Mar 2022 ~

Half of Orgs Use Web Application Firewalls to Paper Over Flaws

Friday Squid Blogging: The Costs of Unregulated Squid Fishing

This browser-in-browser attack is perfect for phishing

Code-Sabotage Incident in Protest of Ukraine War Exposed Open Source Risks

CyCognito Launches Exploit Intelligence

Cyclops Blink malware sets up shop in ASUS routers

Menlo Security: Less Than Three in 10 Organizations Are Equipped to Combat Growing Wave of Web-Based Cyber Threats

A Chance to Raise Shields Right

Security Teams Struggle to Get Started With Zero Trust

Satellite Networks Worldwide at Risk of Possible Cyberattacks, FBI & CISA Warn

Exotic Lily is a business-like access broker for ransomware gangs

Week in security with Tony Anscombe

The Road Ahead for Cyber and Infrastructure Security

CISOs face 'perfect storm' of ransomware and state-supported cybercrime

SAP community website leaks member data to savvy users

Why Vaccine Cards Are So Easily Forged

Conti Leaks Reveal the Ransomware Group's Links to Russia

Defending the data center: The time to act is now

Hackers Target Bank Networks with new Rootkit to Steal Money from ATM Machines

Experts Find Some Affiliates of BlackMatter Now Spreading BlackCat Ransomware

Google Uncovers 'Initial Access Broker' Working with Conti Ransomware Gang

~ 17 Mar 2022 ~

Pro-Ukraine Protestware Pushes Antiwar Ads, Geo-Targeted Malware

6 Reasons Not to Pay Ransomware Attackers

New Variant of Russian Cyclops Blink Botnet Targeting ASUS Routers

ThreatMapper Updated With New Scanning Tools

Firefly Announces Release of ValidIaC Open Source Solution

Nok Nok Labs Unveils S3 Authentication Suite

Multiple Automotive Manufacturers Infected With Emotet

Cloudflare Announces API Gateway

Has Trickbot gang hijacked your router? This scanner may have an answer

Titaniam Announces Completion of Product Suite

Glasswall Launches Freemium Version of its Desktop Content Disarm and Reconstruction App

Stopping Russian Cyberattacks at Their Source

A Leader in multiple Zero Trust security categories: Industry analysts weigh in

Cut Down on Alert Overload and Leverage Layered Security Measures

How CAPTCHAs can cloak phishing URLs in emails

Death of the Password? FIDO Alliance Reveals Its New Plan

Brit data regulator fines five cold-calling fiends 405k

Change Password

Conti Leak: A Ransomware Gang's Chats Expose Its Crypto Plans

Popular NPM Package Updated to Wipe Russia, Belarus Systems to Protest Ukraine Invasion

DirtyMoe Botnet Gains New Exploits in Wormable Module to Spread Rapidly

The Golden Hour of Incident Response

Devil-may-care Lapsus$ gang is not the aspirational brand infosec needs

TrickBot Malware Abusing Hacked IoT Devices as Command-and-Control Servers

Ukraine Secret Service Arrests Hacker Helping Russian Invaders

New Vulnerability in CRI-O Engine Lets Attackers Escape Kubernetes Containers

Shifting from Penetration Testing to Red Team and Purple Team

~ 16 Mar 2022 ~

Enhancing DLP With Natural Language Understanding for Better Email Security

How Pen Testing Gains Critical Security Buy-in and Defense Insight

CafePress fined for covering up 2019 customer info leak

TAC Security Survey Reveals: 88% of Businesses Rely on Manual Processes to Identify Network Vulnerabilities

CSC Unveils 3D Domain Monitoring Solution on DomainSec Platform

4 Critical Capabilities for a SaaS Security Posture Management (SSPM) Solution

Microsoft the No. 1 Most-Spoofed Brand in Phishing Attacks

New LokiLocker ransomware family includes wiper function

What the Newly Signed US Cyber-Incident Law Means for Security

VPNs Give Russians an End Run Around Censorship

Linux botnet exploits Log4j flaw to pwn Arm, x86 systems

Breaking RSA through Insufficiently Random Primes

Russia State-Sponsored Hackers Used Misconfigured MFA to Breach NGO

Manage subject rights requests at scale with Microsoft Priva

Russia-linked attackers breach NGO by exploiting MFA, PrintNightmare vuln

Uncovering Trickbots use of IoT devices in command-and-control infrastructure

Would 'Cyber Geneva Conventions' Defuse Online Aggression?

How Should My Security Analyst Use the MITRE ATT&CK Framework?

UK regulator puts NortonLifeLock merger with Avast on ice

The Workaday Life of the Worlds Most Dangerous Ransomware Gang

US military vs. Silicon Valley a cultural divide

New "B1txor20" Linux Botnet Uses DNS Tunnel and Exploits Log4J Flaw

New Infinite Loop Bug in OpenSSL Could Let Attackers Crash Remote Servers

FBI, CISA Warn of Russian Hackers Exploiting MFA and PrintNightmare Bug

Unpatched RCE Bug in dompdf Project Affects HTML to PDF Converters

Salesforce sued in attempt to block release of Capitol riot info

The Windows malware on Ukraine CERT's radar