Port 22

~ 22 Jun 2022 ~

The Risk of Multichannel Phishing Is on the Horizon

GitHub's MFA Plans Should Spur Rest of Industry to Raise the Bar

80% of Firms Suffered Identity-Related Breaches in Last 12 Months

DARPA study challenges assumptions about distributed ledger (and Bitcoin) security

Meet the Administrators of the RSOCKS Proxy Botnet

Risk Disconnect in the Cloud

Symbiote Backdoor in Linux

Yodel becomes the latest victim of a cyber 'incident'

Researchers Uncover Ways to Break the Encryption of 'MEGA' Cloud Storage Service

Okta says Lapsus$ incident was actually a brilliant zero trust demonstration

Russian Hackers Exploiting Microsoft Follina Vulnerability Against Ukraine

Newly Discovered Magecart Infrastructure Reveals the Scale of Ongoing Campaign

Europol Busts Phishing Gang Responsible for Millions in Losses

~ 21 Jun 2022 ~

Linux Foundation Announces Open Programmable Infrastructure Project to Drive Open Standards for New Class of Cloud Native Infrastructure

RIG Exploit Kit Now Infects Victims' PCs With Dridex Instead of Raccoon Stealer

Mitsubishi Electric MELSEC Q and L Series

7 Ways to Avoid Worst-Case Cyber Scenarios

VPNs Persist Despite Zero-Trust Fervor

China-Linked ToddyCat APT Pioneers Novel Spyware

Info on 1.5m people stolen from US bank in cyberattack

RIG Exploit Kit Replaces Raccoon Stealer Trojan With Dridex

The Power and Pitfalls of AI for US Intelligence

Gartner: Regulation, Human Costs Will Create Stormy Cybersecurity Weather Ahead

Why Financial Institutions Must Double Down on Open Source Investments

Dont react, prevent

Improving AI-based defenses to disrupt human-operated ransomware

Evolving Beyond the Password: It's Time to Up the Ante

BRATA Android Malware Evolves Into an APT

Reducing Risk With Zero Trust

56 Vulnerabilities Discovered in OT Products From 10 Different Vendors

AI Is Not a Security Silver Bullet

1Password's Insights tool to help admins monitor users' security practices

Open Source Software Security Begins to Mature

A great day for non-robots: iOS 16 will bypass CAPTCHAs

Hidden Anti-Cryptography Provisions in Internet Anti-Trust Bills

JTEKT TOYOPUC

Phoenix Contact Classic Line Controllers

Phoenix Contact ProConOS and MULTIPROG

Phoenix Contact Classic Line Industrial Controllers

APT ToddyCat

Siemens WinCC OA

Phishing awareness training: Help your employees avoid the hook

How refactoring code in Safari's WebKit resurrected 'zombie' security bug

New ToddyCat Hacker Group on Experts' Radar After Targeting MS Exchange Servers

Securing your IoT with Edge Secured-core devices

Mitigate Ransomware in a Remote-First World

Researchers Disclose 56 Vulnerabilities Impacting OT Devices from 10 Vendors

Former Amazon Employee Found Guilty in 2019 Capital One Data Breach

CISA and friends raise alarm on critical flaws in industrial equipment, infrastructure

New NTLM Relay Attack Lets Attackers Take Control Over Windows Domain

Thats a Wrap! Looking Back on SANS at RSAC 2022

Voicemail phishing emails steal Microsoft credentials

~ 20 Jun 2022 ~

Capital One Attacker Exploited Misconfigured AWS Databases

Feds Take Down Russian 'RSOCKS' Botnet

Why Paper Receipts are Money at the Drive-Thru

Name That Toon: Cuter Than a June Bug

DDoS Attacks Delay Putin Speech at Russian Economic Forum

Credential Sharing as a Service: The Hidden Risk of Low-Code/No-Code

How one Microsoft software engineer works to improve access management

Security Lessons From Protecting Live Events

The Cybersecurity Diversity Gap: Advice for Organizations Looking to Thrive

Credential Sharing as a Service: The Hidden Risk of Low-Code/No-Code

Capital One: Convicted techie got in via 'misconfigured' AWS buckets

There are 24.6 billion sets of credentials up for sale on the dark web

Hartzbleed: A New Side-Channel Attack