Port 22

~ 24 Aug 2022 ~

VMware confirms Carbon Black causes BSODs, boot loops on Windows

Looking for the Sliver lining: Hunting for emerging command-and-control frameworks

Data governance: 5 tips for holistic data protection

Air-Gapped Devices Can Send Covert Morse Signals via Network Card LEDs

Unusual Microsoft 365 Phishing Campaign Spoofs eFax Via Compromised Dynamics Voice Account

Nearly 3 Years Later, SolarWinds CISO Shares 3 Lessons From the Infamous Attack

Acronis' Midyear Cyberthreats Report Finds Ransomware Is the No. 1 Threat to Organizations, Projects Damages to Exceed $30 Billion by 2023

Attacker snags account details from streaming service Plex

Why Empathy Is the Key to Better Threat Modeling

CyberRatings.org Announces New Web Browser Test Results for 2022

Report: Financial Institutions Are Overwhelmed When Facing Growing Firmware Security and Supply Chain Threats

Guide: How Service Providers can Deliver vCISO Services at Scale

Hackers Using Fake DDoS Protection Pages to Distribute Malware

Mudge Files Whistleblower Complaint against Twitter

The Privacy Flaw Threatening US Democracy

Ransomware updates & 1-day exploits

Researchers Warn of AiTM Attack Targeting Google G-Suite Enterprise Users

Lloyd's to exclude certain nation-state attacks from cyber insurance policies

GitLab Issues Patch for Critical Flaw in its Community and Enterprise Software

~ 23 Aug 2022 ~

The Twitter Whistleblower Reports Most Damning Allegation

Twitter savaged by former security boss Mudge in whistleblower complaint

DevSecOps Gains Traction but Security Still Lags

Thoma Bravo Buying Spree Highlights Hot Investor Interest in IAM Market

Smartphone gyroscopes threaten air-gapped systems, researcher finds

Mudge Blows Whistle on Alleged Twitter Security Nightmare

Proofpoint Introduces a Smarter Way to Stay Compliant with New Intelligent Compliance Platform

Facing the New Security Challenges That Come With Cloud

Secure Code Warrior Spotlights the Importance of Developer Security Skills with 2nd Annual Devlympics Competition

One-Third of Popular PyPI Packages Mistakenly Flagged as Malicious

A multidimensional approach to journalism security

Coalfire Federal Among First Authorized to Conduct CMMC Assessments

Google Uncovers Tool Used by Iranian Hackers to Steal Data from Email Accounts

Apathy Is Your Company's Biggest Cybersecurity Vulnerability Here's How to Combat It

XCSSET Malware Updates with Python 3 to Target macOS Monterey Users

Meta Takes Offensive Posture With Privacy Red Team

Novant Health Notifies Patients of Potential Data Privacy Incident

The Rise of Data Exfiltration and Why It Is a Greater Risk Than Ransomware

Charming Kitten APT Wields New Scraper to Steal Email Inboxes

Suspected Iranian Hackers Targeted Several Israeli Organizations for Espionage

Signal Phone Numbers Exposed in Twilio Hack

ARC Informatique PcVue

Delta Industrial Automation DIALink

mySCADA myPRO

Measuresoft ScadaPro Server

Measuresoft ScadaPro Server and Client

Hitachi Energy RTU500

Is your personal data all over the internet? 7steps to cleaning up your online presence

New Air-Gap Attack Uses MEMS Gyroscope Ultrasonic Covert Channel to Leak Data

CISA Warns of Active Exploitation of Palo Alto Networks' PAN-OS Vulnerability

Microsoft finds critical hole in operating system that for once isn't Windows

If you haven't patched Zimbra holes by now, assume you're toast

~ 22 Aug 2022 ~

Fake DDoS Protection Alerts Distribute Dangerous RAT

Novant Health admits leak of 1.3m patients' info to Facebook

Hiding a phishing attack behind the AWS cloud

Metasploit Creator Renames His Startup and IT Discovery Tool Rumble to 'runZero'

Warning over Java libraries and deserialization security weaknesses

For Penetration Security Testing, Alternative Cloud Offers Something Others Don't

Sophos Identifies Potential Tag-Team Ransomware Activity

InQuest: Adding File Detection and Response to the Security Arsenal

Secureworks: How To Distinguish Hype From Reality With AI in SecOps

New 'BianLian' Ransomware Variant on the Rise

Tanium: Taking A Deeper Cut At Converged Endpoint Management

LockBit gang hit by DDoS attack after threatening to leak Entrust ransomware data

Microsoft recognized as a Leader in the 2022 Gartner Magic Quadrant for Unified Endpoint Management Tools

Pentera Helps Enterprises Reduce Their Security Exposure